Kusk Gateway review
A free, open-source Envoy gateway for teams managing REST APIs through OpenAPI.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Kusk Gateway is an open-source Kubernetes API gateway powered by Envoy. It is designed for teams developing REST APIs on Kubernetes that want OpenAPI definitions to control ingress routes and API behavior. The gateway supports request validation, response mocking, routing, timeouts, CORS, rate limiting, authentication, and OpenAPI overlays. Its self-hosted deployment model fits organizations that manage their own Kubernetes environments and want an ingress controller with API-focused configuration rather than a basic route proxy.
The strongest part of Kusk is the breadth of behavior available from OpenAPI-driven configuration. Policies cover rate limiting by time unit, JWT, OAuth2, custom, and Cloudentity authentication, along with retries, timeouts, CORS, and request validation. Response mocking can support API development workflows, while the browser-based dashboard provides a visual management layer for deployed APIs. The CLI, Helm-based installation, and Envoy fleets add operational options for Kubernetes teams. This makes Kusk a focused choice for REST API ingress where API definitions should remain central to gateway behavior.
Kusk is free and open source, presented under the MIT License, with no paid tiers described. Its platform coverage includes web, Windows, macOS, and Linux, while the deployment model remains self-hosted on Kubernetes. Teams should look closely at ecosystem fit before choosing it: verified integrations are not supplied, and the published positioning does not include canary deployment or TLS automation features. Kusk suits Kubernetes teams that value OpenAPI-based control and built-in API policies. Teams prioritizing a broad integration catalog, canary workflows, or automated TLS management should consider an alternative with those capabilities.
Kusk Gateway pros and cons
- Where it wins
- OpenAPI-driven ingress and API behavior configuration
- Built-in validation, mocking, authentication, and rate limiting
- Browser dashboard plus CLI and Helm-based Kubernetes installation
- Where it doesn't
- Verified integrations are not supplied
- Canary deployment features are not supplied
- TLS automation features are not supplied
Kusk Gateway fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update