answrsnow
Software · Top 10

Top 10 API Gateway Solutions for Microservices Architects in 2027

By Kory White · Updated Oct 2026 · 6 min read
Kong Gateway
Direct answer

Kong Gateway is the best API gateway for microservices architects: it is billed as the most adopted open source API gateway, runs on an NGINX engine with 50K+ transactions per second per node, and works with Kubernetes through the Kong Ingress Controller. Apache APISIX is the best free option, and Envoy Gateway is #3 for teams that want the Kubernetes Gateway API.

At a glance

#PickPriceBest for
1Kong GatewayKonnect API Management Plus from $25/month plus usage, billed monthly; Enterprise is custom, billed annuallyTeams that want the most widely adopted open source gateway with a managed cloud control plane
2Apache APISIXFree; Apache 2.0 licensed open sourceTeams that want a fully free gateway with many plugins and no restarts for config changes
3Envoy GatewayNot publishedKubernetes teams that want Gateway API configuration on top of the Envoy data plane
4kgatewayOpen source is free forever; enterprise features and support are added when needed (no price published)Teams already on Gloo, or Kubernetes shops that want Envoy plus vendor support from Solo.io
5Tyk GatewayOpen source gateway free; Core is usage-based, Professional is a flat rate, Enterprise is custom (no dollar figures published)Teams that want an open source gateway with REST and GraphQL support and a flat-rate plan
6Amazon API GatewayREST APIs $3.50 per million calls (first tier); HTTP APIs $1.00 per million callsAWS-based teams that want a managed gateway billed per call with no servers to run
7Azure API ManagementPriced per tier (Consumption, Developer, Basic, Standard, Premium and v2 tiers); see the Azure pricing pageMicrosoft shops that want a managed gateway with a developer portal and clear SLA tiers
8NGINX PlusNot publishedTeams already running NGINX who want commercial support, live metrics and a dashboard
9Traefik Hub API GatewayTraefik Proxy open source is free; Hub API Gateway and API Management pricing is behind Get Pricing (not published)Container teams that want automatic service discovery and an easy upgrade from open source Traefik
10Gravitee API ManagementPlanet $2,500/month; Galaxy and Universe customOrganizations that want a published monthly tier with unlimited users and environments

Pick by what you want

Best overall
Kong Gateway
Best free gateway
Apache APISIX
Best for Kubernetes Gateway API
Envoy Gateway
Best managed on AWS
Amazon API Gateway
Best managed on Azure
Azure API Management
Best published monthly price
Gravitee API Management

The ranking

1

Kong Gateway

Kong Gateway
Answrs VerdictThe most adopted open source gateway, with a managed option.
Price: Konnect API Management Plus from $25/month plus usage, billed monthly; Enterprise is custom, billed annuallyThroughput: NGINX engine with 50K+ transactions per second per nodeKubernetes: Configure Kong Gateway the same way as Kubernetes with Kong Ingress ControllerPlugins: Out-of-the-box security, authentication, transformation and analytics plugins; build your own with the Plugin Development KitPlus plan limits: Up to 1M API requests included, $200/month per additional 1M, max 10M requests/month

Kong Gateway is an NGINX-based gateway that Kong bills as the most adopted open source API gateway, with 50K+ transactions per second per node. It ships security, authentication, transformation and analytics plugins, you can build your own with the Plugin Development Kit, and the Kong Ingress Controller configures it the same way as Kubernetes. Konnect API Management Plus starts at $25/month plus usage with up to 1M API requests included; Enterprise is custom and billed annually.

Go ifTeams that want the most widely adopted open source gateway with a managed cloud control plane
Skip ifYou want a fully published price for the self-hosted Enterprise edition
Why #1 over #2: It pairs the most adopted open source gateway with a managed cloud plan from $25/month.
2

Apache APISIX

Apache APISIX
Answrs VerdictThe best free gateway: Apache 2.0 with 100+ plugins.
Price: Free; Apache 2.0 licensed open sourcePlugins: 100+ open-source plugins for traffic management, security, observability and protocol handlingHot updates: Hot updates and hot plugins change configuration without restartsProtocols: HTTP-to-gRPC transcoding, WebSocket, gRPC, Dubbo and MQTT proxyProject speed claim: About 18k QPS per core with 0.2 ms added latency (project figures, no test setup given)

Apache APISIX is free and Apache 2.0 licensed, with 100+ open-source plugins for traffic management, security, observability and protocol handling. Hot updates and hot plugins change configuration without restarts, and it handles HTTP-to-gRPC transcoding, WebSocket, gRPC, Dubbo and MQTT proxy. The project claims about 18k QPS per core with 0.2 ms added latency, without publishing the test setup.

Go ifTeams that want a fully free gateway with many plugins and no restarts for config changes
Skip ifYou need a vendor-run managed service with a published support plan
Why #2 over #3: It costs nothing and still ships 100+ plugins, while Envoy Gateway leaves price and plugins to you.
3

Envoy Gateway

Envoy Gateway
Answrs VerdictEnvoy power with Kubernetes Gateway API configuration.
Price: Not publishedStandard: Implements the Kubernetes Gateway API and extends it to expose advanced Envoy featuresSecurity: Security Policy enforces mTLS, JWT based access control and OIDC integration, plus API key authorizationTraffic: Rate limiting, retry policies, circuit breaking, timeouts and failoverEnvoy Proxy: A Cloud Native Computing Foundation graduated project, originally built at Lyft

Envoy Gateway implements the Kubernetes Gateway API and extends it to expose advanced Envoy features. Its Security Policy enforces mTLS, JWT based access control and OIDC integration, with API key authorization, and traffic controls cover rate limiting, retry policies, circuit breaking, timeouts and failover. Envoy Proxy is a Cloud Native Computing Foundation graduated project originally built at Lyft.

Go ifKubernetes teams that want Gateway API configuration on top of the Envoy data plane
Skip ifYou want a managed developer portal and API products out of the box
Why #3 over #4: Its Envoy Proxy core is a CNCF graduated project, while kgateway is still at the sandbox stage.
4

kgateway

kgateway
Answrs VerdictGloo, now an open source CNCF project, on Envoy.
Price: Open source is free forever; enterprise features and support are added when needed (no price published)History: Originally created by Solo.io and known as GlooFoundation: A Cloud Native Computing Foundation sandbox project, Apache 2.0 licensedBuilt on: Envoy Proxy and the Kubernetes Gateway APIFeatures: Security (encryption, external authentication, web application firewall), traffic routing and rate limiting

kgateway was originally created by Solo.io and known as Gloo. It is built on Envoy Proxy and the Kubernetes Gateway API, is Apache 2.0 licensed and is a Cloud Native Computing Foundation sandbox project. Open source is free forever, with enterprise features and support available from Solo.io; its feature list covers encryption, external authentication, a web application firewall and rate limiting.

Go ifTeams already on Gloo, or Kubernetes shops that want Envoy plus vendor support from Solo.io
Skip ifYou need a mature project outside the CNCF sandbox stage
Why #4 over #5: It adds a vendor-backed enterprise option on Envoy, while Tyk leads with its own gateway engine.
5

Tyk Gateway

Tyk Gateway
Answrs VerdictA friendly open source gateway with a flat-rate tier.
Price: Open source gateway free; Core is usage-based, Professional is a flat rate, Enterprise is custom (no dollar figures published)Trial: 48-hour Tyk Cloud trial, no credit card requiredAPIs: Powerful features for both REST and GraphQLTraffic controls: Response caching, rate limiting, throttling, circuit breakers and load balancingProfessional plan: Unlimited APIs (services) and unlimited API requests per month

Tyk Gateway is a free open source gateway with powerful features for both REST and GraphQL, including response caching, rate limiting, throttling, circuit breakers and load balancing. Tyk Cloud offers a 48-hour trial with no credit card. Core is usage-based, Professional is a flat rate with unlimited APIs (services) and unlimited API requests per month, and Enterprise is custom; no dollar figures are published.

Go ifTeams that want an open source gateway with REST and GraphQL support and a flat-rate plan
Skip ifYou need a price list before talking to sales
Why #5 over #6: It offers a flat-rate plan with unlimited requests, which Amazon API Gateway’s per-call billing does not.
6

Amazon API Gateway

Amazon API Gateway
Answrs VerdictThe easiest managed gateway on AWS, billed per call.
Price: REST APIs $3.50 per million calls (first tier); HTTP APIs $1.00 per million callsWebSockets: $1.00 per million messages and $0.25 per million connection minutesFree tier: First million REST API calls and first million HTTP API calls received free each month for up to 12 monthsPurpose: Create, publish, maintain, monitor and secure APIs at any scaleBackends: Connects to AWS Lambda, Amazon EC2, Amazon Kinesis, Amazon DynamoDB and private applications

Amazon API Gateway creates, publishes, maintains, monitors and secures APIs at any scale and connects to AWS Lambda, Amazon EC2, Amazon Kinesis, Amazon DynamoDB and private applications. REST APIs cost $3.50 per million calls in the first tier, HTTP APIs $1.00 per million calls, and WebSocket APIs $1.00 per million messages plus $0.25 per million connection minutes. The first million REST and HTTP calls are free each month for up to 12 months.

Go ifAWS-based teams that want a managed gateway billed per call with no servers to run
Skip ifYou need to run the same gateway on-premises or across clouds
Why #6 over #7: It has no servers to run and a free first million calls, while Azure API Management prices by tier.
7

Azure API Management

Azure API Management
Answrs VerdictThe strongest managed gateway for Azure estates.
Price: Priced per tier (Consumption, Developer, Basic, Standard, Premium and v2 tiers); see the Azure pricing pageBasic v2: 99.95% SLA, 10M included API requests per month, 250 MB built-in cacheStandard v2: 99.95% SLA, 50M included API requests per month, 1 GB cache, VNET integrationPremium v2: 99.99% SLA (needs two or more zones or regions), unlimited requests, 5 GB cacheDeveloper tier: No SLA; the page says it is not suitable for production use

Azure API Management is priced by tier. Basic v2 has a 99.95% SLA, 10M included requests per month and 250 MB of cache; Standard v2 has 50M included requests, 1 GB of cache and VNET integration; Premium v2 offers unlimited requests, 5 GB of cache and a 99.99% SLA across two or more zones or regions. The Developer tier has no SLA and is not suitable for production use.

Go ifMicrosoft shops that want a managed gateway with a developer portal and clear SLA tiers
Skip ifYou need a self-hosted gateway on the v2 tiers, which do not offer one
Why #7 over #8: It spells out SLAs and included requests per tier, which NGINX Plus does not publish.
8

NGINX Plus

NGINX Plus
Answrs VerdictCommercial NGINX with live metrics and zero-reload changes.
Price: Not publishedConfig: API-driven configuration changes traffic without reloads, for zero-downtime updatesMonitoring: Real-time monitoring with 200+ metrics across traffic, connections and upstreamsAPI gateway: Routing, authentication, rate limiting and observability for API trafficLoad balancing: High-performance L4/L7 load balancing with health checks and traffic shaping

NGINX Plus adds advanced traffic control, security and observability to open source NGINX. API-driven configuration updates traffic without reloads, real-time monitoring tracks 200+ metrics, and API gateway features cover routing, authentication and rate limiting alongside L4/L7 load balancing. Pricing is not published.

Go ifTeams already running NGINX who want commercial support, live metrics and a dashboard
Skip ifYou want a developer portal and API products built in
Why #8 over #9: It gives live monitoring of 200+ metrics, which Traefik Hub’s listing does not state.
9

Traefik Hub API Gateway

Traefik Hub API Gateway
Answrs VerdictAuto-discovery gateway with an in-place upgrade to a full API platform.
Price: Traefik Proxy open source is free; Hub API Gateway and API Management pricing is behind Get Pricing (not published)Proxy base: Service auto-discovery, HTTP/2/3, TCP, UDP, gRPC, WebSockets and canary deploymentsSecurity: Native WAF and access control for LDAP, JWT, API Key, HMAC, OAuth, OIDC and Open Policy AgentCompliance: FIPS 140-2 and 140-3 supportUpgrade path: In-place upgrade from Traefik Proxy to Hub in less than 1 minute

Traefik Proxy is free and open source, with service auto-discovery, HTTP/2/3, TCP, UDP, gRPC, WebSockets and canary deployments. Traefik Hub API Gateway adds a native WAF and access control for LDAP, JWT, API Key, HMAC, OAuth, OIDC and Open Policy Agent, plus FIPS 140-2 and 140-3 support. Upgrading from Proxy to Hub is in place and takes less than 1 minute; Hub pricing is behind a Get Pricing button.

Go ifContainer teams that want automatic service discovery and an easy upgrade from open source Traefik
Skip ifYou need a published enterprise price
Why #9 over #10: It upgrades in place from a free proxy, while Gravitee starts at a paid monthly plan.
10

Gravitee API Management

Gravitee API Management
Answrs VerdictThe only pick with a published monthly price for a full platform.
Price: Planet $2,500/month; Galaxy and Universe customPlanet: 1 production gateway, 50M requests per month, unlimited users, 7 days / 10 GB log retentionGalaxy: 2 production gateways, 100M requests per month, high availabilityUniverse: 4+ production gateways, 200M+ requests per month, Platinum support plus a Technical Account ManagerDeployment: Galaxy adds self-hosted, hybrid or full SaaS deployment

Gravitee API Management lists a Planet plan at $2,500/month with 1 production gateway, 50M requests per month, unlimited users and 7 days / 10 GB of log retention. Galaxy adds 2 production gateways, 100M requests per month and high availability with self-hosted, hybrid or SaaS deployment; Universe has 4+ gateways, 200M+ requests and Platinum support with a Technical Account Manager.

Go ifOrganizations that want a published monthly tier with unlimited users and environments
Skip ifYou want a free tier to start on

How we ranked these

We ranked the gateways by how well they fit a microservices architecture, from plugins, Kubernetes and Gateway API support and dynamic configuration to security, then by openness and published pricing, using each vendor’s own product and pricing pages for every fact. Prices not published by the vendor are marked as such. Facts are taken from each maker's own published information; check the official site before you buy.

Questions people ask

What is the best API gateway for microservices?

Kong Gateway. It is described as the most adopted open source API gateway, runs on an NGINX engine with 50K+ transactions per second per node, and plugs into Kubernetes through the Kong Ingress Controller.

Is there a free open source API gateway?

Yes. Apache APISIX is Apache 2.0 licensed with 100+ open-source plugins, Kong and Tyk offer open source gateways, and kgateway is free forever in its open source form.

Is kgateway the same as Gloo Gateway?

Yes, it is the renamed project. kgateway was originally created by Solo.io and known as Gloo, and it is now a Cloud Native Computing Foundation sandbox project.

How much does Amazon API Gateway cost?

REST APIs are $3.50 per million calls for the first tier and HTTP APIs are $1.00 per million calls. The first million REST and first million HTTP calls each month are free for up to 12 months.

Included API requests per month (as published) at a glance

Kong Konnect Plus1 million requests
Azure Basic v210 million requests
Azure Standard v250 million requests
Gravitee Planet50 million requests
Gravitee Galaxy100 million requests
Included API requests per month (as published), as published by each maker. Picks without a published figure are left off.

Official sites

Sources

Prices, specs and availability change; confirm on the official site before you buy.