starter.wikiSearch⌘K

Self-operated service proxy rate limiting

Envoy

An Apache-licensed edge and service proxy whose local and global rate-limit filters participate in a platform-operated data plane.

Visit official site

Editorial verdict

Choose Envoy for rate limiting only when an Envoy data plane already exists and the platform team intentionally owns the external service, policy, state, failure, and rollout model.12

Best for

  • Existing Envoy data planes
  • Service-proxy enforcement
  • Platform-owned distributed rate-limit architecture
12

Not ideal for

  • Turnkey managed rate limiting
  • Small application-only quotas
  • Teams without proxy and control-plane operations
12
Main trade-off

Proxy-level flexibility increases control while transferring correctness, state, rollout, resilience, observability, capacity, and upgrades to the platform team.12

Product boundary

Whether an existing Envoy data plane should own rate-limit enforcement and the organization can operate the required configuration and state service.

Envoy is a general proxy, not a turnkey managed rate-limit service. Global rate limiting calls an external rate-limit service; the organization owns descriptors, service correctness, state, failure mode, rollout, capacity, observability, upgrades, and proxy availability.12

For: Platform teams with an Envoy-based data plane and explicit ownership of rate-limit services and proxy operations

  • Envoy is not already an intentional platform
  • A managed limiter is preferred
  • The team cannot operate the external service, state, rollout, or failure mode

Why teams consider Envoy

  • Data-plane placementFilters enforce policy in an existing proxy request path.12
  • Local and global patternsEnvoy documents local controls and a global filter that calls an external service.12
  • Open-source controlApache-licensed source supports inspectable self-operated deployment.12

Pricing

Envoy is Apache-licensed open-source software; total cost is proxy and control-plane infrastructure, external rate-limit service and state, configuration, upgrades, observability, reliability, and staffing.2

Current decision boundary

Open-source self-operated proxy

Verified 2026-07-27: Envoy has no Envoy software subscription; the adopter owns every production proxy, control-plane, state-service, traffic, resilience, and staffing cost.2

Software fee
No separate Envoy subscription2
Required systems
Proxy fleet, control plane, external rate-limit service, state, and telemetry2
Critical duty
Policy correctness, failure mode, rollout, upgrades, capacity, and incident response2
Pricing checked View official pricing

Envoy vs alternatives

Upstash Ratelimit

Choose when
TypeScript serverless and edge handlers
Avoid when
Fleet-wide gateway policy
Compared with Envoy
Application-level control improves product context while adding library, state-service, latency, consistency, failover, and usage-cost dependencies.34

Cloudflare Rate Limiting

Choose when
Early edge enforcement
Avoid when
Product quotas requiring private application state
Compared with Envoy
Edge enforcement protects origins early while accepting Cloudflare rule semantics, plan gates, observability, false-positive risk, and bypass considerations.56

Kong Gateway

Choose when
Shared API gateway policy
Avoid when
One small application limiter
Compared with Envoy
Central policy reduces service duplication while adding gateway availability, configuration, edition, storage, plugin, data-plane, and migration responsibilities.78

Resources and sources

Official product, pricing, policy, and operating sources

  • Envoy rate-limit filter
    Open
  • Envoy repository and license
    Open
  • Upstash Ratelimit overview
    Open
  • Upstash Redis pricing
    Open
  • Cloudflare rate-limiting rules
    Open
  • Cloudflare application services plans
    Open
  • Kong Gateway rate limiting
    Open
  • Kong pricing
    Open

Related tasks

  1. 1
    Envoy rate-limit filter

    Envoy · Accessed Official

  2. 2
    Envoy repository and license

    Envoy · Accessed Official

  3. 3
    Upstash Ratelimit overview

    Upstash · Accessed Official

  4. 4
    Upstash Redis pricing

    Upstash · Accessed Official

  5. 5
    Cloudflare rate-limiting rules

    Cloudflare · Accessed Official

  6. 6
    Cloudflare application services plans

    Cloudflare · Accessed Official

  7. 7
    Kong Gateway rate limiting

    Kong · Accessed Official

  8. 8
    Kong pricing

    Kong · Accessed Official