Overview
Agent Router, formerly Envoy AI Gateway, is an open source control plane for AI and agent traffic powered by Envoy and Envoy Gateway, now an Agentic AI Foundation project. It gives application teams one consistent, OpenAI-compatible API for every model and tool — hosted providers, self-hosted inference, and MCP servers — while platform teams keep credentials, routing, quotas, failover, and usage attribution in one place. The rename changed only the repository and website locations; CRDs, the aigw CLI, container images, Helm charts, and the Go module path are unchanged.
Key Features
- Unified OpenAI-compatible API across 20+ providers, including OpenAI, Azure OpenAI, Anthropic, Google Gemini, Vertex AI, AWS Bedrock, Mistral, Groq, DeepSeek, and self-hosted inference
- Kubernetes-native control plane with
AIGatewayRoute,AIServiceBackend, andBackendSecurityPolicyCRDs - Centralized credential management, token quotas, rate limiting, failover, and usage attribution
- Standalone mode via the
aigwCLI: run a local router withaigw runand provider auto-configuration, serving OpenAI-compatible clients onlocalhost:1975 - Two-tier gateway pattern: a Tier One gateway for authentication, top-level routing, and global rate limiting, plus a Tier Two gateway with fine-grained control and endpoint picker support for self-hosted model serving clusters
- MCP server support alongside hosted and self-hosted model backends
Use Cases
- Presenting a single OpenAI-compatible endpoint to applications while routing across many model providers
- Platform teams enforcing credentials, quotas, and usage attribution without touching application code
- Kubernetes ingress and traffic management for self-hosted LLM serving clusters
- Local development and evaluation with a zero-config standalone router
Technical Details
- Control plane built on Envoy Gateway: AI traffic resources are declared as Kubernetes CRDs and enforced by Envoy as the data plane ("Agent Router controls, Envoy carries")
- API group
aigateway.envoyproxy.ioand CRDs remain unchanged from the Envoy AI Gateway era, so existing manifests keep applying after the rename - Runs in the
envoy-ai-gateway-systemnamespace; images ship asdocker.io/envoyproxy/ai-gateway-*and the Go module path staysgithub.com/envoyproxy/ai-gateway - Standalone
aigw runmode serves the OpenAI-compatible/v1API on port 1975 for laptop-scale use without a Kubernetes cluster
