# Documentation > kgateway is a Kubernetes-native Gateway API implementation built on Envoy with AI gateway capabilities. For the full index see [llms.txt](/llms.txt). ## Kgateway (Envoy) - [Get started](https://kgateway.dev/docs/envoy/latest/quickstart.md): Get started with kgateway. Kgateway is a control plane that implements the Kubernetes Gateway API … - [FAQ](https://kgateway.dev/docs/envoy/latest/faqs.md): What is kgateway? Kgateway is a control plane that implements the Kubernetes Gateway API for both … ### About - [Overview](https://kgateway.dev/docs/envoy/latest/about/overview.md): Kgateway is a control plane that implements the Kubernetes Gateway API for both microservices and AI … - [Architecture](https://kgateway.dev/docs/envoy/latest/about/architecture.md): Learn more about the components that make up the kgateway control and data plane. These components … - [Deployment patterns](https://kgateway.dev/docs/envoy/latest/about/deployment-patterns.md): Learn how you can deploy gateway proxies to ensure proper traffic routing, security, and isolation … - [Custom resources](https://kgateway.dev/docs/envoy/latest/about/custom-resources.md): Learn about the custom resources that make up kgateway and how they interact with each other. Custom … - [Gateway proxies](https://kgateway.dev/docs/envoy/latest/about/proxies.md): Learn more about the gateway proxies that the kgateway control planeControl PlaneComponents that … #### Policies - [BackendConfigPolicy](https://kgateway.dev/docs/envoy/latest/about/policies/backendconfigpolicy.md): Use a BackendConfigPolicy resource to configure connection settings for a backend. Policy attachment … - [HTTPListenerPolicy](https://kgateway.dev/docs/envoy/latest/about/policies/httplistenerpolicy.md): warning The HTTPListenerPolicy is deprecated and will be removed in future releases. Move your … - [ListenerPolicy](https://kgateway.dev/docs/envoy/latest/about/policies/listenerpolicy.md): You can use a ListenerPolicy resource to attach policies to all gateway listeners. Policy attachment … - [TrafficPolicy](https://kgateway.dev/docs/envoy/latest/about/policies/trafficpolicy.md): Use a TrafficPolicy resource to attach policies to one, multiple, or all routes in an HTTPRoute … - [Global policy attachment](https://kgateway.dev/docs/envoy/latest/about/policies/global-attachment.md): By default, you must attach policies to resources that are in the same namespace. However, you might … - [Policy merging](https://kgateway.dev/docs/envoy/latest/about/policies/merging.md): Kgateway lets you define how policies are merged when they are applied to a parent and child … ### Install - [Helm](https://kgateway.dev/docs/envoy/latest/install/helm.md): In this installation guide, you install the kgateway control planeControl PlaneComponents that … - [ArgoCD](https://kgateway.dev/docs/envoy/latest/install/argocd.md): In this installation guide, you install kgateway in a Kubernetes cluster by using Argo CD. Argo CD … - [Sample HTTP app](https://kgateway.dev/docs/envoy/latest/install/sample-app.md): The httpbin app lets you test your API gateway by sending requests to it and receiving responses. … - [Advanced settings](https://kgateway.dev/docs/envoy/latest/install/advanced.md): You can update several installation settings in your Helm values file. For example, you can update … - [TLS encryption](https://kgateway.dev/docs/envoy/latest/install/tls.md): Enable server-side TLS encryption for the xDS gRPC server in the kgateway control plane. For more … ### Gateway setup - [Default proxy setup](https://kgateway.dev/docs/envoy/latest/setup/default.md): Learn about the different kgateway and Kubernetes resources that make up your gateway proxy … - [Set up a gateway](https://kgateway.dev/docs/envoy/latest/setup/gateway.md): Create an API gateway with an HTTP listener by using the Kubernetes Gateway API. Create a Gateway … - [HTTP/1.0 and HTTP/0.9](https://kgateway.dev/docs/envoy/latest/setup/http10.md): Configure your gateway proxy to accept older HTTP protocols. About HTTP/1.0 and HTTP/0.9 By default, … #### Listeners - [Listener overview](https://kgateway.dev/docs/envoy/latest/setup/listeners/overview.md): Set up listeners on your API Gateway. A listener configures how your API Gateway accepts and … - [HTTP](https://kgateway.dev/docs/envoy/latest/setup/listeners/http.md): Create an HTTP listener on your API Gateway. Then, your API Gateway listens for HTTP traffic on the … - [HTTPS](https://kgateway.dev/docs/envoy/latest/setup/listeners/https.md): Create an HTTPS listener on your API gateway. Then, your API gateway listens for secured HTTPS … - [mTLS (FrontendTLS)](https://kgateway.dev/docs/envoy/latest/setup/listeners/mtls.md): Add a FrontendTLSConfig to a Gateway to create a mutual TLS (mTLS) listener. About FrontendTLS When … - [SNI](https://kgateway.dev/docs/envoy/latest/setup/listeners/sni.md): Serve multiple hosts on the same HTTPS listener. About SNI Each host comes with its own TLS … - [TCP](https://kgateway.dev/docs/envoy/latest/setup/listeners/tcp.md): The following guide deploys a sample TCP echo app, sets up a TCP listener on the gateway, and … - [TLS passthrough](https://kgateway.dev/docs/envoy/latest/setup/listeners/tls-passthrough.md): Set up a TLS listener on the Gateway that serves one or more hosts and passes TLS traffic through to … - [TLS termination for TCPRoutes](https://kgateway.dev/docs/envoy/latest/setup/listeners/tls-termination-tcproute.md): Set up a TLS listener on the Gateway that terminates incoming TLS traffic and routes it using a … - [TLS termination for TLSRoutes](https://kgateway.dev/docs/envoy/latest/setup/listeners/tls-termination.md): Set up a TLS listener on the Gateway that terminates incoming TLS traffic. Unlike TLS passthrough, … - [Additional TLS settings](https://kgateway.dev/docs/envoy/latest/setup/listeners/tls-settings.md): Annotate your Gateway listener to enable additional TLS settings, such as the minimum and maximum … #### Customize the gateway - [Customization options](https://kgateway.dev/docs/envoy/latest/setup/customize/options.md): Choose between the following options to customize the configuration of gateway proxies in kgateway. … - [Change proxy config](https://kgateway.dev/docs/envoy/latest/setup/customize/gateway.md): Customize your gateway proxy with the GatewayParameters resource. Before you begin Follow the Get … - [Overlay examples](https://kgateway.dev/docs/envoy/latest/setup/customize/configs.md): Review common proxy customizations that you might want to apply in your environment. For steps on … - [Self-managed gateways (BYO)](https://kgateway.dev/docs/envoy/latest/setup/customize/selfmanaged.md): Follow the Get started guide to install kgateway. You do not need to create a Gateway resource, … ### Traffic management - [Compression](https://kgateway.dev/docs/envoy/latest/traffic-management/compression.md): Reduce response payload sizes and decompress incoming request bodies with gzip compression. About … - [gRPC routing](https://kgateway.dev/docs/envoy/latest/traffic-management/grpc.md): Route traffic to gRPC services by using the GRPCRoute resource for protocol-aware routing. About … - [Buffering](https://kgateway.dev/docs/envoy/latest/traffic-management/buffering.md): Fine-tune connection speeds for read and write operations by setting a connection buffer limit. … - [Direct responses](https://kgateway.dev/docs/envoy/latest/traffic-management/direct-response.md): Use the DirectResponseDirectResponseA policy to return a custom response from the gateway without … - [Dynamic Forward Proxy (DFP)](https://kgateway.dev/docs/envoy/latest/traffic-management/dfp.md): Dynamically resolve upstream hosts at request time. About Dynamic Forward Proxy Dynamic Forward … - [External processing (ExtProc)](https://kgateway.dev/docs/envoy/latest/traffic-management/extproc.md): Modify aspects of an HTTP request or response with an external processing server. About external … - [HTTP/2](https://kgateway.dev/docs/envoy/latest/traffic-management/http2.md): You might have services in your Kubernetes cluster that use HTTP/2 for communication. Typically … - [Proxy protocol](https://kgateway.dev/docs/envoy/latest/traffic-management/proxy-protocol.md): Preserve connection information such as the client IP address and port for traffic that passes … - [Traffic splitting](https://kgateway.dev/docs/envoy/latest/traffic-management/traffic-split.md): Set up weight-based routing between multiple apps. Before you begin Follow the Get started guide to … - [Weighted routing](https://kgateway.dev/docs/envoy/latest/traffic-management/weighted-routes.md): By default, the Kubernetes Gateway API sorts HTTPRoute rules based on their order and specificity, … #### Destination types ##### Kubernetes services - [HTTP services](https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/kube-services/http-services.md): Route traffic to an HTTP or HTTPS Kubernetes service. You can route to a Kubernetes service by … - [gRPC services](https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/kube-services/grpc-services.md): Route traffic to gRPC services using the GRPCRoute resource for protocol-aware routing. About … ##### Backends - [Static](https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/backends/static.md): Route requests to services that listen for incoming traffic on a fixed IP address and port or … - [Dynamic Forward Proxy (DFP)](https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/backends/dfp.md): Review the Dynamic Forward Proxy (DFP) guide in the traffic management section. ###### AWS Lambda - [Access AWS Lambda with a credentials secret](https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/backends/lambda/creds-secret.md): Use kgateway to route traffic requests directly to an Amazon Web Services (AWS) Lambda function. … - [Access AWS Lambda with a service account](https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/backends/lambda/service-accounts.md): Associate an IAM role with a gateway proxy service account, and configure kgateway to use that … #### Header control - [Request headers](https://kgateway.dev/docs/envoy/latest/traffic-management/header-control/request-header.md): Use the RequestHeaderModifier filter to add, append, overwrite, or remove request headers for a … - [Response headers](https://kgateway.dev/docs/envoy/latest/traffic-management/header-control/response-header.md): Use the ResponseHeaderModifier filter to add, append, overwrite, or remove headers from a response … - [Early request header modification](https://kgateway.dev/docs/envoy/latest/traffic-management/header-control/early-request-header-modifier.md): Early request header modification allows you to add, set, or remove HTTP request headers at the … #### Health checks - [Gateway health checks](https://kgateway.dev/docs/envoy/latest/traffic-management/health-checks/gateway.md): Enable a health check plugin on your gateway proxy to respond with common HTTP codes. Kgateway … - [Backend health checks](https://kgateway.dev/docs/envoy/latest/traffic-management/health-checks/backend.md): Automatically monitor the status of backends by configuring health checks. Health checks … #### Redirects - [HTTPS redirect](https://kgateway.dev/docs/envoy/latest/traffic-management/redirect/https.md): Redirect HTTP traffic to HTTPS. For more information, see the Kubernetes Gateway API documentation. … - [Host redirect](https://kgateway.dev/docs/envoy/latest/traffic-management/redirect/host.md): Redirect requests to a different host. For more information, see the Kubernetes Gateway API … - [Path redirects](https://kgateway.dev/docs/envoy/latest/traffic-management/redirect/path.md): Redirect requests to a different path prefix. For more information, see the Kubernetes Gateway API … - [Custom redirect status codes](https://kgateway.dev/docs/envoy/latest/traffic-management/redirect/custom.md): Create custom HTTP redirect status codes. To customize HTTP redirect status codes, you can add the … #### Request matching - [Header](https://kgateway.dev/docs/envoy/latest/traffic-management/match/header.md): Specify a set of headers which incoming requests must match in entirety, such as with regular … - [Host](https://kgateway.dev/docs/envoy/latest/traffic-management/match/host.md): Expose a route on multiple hosts. For more information, see the Kubernetes Gateway API … - [HTTP method](https://kgateway.dev/docs/envoy/latest/traffic-management/match/method.md): Specify an HTTP method, such as POST, GET, PUT, PATCH, or DELETE, to match requests against. For … - [Path](https://kgateway.dev/docs/envoy/latest/traffic-management/match/path.md): Match the targeted path of an incoming request against specific path criteria. For more information, … - [Query parameter](https://kgateway.dev/docs/envoy/latest/traffic-management/match/query.md): Specify a set of URL query parameters which requests must match in entirety. For more information, … #### Rewrites - [Host rewrites](https://kgateway.dev/docs/envoy/latest/traffic-management/rewrite/host.md): Replace the host header value before forwarding a request to a backend service by using the … - [Path rewrites](https://kgateway.dev/docs/envoy/latest/traffic-management/rewrite/path.md): Rewrite path prefixes in requests by using the URLRewrite filter. For more information, see the … #### Route delegation - [Route delegation overview](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/overview.md): Delegate routing decisions to another HTTPRoute resource. What is route delegation As your … - [Basic example](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/basic.md): Set up basic route delegation between a parent and two child HTTPRoute resources. Configuration … - [Delegation via labels](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/label.md): In this example, you learn how to use labels to delegate traffic. The parent HTTPRoute defines the … - [Multiple parents](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/multi-parent.md): Set up route delegation for a child HTTPRoute resource that can receive traffic from one or more … - [Multi-level delegation](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/multi-level-delegation.md): Create a 3-level route delegation hierarchy with a parent, child, and grandchild HTTPRoute resource. … - [Header and query match](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/header-query.md): Use header and query matchers in a route delegation setup. Configuration overview In this guide you … ##### Policy inheritance and overrides - [Native Gateway API policies](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/inheritance/native-policies.md): Learn how policy inheritance and overrides work for Kubernetes Gateway API-native policies in a … - [Kgateway policies](https://kgateway.dev/docs/envoy/latest/traffic-management/route-delegation/inheritance/kgateway-policies.md): Learn how policy inheritance and overrides work for kgateway-native policies in a route delegation … #### Session affinity - [Simple load balancing](https://kgateway.dev/docs/envoy/latest/traffic-management/session-affinity/loadbalancing.md): Decide how to load balance incoming requests to backend services. About simple load balancing … - [Consistent hashing](https://kgateway.dev/docs/envoy/latest/traffic-management/session-affinity/consistent-hashing.md): Set up soft session affinity between a client and a backend service by using consistent hashing … - [Session persistence](https://kgateway.dev/docs/envoy/latest/traffic-management/session-affinity/session-persistence.md): Ensure that traffic from a client is always routed to the same backend instance for the duration of … #### Transformations - [Transformation engine](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/engines.md): kgateway uses rustformation as the transformation engine. Rustformation is a Rust filter that is … - [Templating language](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/templating-language.md): The data plane proxy of your Gateway determines the templating language that you use to express … - [Inject response headers](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/inject-response-headers.md): Use a transformation template to extract a value from a request header and add it as a header to … - [Decode base64 headers](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/decode-base64-headers.md): Combine multiple transformation functions to accomplish the following tasks: Extract a … - [Update request paths and methods](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/update-request-path.md): Change the request path and HTTP method when a request header is present. To update the path and … - [Create redirect URLs](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/redirect-url.md): Extract the values of common headers to generate a redirect URL. About pseudo headers Pseudo headers … - [Change response status](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/change-response-status.md): Update the response status based on headers being present in a response. Before you begin Follow the … - [Update response body](https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/update-response-body.md): Learn how to return a customized response body and how replace specific values in the body. In this … ### Resiliency - [Circuit breakers](https://kgateway.dev/docs/envoy/latest/resiliency/circuit-breakers.md): Set up protective limits on your gateway proxy to prevent your proxy from overwhelming slow or … - [Fault injection](https://kgateway.dev/docs/envoy/latest/resiliency/fault-injection.md): Test the resilience of your apps by injecting delays and connection failures into a percentage of … - [HTTP connection settings](https://kgateway.dev/docs/envoy/latest/resiliency/connection.md): Configure and manage HTTP connections to an upstream service. Supported HTTP connection settings You … - [Mirroring](https://kgateway.dev/docs/envoy/latest/resiliency/mirroring.md): Copy live production traffic to a shadow environment or service so that you can try out, analyze, … - [Outlier detection](https://kgateway.dev/docs/envoy/latest/resiliency/outlier-detection.md): Configure passive health checks and remove unhealthy hosts from the load balancing pool with an … - [TCP keepalive](https://kgateway.dev/docs/envoy/latest/resiliency/tcp-keepalive.md): Manage idle and stale connections with TCP keepalive. About TCP keepalive With keepalive, the kernel … #### Retries - [About](https://kgateway.dev/docs/envoy/latest/resiliency/retry/about.md): A retry is the number of times a request is retried if it fails. This setting can be useful to avoid … - [Request retries](https://kgateway.dev/docs/envoy/latest/resiliency/retry/retry.md): Specify the number of times and duration for the gateway to try a connection to an unresponsive … - [Per-try timeout](https://kgateway.dev/docs/envoy/latest/resiliency/retry/per-try-timeout.md): Set separate timeouts for retries. About per-try timeouts The per-retry timeout allows you to set a … #### Timeouts - [About timeouts](https://kgateway.dev/docs/envoy/latest/resiliency/timeouts/about.md): A timeout is the amount of time (duration) that the gateway waits for replies from a backend service … - [Request timeouts](https://kgateway.dev/docs/envoy/latest/resiliency/timeouts/request.md): Change the default route-level timeout of 15 seconds with an HTTPRoute or kgateway TrafficPolicy. To … - [Idle timeouts](https://kgateway.dev/docs/envoy/latest/resiliency/timeouts/idle.md): Customize the default idle timeout of 1 hour (3600s). About idle timeouts By default, Envoy … - [Idle stream timeouts](https://kgateway.dev/docs/envoy/latest/resiliency/timeouts/idle-stream.md): Customize the default idle stream timeout of 5 minutes (300s). About idle stream timeouts By … - [Per-try timeouts](https://kgateway.dev/docs/envoy/latest/resiliency/timeouts/per-try-timeout.md): Per-try timeouts ### Security - [Access logging](https://kgateway.dev/docs/envoy/latest/security/access-logging.md): Capture an access log for all the requests that enter the gateway. About access logging Access logs, … - [Backend TLS](https://kgateway.dev/docs/envoy/latest/security/backend-tls.md): Originate a one-way TLS connection from the Gateway to a backend. warning This feature is … - [CORS](https://kgateway.dev/docs/envoy/latest/security/cors.md): Enforce client-site access controls with cross-origin resource sharing (CORS). warning This feature … - [CSRF](https://kgateway.dev/docs/envoy/latest/security/csrf.md): Apply a CSRF filter to the gateway to help prevent cross-site request forgery attacks. About CSRF … - [IP-based access control (ACL)](https://kgateway.dev/docs/envoy/latest/security/acl.md): Use an IP-based access control list (ACL) to allow or deny HTTP requests based on the client’s … - [HTTPS listener](https://kgateway.dev/docs/envoy/latest/security/https-listener.md): Refer to the guide in the Gateway listener setup section. HTTPS listener - [mTLS listener](https://kgateway.dev/docs/envoy/latest/security/mtls-listener.md): Refer to the guide in the Gateway listener setup section. mTLS listener - [SNI listener](https://kgateway.dev/docs/envoy/latest/security/sni-listener.md): Refer to the guide in the Gateway listener setup section. SNI listener - [TLS passthrough](https://kgateway.dev/docs/envoy/latest/security/tls-passthrough.md): Refer to the guide in the Gateway listener setup section. TLS passthrough - [ExternalDNS and Cert-Manager](https://kgateway.dev/docs/envoy/latest/security/dns-certs.md): Refer to the guide in the Integrations section. ExternalDNS and Cert-Manager - [Istio ambient mesh for mTLS](https://kgateway.dev/docs/envoy/latest/security/istio-mtls.md): Refer to the guide in the Integrations section. Ingress to an ambient mesh Ingress to a sidecar mesh … #### External auth - [API key auth](https://kgateway.dev/docs/envoy/latest/security/extauth/apikey.md): API keys are secure, long-lived UUIDs that clients provide when they send a request to your service. … - [Basic auth](https://kgateway.dev/docs/envoy/latest/security/extauth/basic.md): Basic authentication sends encoded user credentials in a standard header within the request. The … - [BYO ext auth service](https://kgateway.dev/docs/envoy/latest/security/extauth/byo-ext-auth-service.md): Bring your own external authorizationExternal AuthorizationDelegate authorization decisions to an … #### JWT - [Basic JWT policy](https://kgateway.dev/docs/envoy/latest/security/jwt/basic.md): Use JWT authentication to verify that incoming requests carry a token issued by a trusted provider … #### Rate limit - [Local rate limiting](https://kgateway.dev/docs/envoy/latest/security/ratelimit/local.md): Limit the number of requests that are allowed to enter the cluster before global rate limiting and … - [Global rate limiting](https://kgateway.dev/docs/envoy/latest/security/ratelimit/global.md): Configure global rate limiting rules across all of your Gateways to protect the backing services in … ### AI Gateway ### Integrations - [Argo Rollouts](https://kgateway.dev/docs/envoy/latest/integrations/argo.md): Argo Rollouts is a Kubernetes controller that provides advanced deployment capabilities such as … - [ExternalDNS and cert-manager](https://kgateway.dev/docs/envoy/latest/integrations/external-dns-cert-manager.md): ExternalDNS and cert-manager are two well-known integrations within the Kubernetes ecosystem that … #### Istio ##### Ambient - [Ingress](https://kgateway.dev/docs/envoy/latest/integrations/istio/ambient/ambient-ingress.md): Use kgateway as the ingress gateway for your ambient mesh. About ambient mesh Solo.io and Google … ##### Sidecar - [Ingress](https://kgateway.dev/docs/envoy/latest/integrations/istio/sidecar/ingress.md): Use kgateway as the ingress gateway to control and secure traffic that enters your service … #### AWS ELBs - [AWS NLB](https://kgateway.dev/docs/envoy/latest/integrations/aws-elb/nlb.md): In this guide you explore how to expose the kgateway proxy with an AWS network load balancer (NLB). … - [AWS ALB](https://kgateway.dev/docs/envoy/latest/integrations/aws-elb/alb.md): In this guide you explore how to expose the kgateway proxy with an AWS application load balancer … ### Observability - [OTel stack](https://kgateway.dev/docs/envoy/latest/observability/otel-stack.md): Deploy an open source observability stack based on OpenTelemetry (OTel) that includes the following … - [Control plane metrics](https://kgateway.dev/docs/envoy/latest/observability/control-plane-metrics.md): By default, the kgateway control plane exposes metrics in Prometheus format. You can use these … - [Gateway proxy metrics](https://kgateway.dev/docs/envoy/latest/observability/gateway-metrics.md): By default, kgateway exposes metrics in Prometheus format for the data plane of each gateway proxy. … - [Tracing](https://kgateway.dev/docs/envoy/latest/observability/tracing.md): Configure distributed tracing for your gateway to gain visibility into request flows across … ### Operations - [Debug your setup](https://kgateway.dev/docs/envoy/latest/operations/debug.md): Use built-in tools to troubleshoot issues in your kgateway setup. Kgateway consists of the control … - [Upgrade](https://kgateway.dev/docs/envoy/latest/operations/upgrade.md): You can use this guide to upgrade the kgateway control plane and data plane components, or to apply … - [Uninstall](https://kgateway.dev/docs/envoy/latest/operations/uninstall.md): If you no longer need your kgateway environment, you can uninstall the control plane and all gateway … ### Migrate from Ingress #### Emitters ##### Kgateway #### Install ##### macOS Installation ##### Linux Installation ##### Windows Installation #### Providers ##### Ingress NGINX #### Reference ##### CLI #### Examples - [Basic Ingress](https://kgateway.dev/docs/envoy/latest/migrate/examples/basic.md): This example shows the simplest case: an Ingress with no special annotations. The tool converts it … - [Session Affinity](https://kgateway.dev/docs/envoy/latest/migrate/examples/session-affinity.md): If you’re using NGINX’s cookie-based session affinity, this example shows how those … - [Rate Limiting](https://kgateway.dev/docs/envoy/latest/migrate/examples/rate-limiting.md): NGINX’s limit-rps and limit-rpm annotations map to a kgateway TrafficPolicy with local rate … - [CORS](https://kgateway.dev/docs/envoy/latest/migrate/examples/cors.md): CORS annotations on an Ingress become a TrafficPolicy with CORS settings. Before: Ingress with CORS … - [SSL Redirect](https://kgateway.dev/docs/envoy/latest/migrate/examples/ssl-redirect.md): The ssl-redirect annotation tells NGINX to redirect HTTP to HTTPS. In Gateway API, this becomes a … - [External Auth](https://kgateway.dev/docs/envoy/latest/migrate/examples/external-auth.md): If you’re using NGINX’s auth-url to call an external authentication service, this … - [Canary Deployments](https://kgateway.dev/docs/envoy/latest/migrate/examples/canary.md): NGINX’s canary annotations let you split traffic between versions. The tool merges these into … - [Backend TLS](https://kgateway.dev/docs/envoy/latest/migrate/examples/backend-tls.md): When your backend requires TLS (re-encryption), NGINX’s proxy-ssl-* annotations translate to a … ### Reference - [API reference](https://kgateway.dev/docs/envoy/latest/reference/api.md): Review the API reference documentation for kgateway with the Envoy data plane. Looking for the … - [Open Source Attribution](https://kgateway.dev/docs/envoy/latest/reference/osa.md): Third-party open source software provided by kgateway Name Version License avast/retry-go … - [Port reference](https://kgateway.dev/docs/envoy/latest/reference/ports.md): Review the ports that are used by kgateway. Kgateway deploys containers that listen on certain ports … - [Security vulnerabilities](https://kgateway.dev/docs/envoy/latest/reference/vulnerabilities.md): Review how the kgateway project handles the lifecycle of Common Vulnerability and Exposures (CVEs). … - [Version support](https://kgateway.dev/docs/envoy/latest/reference/versions.md): Review the following information about released versions for kgateway. Released versions Kgateway … - [Feature maturity](https://kgateway.dev/docs/envoy/latest/reference/feature-maturity.md): Review the feature maturity of the kgateway project. To receive feedback and improve functionality … - [Release notes](https://kgateway.dev/docs/envoy/latest/reference/release-notes.md): Review the release notes for kgateway. For a detailed list of changes between tags, use the GitHub … - [Glossary](https://kgateway.dev/docs/envoy/latest/reference/glossary.md): Welcome to the kgateway glossary! This page breaks down the key terms for API gateways, AI, service … #### Helm value reference - [kgateway](https://kgateway.dev/docs/envoy/latest/reference/helm/kgateway.md): Review Helm values for the kgateway Helm chart. For more information about using this Helm chart, … - [kgateway-crds](https://kgateway.dev/docs/envoy/latest/reference/helm/kgateway-crds.md): Review Helm values for the kgateway-crds Helm chart. This Helm chart controls whether specific sets … #### Contributor guide - [Add documentation](https://kgateway.dev/docs/envoy/latest/reference/contribution/add-docs.md): To contribute new documentation to kgateway, follow these steps: Identify the audience and intended … - [Preview and build locally](https://kgateway.dev/docs/envoy/latest/reference/contribution/preview.md): The kgateway documentation is built by using the static site generator Hugo. As you write your … - [Style guide](https://kgateway.dev/docs/envoy/latest/reference/contribution/styleguide.md): All documentation contributions in kgateway must follow general standards to ensure content is … --- Generated on 2026-05-28 15:32:50 UTC