Envoy Gateway vs LiteSpeed Ingress Controller
Envoy Gateway
gateway.envoyproxy.ioLiteSpeed Ingress Controller
litespeedtech.comSide by side
| Figure | Envoy Gateway | LiteSpeed Ingress Controller |
|---|---|---|
| Price from | Free | $59.58/mo |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 22 |
| Spec score · Kubernetes Ingress Controllers | 7.9 (#9) | 8.1 (#7) |
| Deployment | The project can manage Envoy Proxy as a standalone or Kubernetes-based application gateway. | It is a 100% software solution that can operate on private dedicated hardware, hosted environments, or the cloud. |
| Security | Its security controls include mTLS, JWT-based access control, OIDC integration, and API-key authorization. | It provides a Web Application Firewall implementation that can use familiar ModSecurity rules and templates. |
Plans
LiteSpeed Ingress Controller
- Web ADC Small$65 a month
- Web ADC Medium$130 a month
- Web ADC Large$260 a month
- Web ADC Ultimate$520 a month
- Web ADC Small$715 a year
- Web ADC Medium$1,430 a year
- Web ADC Large$2,860 a year
- Web ADC Ultimate$5,720 a year
- Web ADC Small$1,299, paid once
- Web ADC Small$65 a month
In their own words
Envoy Gateway
Envoy Gateway is a free, open-source application gateway for managing Envoy Proxy in standalone or Kubernetes-based deployments. It provisions and configures proxies through Kubernetes Gateway API resources, extending the API to expose Envoy features. Traffic management includes rate limiting, retries, circuit breaking, timeouts and failover. Security options include mTLS, JWT-based access control, OIDC integration and API-key authorization; listed authentication methods also include Basic Auth and external authorization. Envoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during a TLS handshake. Metrics, access logging and distributed tracing are among its observability features. Installation options include Helm, Argo CD, Flux CD and Kubernetes YAML, though the quickstart requires a Kubernetes cluster. The project lists HTTP, HTTPS, gRPC, TLS, TCP and UDP support. Integrations and ecosystem projects include Envoy AI Gateway, Kuadrant, Knative, KServe and KEDA. Community help is directed through Envoy Slack, GitHub discussions and issues, and community meetings. Documentation cautions that the latest release includes recent main-branch commits and might not be stable.
LiteSpeed Ingress Controller
LiteSpeed Ingress Controller is the Kubernetes ingress component in LiteSpeed Web ADC, a software HTTP load balancer and application delivery controller. The solution can run on private dedicated hardware, hosted environments, or cloud infrastructure. The controller supports the Kubernetes Gateway API and installs through Helm, using native ingress without sidecars or Kubernetes modifications. It supports HTTP versions including HTTP/2 and HTTP/3. Built-in LiteSpeed Cache is intended to accelerate web applications, and its Web Application Firewall can use ModSecurity rules and templates. ZeroConf lets Kubernetes configuration changes take effect without restarting the load balancer. Realtime statistics and controller commands are available in the Web ADC WebAdmin Console. Web ADC works with all web servers, though LiteSpeed Web Server is preferred for the backend. The default LoadBalancer installation exposes the service to the internet and load-balances all Ingress definitions; the documentation recommends Kubernetes cert-manager to manage TLS secrets for HTTPS. Helm installation includes full 24-7 support. Listed Web ADC plans are billed monthly: Small is $65 a month for one worker, Medium $130 a month for two workers, Large $260 a month for four workers, and Ultimate $520 a month with configurable workers.