
Kong Gateway
Cloud-native API and LLM gateway with extensible plugins
44k stars 5.2k forks last commit first released Apache-2.0
Actively maintained
Last commit 4 Aug 2026.

Kong Gateway is a cloud-native, platform-agnostic gateway for managing API traffic at the edge of your services. It provides high-performance proxying, routing, and policy enforcement, and extends functionality through a large ecosystem of plugins.
Key Features
- Reverse proxy and routing for L7 traffic, with load balancing and active health checks
- Centralized authentication and authorization using plugins (for example JWT, OAuth 2.0, and ACL-based policies)
- Rate limiting, request/response transformations, and traffic controls via plugins
- Admin API for configuration and automation, plus support for declarative configuration (DB-less mode)
- Observability integrations and export of gateway telemetry via OpenTelemetry-compatible tooling
- Kubernetes-native operation via official ingress controller integration
Use Cases
- Secure and manage microservices APIs with a centralized gateway layer
- Standardize authentication, rate limiting, and request transformations across multiple services
- Operate an ingress/gateway layer for Kubernetes workloads with consistent policies
Limitations and Considerations
- Some capabilities advertised on the vendor site may be specific to enterprise or hosted offerings rather than the open-source edition
Kong Gateway is a strong fit for teams that need a scalable, extensible API gateway with broad plugin support and modern cloud-native deployment options. It helps centralize cross-cutting concerns like security, traffic management, and observability for API-driven systems.
Categories:
Tags:
Tech Stack:
Similar to Kong Gateway
Tyk Gateway
Open source API gateway for REST, GraphQL, gRPC, and TCP
Tyk Gateway is an open source, cloud-native API gateway for securing, managing, and scaling REST, GraphQL, gRPC, and TCP APIs with auth, rate limits, and policies.

KrakenD Community Edition
High-performance, stateless, declarative API gateway
Open-source API gateway for securing, aggregating, and transforming microservice APIs with a stateless, high-throughput Go-based runtime and declarative configuration.
OAuth2 Proxy
Reverse proxy and middleware for OAuth2/OIDC authentication
OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2/OIDC login and forwards authenticated user identity to upstream services.

Lura
High-performance API gateway framework with extensible middleware
Lura is a stateless, high-performance API gateway framework for building reverse proxies that aggregate, transform, and secure backend APIs via middleware and plugins.
g3proxy
Enterprise-oriented generic forward proxy and TCP/TLS stream proxy
High-performance Rust proxy supporting HTTP/SOCKS5 forwarding, transparent proxying, TLS MITM, ICAP integration, ACLs, auth, and observability features.

Logto
Authentication and authorization platform for apps and APIs
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.


