Gloo Gateway by Solo.io is a fast, Kubernetes-native API gateway designed to deliver a full lifecycle security strategy for cloud-native environments. It acts as an API gateway and ingress controller, managing authentication, authorization, and access control across clusters. Gloo Gateway supports various authentication methods like JWT validation and OAuth integration, enabling secure user and service authentication. It provides centralized identity management and access control, allowing users to set access policies based on user attributes, and integrates with external identity providers to extend authentication capabilities. Gloo Gateway supports mutual TLS encryption for secure communication between clients and services, enhancing data protection in Kubernetes environments. It is lightweight, highly scalable, and secure, with powerful API management capabilities. Gloo Gateway can handle 353 million requests per day on a single CPU, with each CPU managing 4,000 requests per second. It offers security features like service access control, web application firewalls, FIPS compliance, rate limiting, and enterprise identity integrations. Gloo Gateway integrates with existing GitOps and progressive delivery pipelines for infrastructure and applications. It includes features like Envoy Proxy, Kubernetes Gateway API, Gloo Gateway OSS, Kubernetes-native CRDs, basic routing (HTTP, TLS, TCP, UDP, gRPC), HTTP redirects and rewrites, HTTP header modification, HTTP traffic splitting, multi-namespace support, base rate limiting, base authentication/authorization, telemetry suite for operational insights, transformations, and external authorization (Basic Passthrough, OAuth, API Keys, OPA, LDAP, etc.). It also supports advanced rate limiting, AWS Lambda, web application firewall, developer portal, cloud-native API management, GraphQL support, and distributed gateways. Gloo Gateway improves performance, scalability, and security with cloud-native API management, handling heavy traffic payloads and implementing best practices for large-scale API gateway deployments. It serves over 7 billion API calls per day and reduces response times, enhancing application performance. Gloo Gateway replaces legacy gateways like NGINX with secure, Envoy-based advanced ingress, providing out-of-the-box authentication and monitoring metrics including latency, traffic, errors, and saturation.
