kgateway
kgateway: A focused open-source Gateway API gateway for teams needing routing, security, and traffic controls. Ranked #6 of 28 in Kubernetes Ingress Controllers by our editors (8.8/10); pricing: Free plan; best for gateway API teams needing security controls.
At a glance
- Editor score8.8 / 10
- PricingFree plan
- Best forGateway API teams needing security controls
- Free planYes
- Paid fromFree
- Ingress API modelBoth
- Founded2018
- Facts checked21 Sep 2026
Where it wins
- Free open-source Gateway API implementation
- Weighted routing, canary splitting, and rate limiting
- Authentication, TLS automation, and WAF support
Where it doesn't
- Self-hosted deployment requires a Kubernetes environment
- Integration coverage centers on a focused set of platforms
- No AI features are included
Our verdict on kgateway
kgateway is an open-source Kubernetes-native ingress controller and API gateway for teams managing service, API, serverless, or legacy application traffic in Kubernetes. It implements the Kubernetes Gateway API and uses Envoy as its proxy data plane. The project is suited to organizations that want a self-hosted control plane with traffic management, authentication, authorization, TLS capabilities, and migration tooling for existing Ingress configurations.
Its pricing model is straightforward: kgateway is free and open source. There are no paid tiers described. The published feature set covers HTTP, TCP, TLS, and SNI listeners, along with weighted routing and canary traffic splitting. Rate limiting is available locally and globally. Security controls include API key, basic, JWT, OAuth2/OIDC, and external authentication, while TLS certificate automation works through ExternalDNS and cert-manager. Web application firewall support adds another security layer for teams that need gateway controls beyond basic routing.
Platform fit is centered on self-hosted Kubernetes deployments. kgateway can be installed in a cluster with Helm or Argo CD and integrates with ExternalDNS, cert-manager, Istio, and AWS ELB. That combination supports teams already operating Kubernetes infrastructure and using those surrounding systems. It is a focused choice rather than a broad ecosystem platform: teams wanting Gateway API coverage, Envoy-based traffic handling, rate limiting, authentication, TLS automation, and WAF support should find the scope relevant. Organizations seeking a managed service, a wider integration catalog, or AI gateway features should consider alternatives.
Your product? Our editors can test kgateway in depth and publish a review, labelled as paid · from $149/mo →
kgateway pricing
kgateway fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Ingress API model | Both |
| TLS automation | Yes |
| Canary routing | Yes |
| Rate limiting | Yes |
| Web application firewall | Yes |
| Auth policies | Yes |
| Deployment model | Self-hosted |
| Deployment | Self-hosted |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 4 integrations: ExternalDNS, cert-manager, Istio, AWS ELB See all → |
| Pricing | Free plan |
| Website | kgateway.dev |
| Facts checked | 21 Sep 2026 |
kgateway integrations
kgateway lists 4 integrations on its own site.
- ExternalDNS
- cert-manager
- Istio
- AWS ELB
See all kgateway integrations →
Alternatives to kgateway
- Traefik ProxyA broad self-hosted ingress proxy with discovery, multi-protocol routing, and observability.9.3
- NGINX Ingress ControllerA free, self-hosted controller for routing, TLS, traffic policies, and edge integrations.9.2
- Kong Ingress ControllerA free, extensible choice for Kong-centered Kubernetes API platforms.9.1
See all kgateway alternatives →
kgateway vs the competition
- kgateway vs Traefik Proxy
- kgateway vs NGINX Ingress Controller
- kgateway vs Kong Ingress Controller
- kgateway vs Contour
- kgateway vs HAProxy Ingress
- kgateway vs Apache APISIX
Compare kgateway with any tool side by side →
Used kgateway? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used kgateway for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
kgateway is listed in our Kubernetes Ingress Controllers directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kgateway/"><img src="https://www.itechguides.com/best/badge/kgateway.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update