Add-on for AKS that reads Kubernetes Ingress resources and sets up an Application Gateway, WAF v2 included, to match them.
Also called AGIC, AGIC.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Application Gateway Ingress Controller in context, with comparison tables and the common traps.
Terms in this definition
- AKS
Short for Azure Kubernetes Service, a managed Kubernetes offering that gives full control of clusters and node pools. Scaling uses the cluster autoscaler and Horizontal Pod Autoscaler; user sign-in is not built in.
- Ingress
In Container Apps, turning this on exposes an app over TCP or HTTP, either to the internet or just within its environment, and no load balancer needs creating. AKS handles it differently: Ingress resources carry rules, and an ingress controller enforces them.
- Application Gateway
Layer-7 load balancer deployed per region, offering URL-based routing, TLS offload, cookie-based affinity and an optional WAF.
- WAF V2
Of the Application Gateway tiers, this one brings protection based on the OWASP Core Rule Set; Standard lacks any WAF, and the first-generation WAF tier reached retirement on 28 April 2026.
- MATCH
Used in WHERE when querying SQL Graph, it describes how to walk from node to node through edge tables, with patterns written like p1-(f1)->p2.
Related terms
- Application Gateway for Containers
Recent Application Gateway-based option for load balancing and ingress on AKS, offered as an alternative to AGIC.
See Application Gateway Ingress Controller in the full glossary