Skip to content
SPECIFICTION
Get listed

Envoy Gateway vs ngrok

Envoy Gateway

gateway.envoyproxy.io

ngrok

ngrok.com

Side by side

FigureEnvoy Gatewayngrok
Price fromFree$10/mo
Free planYesYes
Free trial—Yes
Open source——
Web—Yes
Windows—Yes
macOS—Yes
Linux—Yes
APIYesYes
Self-hostedYesYes
Plans published14
Spec score · Kubernetes Ingress Controllers7.9 (#9)8.7 (#3)
InstallationThe documentation provides installation paths using Helm, Argo CD, Flux CD, and Kubernetes YAML.Linux installation supports Apt, Snap and standalone binaries with no runtime dependencies.
IntegrationsThe project lists integrations and ecosystem projects including Envoy AI Gateway, Kuadrant, Knative, KServe, and KEDA.Official documentation lists SDKs for Python, Go, Node and Rust and integrations including Okta SSO, Microsoft Entra ID and Datadog.
ObservabilityThe project lists metrics, access logging, and distributed tracing as observability features.The platform logs configuration changes, authentication events and API calls and can stream events to SIEM systems.
TLSEnvoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during the TLS handshake.ngrok provisions HTTPS certificates automatically and supports end-to-end encryption where it does not terminate TLS.

Plans

Envoy Gateway

  • Envoy GatewayFree

Envoy Gateway pricing →

ngrok

  • FreeFree
  • Hobbyist$10 a month
  • Pay-as-you-go$20 a month
  • EnterprisePriced on request

ngrok pricing →

In their own words

Envoy Gateway

Envoy Gateway is a free, open-source application gateway for managing Envoy Proxy in standalone or Kubernetes-based deployments. It provisions and configures proxies through Kubernetes Gateway API resources, extending the API to expose Envoy features. Traffic management includes rate limiting, retries, circuit breaking, timeouts and failover. Security options include mTLS, JWT-based access control, OIDC integration and API-key authorization; listed authentication methods also include Basic Auth and external authorization. Envoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during a TLS handshake. Metrics, access logging and distributed tracing are among its observability features. Installation options include Helm, Argo CD, Flux CD and Kubernetes YAML, though the quickstart requires a Kubernetes cluster. The project lists HTTP, HTTPS, gRPC, TLS, TCP and UDP support. Integrations and ecosystem projects include Envoy AI Gateway, Kuadrant, Knative, KServe and KEDA. Community help is directed through Envoy Slack, GitHub discussions and issues, and community meetings. Documentation cautions that the latest release includes recent main-branch commits and might not be stable.

Visit gateway.envoyproxy.io

ngrok

ngrok is a cloud networking platform that secures, transforms, and routes traffic to services wherever they run. Its agent sends traffic through secure tunnels without requiring firewall changes. Traffic Policy uses CEL-based rules to route requests, authenticate them, apply rate limits or web application firewall controls, and reject them. Supported traffic includes HTTP, TLS, and TCP, including WebSockets, gRPC, SSH, Postgres, MQTT, and Minecraft. The Integrations Hub offers integrations and guides for areas such as SSO, databases, Kubernetes, OAuth, webhooks, and web servers. ngrok also verifies webhook signatures for more than 70 providers, including Stripe, GitHub, Twilio, Slack, and Shopify. The free plan includes $5 one-time usage, up to 3 online endpoints, up to 1GB data transfer, up to 20k HTTP/S requests, and one team member. Paid access starts at $10/mo. On Hobbyist, endpoints stop working when usage credit runs out, until the billing cycle ends and credit resets. ngrok lists region pinning across the United States, Europe, Asia Pacific, Australia, India, Japan, and South America.

Visit ngrok.com