# kgateway-dev/kgateway

The Cloud-Native API Gateway and AI Gateway

Repository: https://github.com/kgateway-dev/kgateway
Canonical: https://ross.abutalabs.com/products/kgateway
Homepage: https://kgateway.dev
Language: Go
License: Apache-2.0
License Family: permissive
Topics: envoy, api-gateway, serverless, api-management, kubernetes, kubernetes-ingress-controller, microservices, hybrid-apps, legacy-apps, grpc, cloud-native, envoy-proxy
Last push: 2026-08-26T22:16:47+00:00

## Health v2 (maintenance only)
Score: 95/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 86, longevity 100
- inputs: {"age_days": 3145, "days_push": 7, "days_rel": 13, "gap_med": 3, "n_releases_24m": 72}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5670, forks 800 (observed 2026-08-28T04:09:27.662401+00:00)

## What it is
kgateway is a Kubernetes-native API gateway and ingress controller that implements the Kubernetes Gateway API as a control plane for Envoy Proxy. It centralizes traffic routing, authentication, authorization, and rate limiting for microservices, serverless, and legacy backends, scaling from lightweight microgateways to gateways handling billions of API calls.

## Use cases
- expose kubernetes services to the internet with an ingress controller
- manage api authentication and rate limiting in one gateway
- migrate from ingress nginx to the gateway api
- route traffic to microservices, serverless functions, and legacy apps
- run a gateway api-native envoy control plane in kubernetes
- apply retries, timeouts, and circuit breaking to api traffic
- secure and govern llm and ai agent traffic at the gateway

## When to choose
- you run workloads on Kubernetes and want a standards-based Gateway API controller
- you need a battle-tested Envoy-based gateway for high-scale API traffic
- you are migrating off Ingress NGINX and want automated conversion tooling
- you need hybrid routing across microservices, serverless, and legacy apps
- you want centralized auth, rate limiting, and traffic policies at the edge

## When to avoid
- you need a simple non-Kubernetes reverse proxy for a single app
- your stack is VM-based with no container orchestration
- you want a lightweight edge proxy without a Kubernetes control plane
- you need deep AI/agent/MCP-specific gateway features, which live in the separate agentgateway project

## Facets
- artifact type: service
- maturity: stable
- function: api-gateway, routing, middleware, auth, authorization, rate-limiting, http-server, proxy, websocket, rpc
- domain: apis, microservices, cloud-computing, networking, security, backend, large-language-models
- platform: cloud, self-hosted, go, windows
- tags: envoy-proxy, gateway-api, kubernetes-ingress, traffic-management, ingress-controller, ai-gateway, grpc, service-mesh, helm, ingress-nginx-migration, containers, devops, kubernetes, docker, linux, macos

## Member repositories
- kgateway-dev/kgateway (main) score 95

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:27.662401+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:54:17.847177+00:00, confidence not recorded.
  - readme: https://github.com/kgateway-dev/kgateway (fetched 2026-08-28T04:09:27.662401+00:00, sha 13794e3632b8)
  - homepage: https://kgateway.dev (fetched 2026-08-29T08:49:32.481443+00:00, sha 10c5c6ace07e)
  - site_page: https://kgateway.dev/docs (fetched 2026-08-29T08:49:32.484147+00:00, sha 4bc4b4e6a928)
  - site_page: https://kgateway.dev/docs/envoy/latest (fetched 2026-08-29T08:49:32.485857+00:00, sha 548668c5528f)
  - site_page: https://kgateway.dev/docs/envoy/latest/migrate (fetched 2026-08-29T08:49:32.488178+00:00, sha 7a34980ce1b5)
  - site_page: https://kgateway.dev/docs/envoy/latest/about/overview (fetched 2026-08-29T08:49:32.490078+00:00, sha cfd378235d67)
  - site_page: https://kgateway.dev/docs/envoy/latest/setup (fetched 2026-08-29T08:49:32.491970+00:00, sha d2e47cfb175f)
- Data as of 2026-08-30T08:39:29.467469+00:00.