An open source service mesh that adds traffic management, security and observability to microservices with few or no code changes.
kgateway-dev/kgateway
A Kubernetes-native API gateway implementing the Gateway API on top of Envoy, with support for AI gateway use cases.
- Stars
- 5,720
- Forks
- 830
- Open issues
- 205
- Last commit
- 6 hours ago
What is it?
kgateway is a control plane that implements the Kubernetes Gateway API for the Envoy proxy. It lets teams expose APIs and apply policies such as authentication, authorization and rate limiting from one place. Its control plane is designed to scale from lightweight gateways between individual services up to centralized gateways that front large volumes of API traffic.
The project targets hybrid environments where microservices, serverless functions and legacy applications sit behind the same entry point. It supports route delegation and composable policies so that multiple teams can define their own APIs within a shared gateway. It is a CNCF sandbox project under the Apache-2.0 license.
kgateway was originally launched as Gloo in 2018. Its AI and agentic features were moved to the agentgateway project starting with version 2.3.0, so kgateway now focuses on being an Envoy-based API gateway.
Key features
- 01Implements the Kubernetes Gateway API on top of Envoy.
- 02Applies authentication, authorization and rate limiting policies in one place.
- 03Supports route delegation so multiple teams can manage their own routes.
- 04Routes to microservices, serverless functions and legacy applications.
- 05Scales from lightweight per-service gateways to centralized deployments.
Use cases
- Exposing and governing APIs for microservices on Kubernetes.
- Gradually migrating legacy applications behind a single gateway.
- Giving multiple teams separate ownership of routes and policies in a shared gateway.
Quick start
- 1
Read the docs and install kgateway on a Kubernetes cluster
- 2
Join the community Slack for help
Things to know
- The README does not describe a simple local install; it expects a Kubernetes environment.
- The README does not state a stable release status beyond calling it battle-tested.
Topics
FAQ
- What is kgateway?
- A Kubernetes-native API gateway implementing the Gateway API on top of Envoy, with support for AI gateway use cases. kgateway is a control plane that implements the Kubernetes Gateway API for the Envoy proxy. It lets teams expose APIs and apply policies such as authentication, authorization and rate limiting from one place. Its control plane is designed to scale from lightweight gateways between individual services up to centralized gateways that front large volumes of API traffic.
- Is kgateway free to use? What license does it have?
- kgateway is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
- Is kgateway still maintained?
- Actively maintained. The last commit to kgateway was on Oct 21, 2026.
- What can I use kgateway for?
- Exposing and governing APIs for microservices on Kubernetes. Gradually migrating legacy applications behind a single gateway. Giving multiple teams separate ownership of routes and policies in a shared gateway.
- How do I install kgateway?
- Read the docs and install kgateway on a Kubernetes cluster Join the community Slack for help
- Where can I get kgateway?
- The source code and installation instructions are on GitHub: https://github.com/kgateway-dev/kgateway
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Kong is a cloud-native, platform-agnostic API, LLM and MCP gateway, extensible through plugins, for routing and securing service traffic.
A dynamic, high-performance API gateway built on NGINX and etcd, with plugins for routing, auth, rate limiting and AI/LLM traffic.
An open source proxy for AI agents that adds security, observability and governance to LLM, MCP tool and agent-to-agent traffic.
An open source control plane built on Envoy that gives apps one OpenAI-compatible API across hosted LLM providers, self-hosted inference and MCP servers.
Self-hosted PHP API gateway and management platform that turns databases and business logic into REST APIs, with MCP support for AI agents.