--- title: Understanding the Ingress-NGINX Deprecation — Before You... description: Ingress-NGINX will lose support after March 2026, leaving production systems vulnerable without security updates. The deprecation stems from security risks... canonical: https://daily.dev/posts/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-eibylkte5 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Understanding the Ingress-NGINX Deprecation — Before You Migrate to the Gateway API | daily.dev og:description: Ingress-NGINX will lose support after March 2026, leaving production systems vulnerable without security updates. The deprecation stems from security risks... og:url: https://daily.dev/posts/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-eibylkte5 og:image: https://api.daily.dev/og/posts/eIbyLkTe5.png og:image:alt: Understanding the Ingress-NGINX Deprecation — Before You Migrate to the Gateway API og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Understanding the Ingress-NGINX Deprecation — Before You Migrate to the Gateway API **[ITNEXT](https://daily.dev/sources/itnext)** · 30 min read · 6 upvotes · 0 comments ## Summary Ingress-NGINX will lose support after March 2026, leaving production systems vulnerable without security updates. The deprecation stems from security risks (including the IngressNightmare RCE vulnerability), architectural complexity from annotation overuse, and maintainer shortage. Three migration paths exist: using Chainguard's commercial fork for temporary support, switching to alternative Ingress controllers like Traefik while staying on the Ingress API, or migrating to the Gateway API with Envoy Gateway. The Gateway API separates infrastructure (Gateway) from application routing (HTTPRoute), improving security and role separation but increasing cognitive load. Migration involves reconfiguring cert-manager, external-dns, and handling differences like wildcard certificate challenges (DNS-01 required vs HTTP-01). The guide documents a real enterprise migration with practical examples, configuration snippets, and operational trade-offs. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Ingress NGINX is EOL: A practical guide for migrating to Kubernetes Gateway API](https://daily.dev/posts/ingress-nginx-is-eol-a-practical-guide-for-migrating-to-kubernetes-gateway-api-fj854bzvi) · Datadog · 0 upvotes · 0 comments - [NGINX Ingress Retirement: Migrate to Traefik & Gateway API](https://daily.dev/posts/nginx-ingress-retirement-migrate-to-traefik-gateway-api-kahgaogk6) · codecentric · 1 upvotes · 0 comments - [Kubernetes leadership warns of Ingress NGINX risks, but has also hastened its deprecation • DEVCLASS](https://daily.dev/posts/kubernetes-leadership-warns-of-ingress-nginx-risks-but-has-also-hastened-its-deprecation-devclass-wk9dxbori) · DEVCLASS · 7 upvotes · 0 comments --- Tags: [#envoy](https://daily.dev/tags/envoy), [#kubernetes](https://daily.dev/tags/kubernetes), [#networking](https://daily.dev/tags/networking), [#nginx](https://daily.dev/tags/nginx) [View this post on daily.dev](https://daily.dev/posts/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-eibylkte5) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Understanding the Ingress-NGINX Deprecation — Before You Migrate to the Gateway API","url":"https://daily.dev/posts/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-eibylkte5","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-eibylkte5"},"datePublished":"2026-02-04T23:53:01.151Z","dateModified":"2026-03-15T06:14:50.294Z","description":"Ingress-NGINX will lose support after March 2026, leaving production systems vulnerable without security updates. The deprecation stems from security risks...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0435dc6400862870ab19807bb0dd511e?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0435dc6400862870ab19807bb0dd511e?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"ITNEXT","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"ITNEXT","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/itnext2","url":"https://daily.dev/sources/itnext"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-eibylkte5","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":6},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"envoy,kubernetes,networking,nginx","timeRequired":"PT30M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"ITNEXT","item":"https://daily.dev/sources/itnext"},{"@type":"ListItem","position":3,"name":"Understanding the Ingress-NGINX Deprecation — Before You Migrate to the Gateway API"}]} ```