# Skipper

Published articles for Skipper.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Rejecting Invalid Ingress Routes at Apply Time

DevFeed: [Rejecting Invalid Ingress Routes at Apply Time](<https://devfeed.tech/articles/rejecting-invalid-ingress-routes-at-apply-time-47503.md>)

Original publisher: [Read original article](<https://engineering.zalando.com/posts/2026/04/skipper-validating-admission-webhook.html>)

Author: Veronika Volokitina

Published: 2026-04-08T22:00:00Z

Content type: article

Language: en

Sources: [Zalando](<https://devfeed.tech/sources/zalando-engineering-blog.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [control-plane](<https://devfeed.tech/topics/control-plane.md>), [proxy](<https://devfeed.tech/topics/proxy.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [api server](<https://devfeed.tech/topics/api-server.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Parsing](<https://devfeed.tech/topics/parsing.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-server](<https://devfeed.tech/tags/api-server.md>), [backend](<https://devfeed.tech/tags/backend.md>), [backends](<https://devfeed.tech/tags/backends.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [control-plane](<https://devfeed.tech/tags/control-plane.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [platform-engineering](<https://devfeed.tech/tags/platform-engineering.md>), [reverse-proxy](<https://devfeed.tech/tags/reverse-proxy.md>), [risk](<https://devfeed.tech/tags/risk.md>), [routing](<https://devfeed.tech/tags/routing.md>), [scale](<https://devfeed.tech/tags/scale.md>), [server](<https://devfeed.tech/tags/server.md>), [skipper](<https://devfeed.tech/tags/skipper.md>), [sre](<https://devfeed.tech/tags/sre.md>), [validating](<https://devfeed.tech/tags/validating.md>), [webhook](<https://devfeed.tech/tags/webhook.md>), [zalando](<https://devfeed.tech/tags/zalando.md>)

### AI overview

Zalando describes using Skipper as a Kubernetes validating admission webhook to reject invalid ingress routes before they are applied. The approach reuses Skipper's runtime validation for filters and predicates, addressing configuration errors that Kubernetes can accept as structurally valid.

### Source excerpt

How Zalando used Skipper as a validating admission webhook to reject invalid filters and predicates at apply time, and what it took to make that safe on the Kubernetes control-plane path.

## Scaling Beyond Limits: Harnessing Route Server for a Stable Cluster

DevFeed: [Scaling Beyond Limits: Harnessing Route Server for a Stable Cluster](<https://devfeed.tech/articles/scaling-beyond-limits-harnessing-route-server-for-a-stable-cluster-47489.md>)

Original publisher: [Read original article](<https://engineering.zalando.com/posts/2025/02/scaling-beyond-limits-harnessing-route-server-for-a-stable-cluster.html>)

Author: Mustafa Abdelrahman

Published: 2025-02-16T23:00:00Z

Content type: article

Language: en

Sources: [Zalando](<https://devfeed.tech/sources/zalando-engineering-blog.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Scalability](<https://devfeed.tech/topics/scalability.md>), [proxy](<https://devfeed.tech/topics/proxy.md>), [control-plane](<https://devfeed.tech/topics/control-plane.md>), [etcd](<https://devfeed.tech/topics/etcd.md>), [api server](<https://devfeed.tech/topics/api-server.md>), [Cache](<https://devfeed.tech/topics/cache.md>), [reliability-engineering](<https://devfeed.tech/topics/reliability-engineering.md>), [Parsing](<https://devfeed.tech/topics/parsing.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-server](<https://devfeed.tech/tags/api-server.md>), [aws](<https://devfeed.tech/tags/aws.md>), [backend](<https://devfeed.tech/tags/backend.md>), [cache](<https://devfeed.tech/tags/cache.md>), [cluster](<https://devfeed.tech/tags/cluster.md>), [control-plane](<https://devfeed.tech/tags/control-plane.md>), [etcd](<https://devfeed.tech/tags/etcd.md>), [golang](<https://devfeed.tech/tags/golang.md>), [ingress](<https://devfeed.tech/tags/ingress.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-clusters](<https://devfeed.tech/tags/kubernetes-clusters.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [performance](<https://devfeed.tech/tags/performance.md>), [platform-engineering](<https://devfeed.tech/tags/platform-engineering.md>), [processing](<https://devfeed.tech/tags/processing.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [reliability](<https://devfeed.tech/tags/reliability.md>), [routing](<https://devfeed.tech/tags/routing.md>), [scaling](<https://devfeed.tech/tags/scaling.md>), [skipper](<https://devfeed.tech/tags/skipper.md>), [tls](<https://devfeed.tech/tags/tls.md>), [zalando](<https://devfeed.tech/tags/zalando.md>)

### AI overview

Zalando describes how a custom Route Server proxy reduced Kubernetes control-plane load from its Skipper ingress controller. The design uses polling, parsing, and an HTTP ETag cache layer between Skipper and the Kubernetes API Server to improve cluster stability at large scale.

### Source excerpt

A proxy server contributing to a stable Kubernetes cluster and scaling ingress controller.

## Open Policy Agent in Skipper Ingress

DevFeed: [Open Policy Agent in Skipper Ingress](<https://devfeed.tech/articles/open-policy-agent-in-skipper-ingress-47485.md>)

Original publisher: [Read original article](<https://engineering.zalando.com/posts/2024/12/open-policy-agent-in-skipper-ingress.html>)

Author: Magnus Jungsbluth

Published: 2024-12-05T23:00:00Z

Content type: article

Language: en

Sources: [Zalando](<https://devfeed.tech/sources/zalando-engineering-blog.md>)

Topics: [Open Policy Agent](<https://devfeed.tech/topics/open-policy-agent.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Developer experience](<https://devfeed.tech/topics/developer-experience.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [authorization](<https://devfeed.tech/tags/authorization.md>), [backend](<https://devfeed.tech/tags/backend.md>), [developer-experience](<https://devfeed.tech/tags/developer-experience.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [open-policy-agent](<https://devfeed.tech/tags/open-policy-agent.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [platform-engineering](<https://devfeed.tech/tags/platform-engineering.md>), [security](<https://devfeed.tech/tags/security.md>), [skipper](<https://devfeed.tech/tags/skipper.md>), [zalando](<https://devfeed.tech/tags/zalando.md>)

### AI overview

Zalando integrated Open Policy Agent into its open-source Skipper ingress controller and reverse proxy to provide Authorization as a Service. The design externalizes authorization policies, supports multiple OPA instances, and simplifies enabling protection for applications.

### Source excerpt

Zalando has integrated Open Policy Agent (OPA) into Skipper, our open-source Ingress controller, to provide Authorization as a Service. It aims to simplify the developer experience and provides observability out of the box.