envoyproxy/gateway

Health v2 · maintenance only

Adoption not part of the score

2990 stars · 843 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Envoy Gateway is an open-source control plane that manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Kubernetes Gateway API resources to provision and configure Envoy proxies. It provides traffic management, security policies (mTLS, JWT, OIDC, API keys), rate limiting, and rich observability without requiring deep Envoy configuration knowledge.

Use cases

• expose kubernetes services through an api gateway
• implement kubernetes gateway api with envoy
• rate limit and authenticate api traffic
• manage ingress traffic routing in kubernetes
• add jwt and oidc authentication to services
• get metrics and tracing for edge traffic
• manage llm provider traffic with token-based rate limiting

When to choose

• you run Kubernetes and want a Gateway API-conformant ingress gateway
• you want Envoy Proxy's power without hand-writing xDS configuration
• you need built-in security policies like mTLS, JWT validation, or OIDC
• you need advanced traffic control such as retries, circuit breaking, and failover

When to avoid

• you need a simple reverse proxy outside Kubernetes with minimal setup
• you already have deep Envoy expertise and prefer direct xDS control
• you use a non-Kubernetes environment where the standalone mode doesn't fit
• you need a lightweight layer-4 load balancer only

Facets

service · maturity stable

api-gateway proxy routing rate-limiting auth monitoring tracing middleware microservices cloud-computing networking apis infrastructure-as-code go cloud self-hosted envoy-proxy gateway-api kubernetes-ingress traffic-management cncf mtls jwt oidc load-balancing observability genai-traffic devops kubernetes docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="envoyproxy/gateway")