Contour vs ngrok
Contour
projectcontour.iongrok
ngrok.comSide by side
| Figure | Contour | ngrok |
|---|---|---|
| Price from | Free | $10/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | — | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 4 |
| Spec score · Kubernetes Ingress Controllers | 7.7 (#12) | 8.7 (#3) |
| Integrations | Contour documentation includes guides for cert-manager, Gatekeeper, AWS Network Load Balancer, and Prometheus metrics. | Official documentation lists SDKs for Python, Go, Node and Rust and integrations including Okta SSO, Microsoft Entra ID and Datadog. |
| Observability | Contour and Envoy expose metrics that can be scraped with Prometheus. | The platform logs configuration changes, authentication events and API calls and can stream events to SIEM systems. |
| Support | The project provides community support through its GitHub project page and invites users to file issues or ask questions there. | Paid support options include Dedicated On-Call with an 8 business hour SLA, plus Slack or Teams and 24×7 paging add-ons. |
Plans
ngrok
- FreeFree
- Hobbyist$10 a month
- Pay-as-you-go$20 a month
- EnterprisePriced on request
In their own words
Contour
Contour is a free, self-hosted, open-source Kubernetes ingress controller that provides the control plane for the Envoy edge and service proxy. It supports Kubernetes Ingress v1, its HTTPProxy custom resource and Gateway API. Contour updates ingress configuration dynamically with minimal dropped connections and supports multiple configuration types in clusters used by multiple teams. It can run as a Kubernetes deployment or daemonset, and administrators can delegate access to wildcard certificates. Documented security features include TLS termination, client authorization, rate limiting, JWT verification and IP filtering. Contour and Envoy expose metrics that Prometheus can scrape, and documentation includes guides for cert-manager, Gatekeeper and AWS Network Load Balancer. The project is tested with Kubernetes 1.21 and later and is intended for both cluster administrators and application developers. Community support is available through the project's GitHub page, where users can report issues or ask questions. Contour is a Cloud Native Computing Foundation incubating project; its documentation includes a threat model, a security reporting process and a security fix checklist.
ngrok
ngrok is a cloud networking platform that secures, transforms, and routes traffic to services wherever they run. Its agent sends traffic through secure tunnels without requiring firewall changes. Traffic Policy uses CEL-based rules to route requests, authenticate them, apply rate limits or web application firewall controls, and reject them. Supported traffic includes HTTP, TLS, and TCP, including WebSockets, gRPC, SSH, Postgres, MQTT, and Minecraft. The Integrations Hub offers integrations and guides for areas such as SSO, databases, Kubernetes, OAuth, webhooks, and web servers. ngrok also verifies webhook signatures for more than 70 providers, including Stripe, GitHub, Twilio, Slack, and Shopify. The free plan includes $5 one-time usage, up to 3 online endpoints, up to 1GB data transfer, up to 20k HTTP/S requests, and one team member. Paid access starts at $10/mo. On Hobbyist, endpoints stop working when usage credit runs out, until the billing cycle ends and credit resets. ngrok lists region pinning across the United States, Europe, Asia Pacific, Australia, India, Japan, and South America.