CIOPages
For vendorsCorrections to your listing are free
Fix an error, free List a company, free Order a Spotlight listingAbout Spotlight listings
DirectoryCloud InfrastructureService Mesh & API GatewayEnvoy

Envoy

Open Source

About Envoy

Envoy is an open source edge and service proxy. It is designed for cloud-native and AI-native applications. It was originally built at Lyft as a high performance C++ distributed proxy. It functions as a communication bus and universal data plane for service mesh architectures. It runs alongside every application and abstracts the network by providing common features in a platform-agnostic manner.

Products

  • Envoy Gateway: A gateway powered by the Envoy engine.
  • Envoy AI Gateway: Provides a unified API across GenAI providers with token-aware rate limiting and provider fallback on Kubernetes.

Used for

  • Adding custom logic to the data path such as authentication or AI guardrails.
  • Reconfiguring routing, clusters, and policy without restarts.
  • Terminating and originating TLS connections, including mutual TLS.

From Envoy's own website, read 2026-10-23. How we build listings.

How to evaluate Service Mesh & API Gateway

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Envoy. The category covers two kinds of product, so both frameworks are here. Most buyers need one of them.

API Management Platform
25%
Gateway & Traffic Management
Performance (latency < 5ms p99), rate limiting, load balancing, circuit breaking, protocol support (REST, GraphQL, gRPC, WebSocket)
25%
Security
OAuth 2.0/OIDC, API key management, mTLS, bot detection, runtime threat protection, OWASP API Top 10 coverage
20%
Developer Experience
Developer portal, API documentation (OpenAPI/Swagger), SDK generation, sandbox environments, self-service API access
15%
Analytics & Observability
Real-time traffic analytics, API usage dashboards, error tracking, latency monitoring, consumer analytics
15%
Lifecycle Management
API design (spec-first), versioning, deprecation workflows, CI/CD integration, governance policies, API catalog
Service Mesh
25%
Security & Zero-Trust Identity
Automatic mTLS for all service-to-service traffic, workload identity (SPIFFE/SVID) and certificate issuance/rotation, L4 and L7 authorization policy, integration with an external CA or your PKI, and FIPS-validated cryptography if you are regulated
25%
Day-Two Operations & Lifecycle
Upgrade mechanics and whether they force app-pod restarts, control-plane and certificate-authority operability, blast radius of a control-plane failure, debuggability of the data plane, multi-cluster lifecycle, and the realistic platform-team headcount to own it
20%
Data-Plane Architecture & Performance
Sidecar vs. eBPF vs. ambient model, per-pod or per-node resource overhead, added per-hop latency, behavior with ‘server-speaks-first’ and non-HTTP protocols, and whether L7 features can be adopted incrementally rather than all-or-nothing
15%
Traffic Management & Resilience
Request routing and canary/blue-green shifting, retries, timeouts, circuit breaking and outlier detection, fault injection for testing, multi-cluster and multi-zone failover, and east-west traffic policy beyond a single cluster
10%
Observability & Topology
Golden signals (latency, traffic, errors, saturation) per service with zero code change, distributed-trace context propagation, a live service-dependency map, and clean export to your existing Prometheus/Grafana/OpenTelemetry stack
5%
Ecosystem, Support & Governance
Project maturity and governance (CNCF status, breadth of maintainers, single-vendor vs. neutral control), OSS license vs. source-available terms, Kubernetes Gateway API / GAMMA support, and the quality of available commercial support and managed options

Other Service Mesh & API Gateway Vendors

View all

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .

Quick Facts

www.envoyproxy.io
CategoryCloud Infrastructure
SubcategoryService Mesh & API Gateway
PricingOpen source

We publish a detail only when we can point at the page it came from. Know when Envoy was founded or where it is based? Send it to us, free.

Keep reading

Buyer Guide
Service Mesh
Checklist
API Strategy & Governance Checklist

Assess API program maturity across design, security, documentation, and lifecycle.

State of Play
Virtualization platforms

The annual review of this market: what changed, with answers from the vendors in it.