Open-source reverse proxy and web server underpinning the Ingress NGINX controller for AKS, which lacks Azure WAF. Upstream maintenance stopped in March 2026 and Gateway API succeeds it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains NGINX in context, with comparison tables and the common traps.
Terms in this definition
- Ingress
In Container Apps, turning this on exposes an app over TCP or HTTP, either to the internet or just within its environment, and no load balancer needs creating. AKS handles it differently: Ingress resources carry rules, and an ingress controller enforces them.
- AKS
Short for Azure Kubernetes Service, a managed Kubernetes offering that gives full control of clusters and node pools. Scaling uses the cluster autoscaler and Horizontal Pod Autoscaler; user sign-in is not built in.
- Web Application Firewall
Protection at layer 7 from OWASP Top 10 threats like XSS and SQL injection, available on Application Gateway or Front Door.
- Gateway API
Newer Kubernetes API replacing Ingress for handling incoming and layer-7 traffic. On AKS it is provided through application routing as GatewayClass approuting-istio, taking over from the managed NGINX add-on.
Related terms
- Application routing add-on
Managed NGINX ingress for AKS, deployed and run as an add-on, integrated with Azure DNS and with certificates held in Key Vault. Its NGINX version is supported only until the end of November 2026, after which the Gateway API version takes over.
- Custom Script Extension
Runs PowerShell or Bash scripts on a VM after pulling them from GitHub, Azure Storage or another location the VM can reach; a common use is installing NGINX or IIS.