Announcing Built On Envoy: Making Envoy Extensions Accessible to Everyone

Learn more

Announcing%20Tetrate%20Enterprise%20Gateway%20for%20Envoy%201.1

Tetrate Provides Enterprise Support and FedRAMP-Ready FIPS Builds for Envoy Gateway 1.1 We are excited to announce the release of Tetrate Enterprise G

Announcing%20Tetrate%20Enterprise%20Gateway%20for%20Envoy%201.1

Tetrate offers an enterprise-ready, 100% upstream distribution of Envoy Gateway, Tetrate Enterprise Gateway for Envoy (TEG). TEG is the easiest way to get started with Envoy for production use cases.

Get access now

Tetrate Provides Enterprise Support and FedRAMP-Ready FIPS Builds for Envoy Gateway 1.1

We are excited to announce the release of Tetrate Enterprise Gateway for Envoy (TEG) version 1.1, Tetrate’s FIPS-verified and CVE-protected Envoy Gateway (EG) 1.1 build. This release includes all the features of Envoy Gateway 1.1, as well as early access to security enhancements, bringing you the power of Envoy Proxy to handle Kubernetes ingress traffic. 

When using Envoy Gateway 1.1 via TEG 1.1 by Tetrate, you get a FIPS-verified build of Envoy Gateway with CVE protection, Coraza WAF, and deployment charts supporting air-gapped clusters and private image repositories.

Webinar: What’s New in Envoy Gateway 1.1

Want an entertaining TL;DR on how the new features in Envoy Gateway address your real ingress traffic challenges?

Join our free live webinar or watch on demand

to learn how the new features in Envoy Gateway 1.1 make it easier than ever to manage traffic, security, and observability for incoming traffic to your system.

Register now ›

Gateway API 1.1 Support

Envoy Gateway 1.1 implements version 1.1 of the Kubernetes Gateway API and continues to extend it with custom Envoy Gateway policies. The extensions make configuring Envoy Proxy easy, and this version enables you to leverage more advanced features than before.

FIPS and FedRAMP Compliance

When using Envoy Gateway via TEG, you benefit from early security enhancements to the project, ensuring you meet the requirements for FedRAMP compliance. At Tetrate, we value and invest in Open-Source technologies and aim to include any enhancements upstream. 

Improvements

This release includes several improvements across traffic management, observability, and security. Check out our how-to guides to learn more about how to get the most out of Envoy Gateway with TEG.

Topology

This diagram shows a simple overview of the components that Tetrate supports as part of the TEG deployment in your environment.

Post Image
Figure 1: Figure 1: Tetrate Enterprise Gateway for Envoy topology.

Next Steps

Product background Product background for tablets
Building AI agents

Agent Router Enterprise provides managed LLM & MCP Gateways plus AI Guardrails in your dedicated instance. Graduate agents from prototype to production with consistent model access, governed tool use, and runtime supervision — built on Envoy AI Gateway by its creators.

  • LLM Gateway – Unified model catalog with automatic fallback across providers
  • MCP Gateway – Curated tool access with per-profile authentication and filtering
  • AI Guardrails – Enforce policies, prevent data loss, and supervise agent behavior
  • Learn more
    Replacing NGINX Ingress

    Tetrate Enterprise Gateway for Envoy (TEG) is the enterprise-ready replacement for NGINX Ingress Controller. Built on Envoy Gateway and the Kubernetes Gateway API, TEG delivers advanced traffic management, security, and observability without vendor lock-in.

  • 100% upstream Envoy Gateway – CVE-protected builds
  • Kubernetes Gateway API native – Modern, portable, and extensible ingress
  • Enterprise-grade support – 24/7 production support from Envoy experts
  • Learn more
    Decorative CTA background pattern background background
    Tetrate logo in the CTA section Tetrate logo in the CTA section for mobile

    Ready to enhance your
    network

    with more
    intelligence?