NGINX Community Blog The site for discussion on NGINX Open Source Projects NGINX Community Blog All Posts GitHubgithub.com/nginxinc github.com/nginx Forum All Posts External Authentication Policy in NGINX Ingress Controller: A Real World Use Case Jun 22, 2026 — by Alex Fenlon, Paul Abel in Ingress, Knowledge Base, Kubernetes NGINX Ingress Controller 5.5.0 introduced the ExternalAuth Policy. This is the second blog post in a two part series that covers the ExternalAuth Policy, and is focused on a real world use External Authentication Policy in NGINX Ingress Controller: Patterns for VirtualServer and Ingress Jun 15, 2026 — by Alex Fenlon, Paul Abel in Ingress, Knowledge Base, Kubernetes NGINX Ingress Controller 5.5.0 introduced the ExternalAuth Policy. This is the first blog post in a two part series that covers the ExternalAuth Policy, and is focused on how the policy mTLS Policies in NGINX Ingress Controller Jun 8, 2026 — by Venktesh Shivam Patel, Spencer Ugbo in Ingress, Knowledge Base, Kubernetes NGINX Ingress Controller 5.5 brings full support for mTLS in Ingress objects! This blog post gives a more in-depth overview of our GitHub deployment examples and shows how to configure both our new ingress and egress mTLS Policy CRDs in NGINX Ingress Controller using annotations. Ingress mTLS Ingress mTLS configures how NGINX verifies client certificates… Optimising NGINX Ingress Controller Startup Performance Jun 2, 2026 — by Venktesh Shivam Patel in Architecture, Ingress, Kubernetes NGINX Ingress Controller 5.5 introduces some significant performance improvements in startup times! A few months ago, a community member noticed that NGINX Ingress Controller deployments with a large number of Ingress resources were experiencing longer-than-expected startup times. In clusters with hundreds or thousands of resources spread across many namespaces, the controller could take several minutes… Meet With Us: NGINX Gateway Fabric & NGINX Ingress Controller Community Calls  Jun 1, 2026 — by Hannah Ouellette in Announcement, Gateway, Ingress, Kubernetes Connection, collaboration, and trust are the lifeblood of healthy community culture. NGINX Gateway Fabric and NGINX Ingress Controller were (and are) developed with open source community as a priority. From code contributions to critical comments, community participation has shaped the present and future of NGINX open source projects, and the future of technology. Today, I’m excited to highlight two recurring opportunities to engage directly… NGINX Ingress Controller 5.5: Security, Performance, and Easier Migration May 29, 2026 — by Micheál Kingston in Announcement, Ingress, Kubernetes NGINX Ingress Controller 5.5 is a focused, community-driven release. It brings new capabilities, expanded Kubernetes Ingress support, a significant startup performance improvement at scale, and more annotations to ease migrations from ingress-nginx. Heres whats new. External Authentication for Ingress and VirtualServer Whats new?: External Authentication is now supported for both Ingress and VirtualServer resources. Based… Strengthening the NGINX Community May 20, 2026 — by Marko Sluga in Announcement NGINX is at the heart of a significant portion of the modern internet. Trusted at scale for more than two decades, it helps deliver the traffic for over one third of the internet today. NGINX is the quiet workhorse behind a huge slice of the traffic you served, fetched, and clicked through today. A project… NGINX Gateway Fabric 2.6: F5 WAF for NGINX Comes to the Gateway API May 7, 2026 — by Micheál Kingston in Gateway, Kubernetes, Release NGINX Gateway Fabric 2.6 marks our initial foray into implementing enterprise grade security capabilities into the Gateway API standard. This release brings F5 WAF for NGINX support to a Gateway API implementation, making NGINX Gateway Fabric one of the first Gateway API implementations to offer enterprise-grade WAF capabilities natively. Heres what else is new: F5… Built for Change: How NGINX Ingress Controller and NGINX Gateway Fabric Handle Kubernetes Backend Changes Natively Apr 28, 2026 — by Micheál Kingston in Knowledge Base, Kubernetes Kubernetes applications are designed to change constantly. Pods scale out, roll forward, restart, and disappear, so the traffic layer has to keep pace with a backend set that is never truly static. That is the backdrop for both NGINX Ingress Controller (NIC) and NGINX Gateway Fabric (NGF). In both cases, Kubernetes is the source of… Cache Policy in NGINX Ingress Controller: A Practical Guide for VirtualServer Apr 15, 2026 — by Venktesh Shivam Patel in Ingress, Kubernetes Caching is one of the fastest ways to reduce backend load and improve response latency in Kubernetes. With NGINX Ingress Controller (NIC), you can define caching behavior as a first-class Policy resource and attach it to a VirtualServer or VirtualServerRoute. That keeps caching configuration explicit, reusable, and versioned with the rest of your traffic policy.… Access Control Policy in NGINX Ingress Controller: Patterns for Ingress Apr 7, 2026 — by Sean Breen in Ingress, Kubernetes NGINX Ingress Controller lets you define IP-based access rules once in a Policy resource and apply them consistently across your Ingress traffic paths. Across this blog, were focused on: Why Use a Policy for Access Control? Many teams manage IP restrictions through cloud firewalls or raw NGINX config snippets and quickly end up with drift.… NGINX Gateway Fabric 2.5.0: Enterprise-Grade Features and Gateway API 1.5 Conformance Apr 1, 2026 — by Micheál Kingston in Kubernetes, Release NGINX Gateway Fabric 2.5.0 is here, and this one is a big deal. The release doubles down on enterprise-grade capabilities while keeping us at the forefront of Gateway API conformance. NGF remains one of the top conformant implementations of the Gateway API spec, and this release reinforces why. Heres whats new. Gateway API 1.5 Conformance… NGINX OSS 1.29.6 and 1.29.7: Open-sourced Session Persistence, Multipath TCP and More Mar 26, 2026 — by Michael Vernik in Release NGINX 1.29.6 and 1.29.7 introduce significant updates and mark the first in a planned series to add capabilities to NGINX Open Source formerly limited to NGINX Plus. With updates to core runtime behavior and network support, these releases ensure that NGINX can continue to meet the needs of modern applications and AI workloads. Highlights of these releases include: Together, these changes expand what operators can do with NGINX Open Source while simplifying configurations for optimizing performance to proxied services. … Keep-alive to upstreams is now default in NGINX 1.29.7 Mar 24, 2026 — by Nick Shadrin in Announcement Before version 1.29.7, NGINX used HTTP/1.0 by default for connecting to HTTP upstream servers. This older version of the protocol does not have the capability of HTTP persistent connections, commonly known as keep-alive. Keep-alive reduces the number of handshakes, reduces latency, and reduces time to first byte for most regular web applications. In order to… CORS Policy in NGINX Ingress Controller v5.4.0: Patterns for VirtualServer and Ingress Mar 24, 2026 — by Venktesh Shivam Patel in Architecture, Kubernetes, Release Starting with NGINX Ingress Controller (NIC) v5.4.0, you can define CORS behavior once in a Policy resource and apply it consistently across both VirtualServer and Ingress traffic paths. Across this blog, we’re focused on: Why Use a Policy For CORS? Many teams start with per-resource tuning and quickly end up with drift. Using a dedicated… Introducing kubernetes.nginx.org: A Community Hub for NGINX on Kubernetes, Including a New Ingress-NGINX Migration Tool Mar 23, 2026 — by Alessandro Fael Garcia in Announcement, Kubernetes Today, were excited to announce kubernetes.nginx.org, a new community hub for everything NGINX networking on Kubernetes, along with a brand-new Kubernetes community Ingress-NGINX Migration Tool designed to make moving from the Kubernetes community Ingress-NGINX controller to the NGINX Ingress Controller as smooth as possible. Why a Community Hub? Whether youre running NGINX Ingress Controller, exploring… NGINX Ingress Controller v5.4.0: Making Migration Easier Than Ever Mar 21, 2026 — by Micheál Kingston in Kubernetes We released NGINX Ingress Controller v5.4.0 ahead of KubeCon Europe, and this one is worth the noise. This release is laser-focused on making it easier for teams running ingress-nginx to migrate to NGINX Ingress Controller, without sacrificing the features and workflows they depend on. Heres whats new! Configuration Resilience and Validation Whats new: Ingress and… The NGINX Kubernetes Open Source Roadmap: First Half of 2026 Mar 12, 2026 — by Micheál Kingston, Alessandro Fael Garcia in Kubernetes Hello to our Kubernetes community! Over the past few months, the F5 NGINX Community and F5 NGINX Kubernetes teams have been working on reinvigorating our open source presence. One of our new initiatives involves having public roadmaps available through GitHub Projects boards for both the NGINX Ingress Controller and NGINX Gateway Fabric project! We also… Next Page→ Search GitHub nginxinc nginx Other Sites Community Forum NGINX.org F5.com Social YouTube X LinkedIn © 2025 F5, Inc. | All Rights Reserved Manage Consent To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions. Functional Functional Always active The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network. Preferences Preferences The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user. Statistics Statistics The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you. Marketing Marketing The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes. Manage options Manage services Manage {vendor_count} vendors Read more about these purposes Accept Deny View preferences Save preferences View preferences {title} {title} {title} Manage consent