# envoyproxy/gateway

Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway

Repository: https://github.com/envoyproxy/gateway
Canonical: https://ross.abutalabs.com/products/envoyproxy-gateway
Homepage: https://gateway.envoyproxy.io
Language: Go
License: Apache-2.0
License Family: permissive
Topics: envoy, kubernetes, gateway-api, cncf, go-control-plane, api-gateway, hacktoberfest
Last push: 2026-08-26T16:47:08+00:00

## Health v2 (maintenance only)
Score: 99/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 98, longevity 100
- inputs: {"age_days": 1605, "days_push": 7, "days_rel": 18, "gap_med": 9, "n_releases_24m": 56}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2990, forks 843 (observed 2026-08-28T04:07:34.219630+00:00)

## What it is
Envoy Gateway is an open-source control plane that manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Kubernetes Gateway API resources to provision and configure Envoy proxies. It provides traffic management, security policies (mTLS, JWT, OIDC, API keys), rate limiting, and rich observability without requiring deep Envoy configuration knowledge.

## Use cases
- expose kubernetes services through an api gateway
- implement kubernetes gateway api with envoy
- rate limit and authenticate api traffic
- manage ingress traffic routing in kubernetes
- add jwt and oidc authentication to services
- get metrics and tracing for edge traffic
- manage llm provider traffic with token-based rate limiting

## When to choose
- you run Kubernetes and want a Gateway API-conformant ingress gateway
- you want Envoy Proxy's power without hand-writing xDS configuration
- you need built-in security policies like mTLS, JWT validation, or OIDC
- you need advanced traffic control such as retries, circuit breaking, and failover

## When to avoid
- you need a simple reverse proxy outside Kubernetes with minimal setup
- you already have deep Envoy expertise and prefer direct xDS control
- you use a non-Kubernetes environment where the standalone mode doesn't fit
- you need a lightweight layer-4 load balancer only

## Facets
- artifact type: service
- maturity: stable
- function: api-gateway, proxy, routing, rate-limiting, auth, monitoring, tracing, middleware
- domain: microservices, cloud-computing, networking, apis, infrastructure-as-code
- platform: go, cloud, self-hosted
- tags: envoy-proxy, gateway-api, kubernetes-ingress, traffic-management, cncf, mtls, jwt, oidc, load-balancing, observability, genai-traffic, devops, kubernetes, docker, linux

## Member repositories
- envoyproxy/gateway (main) score 99

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:34.219630+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:31:21.762077+00:00, confidence not recorded.
  - readme: https://github.com/envoyproxy/gateway (fetched 2026-08-28T04:07:34.219630+00:00, sha 0c880f951468)
  - homepage: https://gateway.envoyproxy.io (fetched 2026-08-29T09:46:19.421912+00:00, sha cc04d3477a0d)
  - site_page: https://gateway.envoyproxy.io/docs/tasks/quickstart (fetched 2026-08-29T09:46:19.436914+00:00, sha 992695edb104)
  - site_page: https://gateway.envoyproxy.io/docs (fetched 2026-08-29T09:46:19.433475+00:00, sha 87e54dfdf3ac)
  - site_page: https://gateway.envoyproxy.io/about (fetched 2026-08-29T09:46:19.435161+00:00, sha 987f7af4c445)
  - site_page: https://gateway.envoyproxy.io/news/releases/notes (fetched 2026-08-29T09:46:19.431496+00:00, sha 7b96cb6d65d6)
- Data as of 2026-08-30T08:39:29.467469+00:00.