agentgateway vs NetScaler Ingress Controller
agentgateway
agentgateway.devNetScaler Ingress Controller
docs.netscaler.comSide by side
| Figure | agentgateway | NetScaler Ingress Controller |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · Kubernetes Ingress Controllers | 9.1 (#1) | 7.1 (#20) |
| Integrations | Official integration categories cover identity providers, AWS, Google Cloud, Azure, LLM providers, MCP, networking tools, agent frameworks and NetBird. | The documentation includes integration guidance for Prometheus and Grafana, cert-manager, HashiCorp Vault, ExternalDNS, and OpenShift. |
| Purpose | Agentgateway is an open-source HTTP and gRPC gateway for routing, securing, observing, and governing service, LLM, MCP, and agent-to-agent traffic. | The controller translates Kubernetes Ingress rules into configuration for NetScaler load balancers and routes traffic into Kubernetes clusters. |
| Support | The enterprise page lists partner-provided commercial support, including a Solo.io offer with 24×7 coverage, upstream collaboration, and best-practice guidance. | NetScaler support experts follow up on support tickets submitted through the Citrix support portal, and users can also ask the NetScaler community. |
Plans
In their own words
agentgateway
Agentgateway is a free, open-source HTTP and gRPC gateway for routing, securing, observing, and governing service, LLM, MCP, and agent-to-agent traffic. Its LLM gateway offers an OpenAI-compatible API for providers including OpenAI, Anthropic, Bedrock, Gemini, Vertex, and OSS Llama runs. Self-hosted inference routing supports vLLM, TGI, and Triton, with choices guided by latency, cost, and model. For MCP it supports server discovery, scoped tool calls, and audit trails; A2A routing connects runtimes such as LangChain, CrewAI, and ADK. Security features include JWT and OIDC, API keys, authorization policies, TLS and mTLS with certificate rotation, and rate limiting. Guardrails inspect MCP calls and responses for prompt injection and unsafe payloads, while prompt guards support checks and redaction. Observability includes OpenTelemetry, Prometheus token-usage histograms, Jaeger traces, and request logs with latency, token counts, and realized USD cost. It can run as a standalone binary, in Docker, or on Kubernetes. Commercial support is listed through a partner.
NetScaler Ingress Controller
NetScaler Ingress Controller has no write-up on Specifiction yet; its figures are above.