Airlock Microgateway vs ngrok

Airlock Microgateway is a Kubernetes-native Web Application and API Protection solution that also serves as an identity-aware proxy. It runs as a container in Kubernetes clusters and is configured through GitOps. The gateway supports Kubernetes Gateway API and is positioned as an upgrade from Ingress NGINX. It validates identities through OIDC, JWT, token exchange or mutual TLS, then applies role- and path-based access control. Protection features include deny rules, CSRF protection, OpenAPI specification enforcement and GraphQL validation against OWASP Top 10 threats. Its Envoy-based reverse proxy supports routing, TLS termination, client certificate authentication and caller IP forwarding. Integrations include Cilium and Istio, and the product is certified for Red Hat OpenShift. Prometheus and Grafana provide monitoring, while logs use ECS format. Deployment can be multi-cloud or hybrid-cloud, but remains self-hosted. Community Edition is free for small environments or local development, with enforced throughput and six-month license validity. The free evaluation license specifies 5 requests per second, at most two replicas per gateway and six-month validity. Premium Edition has no listed price and is intended for enterprise setups.

ngrok is a cloud networking platform that secures, transforms, and routes traffic to services wherever they run. Its agent sends traffic through secure tunnels without requiring firewall changes. Traffic Policy uses CEL-based rules to route requests, authenticate them, apply rate limits or web application firewall controls, and reject them. Supported traffic includes HTTP, TLS, and TCP, including WebSockets, gRPC, SSH, Postgres, MQTT, and Minecraft. The Integrations Hub offers integrations and guides for areas such as SSO, databases, Kubernetes, OAuth, webhooks, and web servers. ngrok also verifies webhook signatures for more than 70 providers, including Stripe, GitHub, Twilio, Slack, and Shopify. The free plan includes $5 one-time usage, up to 3 online endpoints, up to 1GB data transfer, up to 20k HTTP/S requests, and one team member. Paid access starts at $10/mo. On Hobbyist, endpoints stop working when usage credit runs out, until the billing cycle ends and credit resets. ngrok lists region pinning across the United States, Europe, Asia Pacific, Australia, India, Japan, and South America.