Envoy Gateway vs Kusk Gateway

Envoy Gateway is a free, open-source application gateway for managing Envoy Proxy in standalone or Kubernetes-based deployments. It provisions and configures proxies through Kubernetes Gateway API resources, extending the API to expose Envoy features. Traffic management includes rate limiting, retries, circuit breaking, timeouts and failover. Security options include mTLS, JWT-based access control, OIDC integration and API-key authorization; listed authentication methods also include Basic Auth and external authorization. Envoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during a TLS handshake. Metrics, access logging and distributed tracing are among its observability features. Installation options include Helm, Argo CD, Flux CD and Kubernetes YAML, though the quickstart requires a Kubernetes cluster. The project lists HTTP, HTTPS, gRPC, TLS, TCP and UDP support. Integrations and ecosystem projects include Envoy AI Gateway, Kuadrant, Knative, KServe and KEDA. Community help is directed through Envoy Slack, GitHub discussions and issues, and community meetings. Documentation cautions that the latest release includes recent main-branch commits and might not be stable.

Kusk Gateway is a Kubernetes API gateway powered by Envoy, with native OpenAPI support. It uses OpenAPI definitions to configure a cluster's Ingress Controller, making it relevant to teams following an OpenAPI-first workflow for REST APIs. It can mock API responses for prototyping and automatically validate requests and responses. Teams can set request timeouts and CORS without coding, and adjust headers, CORS, limits, and quality of service globally or for individual paths.

An open-source dashboard supports API deployment and management, specification editing and validation, and API testing. The maker says an API can be published by adding an annotation to a service deployment, without additional configuration or DevOps support. Kusk can be installed on Mac, Linux, or Windows and is self-hosted. The project is 100% open source under the MIT License, with rate limiting and authentication policies listed. The maker presents it for teams building modern REST APIs on Kubernetes.