Envoy Gateway vs WSO2 Choreo Connect

Envoy Gateway is a free, open-source application gateway for managing Envoy Proxy in standalone or Kubernetes-based deployments. It provisions and configures proxies through Kubernetes Gateway API resources, extending the API to expose Envoy features. Traffic management includes rate limiting, retries, circuit breaking, timeouts and failover. Security options include mTLS, JWT-based access control, OIDC integration and API-key authorization; listed authentication methods also include Basic Auth and external authorization. Envoy Gateway supports TLS termination and can attach an OCSP response from a Gateway certificate Secret during a TLS handshake. Metrics, access logging and distributed tracing are among its observability features. Installation options include Helm, Argo CD, Flux CD and Kubernetes YAML, though the quickstart requires a Kubernetes cluster. The project lists HTTP, HTTPS, gRPC, TLS, TCP and UDP support. Integrations and ecosystem projects include Envoy AI Gateway, Kuadrant, Knative, KServe and KEDA. Community help is directed through Envoy Slack, GitHub discussions and issues, and community meetings. Documentation cautions that the latest release includes recent main-branch commits and might not be stable.

WSO2 Choreo Connect is an open-source, cloud-native API gateway with Kubernetes support. It can run in cloud, on-premises, or hybrid environments that support Kubernetes. The architecture uses a Router, Enforcer, and Adapter, with Envoy Proxy handling traffic routing. The gateway supports REST and WebSocket APIs, listed as HTTP/1.1 and WebSocket, and provides API security, rate limiting, analytics, message mediation, and lifecycle management through WSO2 API Manager or standalone deployment. Authentication options include OAuth2 JWT tokens and API keys, with scope-based authorization. Named integrations and observability tools include WSO2 API Manager, Consul, Jaeger, Zipkin, and Azure Application Insights. Teams can publish analytics data, add custom filters, and build request or response interceptor microservices. Documentation points to GitHub releases and a Quick Start Guide for downloads. The Community plan costs nothing with GitHub community support.