Higress vs kgateway
Higress
higress.io
kgateway
kgateway.devSide by side
| Figure | Higress | kgateway |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 1 |
| Spec score · Kubernetes Ingress Controllers | 8.6 (#4) | 7.0 (#22) |
| Security | Listed protections include prompt-attack detection, sensitive-content identification, data privacy protection, and output-content filtering. | Documented security features include TLS and mTLS, external authentication, API keys, JWT, OAuth2/OIDC, IP access control, and rate limiting. |
| Support | The community edition includes community support and documentation; the dedicated commercial edition lists ticket, DingTalk group, and offline support. | Solo offers free community support through its Gloo Community and public GitHub repository. |
Plans
Higress
- Alibaba Cloud AI Gateway Serverless StandardPriced on request
- Higress CommunityFree
- Higress Community EditionFree
- Alibaba Cloud AI Gateway Serverless EnterprisePriced on request
- Feitian Exclusive EditionPriced on request
In their own words
Higress
Higress is an open-source API gateway for governing AI services and cloud-native traffic, built on Istio and Envoy. Its AI Gateway provides centralized access to model APIs and MCP servers, with unified routing, protocol conversion, load balancing, and fallback. Higress says it supports more than 100 mainstream large language models. It can convert HTTP to MCP and proxy native MCP services. Traffic controls include token-based quotas and rate limits, API key pool rotation, and consumer authentication. Caching can reuse inference results precisely or semantically to reduce token use and latency for similar or repeated questions. Listed security measures cover prompt attacks, sensitive content, data privacy, and output filtering. The wider API gateway combines traffic, microservice, and security gateway functions with service exposure and API lifecycle management. It supports HTTP, HTTP2, HTTPS, GRPC, GRPCS, TCP, and Dubbo, along with Kubernetes Ingress and Gateway API. Custom Wasm plugins can be written in Go, Rust, or JavaScript, with sandbox isolation and hot updates. The self-hosted Community Edition is free; the site also lists a managed Alibaba Cloud plan billed by actual usage, starting at ¥0.