Varnish Gateway review
An open-source Kubernetes Gateway API implementation with caching and weighted traffic splitting.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Varnish Gateway is an open-source Kubernetes Gateway API implementation that uses Varnish as its data plane. It is aimed at teams that want HTTP routing and caching at the gateway, including small, mid-market, and enterprise organizations comfortable with self-hosting. An operator manages Varnish deployments and routing configuration, and routing can match requests by host, path, headers, and query parameters. Installation is available through Helm or kubectl, with Gateway and HTTPRoute resources defining routes.
Caching is a central differentiator: teams can configure built-in HTTP caching with VarnishCachePolicy and add custom VCL for caching or request logic beyond the Gateway API. The product also supports weighted traffic splitting for canary deployments, multiple Gateway listeners on different ports, and TLS termination using Kubernetes TLS Secrets, with certificate hot reload. Its dashboard provides backend health and live events, while live routing tables draw from HTTPRoutes and EndpointSlices. These capabilities make it a fit where cache policy and route control matter together.
The deployment model is self-hosted, and the published offering is open source with a free plan. Support channels are community and documentation; official launch material describes Enterprise support as planned. TLS handling uses supplied Kubernetes Secrets, while automated certificate issuance is not documented. Choose Varnish Gateway when Gateway API routing, caching and VCL customization are priorities and operating an in-cluster component is acceptable. Teams seeking ingress functionality beyond this narrower focus, or needing a documented automated certificate issuance path, should compare alternatives.
Varnish Gateway pros and cons
- Where it wins
- Routes HTTP traffic through Kubernetes Gateway and HTTPRoute resources.
- Supports weighted traffic splitting for canary deployments.
- Offers configurable caching, custom VCL, and a built-in dashboard.
- Where it doesn't
- Uses self-hosted deployment, so teams manage it in their Kubernetes cluster.
- TLS certificates come from Kubernetes Secrets; automated issuance is not documented.
- Support channels are community and documentation.
Varnish Gateway fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update