Airlock Microgateway vs F5 BIG-IP Container Ingress Services

Airlock Microgateway is a Kubernetes-native Web Application and API Protection solution that also serves as an identity-aware proxy. It runs as a container in Kubernetes clusters and is configured through GitOps. The gateway supports Kubernetes Gateway API and is positioned as an upgrade from Ingress NGINX. It validates identities through OIDC, JWT, token exchange or mutual TLS, then applies role- and path-based access control. Protection features include deny rules, CSRF protection, OpenAPI specification enforcement and GraphQL validation against OWASP Top 10 threats. Its Envoy-based reverse proxy supports routing, TLS termination, client certificate authentication and caller IP forwarding. Integrations include Cilium and Istio, and the product is certified for Red Hat OpenShift. Prometheus and Grafana provide monitoring, while logs use ECS format. Deployment can be multi-cloud or hybrid-cloud, but remains self-hosted. Community Edition is free for small environments or local development, with enforced throughput and six-month license validity. The free evaluation license specifies 5 requests per second, at most two replicas per gateway and six-month validity. Premium Edition has no listed price and is intended for enterprise setups.

F5 BIG-IP Container Ingress Services (CIS) connects Kubernetes and Red Hat OpenShift environments with F5 BIG-IP. It watches Kubernetes resources and adjusts BIG-IP configuration as applications change, while teams manage BIG-IP through Kubernetes or OpenShift command-line interfaces and APIs. CIS can send traffic from BIG-IP to clusters through NodePort or ClusterIP and supports F5 AS3 declarations. It provides HTTP and URI routing, load balancing, scaling, health monitoring, and Blue/Green or A/B traffic handling. F5 documents Ingress resources, OpenShift Routes, IngressLink coordination with NGINX Ingress Controller, and overlays including OpenShift SDN, Flannel, and Calico. BIG-IP data streams can export application and network statistics to tools such as Splunk. Installation is available through Helm or manual methods, with releases on Docker Hub and Red Hat Container Registry. The open-source plan is free, but requires a licensed BIG-IP system, a Kubernetes or OpenShift cluster, and AS3 installed on BIG-IP.