BFE Ingress Controller vs Kusk Gateway

BFE Ingress Controller is an open-source Layer 7 load balancer derived from Baidu’s proprietary Baidu Front End. It is self-hosted and supports Linux, macOS, Windows, and API use. BFE handles HTTP, HTTPS, SPDY, HTTP/2, WebSocket, TLS, gRPC, and FastCGI traffic; HTTP/3 is planned. Operators define content-based routing rules with a domain-specific language. Traffic features include global and distributed load balancing, zone-aware balancing, resilience to zone-level failures, and overload protection. Each tenant has an isolated configuration that is not visible to other tenants. A built-in plugin framework supports extensions for traffic management, security, and observability. For operations, BFE provides subsystem metrics, troubleshooting and analysis logs, and distributed tracing. The project lists integrations with mainstream Layer 4 load balancers and ecosystem projects such as Kubernetes, Prometheus, Jaeger, and Fluentd. It is licensed under Apache 2.0 and is a CNCF sandbox project. Documentation covers installation from source and through binary, Go, Snap, and Docker paths. The open-source plan is free.

Kusk Gateway is a Kubernetes API gateway powered by Envoy, with native OpenAPI support. It uses OpenAPI definitions to configure a cluster's Ingress Controller, making it relevant to teams following an OpenAPI-first workflow for REST APIs. It can mock API responses for prototyping and automatically validate requests and responses. Teams can set request timeouts and CORS without coding, and adjust headers, CORS, limits, and quality of service globally or for individual paths.

An open-source dashboard supports API deployment and management, specification editing and validation, and API testing. The maker says an API can be published by adding an annotation to a service deployment, without additional configuration or DevOps support. Kusk can be installed on Mac, Linux, or Windows and is self-hosted. The project is 100% open source under the MIT License, with rate limiting and authentication policies listed. The maker presents it for teams building modern REST APIs on Kubernetes.