Apoxy is an open-source edge platform built on Envoy, Kubernetes API infrastructure, and QUIC tunneling. It provides three core capabilities, composed into a single data plane:

A fully-featured API gateway, configured with the Kubernetes Gateway API.
An edge computing runtime for JavaScript, WebAssembly, and Go functions.
Secure tunneling via QUIC and connect-ip for reaching services behind NAT.

Apoxy Cloud is the managed offering. It handles DNS registration, instant TLS certificates, and built-in observability so you can focus on routing and logic instead of infrastructure.

Deployment options

Choose the deployment model that fits your environment. All four run the same data plane and accept the same configuration — they only differ in who manages the control plane.

Apoxy Cloud

Fully managed control plane, anycast edge, included DNS and TLS. Recommended. Sign in to the dashboard.

In-VPC Managed

Apoxy operates the control plane and data plane inside your own VPC — your data never leaves your network, while we handle upgrades, scaling, and on-call. Contact sales to scope a deployment.

Onboard a Kubernetes cluster

Mirror Gateway API (or Ingress) resources from your cluster to Apoxy via apoxy k8s install. See the Kubernetes install guide.

Standalone binary

Single static binary. Use apoxy dev for local testing or apoxy run for standalone edge nodes. See the Standalone setup guide.

Configuration

All deployment models use the same configuration patterns:

apoxy CLI

The apoxy command for quick operations and local development. See the CLI reference.

YAML manifests

Kubernetes-style CRDs (Proxy, Gateway, HTTPRoute, EdgeFunction). Apply with apoxy apply -f or kubectl apply. See Core concepts for the resource model.

Dashboard

Web UI for managing Apoxy Cloud projects. Open the dashboard.