Gloo Gateway is Solo.io's open-source, Envoy-based API gateway for REST, gRPC, GraphQL, and WebSocket traffic, with paid enterprise support.
Gloo Gateway is an API gateway built on top of the Envoy proxy, developed by Solo.io, a cloud-native infrastructure company founded in 2017 by CEO Idit Levine and headquartered in Cambridge, Massachusetts. It is designed to route, split, and transform traffic across multiple protocols, including REST, gRPC, GraphQL, and WebSocket.
The product is offered in two forms: a free, open-source core released under the Apache 2.0 license, and a paid enterprise tier that adds support and features aimed at regulated or large-scale production environments.
Gloo Gateway handles traffic management tasks such as routing, traffic splitting, and request delegation, alongside security features including TLS and mTLS termination, JWT validation, and web application firewall (WAF) integration. Resiliency features include circuit breakers, automatic retries, and rate limiting.
It also includes a developer portal for self-service API credential management, analytics and API monetization tooling, and integration points for AI and agent infrastructure, letting it act as a gateway in front of both traditional services and AI-driven workloads.
The open-source edition of Gloo Gateway is free to use indefinitely under the Apache 2.0 license, with no usage limits imposed by Solo.io itself.
Enterprise pricing, which adds 24x7 support, FIPS compliance, advanced transformation capabilities, and multicluster routing, is not published and is quoted directly by Solo.io's sales team based on deployment scale and support needs.
Yes, the core of Gloo Gateway is free and open source under the Apache 2.0 license; an enterprise tier with added support and features is paid.
Gloo Gateway is made by Solo.io, founded in 2017 and headquartered in Cambridge, Massachusetts.
It supports REST, gRPC, GraphQL, and WebSocket traffic.
Gloo Gateway is commonly deployed on Kubernetes, and most production usage assumes a Kubernetes environment.
The enterprise tier adds 24x7 support, FIPS compliance, advanced transformations, and multicluster routing on top of the open-source core.