starter.wiki

API gateway rate-limit policy

Kong Gateway

An API gateway with open-source and commercial deployment routes and plugins for consumer, credential, service, route, and specialized rate limits.

Visit official site

Editorial verdict

Choose Kong Gateway for rate limiting when API gateway identity, routing, and shared policy already justify the platform; do not adopt a gateway only for one small application quota.12

Best for

  • Shared API gateway policy
  • Consumer and credential quotas
  • Organizations already operating Kong
12

Not ideal for

  • One small application limiter
  • Teams unable to operate gateway data planes
  • Projects needing a provider-neutral library only
12
Main trade-off

Central policy reduces service duplication while adding gateway availability, configuration, edition, storage, plugin, data-plane, and migration responsibilities.12

Product boundary

Whether centralized gateway policy across APIs and consumers justifies Kong's control plane, data planes, plugins, storage, and edition boundary.

Kong Gateway is a broad API gateway used here only for centralized rate-limit policy. Basic and Advanced plugins, local, cluster, and Redis strategies, Konnect and self-managed deployments, and commercial editions have different correctness and operating boundaries.12

For: API platform teams already using or deliberately adopting Kong as a managed or self-operated gateway

  • A gateway is not otherwise justified
  • The team cannot operate the chosen topology
  • Plugin, edition, storage, or commercial boundaries do not fit

Why teams consider Kong Gateway

  • Gateway scopePolicies can attach to Services, Routes, Consumers, credentials, or global traffic.12
  • Strategy choicesDocumented local, cluster, and Redis strategies trade performance, consistency, and operations.12
  • Advanced policiesCommercial plugins add window, storage, and specialized rate-limit capabilities.12

Pricing

Kong separates open-source gateway operation from Konnect and enterprise commercial products; cost depends on deployment, control and data planes, service or instance measures, support, plugins, and infrastructure.2

Current decision boundary

Open-source, Konnect, and enterprise routes

Verified 2026-07-27: Kong publishes current Konnect and commercial pricing boundaries while self-managed open-source operation still carries infrastructure and platform-engineering cost.2

Deployment boundary
Konnect-managed or self-operated gateway2
Capability boundary
Basic versus advanced and specialized plugins2
Operations
Data planes, storage, Redis, configuration, upgrades, resilience, and observability2
Pricing checked View official pricing

Kong Gateway vs alternatives

Upstash Ratelimit

Choose when
TypeScript serverless and edge handlers
Avoid when
Fleet-wide gateway policy
Compared with Kong Gateway
Application-level control improves product context while adding library, state-service, latency, consistency, failover, and usage-cost dependencies.34

Cloudflare Rate Limiting

Choose when
Early edge enforcement
Avoid when
Product quotas requiring private application state
Compared with Kong Gateway
Edge enforcement protects origins early while accepting Cloudflare rule semantics, plan gates, observability, false-positive risk, and bypass considerations.56

Envoy

Choose when
Existing Envoy data planes
Avoid when
Turnkey managed rate limiting
Compared with Kong Gateway
Proxy-level flexibility increases control while transferring correctness, state, rollout, resilience, observability, capacity, and upgrades to the platform team.78

Resources and sources

Official product, pricing, policy, and operating sources

  • Kong Gateway rate limiting
    Open
  • Kong pricing
    Open
  • Upstash Ratelimit overview
    Open
  • Upstash Redis pricing
    Open
  • Cloudflare rate-limiting rules
    Open
  • Cloudflare application services plans
    Open
  • Envoy rate-limit filter
    Open
  • Envoy repository and license
    Open

Related tasks

  1. 1
    Kong Gateway rate limiting

    Kong · Accessed Official

  2. 2
    Kong pricing

    Kong · Accessed Official

  3. 3
    Upstash Ratelimit overview

    Upstash · Accessed Official

  4. 4
    Upstash Redis pricing

    Upstash · Accessed Official

  5. 5
    Cloudflare rate-limiting rules

    Cloudflare · Accessed Official

  6. 6
    Cloudflare application services plans

    Cloudflare · Accessed Official

  7. 7
    Envoy rate-limit filter

    Envoy · Accessed Official

  8. 8
    Envoy repository and license

    Envoy · Accessed Official