Kong Gateway

Overview

Kong Gateway is an open-source API gateway for teams routing traffic among microservices and distributed systems. It suits organizations that need to run gateways across Kubernetes, cloud, on-premises, or hybrid infrastructure. Its deployment flexibility is a strong reason to consider it; Windows users must be comfortable running it through Docker.

Key features

Kong describes its NGINX-based engine as handling 50K+ transactions per second per node. That stated capacity makes it worth considering for busy services, although teams still need to judge performance against their own traffic and architecture.

Operators can configure the gateway through an API, web UI, or declarative configuration, including changes managed in CI/CD pipelines. This accommodates different operating practices, but teams must still choose and maintain a configuration workflow. Deployment options span on-premises, cloud, Kubernetes, and serverless environments, with or without a database, in hybrid or cloud-hosted modes.

Built-in plugins cover security, authentication, transformation, and analytics; the Plugin Development Kit allows teams to develop custom plugins. That breadth helps when standard gateway behavior is not enough, but makes Kong a better fit for teams prepared to manage configuration and extensions than for those seeking a narrowly managed service.

Kong Ingress Controller configures the gateway through Kubernetes-native resources and supports traffic management, transformations, and observability across clusters. This is a practical fit for Kubernetes operators managing multiple clusters. Konnect Plus also supports REST, HTTP, LLMs, Kafka, WebSockets, gRPC, and GraphQL; Kong's broader supported protocols include UDP, TCP, and TLS.

Gateway capabilities include rate limiting, request transformation, API analytics, lifecycle management, access policies, API product management, fallback routing, and virtual API keys. Authentication options include Basic Auth, HMAC, JWT, Key Auth, LDAP, mutual TLS, OAuth 2.0, OpenID Connect, SAML, and Vault. Together these controls cover a wide range of API management needs, though the plan determines which hosted features and limits apply.

Pricing

Kong Gateway Open Source costs nothing and provides the open-source API gateway. The product page states no paid-plan limits for this plan, making it the clearest starting point for teams able to operate the gateway themselves.

The Konnect Free trial costs nothing, is billed for 30 days, requires no credit card, and includes Enterprise functionality with no Gateway limits. Analytics are retained for 30 days. It is useful for evaluating the hosted offering, but its short term and analytics retention make it unsuitable as a lasting free tier.

Konnect Plus has custom pricing charged per Gateway per month, billed monthly. It includes up to 5 serverless gateways, 2 hybrid gateways, and 2 dedicated cloud gateways, plus 1M API requests per month; each additional 1M requests costs $200/month. Its defined gateway and request allowances give teams a basis for planning, but growing traffic adds a clear usage cost. The pricing model also identifies a paid starting point of 25 /mo.

Konnect Enterprise has custom pricing billed annually. It includes no Gateway limits, unlimited developer portals and published APIs, and fully self-hosted API gateways. This suits larger deployments that need room to scale and self-hosting, but the annual term and custom price call for a more substantial commitment than Plus.

Konnect Plus includes email support with a two-business-day SLA. Enterprise adds dedicated customer success and technical account managers, with higher SLAs. Kong's pricing page lists RBAC and identifies SSO and audit logs as Enterprise features, so teams requiring those controls should factor that tier into their decision. A free plan and free trial are available; the trial terms differ from the open-source plan.

Platforms

Kong Gateway supports API, Linux, web, and self-hosted deployments, with a hybrid deployment model. Its installation documentation provides Linux packages and binaries, Docker images, and Kubernetes deployment instructions. Windows installation uses Docker; there is no native Windows installation method. That is a meaningful constraint for teams that require native Windows software.

Who it's for

Kong is a strong fit for platform and infrastructure teams operating microservices across hybrid or multi-cloud environments, especially those using Kubernetes and needing configurable traffic policies, plugins, and multiple deployment choices. The open-source gateway offers a no-cost route for teams prepared to self-manage; Konnect tiers add defined request allowances or enterprise support and management options. It is less suitable for teams that require native Windows installation or want to avoid operating gateway configuration and extensions.

Pros and cons

• Pros: Deployment across on-premises, cloud, Kubernetes, and serverless environments gives infrastructure teams room to fit the gateway to their estate.
• Pros: API, web UI, declarative configuration, and CI/CD-managed updates support different operational workflows.
• Pros: Built-in and custom plugins, broad authentication methods, and Kubernetes-native configuration cover a wide range of gateway needs.
• Cons: Windows requires Docker because Kong does not provide a native installation method.
• Cons: Konnect Plus includes 1M requests per month, with each additional 1M costing $200/month, so higher traffic can increase the bill.
• Cons: Enterprise is custom-priced and billed annually, which may not suit teams seeking a predictable, low-commitment paid plan.

Alternatives

Gravitee API Gateway is worth considering if Windows is required alongside Linux, self-hosted, web, and API platforms; its Community Edition is free, while its Planet plan costs $2,500 a month.

KrakenD API Gateway may suit teams seeking a free self-hosted option with unlimited requests, APIs, and AI workloads.

Tyk Gateway is another freemium API gateway with a free open-source plan and a usage-based Core plan.

Emissary-ingress is an open-source Kubernetes API gateway for Linux and self-hosted deployments.

Envoy Gateway is a free, open-source project for API and self-hosted deployments.

Spring Integration is a free Apache 2.0-licensed framework used as a Java/Spring application dependency.

Google Cloud Endpoints offers a free usage tier of 1,999,999 API calls and a standard usage tier priced at $3 a month.

Apache APISIX is a free API gateway available for Linux and self-hosted deployments.

Browse API Gateway Software, API Management Software, API Monetization Software, Service Mesh Platforms, API Developer Portal Software, and LLM Gateway Software for more options by category.

Verdict

Choose Kong Gateway if your team needs an adaptable API gateway for hybrid, cloud, self-hosted, or Kubernetes environments and can own its configuration and operations. Its open-source option, deployment range, and extensible plugin model are the main advantages. Look elsewhere if native Windows installation is essential, or compare plans carefully if request volume, annual billing, or Enterprise-only controls will shape the cost.