Envoy Gateway vs Google Cloud Endpoints

Envoy Gateway is a free, open-source application gateway for managing Envoy Proxy in standalone or Kubernetes-based deployments. It provisions and configures proxies through Kubernetes Gateway API resources, extending the API to expose Envoy features. Traffic management includes rate limiting, retries, circuit breaking, timeouts and failover. Security options include mTLS, JWT-based access control, OIDC integration and API-key authorization; listed authentication methods also include Basic Auth and external authorization. Envoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during a TLS handshake. Metrics, access logging and distributed tracing are among its observability features. Installation options include Helm, Argo CD, Flux CD and Kubernetes YAML, though the quickstart requires a Kubernetes cluster. The project lists HTTP, HTTPS, gRPC, TLS, TCP and UDP support. Integrations and ecosystem projects include Envoy AI Gateway, Kuadrant, Knative, KServe and KEDA. Community help is directed through Envoy Slack, GitHub discussions and issues, and community meetings. Documentation cautions that the latest release includes recent main-branch commits and might not be stable.

Google Cloud Endpoints manages APIs with tools for securing access, monitoring activity, analyzing usage, and setting quotas. It supports API descriptions written in OpenAPI 2.0 or 3.x, as well as gRPC, and provides management through ESP or ESPv2. Documented deployment backends include Google Kubernetes Engine, Compute Engine, Kubernetes, App Engine, Cloud Run, Cloud Run functions, and Knative serving; proxy availability varies by backend. Endpoints is optimized for Docker and can host an API wherever Docker runs, provided it has internet access to Google Cloud. API keys can be required and validated to identify a Google Cloud project for quotas, billing, and monitoring. Documented user authentication options include Firebase Authentication and Auth0, using JWT validation by ESP. Logs and metrics are viewable in the Google Cloud console. Pricing depends on API calls and Service Control calls: the Free usage tier is free for 1,999,999 calls; Standard is $3 a month for 2,000,000 to 1,000,000,000; and High-volume is $1.50 a month for 1,000,000,000 and above. Listed rates are per million API calls.