# tengine-ingress
**Repository Path**: alibaba/tengine-ingress
## Basic Information
- **Project Name**: tengine-ingress
- **Description**: Tengine Ingress Controller for Kubernetes
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No
## Statistics
- **Stars**: 0
- **Forks**: 0
- **Created**: 2024-10-31
- **Last Updated**: 2026-01-05
## Categories & Tags
**Categories**: Uncategorized
**Tags**: None
## README
Tengine-Ingress
Visit tengine.taobao.org for the full documentation,
examples and guides.
[](https://github.com/alibaba/tengine-ingress/blob/main/LICENSE)
[](https://github.com/alibaba/tengine-ingress/stargazers)
[](https://github.com/alibaba/tengine-ingress/blob/main/CONTRIBUTING.md)
## Overview
Tengine-Ingress is an Ingress controller for Kubernetes using [Tengine](https://github.com/alibaba/tengine) as a reverse proxy and load balancer.
Tengine-Ingress supports the standard Ingress specification based on [kubernetes/ingress-nginx](https://github.com/kubernetes/ingress-nginx) repo.
## Features
* [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/) specification support.
* Dynamically configure the servers, locations and upstreams for Ingress, Secret, Service and Endpoint changes, without reloading or restarting worker processes.
* HTTP/3 support (QUIC v1 and draft-29).
* Dynamically configure different TLS protocols for different ingress.
* Dynamically configure multiple default TLS certificates for client-hello without SNI.
* Support for hybrid ECC and RSA certificates for the same ingress/path.
* Dynamically configure certificates and keys.
* Dynamically configure canary routing based on multiple values of a specific header, cookie or query parameter.
* Dynamically configure canary routing based on multiple upstream according to weight.
* Dynamically configure canary routing based on modulo operation for a specific header, cookie or query parameter.
* Dynamically configure timeout setting, SSL Redirects, CORS and enabling/disabling robots for the ingress/path.
* Dynamically configure canary routing to add/append custom headers or add query parameter to the HTTP request.
* Dynamically configure canary routing to add custom headers to the HTTP response.
* Supports watching Ingress and Secrets in a dedicated storage k8s cluster via kubeconfig.
* Watch changes in Ingress and Secrets and do rolling upgrades for associated StatefulSet of Tengine-Ingress, without tengine reload.
* New CRD IngressCheckSum and SecretCheckSum to verify the integrity of Ingress and Secret in the cluster.
## Installation
### Docker images
Supported linux distributions:
* [Anolis](https://hub.docker.com/r/openanolis/anolisos)
* [Alpine](https://hub.docker.com/_/alpine)
Supported tags:
* `1.1.0` : based on image [Anolis](https://hub.docker.com/r/openanolis/anolisos)
* `1.1.0-alpine` : based on image [Alpine](https://hub.docker.com/_/alpine)
Supported architectures:
* AMD64, ARM64
Pull image command:
```
docker pull tengine-ingress-registry.cn-hangzhou.cr.aliyuncs.com/tengine/tengine-ingress:1.1.0
```
### Building from source
The tengine-ingress image is based on the tengine image.
Supported Linux distributions:
* [Anolis](https://hub.docker.com/r/openanolis/anolisos) : build arg `BASE_IMAGE="docker.io/openanolis/anolisos:latest"`, `LINUX_RELEASE="anolisos"`
* [Alpine](https://hub.docker.com/_/alpine) : build arg `BASE_IMAGE="alpine:latest"`, `LINUX_RELEASE="alpine"`
Build image command:
```
# First: build tengine image
docker build --no-cache --build-arg BASE_IMAGE="docker.io/openanolis/anolisos:latest" --build-arg LINUX_RELEASE="anolisos" -t tengine:3.1.0 images/tengine/rootfs/
# Second: build tengine-ingress image
docker build --no-cache --build-arg BASE_IMAGE="tengine:3.1.0" --build-arg VERSION="1.1.0" -f build/Dockerfile -t tengine-ingress:1.1.0 .
```
## Changelog
See [the list of releases](https://github.com/alibaba/tengine-ingress/releases) to find out about feature changes.
For detailed changes for each release; please check the [Changelog.tengine.md](Changelog.tengine.md) file.
### Supported Versions table
| | Tengine-Ingress Version | Tengine Version | K8s Supported Version | Anolis Linux Version | Alpine Linux Version | Helm Chart Version |
|:--:|-------------------------|-----------------|-----------------------|----------------------|----------------------|--------------------|
| 🔄 | **v1.1.0** | v3.1.0 | 1.28,1.27,1.26,1.25
1.24,1.23,1.22,1.21
1.20 | 8.6 | 3.18.4 | |
| 🔄 | **v1.0.0** | v3.0.0 | 1.27,1.26,1.25,1.24
1.23,1.22,1.21,1.20 | 8.6 | 3.18.2 | |
## Documentation
The homepage of Tengine-Ingress is at [https://tengine.taobao.org](https://tengine.taobao.org/).
## Contact
[https://github.com/alibaba/tengine-ingress/issues](https://github.com/alibaba/tengine-ingress/issues)
Dingtalk user group: 23394285
## License
[Apache License 2.0](https://github.com/alibaba/tengine-ingress/blob/main/LICENSE)
