We are thrilled to announce that Higress has officially passed the Technical Oversight Committee (TOC) vote to join the Cloud Native Computing Foundation (CNCF) as a Sandbox project, becoming a proud member of the CNCF ecosystem.
Higress is an AI-native, high-performance API gateway built on Envoy and Istio. It conceptually unifies the traffic gateway, microservices gateway, and AI gateway into a single control plane, drastically reducing operational complexity for both cloud-native and AI workloads.
Born out of Alibaba's massive-scale internal production environments, Higress brings enterprise-grade stability and WebAssembly (Wasm) extensibility to the CNCF ecosystem. Today, its core capabilities are built upon two main pillars:
• Ingress Controller & Gateway Capabilities: Higress serves as a highly mature Kubernetes Ingress Controller, offering full support for the Gateway API and its Inference Extension. With Nginx Ingress scheduled for retirement in 2026[1], Higress provides a secure, drop-in replacement for Nginx Ingress. It remains fully compatible with mainstream Nginx Ingress annotations while replacing the vulnerable configuration-injection model with a robust xDS control plane and Wasm sandbox, effectively eliminating the security risks inherent to legacy architectures. Whether organizations choose to maintain existing Ingress setups or migrate fully to the Gateway API, Higress delivers unified, highly scalable traffic governance.
• AI-Native Gateway Capabilities: Higress treats AI traffic as a first-class citizen. It provides native support for Large Language Model (LLM) invocations, the Model Context Protocol (MCP), and diverse AI inference scenarios. By offering token-based rate limiting, multi-model fallback, Retrieval-Augmented Generation (RAG) integration, model-aware routing, and intelligent load balancing, Higress standardizes how cloud-native applications consume LLMs. This positions Higress as the definitive entry point for AI Agents and LLM traffic.
Higress has already proven its production-ready reliability across a wide range of highly demanding environments. Current enterprise adopters include Alibaba Group, Ant Group, BOSS Zhipin, Cathay Insurance, Ctrip, DJI, Kuaishou, Sealos, and Vipshop. These organizations span major industries such as internet services, finance, travel, hardware, and entertainment. They leverage Higress not only for its robust cloud-native traffic routing but also for deploying AI gateway features directly to enterprise AI Agent applications and MCP services. Furthermore, a growing ecosystem of innovative AI open-source projects, including HiMarket and HiClaw, are already being built on top of Higress.
Higress's entry into the CNCF marks a pivotal milestone in its evolutionary journey, driven by three core objectives:
Looking ahead, the project will focus its development on two primary tracks:
1. Long-term Ingress compatibility, full Gateway API and Inference Extension support, and comprehensive Nginx Ingress migration solutions:
• Maintain deep compatibility with standard Ingress and Nginx Ingress annotations while supporting a dual-stack coexistence with the Gateway API.
• Strengthen the delivery of Gateway API and Inference Extension capabilities, providing sustainable open-source infrastructure for cloud-native networking and AI applications.
• Deliver comprehensive Nginx Ingress migration paths, ensuring users experience a smooth transition whether they adopt the Gateway API or stick with traditional Ingress.
2. Continuous AI Capability Expansion
• Deepen support for Model Context Protocol (MCP) to make Higress the standard entry point for AI agents and LLM traffic;
• Introduce "Higress Agent" for autonomous, intelligent traffic governance.
• Enhance support for real-time communication protocols critical to AI streaming scenarios.
• Build robust security management and progressive disclosure frameworks for AI skills.
• Continue advancing core AI-native traffic features, including token-based rate limiting, multi-model fallback, and intelligent load balancing.
Joining the CNCF Sandbox is a starting point, not a finish line. The Higress community remains deeply committed to continuous investment in transparent governance, high-quality documentation, and global community growth.
We thank the CNCF Technical Oversight Committee, the broader cloud-native community, and every contributor and adopter who has supported Higress. We look forward to building a more secure, scalable, and AI-friendly infrastructure alongside the CNCF ecosystem.
Learn more: higress.ai | GitHub | Documentation
[1] https://kubernetes.io/blog/2026/01/29/ingress-nginx-statement/
677 posts | 56 followers
FollowAlibaba Cloud Native Community - March 21, 2024
Alibaba Cloud Native Community - February 13, 2026
Alibaba Cloud Community - January 4, 2026
Alibaba Cloud Native Community - November 26, 2025
Alibaba Cloud Native Community - April 21, 2025
Alibaba Cloud Native Community - November 14, 2025
677 posts | 56 followers
Follow
Container Compute Service (ACS)
A cloud computing service that provides container compute resources that comply with the container specifications of Kubernetes
Learn More
Container Service for Kubernetes
Alibaba Cloud Container Service for Kubernetes is a fully managed cloud container management service that supports native Kubernetes and integrates with other Alibaba Cloud products.
Learn More
Tongyi Qianwen (Qwen)
Top-performance foundation models from Alibaba Cloud
Learn More
Managed Service for Prometheus
Multi-source metrics are aggregated to monitor the status of your business and services in real time.
Learn MoreMore Posts by Alibaba Cloud Native Community