Freedom251 › Kubernetes Ingress Controllers
Envoy Gateway
What Envoy Gateway is
Envoy Gateway manages Envoy Proxy as a standalone or Kubernetes-based application gateway. It uses Kubernetes Gateway API resources to provision and configure proxies, and extends those resources to expose Envoy features. Traffic controls include rate limiting, retries, circuit breaking, timeouts, and failover. Security options include mTLS, JWT-based access control, OIDC, API keys, Basic Auth, and external authorization. It supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during the TLS handshake. Metrics, access logging, and distributed tracing provide observability. The project is open source under the Apache-2.0 license and is free. Deployments can be standalone or Kubernetes-based; installation options include Helm, Argo CD, Flux CD, and Kubernetes YAML. The quickstart requires a Kubernetes cluster. The documentation cautions that the latest release includes recent main-branch commits and may not be stable.
Who it suits
It suits teams managing application gateways with Envoy Proxy, especially those using Kubernetes Gateway API resources. The project also lists integrations with Envoy AI Gateway, Kuadrant, Knative, KServe, and KEDA.
What it does well
- Supports standalone and Kubernetes deployments.
- Offers rate limiting, retries, circuit breaking, and failover.
- Includes mTLS, OIDC, JWT, and API-key controls.
- Lists metrics, access logging, and distributed tracing.
What to know first
- Quickstart requires a Kubernetes cluster.
- Latest release might not be stable.
Limits
The project is free. Its quickstart requires a Kubernetes cluster, and the documentation says the latest release may not be stable.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Envoy Gateway | Open-source project · standalone or Kubernetes-based application gateway | Free |
As gateway.envoyproxy.io lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Envoy Gateway website.
- Choose a standalone or Kubernetes-based deployment.
- For the quickstart, prepare a Kubernetes cluster.
- Install using Helm, Argo CD, Flux CD or Kubernetes YAML.
- Configure proxies using Gateway API resources.
Verdict
Envoy Gateway combines gateway configuration, traffic controls, and security features around Envoy Proxy. Check the release caveat and Kubernetes prerequisite when planning an installation.
Questions
How much does Envoy Gateway cost?
It is free, with a listed price of $0.
Is Envoy Gateway open source?
Yes. The project describes it as open source, and its GitHub repository lists the Apache-2.0 license.
Where can Envoy Gateway run?
It supports standalone and Kubernetes-based deployments. The quickstart requires a Kubernetes cluster.
What protocols does it support?
It supports HTTP, HTTPS, gRPC, TLS, TCP and UDP.
How can I install Envoy Gateway?
The documentation provides installation options using Helm, Argo CD, Flux CD or Kubernetes YAML.
What integrations are listed?
The project lists Envoy AI Gateway, Kuadrant, Knative, KServe and KEDA among its integrations and ecosystem projects.
Facts from Envoy Gateway's own pages
- Community support
- The project directs users to Envoy Slack, GitHub discussions and issues, and community meetings. · gateway.envoyproxy.io, 4 Oct 2026
- Deployment
- The project can manage Envoy Proxy as a standalone or Kubernetes-based application gateway. · gateway.envoyproxy.io, 4 Oct 2026
- Enterprise support
- The project site lists third-party enterprise support and consulting providers, including Tetrate Enterprise Gateway for Envoy. · gateway.envoyproxy.io, 4 Oct 2026
- Extensibility
- The control plane is designed to support custom policies, specialized solutions, and extensions. · gateway.envoyproxy.io, 4 Oct 2026
- Gateway API
- Envoy Gateway implements the Kubernetes Gateway API and extends it to expose Envoy features through Gateway API resources. · gateway.envoyproxy.io, 4 Oct 2026
- Installation
- The documentation provides installation paths using Helm, Argo CD, Flux CD, and Kubernetes YAML. · gateway.envoyproxy.io, 4 Oct 2026
- Integrations
- The project lists integrations and ecosystem projects including Envoy AI Gateway, Kuadrant, Knative, KServe, and KEDA. · gateway.envoyproxy.io, 4 Oct 2026
- Observability
- The project lists metrics, access logging, and distributed tracing as observability features. · gateway.envoyproxy.io, 4 Oct 2026
- Open source
- The project describes Envoy Gateway as open source and its GitHub repository lists the Apache-2.0 license. · github.com, 4 Oct 2026
- Prerequisite
- The quickstart requires a Kubernetes cluster. · gateway.envoyproxy.io, 4 Oct 2026
- Purpose
- Envoy Gateway manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Gateway API resources to provision and configure proxies. · gateway.envoyproxy.io, 4 Oct 2026
- Release caveat
- The documentation says the latest release contains recent main-branch commits and might not be stable. · gateway.envoyproxy.io, 4 Oct 2026
- Security
- Its security controls include mTLS, JWT-based access control, OIDC integration, and API-key authorization. · gateway.envoyproxy.io, 4 Oct 2026
- Security features
- Its security controls include mTLS, JWT-based access control, OIDC integration, and API-key authorization. · gateway.envoyproxy.io, 4 Oct 2026
- TLS
- Envoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during the TLS handshake. · gateway.envoyproxy.io, 4 Oct 2026
- Traffic management
- The project lists rate limiting, retries, circuit breaking, timeouts, and failover among its traffic management capabilities. · gateway.envoyproxy.io, 4 Oct 2026
Where Envoy Gateway stands on Freedom251
- Kubernetes Ingress Controllers#8 of 28
- API Gateway Software#11 of 29