Kubernetes API gateway
The API Gateway Platform for Kubernetes
Built on Envoy and the Kubernetes Gateway API, kgateway is the open source API gateway hosted by the CNCF. Solo Enterprise for kgateway adds hardened builds, advanced security policy, and 24x7 support. Compare it with other API gateway companies before you choose.
Side-by-side capabilities
Built for Kubernetes, not adapted to it
Most API gateways were designed for the data center and retrofitted for Kubernetes. kgateway was built on Envoy and the Kubernetes Gateway API from the start.
| Capability | Traditional gateway | kgateway |
|---|---|---|
| Kubernetes Gateway API (conformant) | Varies | Yes, built on it from day one |
| Proxy foundation | Proprietary or legacy proxy | Envoy |
| Configuration model | Vendor-specific APIs and UIs | Kubernetes-native, GitOps-ready |
| Authentication (JWT, API keys, OAuth2/OIDC) | Yes | Yes |
| WAF and advanced rate limiting | Often a paid add-on | Solo Enterprise for kgateway |
| Ingress NGINX migration path | Manual | ingress2gateway tooling |
| Open source governance | Often vendor-owned | CNCF |
| Enterprise support | Varies | 24x7, one-hour Sev 1 response |
How kgateway compares
kgateway leads in 3 of 7 categories
Solo.io’s assessment across the criteria platform teams weigh most when choosing between API gateway companies. Request a demo for the full sub-criteria breakdown.
Why teams choose kgateway
An API gateway your platform team can trust
Open source
“We want an open source gateway we can trust, without getting boxed into one vendor’s roadmap.”
kgateway is open source and hosted by the CNCF. Solo Enterprise for kgateway adds hardened builds and support on top, so you are never locked into one vendor’s closed platform.
Secure by default
“Security has to be built into our API gateway from day one, not bolted on after launch.”
Authentication, rate limiting, and WAF policy are applied at the gateway, so every team inherits the same controls. FIPS builds and long-term-support releases cover regulated environments.
Kubernetes native
“We’re moving off Ingress NGINX and want a gateway that fits how our platform team already works.”
kgateway is configured with standard Gateway API resources, so it fits your existing GitOps workflows. ingress2gateway tooling helps you migrate from Ingress NGINX without starting over.
Customer proof
Trusted in production at scale
“With [Solo.io’s gateway], we gave access to a single, cloud native gateway that serves APIs spanning from legacy servers to modern, serverless and Kubernetes-based services.”
Sagi Dudai, CTO, Vonage
“With over 16 million users of our application and a complex ecosystem of integrations, ParkMobile relies on [Solo.io’s gateway] and the supporting product suite for best-in-class API gateway and hybrid application communications.”
Matt Ball, CTO, ParkMobile
Trust and compliance
Enterprise ready from day one
Trust
SOC 2
Supports security and procurement review for regulated Kubernetes environments.
Trust
Open source roots
Built on Envoy and the Kubernetes Gateway API, with kgateway hosted by the CNCF.
Trust
Maintainer status
Solo.io engineers lead and maintain kgateway, so fixes and features land upstream first.
Trust
FIPS builds
FIPS-compliant builds and n-3 long-term-support releases for regulated and public sector environments.
Trust
24x7 support
Enterprise SLAs with 24x7 production support and a one-hour response time for Sev 1 issues.
Trust
Customer references
Production outcomes from teams running large-scale Kubernetes networking and API traffic.
FAQ
Frequently asked questions
What is an API gateway platform, and why do I need one?
An API gateway platform is the single entry point that manages, secures, and routes traffic between API consumers and your backend services. As your API and microservice footprint grows, a gateway centralizes authentication, rate limiting, and observability instead of leaving each service to handle them on its own.
What is kgateway?
kgateway is an open source, Kubernetes-native API gateway built on Envoy and the Kubernetes Gateway API. It is a CNCF project, and Solo.io engineers are its lead maintainers. Solo Enterprise for kgateway is the hardened, supported distribution for production.
Is there an open source API gateway option?
Yes. kgateway is open source and free to run on your own. Solo Enterprise for kgateway adds hardened builds, WAF, advanced rate limiting and authentication, and 24x7 support when you need them.
How does kgateway compare to other API gateway companies?
kgateway was built on Envoy and the Kubernetes Gateway API from the ground up, rather than adapting a legacy edge gateway to Kubernetes. That gives platform teams native integration with Kubernetes, Istio, and multicluster environments alongside API management, without a separate translation layer. The Buyer’s Guide has a full side-by-side comparison.
Is it a secure, cloud native API gateway?
Yes. Authentication, rate limiting, and WAF policy are enforced at the gateway layer, so security travels with the gateway instead of being added service by service. FIPS builds are available for regulated environments.
What does an enterprise API gateway cost?
Cost depends on your traffic, cluster count, and support tier. A demo is the fastest way to get a number scoped to your environment rather than a generic estimate.
See the best API gateway for your Kubernetes environment
Request a demo to see how kgateway replaces legacy gateway sprawl with one secure, Kubernetes-native API gateway. Prefer to compare first? Start with the Buyer’s Guide.
