kgateway

kgateway has been growing steadily under the Cloud Native Computing Foundation (CNCF). 🎉 The major inflection point came when we were accepted into CNCF earlier this year, alongside all the AI innovation (serving as inference, LLM, MCP and agent gateway) happening in the project. 🚀

Chatting with a user about kgateway today and wanted to clear up a few myths about kgateway: - kgateway focuses on the control plane ⚙️ that implements the Kubernetes Gateway API for both microservices and AI workloads 🤖. - The control plane translates your Kubernetes Gateway API resources into configuration the underlying proxy can understand 🔁. - The proxy layer is handled by Envoy (for microservices) or agentgateway (for AI workloads) 🚀. Love both Envoy and agentgateway 💜.

Read my First Published Blog on Cloud Native Computing Foundation (CNCF) 🎉: kgateway released their latest version v2.1 with a more Simpler and Efficient config architecture. Being a next Gen API Gateway, it's easy integration with an AI compatible Data Plane - agentgateway, Opens up next level of capabilities for Network, AI, Cloud & Platform Engineers. Really excited to see how this integration helps Platform & Automation teams for their success & contribute more to kgateway & agentgateway! Congrats to kgateway & Team for the latest v2.1 Release! Thanks to other contributors Nadine Spies, Michael Levan and my Mentor Nina Polshakova, Lin Sun and the team at solo.io https://lnkd.in/dm6A7haU

In today’s kgateway community meeting, we discussed several key features (API Key, Oauth2, OIDC) we plan to deliver soon ✨ — some of which are already implemented! ✅ These updates are based on the most commonly requested enhancements from our users. It was great to hear Mateusz Loskot mentioned on the call that he chose kgateway because the community listens 💬 and is open to contributions 🤝!

🚨 [Just blogged with Michael Levan] Ingress NGINX Retirement: What You Need to Know We shared our thoughts on some key topics: - Why Gateway API - Advantages of Gateway API - Envoy Proxy - Gateway API Benchmark - Inference and Agentic AI Are there any important criteria we might have missed when evaluating your next Gateway? We’d love to hear what matters most to you! 💬 https://lnkd.in/gAFnkFCY

🚀 Back on popular demand! Today at noon ET (in just 2 hours), Christian Posta and I are teaming up to walk you through MCP, from zero all the way to production. Come join us for some fun and hands-on learning! 🎉 Grab your spot: https://lnkd.in/ezQfw-iP

NGINX Ingress is officially being retired in March 2026, and the clock is ticking. In our latest blog, Michael Levan and Lin Sun break down what this retirement means for production teams, and how you can prepare now to avoid operational and security risks. 👉 Read the full blog: https://lnkd.in/gYzkPEid #kgateway #Kubernetes #GatewayAPI #Ingress #K8sNetworking #CloudNative #OpenSource

Yesterday at #KubeConNA Day 1 keynote, Chris Aniszczyk and Jonathan Bryce highlighted the newly released Cloud Native Computing Foundation (CNCF) Tech Radar report. Today I heard Ricardo Rocha presented it as well. Very cool! Highly recommend checking it out. Sneak preview 👀: excited to see a few of my favorite projects featured! Link in the comments 👇

Here's a demo on Secure Egress Traffic with kgateway & Ambient Mesh integration while managing Kyverno via exAuth! Ever wondered how can we use kgateway as an Egress Gateway to Securely integrate our Ambient Mesh functionalities while using Kyverno's CEL Auth and Istio's Authorization Policies to resist: - System vulnerabilities - Unwanted API calls and data exfiltration - Unauthorized data leakage through external APIs - Blind spot attacks outside the mesh - Configuration drift in security policies In this stack we've set up a new standard for Egress security with kgateway as - The L7 Control Point for Ambient Mesh kgateway can be used as a pluggable Layer 7 Waypoint for Istio Ambient, delivering efficiency and control traditional sidecars can’t match. It works with Zero Trust flow for maximum security: - For L4 Security: Ambient’s Ztunnel can secures traffic with mTLS up to the kGateway. - For L7 Security (ExtAuth): kGateway can use Ambient Mesh to enforce the Waypoint Proxy or as in-demo can delegates the decision to the Kyverno Authz Server. This enforces dynamic, application-level checks (like required headers) before the request ever leaves the cluster. This is surgical precision control. In this demo we've Built-in Resiliency & Governance which isn't just security but an operational stability: Custom Retries: Our TrafficPolicy automatically attempts retries (attempts: 3) on upstream failures (503/504), as proven in the demo by inspecting the Envoy logs (URX, UF). This prevents intermittent issues from cascading. Gateway API Governance: Egress rules, retries, and ExtAuth points are defined in clean, auditable Gateway API resources. We even use a Kyverno ClusterPolicy to enforce configuration governance on the Istio ServiceEntry itself! https://lnkd.in/dkfExeFb Many more to come under the mentorship period of kgateway under my mentors Nina Polshakova and Lin Sun !! @solo.io, @agentgateway, @kagent, @Istio, @Kyverno @Cloud Native Computing Foundation (CNCF) @The Linux Foundation #Kubernetes #Istio #ServiceMesh #kGateway #AmbientMesh #Kyverno #ZeroTrust #CloudNative #EgressControl