Skip to content
SPECIFICTION
Get listed

Kusk Gateway

kusk.io

Free plan Open source WebWindowsmacOSLinuxAPISelf-hosted
Visit kusk.io
Spec score 8.5 #5 of 28 in Kubernetes Ingress Controllers

What it is

Kusk Gateway is a Kubernetes API gateway powered by Envoy, with native OpenAPI support. It uses OpenAPI definitions to configure a cluster's Ingress Controller, making it relevant to teams following an OpenAPI-first workflow for REST APIs. It can mock API responses for prototyping and automatically validate requests and responses. Teams can set request timeouts and CORS without coding, and adjust headers, CORS, limits, and quality of service globally or for individual paths.

An open-source dashboard supports API deployment and management, specification editing and validation, and API testing. The maker says an API can be published by adding an annotation to a service deployment, without additional configuration or DevOps support. Kusk can be installed on Mac, Linux, or Windows and is self-hosted. The project is 100% open source under the MIT License, with rate limiting and authentication policies listed. The maker presents it for teams building modern REST APIs on Kubernetes.

Spec sheet

What it does
Kusk is a Kubernetes API gateway powered by Envoy with native OpenAPI support for configuring cluster ingress.Read 15 Oct 2026 · docs.kusk.io
Product
Kusk is a Kubernetes API gateway powered by Envoy with native OpenAPI support.Read 5 Oct 2026 · docs.kusk.io
Intended users
The maker presents Kusk for teams building modern REST APIs on Kubernetes and following an OpenAPI-first APIOps workflow.Read 5 Oct 2026 · kusk.io
Deployment
Kusk says APIs can be published by adding an annotation to a service deployment, without additional configuration or DevOps support.Read 5 Oct 2026 · kusk.io
License
Kusk is 100% open source under the MIT License.Read 5 Oct 2026 · kusk.io
API management
The Kusk site describes a dashboard for deploying and managing APIs, editing and validating specifications, and testing APIs.Read 5 Oct 2026 · kusk.io
API workflow
Kusk uses OpenAPI definitions to configure the Ingress Controller of Kubernetes clusters.Read 5 Oct 2026 · docs.kusk.io
Authentication
Documented authentication modes include JWT, OAuth2/OIDC, custom authorization and Cloudentity.Read 15 Oct 2026 · docs.kusk.io
CLI installation methods
Installation options include Homebrew, a shell script, Debian/Ubuntu APT, Windows Chocolatey, release binaries and go install.Read 15 Oct 2026 · docs.kusk.io
CLI platforms
The Kusk CLI is distributed for macOS, Linux and Windows.Read 15 Oct 2026 · docs.kusk.io
Community
Kusk's documentation links to a Discord community and GitHub project.Read 5 Oct 2026 · docs.kusk.io
Community support
The project directs users to GitHub contribution workflows and a Discord community for feedback.Read 15 Oct 2026 · github.com
Company ownership event
InfraCloud reported on July 7, 2022 that Kubeshop acquired a majority stake in BotKube and was backed by Insight Partners and Ratmir Timashev.Read 15 Oct 2026 · infracloud.io
Company profile
Crunchbase describes Kubeshop as a private Wilmington, Delaware company with 11–50 employees and Dmitry Fonarev as CEO and co-founder.Read 15 Oct 2026 · crunchbase.com
CORS and timeouts
CORS, request timeouts, retries and idle timeouts can be configured through the x-kusk OpenAPI extension.Read 15 Oct 2026 · docs.kusk.io
Dashboard
The browser dashboard inspects APIs, Envoy Fleets and Static Routes and embeds Swagger UI for ad-hoc API requests.Read 15 Oct 2026 · docs.kusk.io
Development status
The repository README says Kubeshop has paused active development and support, while still considering incoming pull requests.Read 15 Oct 2026 · github.com
Documentation depth
Documentation includes getting-started tutorials, CLI reference, dashboard reference, Kubernetes resources, guides and a detailed OpenAPI extension reference.Read 15 Oct 2026 · docs.kusk.io
Gateway components
The installation can include Gateway Manager, Envoy Fleets, a REST API server and a dashboard.Read 15 Oct 2026 · docs.kusk.io
Independent project feedback
The GitHub issue tracker records an unassigned request for API logs and analytics, indicating a documented observability gap at that time.Read 15 Oct 2026 · github.com
Installation model
Kusk installs into Kubernetes with Helm through the kusk cluster install command.Read 15 Oct 2026 · docs.kusk.io
Licence
Kusk is presented as 100% open source under the MIT License.Read 15 Oct 2026 · kusk.io
Limit: analytics
A GitHub feature request asks for an API endpoint providing API logs and analytics; the issue remains open and marked for investigation.Read 15 Oct 2026 · github.com
Maker headquarters
The privacy policy gives the company address as 20 Brynwood Ln, Greenwich, Connecticut, United States.Read 15 Oct 2026 · kubeshop.io
Maker leadership
Kubeshop lists Dmitry Fonarev as CEO, Ole Lensmar as CTO and Joon Park as CFO/CMO.Read 15 Oct 2026 · kubeshop.io
Maker legal identity
Kubeshop operates as Kubernetes Innovation Labs LLC according to its privacy policy.Read 15 Oct 2026 · kubeshop.io
Mocking
Kusk can mock API responses for rapid prototyping before an API is built.Read 5 Oct 2026 · docs.kusk.io
OpenAPI configuration
OpenAPI definitions control API routing and operational behavior in Kubernetes.Read 15 Oct 2026 · docs.kusk.io
Path controls
Kusk can analyze requests and change headers, CORS, limits, and QoS globally or for individual paths.Read 5 Oct 2026 · kusk.io
Policies
Kusk can configure request timeouts and CORS without coding.Read 5 Oct 2026 · docs.kusk.io
Public REST API
Kusk Gateway API exposes a REST interface for querying deployed APIs, Static Routes and Envoy Fleets.Read 15 Oct 2026 · docs.kusk.io
Rate limiting
Rate limits can be set globally or for individual paths and operations using requests-per-unit settings.Read 15 Oct 2026 · docs.kusk.io
Repository activity
The public GitHub repository lists 279 stars, 25 forks, 106 issues and 456 commits.Read 15 Oct 2026 · github.com
Request validation
Kusk supports automatic request and response validation at the gateway.Read 15 Oct 2026 · docs.kusk.io
Response mocking
The gateway can return mocked responses from examples in an OpenAPI definition before backend services exist.Read 15 Oct 2026 · docs.kusk.io
Security privacy statement
Kubeshop says it uses organizational and technical safeguards but does not guarantee that transmissions or storage can be completely secure.Read 15 Oct 2026 · kubeshop.io
Self-hosting
The product must run inside a Kubernetes cluster and can be installed locally or on a remote cluster.Read 15 Oct 2026 · docs.kusk.io
Static web applications
StaticRoute resources let teams expose frontend applications running in Kubernetes services.Read 15 Oct 2026 · docs.kusk.io
Supported installs
The download page says Kusk Gateway can be installed for Mac, Linux, or Windows.Read 5 Oct 2026 · kusk.io
System requirements
The documented CLI prerequisites are kubectl and Docker.Read 15 Oct 2026 · docs.kusk.io
Underlying proxy
Kusk is based on Envoy Proxy, described by the maker as an open-source edge and service proxy for cloud-native applications.Read 5 Oct 2026 · kusk.io
Validation
Kusk supports automatic request and response validation to protect endpoints.Read 5 Oct 2026 · docs.kusk.io
WebSockets
The OpenAPI extension has a websocket option for upgrading HTTP requests into WebSocket tunnels.Read 15 Oct 2026 · docs.kusk.io

Plans and prices

Free Free MIT-licensed open-source gateway; self-hosted Kubernetes deployment Read 15 Oct 2026 · kusk.io
Kusk Gateway Free 100% open source · MIT License Read 5 Oct 2026 · kusk.io

Every Kusk Gateway plan and price →

Strong points and limits

Strong points

  • Native OpenAPI support configures Kubernetes Ingress
  • Can mock API responses before an API is built
  • Automatic request and response validation
  • Open-source dashboard supports API testing and management

Limits

  • Requires Kubernetes clusters
  • Deployment model is self-hosted

Who it suits

Kusk Gateway suits teams building REST APIs on Kubernetes and using an OpenAPI-first workflow. It is intended for teams that want a self-hosted gateway and dashboard.

Kusk Gateway in depth

Read the full write-up

Overview

Kusk Gateway is a free, MIT-licensed gateway built on Envoy and deployed with Kubernetes. It is a strong fit for teams that already define REST APIs in OpenAPI and want traffic controls and API management alongside their cluster deployments. Its main trade-off is that this Kubernetes-centered workflow is not a natural match for teams seeking a standalone, general-purpose gateway.

Key features

OpenAPI definitions configure the Kubernetes Ingress Controller, and Kusk’s dashboard can be used to edit and validate specifications and test APIs. Keeping those tasks in one workflow should suit teams that treat the specification as the starting point for API delivery; teams without an OpenAPI-first process will have less reason to choose Kusk.

Mock responses let teams prototype before an API is implemented. Automatic request and response validation adds protection at the endpoint, while timeouts and CORS policies can be configured without coding. Kusk can also inspect requests and apply header, CORS, limit, and QoS changes globally or by path. Rate limiting and authentication policies are supported, giving teams several ways to shape traffic without leaving the gateway workflow.

The open-source dashboard centralizes API management. Kusk says publishing an API can be as simple as adding an annotation to a service deployment, without extra configuration or DevOps support. That is appealing for teams already managing services in Kubernetes, but it does not change the product’s dependence on that environment. The gateway is based on Envoy Proxy, an open-source edge and service proxy for cloud-native applications.

Pricing

Kusk Gateway costs free. The plan is 100% open source under the MIT License, with self-hosted deployment. There is no paid tier or quota stated for the plan, so it is a straightforward option for teams willing to operate their own gateway rather than pay for a hosted service. The license and free price remove a software charge, not the work of running it in Kubernetes.

Platforms

Kusk is a self-hosted Kubernetes gateway, with API and web access reflected in its platform coverage. The download page also supports installation on Mac, Linux, and Windows. The breadth of desktop platforms does not make the gateway independent of its Kubernetes deployment model.

Who it's for

Kusk is best suited to teams building modern REST APIs on Kubernetes with an OpenAPI-first APIOps workflow. It makes less sense for teams that do not use Kubernetes or do not want API specifications to drive ingress configuration. Documentation points users to both a Discord community and the GitHub project.

Pros and cons

Pros

OpenAPI drives ingress configuration: API definitions can stay central to design and deployment for teams already working specification-first.

Useful endpoint and traffic controls: Validation, mocking, timeouts, CORS, rate limiting, authentication policies, and path-level controls cover common gateway needs.

Open-source and free: The MIT-licensed gateway can be self-hosted without a plan fee.

Cons

Kubernetes is central to the workflow: Teams outside Kubernetes are unlikely to benefit from its main deployment model.

Self-hosting remains the operator’s responsibility: A zero-price license does not provide a hosted gateway.

Alternatives

For a broader comparison of ingress options, see Kubernetes Ingress Controllers.

ngrok is worth considering when a freemium service with a free trial and online endpoints better fits the use case; its Free plan includes up to 3 online endpoints and up to 1GB data transfer, with $5 one-time usage.

LiteSpeed Ingress Controller may suit teams considering a paid ingress product: its Web ADC Small plan is $65 a month for 1 worker, while Web ADC Medium is $130 a month for 2 workers.

Traefik Proxy is another free, open-source ingress controller, reverse proxy, and load balancer with services auto-discovery.

Airlock Microgateway offers a free Community Edition for small environments or local development, with enforced throughput and a 6-month license validity.

BFE Ingress Controller is a free, Apache 2.0-licensed option with no plan limits stated.

agentgateway is a free open-source gateway available as a binary, Docker image, or Kubernetes deployment.

Higress has a free self-hosted Community Edition with community support and documentation; users handle stability and performance.

Contour is a free open-source Kubernetes ingress controller with community support.

Verdict

Choose Kusk Gateway if your team runs Kubernetes, builds REST APIs from OpenAPI specifications, and wants validation, mocking, and traffic policies in a free, self-hosted package. Its clearest reason to choose is that the API specification can shape ingress configuration and management in the same workflow. Look elsewhere if you need a gateway that is not tied to Kubernetes or do not want to operate the service yourself.

Verdict

Kusk Gateway brings OpenAPI configuration, validation, mocking, and API management into a self-hosted Kubernetes gateway. Its stated focus is teams building REST APIs with an OpenAPI-first workflow.

Where Specifiction places it

Alternatives to Kusk GatewayAll alternatives →