agentgateway
7.5#4 in kubernetes ingress controllersFree planFree planWebAPILinuxmacOS
Visitagentgateway vs BFE Ingress Controller
BFE Ingress Controller
7.2#6 in kubernetes ingress controllersFree planFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | agentgateway | BFE Ingress Controller |
|---|---|---|
| Integrations | Official integration categories cover identity providers, AWS, Google Cloud, Azure, LLM providers, MCP, networking tools, agent frameworks and NetBird. | Official documentation names Kubernetes, Prometheus, Jaeger, Fluentd and mainstream layer-4 load balancers as integrations. |
| Limit: operational complexity | A reviewer said the Kubernetes controller and policy model add too much machinery for a single service with one model provider and a fixed tool list. | Independent analysis says a fleet with API, UI and configuration management requires four separate deployments because the data plane and control-plane components are split. |
| Notable release | Release notes document OAuth token exchange using RFC 8693 and RFC 7523 plus new Microsoft Entra ID, Descope and authentik MCP authentication providers. | Baidu announced in October 2021 that API-Server, Conf-Agent and Dashboard were released under Apache 2.0 alongside the ingress controller. |
| Observability | Built-in observability exports OpenTelemetry metrics, logs and distributed traces. | Built-in metrics, logs and distributed tracing are provided for operations and troubleshooting. |
| Security | Listed security features include JWT and OIDC, API keys, authorization policies, TLS and mTLS with certificate rotation, and rate limiting. | The vendor says BFE is written in Go, a memory-safe language, and describes it as immune to buffer overflow vulnerabilities. |
agentgateway plans
- agentgateway (open source)Free
BFE Ingress Controller plans
- Open sourceFree
Pick agentgateway if…
Agentgateway is aimed at platform engineers, tool-builders, and AI enthusiasts who need self-hosted traffic controls for services, LLMs, or agent systems. It also suits platform teams seeking routing, security, and observability features in one gateway.
Pick BFE Ingress Controller if…
BFE suits operators seeking a self-hosted Layer 7 load balancer with content-based routing and tenant isolation. Its listed integrations and installation paths may also suit teams using the named ecosystem tools.