# Envoy Gateway vs Traefik

| Attribute | Envoy Gateway | Traefik |
|---|---|---|
| **vioscaleAI score** | 52.4 (53% (medium)) | 56 (43% (low)) |
| activity.commits_last_30d | 86 | 100 |
| adoption.dependent_repos | 0 | 52 |
| adoption.github_stars | 3,078 | 65,044 |
| content.faq | `[{"answer":"Open-source gateway providing traffic management, security controls, and observability for Kubernetes applications following the Gateway API specification. Can be deployed either standalone or as part of a Kubernetes cluster. It is indexed under API Gateways.","source":"https://gateway.envoyproxy.io","question":"What is Envoy Gateway?","confidence":0.6},{"answer":"Envoy Gateway is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://gateway.envoyproxy.io","question":"Is Envoy Gateway free to use?","confidence":0.6},{"answer":"Envoy Gateway supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://gateway.envoyproxy.io","question":"What platforms does Envoy Gateway support?","confidence":0.6},{"answer":"Yes. Envoy Gateway can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://gateway.envoyproxy.io","question":"Can Envoy Gateway be self-hosted?","confidence":0.6},{"answer":"Yes. Envoy Gateway is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/envoyproxy/gateway","question":"Is Envoy Gateway open source?","confidence":0.95}]` | `[{"answer":"A gateway platform that automatically discovers and routes traffic for microservices by integrating with orchestrators and service registries. It provides comprehensive API management, authentication, rate limiting, observability, and multi-cluster control across on-premises, cloud, and containerized environments. It is indexed under API Gateways.","source":"https://traefik.io/pricing","question":"What is Traefik?","confidence":0.6},{"answer":"Traefik is open source, so it can be self-hosted and used at no licence cost. It is released under the MIT licence. Pricing changes often, so verify at source before relying on it.","source":"https://traefik.io/pricing","question":"Is Traefik free to use?","confidence":0.6},{"answer":"Traefik supports the web, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://traefik.io/pricing","question":"What platforms does Traefik support?","confidence":0.6},{"answer":"Yes. Traefik can be deployed cloud / SaaS, hybrid, air-gapped and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://traefik.io/pricing","question":"Can Traefik be self-hosted?","confidence":0.6},{"answer":"We have confirmed 20 integrations for Traefik, including Docker, Kubernetes, Consul, Etcd, Rancher, Amazon ECS, HashiCorp Nomad and Azure Service Fabric, plus 12 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://traefik.io/pricing","question":"What does Traefik integrate with?","confidence":0.6},{"answer":"Yes. Traefik is published under the MIT licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/traefik/traefik","question":"Is Traefik open source?","confidence":0.95}]` |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | Provides a gateway for deploying Envoy Proxy in various environments—either standalone or on Kubernetes clusters—while extending Kubernetes Gateway API functionality. | A cloud-native application proxy and API gateway that provides centralized management for Kubernetes workloads, VM-based services, and API endpoints—including AI models and agents—through a single programmable gateway deployable on-premises or with any cloud provider. |
| features.capabilities | `{"mtls":true,"hosting":"self","k8s_native":true,"oauth_oidc":true,"observability":true,"rate_limiting":true}` | `{"mtls":true,"hosting":"both","k8s_native":true,"oauth_oidc":true,"grpc_support":true,"http_caching":true,"monetization":true,"clustering_ha":true,"observability":true,"rate_limiting":true,"tls_termination":true,"developer_portal":true,"plugin_ecosystem":"extensive","hot_config_reload":true,"automatic_https_acme":true,"identity_aware_proxy":true,"request_transformation":true}` |
| integrations.count | 4 | 9 |
| integrations.list | `[{"name":"KEDA","native":true,"category":"autoscaling","direction":"bidirectional"},{"name":"k0rdent","native":true,"category":"infrastructure","direction":"bidirectional"},{"name":"OpenAI","native":true,"category":"ai","direction":"outbound"},{"name":"OIDC","native":true,"category":"authentication","direction":"outbound"}]` | `[{"name":"Docker"},{"name":"Kubernetes"},{"name":"Docker Swarm"},{"name":"Consul"},{"name":"Etcd"},{"name":"Rancher"},{"name":"Amazon ECS"},{"name":"HashiCorp Nomad"},{"name":"Azure Service Fabric"},{"name":"HashiCorp Vault"},{"name":"Let's Encrypt"},{"name":"Prometheus"},{"name":"Datadog"},{"name":"Statsd"},{"name":"InfluxDB"},{"name":"Argo CD"},{"name":"OpenAPI"},{"name":"ModSecurity"},{"name":"Mesos"},{"name":"OpenTelemetry","native":true,"category":"observability","direction":"outbound"},{"name":"Oracle Cloud Infrastructure","native":true,"category":"cloud"},{"name":"Red Hat OpenShift","native":true,"category":"kubernetes_platform","direction":"bidirectional"},{"name":"Vault","native":false,"category":"secrets_management","direction":"inbound"},{"name":"Treblle","native":false,"category":"observability","direction":"bidirectional"},{"name":"Open Policy Agent","native":false,"category":"authorization","direction":"inbound"},{"name":"Red Hat Marketplace","native":false,"category":"marketplace","direction":"outbound"}]` |
| language.primary | Go | Go |
| license.spdx | Apache-2.0 | MIT |
| market.availability | - | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true}` | `{"cli":true,"web":true,"linux":true}` |
| pricing | `{"type":"open_source","sourceUrl":"https://gateway.envoyproxy.io","retrievedAt":"2026-08-16T21:35:24.255Z"}` | `{"type":"hybrid","plans":[{"free":true,"name":"Traefik Proxy","features":["Services auto-discovery","HTTP/2/3, TCP, UDP, gRPC, WebSockets","Real-time metrics and distributed tracing","Canary deployments","OpenTelemetry support","Ingress-view dashboard"],"description":"Open source reverse proxy and ingress controller"}],"freeTier":true,"sourceUrl":"https://traefik.io/pricing","retrievedAt":"2026-09-07T08:28:11.076Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | commercial |
| pricing.price_level | free | low |
| pricing.transparent | - | no |
| release.cadence_days | 8 | - |
| release.history | `[{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.2","date":"2026-09-28T17:14:42Z","type":"stable","version":"v1.9.2"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.5","date":"2026-09-28T17:28:21Z","type":"stable","version":"v1.8.5"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.1","date":"2026-08-28T11:34:36Z","type":"stable","version":"v1.9.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.4","date":"2026-08-28T11:03:57Z","type":"stable","version":"v1.8.4"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.0","date":"2026-08-15T12:31:24Z","type":"stable","version":"v1.9.0"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.9.0-rc.1","date":"2026-08-09T01:54:41Z","type":"prerelease","version":"v1.9.0-rc.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.3","date":"2026-07-22T18:59:16Z","type":"stable","version":"v1.8.3"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.5","date":"2026-07-08T15:36:49Z","type":"stable","version":"v1.7.5"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.2","date":"2026-07-01T07:14:42Z","type":"stable","version":"v1.8.2"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.1","date":"2026-06-05T07:32:33Z","type":"stable","version":"v1.8.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.4","date":"2026-06-05T07:55:38Z","type":"stable","version":"v1.7.4"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.0","date":"2026-05-13T15:45:46Z","type":"stable","version":"v1.8.0"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.3","date":"2026-05-09T23:13:52Z","type":"stable","version":"v1.7.3"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.8.0-rc.1","date":"2026-05-01T05:58:00Z","type":"prerelease","version":"v1.8.0-rc.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.7","date":"2026-04-27T20:16:54Z","type":"stable","version":"v1.6.7"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.2","date":"2026-04-17T01:33:18Z","type":"stable","version":"v1.7.2"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.6","date":"2026-04-16T14:08:03Z","type":"stable","version":"v1.6.6"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.5","date":"2026-03-13T02:12:48Z","type":"stable","version":"v1.6.5"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.7.1","date":"2026-03-12T17:15:44Z","type":"stable","version":"v1.7.1"},{"url":"https://github.com/envoyproxy/gateway/releases/tag/v1.6.4","date":"2026-02-11T18:48:14Z","type":"stable","version":"v1.6.4"}]` | `[{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.13","date":"2026-09-04T12:40:17Z","type":"stable","version":"v3.7.13"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.57","date":"2026-09-04T12:23:52Z","type":"stable","version":"v2.11.57"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.12","date":"2026-08-26T13:42:21Z","type":"stable","version":"v3.7.12"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.56","date":"2026-08-26T13:40:05Z","type":"stable","version":"v2.11.56"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.11","date":"2026-08-19T06:44:44Z","type":"stable","version":"v3.7.11"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.55","date":"2026-08-18T08:56:15Z","type":"stable","version":"v2.11.55"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.10","date":"2026-07-31T12:49:21Z","type":"stable","version":"v3.7.10"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.6.25","date":"2026-07-31T12:34:56Z","type":"stable","version":"v3.6.25"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.54","date":"2026-07-31T12:18:22Z","type":"stable","version":"v2.11.54"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.9","date":"2026-07-24T12:47:15Z","type":"stable","version":"v3.7.9"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.6.24","date":"2026-07-24T12:33:18Z","type":"stable","version":"v3.6.24"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.53","date":"2026-07-24T12:19:25Z","type":"stable","version":"v2.11.53"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.8","date":"2026-07-15T12:51:10Z","type":"stable","version":"v3.7.8"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.7","date":"2026-07-08T15:39:25Z","type":"stable","version":"v3.7.7"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.6.23","date":"2026-07-08T14:31:28Z","type":"stable","version":"v3.6.23"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.52","date":"2026-07-08T13:09:07Z","type":"stable","version":"v2.11.52"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.6","date":"2026-06-30T12:21:11Z","type":"stable","version":"v3.7.6"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.6.22","date":"2026-06-30T09:58:45Z","type":"stable","version":"v3.6.22"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.51","date":"2026-06-30T09:07:16Z","type":"stable","version":"v2.11.51"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.7.5","date":"2026-06-10T15:00:19Z","type":"stable","version":"v3.7.5"}]` |
| reliability.status_page | - | yes |
| security.certifications | - | `[{"name":"FIPS 140-3","status":"active"},{"name":"FIPS 140-2","status":"active"}]` |
| security.scorecard | 7.9 | 6.4 |
| security.trust_center | - | https://traefik.io |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fenvoyproxy%2Fgateway%2Fexamples%2Fdynamic-module-test&per_page=100","last_12m":0,"max_severity":null}` | `{"count":56,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Ftraefik%2Ftraefik%2Fv2&per_page=100","last_12m":32,"max_severity":"CRITICAL"}` |

## Capabilities (API Gateways)

| Capability | Envoy Gateway | Traefik |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Self-hosted only | Cloud + self-hosted |
| Kubernetes-native | ✓ | ✓ |
| **Traffic** |  |  |
| Rate limiting | ✓ | ✓ |
| Request/response transformation | - | ✓ |
| **Security** |  |  |
| OAuth2 / OIDC / JWT | ✓ | ✓ |
| Mutual TLS | ✓ | ✓ |
| **Protocols** |  |  |
| GraphQL gateway | - | - |
| gRPC support | - | ✓ |
| **Delivery** |  |  |
| Developer portal | - | ✓ |
| Monetization | - | ✓ |
| **Ecosystem** |  |  |
| Plugin ecosystem | - | Extensive |
| **Insight** |  |  |
| Observability | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-16T19:18:53.732Z. "-" = undocumented, not absent.*