v1.5

The following tables are populated from the conformance reports uploaded by project implementations. They are separated into the extended features that each project supports listed in their reports. Implementations only appear in this page if they pass Core conformance for the resource type, and the features listed should be Extended features. Implementations that submit conformance reports with skipped tests won’t appear in the tables.

Gateway Profile

HTTPRoute

Organization Project Version Mode Extended Features Core Backend TLS Policy Backend TLS Policy SAN Validation Gateway Address Empty Gateway Backend Client Certificate Gateway Frontend Client Certificate Validation Gateway Frontend Client Certificate Validation Insecure Fallback Gateway HTTP Listener Isolation Gateway HTTPS Listener Detect Misdirected Requests Gateway Infrastructure Propagation Gateway Port 8080 Gateway Static Addresses HTTPRoute 303R Status Code HTTPRoute 307R Status Code HTTPRoute 308R Status Code HTTPRoute Backend Protocol H2C HTTPRoute Backend Protocol Web Socket HTTPRoute Backend Request Header Modification HTTPRoute Backend Timeout HTTPRoute CORS HTTPRoute Destination Port Matching HTTPRoute Host Rewrite HTTPRoute Method Matching HTTPRoute Named Route Rule HTTPRoute Parent Ref Port HTTPRoute Path Redirect HTTPRoute Path Rewrite HTTPRoute Port Redirect HTTPRoute Query Param Matching HTTPRoute Request Mirror HTTPRoute Request Multiple Mirrors HTTPRoute Request Percentage Mirror HTTPRoute Request Timeout HTTPRoute Response Header Modification HTTPRoute Scheme Redirect Listener Set
agentgateway agentgateway v1.0.0 default 35/35 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
agentgateway agentgateway v1.1.0 default 35/35 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
airlock microgateway 5.0.0 default 28/35 features ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ❌ ✅ ✅ ✅ ❌
airlock microgateway 5.1.0 default 29/35 features ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ❌ ✅ ✅ ✅ ✅
aws aws-load-balancer-controller v3.2.0 default 5/35 features
Partially conformant; 1/14 tests skipped		 ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ✅ ❌ ✅ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅
cilium cilium v1.20.0-pre.2 default 25/35 features ✅ ✅ ❌ ✅ ❌ ❌ ✅ ✅ ❌ ✅ ✅ ✅ ❌ ❌ ❌ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌
envoyproxy envoy-gateway v1.8.0 default 33/35 features
Partially conformant; 2/52 tests skipped		 ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
envoyproxy envoy-gateway v1.8.0 gateway-namespace-mode 34/35 features
Partially conformant; 2/53 tests skipped		 ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
GKE gke-gateway 1.35.2-gke.1751000 default 11/35 features ✅ ✅ ✅ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ✅ ❌ ❌ ✅ ✅ ❌ ✅ ❌ ✅ ✅ ❌
HAProxy Ingress haproxy-ingress v0.17.0-alpha.1 default 8/35 features ✅ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ✅ ✅ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌
istio istio 1.30.5 default 31/35 features ✅ ✅ ✅ ✅ ❌ ❌ ❌ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
kgateway-dev kgateway v2.3.7 default 32/35 features ✅ ✅ ❌ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
Kong kong-operator v2.2.0 expressions 7/35 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌ ❌ ✅ ❌ ✅ ❌ ❌ ❌ ❌ ✅ ❌ ❌
Kong kong-operator v2.2.0 traditional_compatible 5/35 features ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌
N42 Gateway n42-gateway v0.17.0-alpha.3 default 8/35 features ✅ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ✅ ✅ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌
nginx nginx-gateway-fabric v2.5.0 default 26/35 features ✅ ✅ ❌ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ❌
nginx nginx-gateway-fabric v2.6.0 default 29/35 features ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅
projectcalico calico v3.32.2 default 30/35 features ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌
traefik traefik v3.7 default 14/35 features ✅ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ❌ ❌ ❌ ❌ ✅ ✅ ❌
Varnish Software AS Varnish Gateway v0.20.0 default 9/35 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ❌ ❌ ❌ ❌ ✅ ✅ ❌
WSO2 api-platform-gateway v1.2.0-alpha2 default 5/35 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌

GRPCRoute

Organization Project Version Mode Extended Features Core Gateway Address Empty Gateway Backend Client Certificate Gateway Frontend Client Certificate Validation Gateway Frontend Client Certificate Validation Insecure Fallback Gateway HTTP Listener Isolation Gateway HTTPS Listener Detect Misdirected Requests Gateway Infrastructure Propagation Gateway Port 8080 Gateway Static Addresses Listener Set
agentgateway agentgateway v1.0.0 default 10/10 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
agentgateway agentgateway v1.1.0 default 10/10 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
cilium cilium v1.20.0-pre.2 default 6/10 features ✅ ✅ ❌ ❌ ✅ ✅ ❌ ✅ ✅ ✅ ❌
envoyproxy envoy-gateway v1.8.0 default 8/10 features
Partially conformant; 2/9 tests skipped		 ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅
envoyproxy envoy-gateway v1.8.0 gateway-namespace-mode 9/10 features
Partially conformant; 2/10 tests skipped		 ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅
istio istio 1.30.5 default 6/10 features ✅ ✅ ❌ ❌ ❌ ✅ ❌ ✅ ✅ ✅ ✅
kgateway-dev kgateway v2.3.7 default 8/10 features ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅
Kong kong-operator v2.2.0 expressions 2/10 features ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌
Kong kong-operator v2.2.0 traditional_compatible 2/10 features ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌
nginx nginx-gateway-fabric v2.5.0 default 7/10 features ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅ ❌
nginx nginx-gateway-fabric v2.6.0 default 10/10 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
projectcalico calico v3.32.2 default 6/10 features ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ❌ ❌
traefik traefik v3.7 default 0/0 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ❌

TLSRoute

Organization Project Version Mode Extended Features Core Gateway Address Empty Gateway Backend Client Certificate Gateway Frontend Client Certificate Validation Gateway Frontend Client Certificate Validation Insecure Fallback Gateway HTTP Listener Isolation Gateway HTTPS Listener Detect Misdirected Requests Gateway Infrastructure Propagation Gateway Port 8080 Gateway Static Addresses Listener Set TLS Route Mode Mixed TLS Route Mode Terminate
agentgateway agentgateway v1.0.0 default 12/12 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
agentgateway agentgateway v1.1.0 default 12/12 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
cilium cilium v1.20.0-pre.2 default 7/12 features ✅ ✅ ❌ ❌ ✅ ✅ ❌ ✅ ✅ ✅ ❌ ✅ ❌
envoyproxy envoy-gateway v1.8.0 default 10/12 features
Partially conformant; 2/14 tests skipped		 ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅
envoyproxy envoy-gateway v1.8.0 gateway-namespace-mode 11/12 features
Partially conformant; 2/15 tests skipped		 ✅ ✅ ✅ ✅ ✅ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅
istio istio 1.30.5 default 8/12 features ✅ ✅ ❌ ❌ ❌ ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅
kgateway-dev kgateway v2.3.7 default 10/12 features ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅ ✅
Kong kong-operator v2.2.0 expressions 3/12 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌ ❌ ✅
Kong kong-operator v2.2.0 traditional_compatible 3/12 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ✅ ❌ ❌ ❌ ✅
nginx nginx-gateway-fabric v2.5.0 default 7/12 features ✅ ✅ ✅ ❌ ❌ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ❌
nginx nginx-gateway-fabric v2.6.0 default 10/12 features ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌
projectcalico calico v3.32.2 default 8/12 features ✅ ✅ ✅ ✅ ✅ ✅ ❌ ❌ ✅ ❌ ❌ ✅ ✅
traefik traefik v3.7 default 3/12 features ✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌ ✅ ❌ ❌ ✅ ✅

Mesh Profile

HTTPRoute

Organization Project Version Mode Extended Features Core Mesh Cluster IP Matching Mesh HTTPRoute Backend Request Header Modification Mesh HTTPRoute Named Route Rule Mesh HTTPRoute Query Param Matching Mesh HTTPRoute Redirect Path Mesh HTTPRoute Redirect Port Mesh HTTPRoute Rewrite Path Mesh HTTPRoute Scheme Redirect Mesh Consumer Route
cilium cilium v1.20.0-pre.2 default 8/9 features
Partially conformant; 1/7 tests skipped		 ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌
istio istio 1.30.5 default 8/9 features ✅ ❌ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅