Apache APISIX and Kong are both popular open-source API gateways built on NGINX/OpenResty, but they differ significantly in architecture, performance, and licensing. This page provides a comprehensive, fact-based comparison to help you choose the right gateway for your infrastructure.
93x lower max latency and 2x higher QPS than Kong in independent benchmarks
Fully open-source under Apache 2.0 — no enterprise paywall for mTLS, OIDC, canary releases, or dashboards
etcd-based architecture — zero database dependency, sub-millisecond config propagation across clusters
80+ built-in plugins with multi-language support (Lua, Go, Java, Python, WASM) vs Kong's Lua-only OSS plugins
AI Gateway ready — native LLM proxy, token-level rate limiting, and multi-model load balancing via AISIX
The most active open-source API gateway on GitHub
Apache 2.0 License — guaranteed to remain open-source
Core, Dashboard, and all 80+ plugins are fully open-source
QPS ~15K per CPU core with 0.2ms latency
etcd backend — no relational database dependency
Production-proven: 400+ bare metal servers, 1.2M+ QPS at scale
Write plugins in Lua, Go, Java, Python, or WASM
Dynamic configuration — no restarts or reloads needed
Active community with monthly releases and fast issue response
Features
Configuration Store
Apache APISIX:
Kong:
Dynamic Config Reload
Apache APISIX:
Kong:
Plugin Count (OSS)
Apache APISIX:
Kong:
Plugin Languages
Apache APISIX:
Kong:
gRPC Proxying
Apache APISIX:
Kong:
gRPC Transcoding
Apache APISIX:
Kong:
WebSocket
Apache APISIX:
Kong:
GraphQL
Apache APISIX:
Kong:
MQTT
Apache APISIX:
Kong:
HTTP/3 (QUIC)
Apache APISIX:
Kong:
mTLS
Apache APISIX:
Kong:
OpenID Connect
Apache APISIX:
Kong:
Kafka Upstream
Apache APISIX:
Kong:
Advanced Route Matching
Apache APISIX:
Kong:
Canary Release
Apache APISIX:
Kong:
Secrets Management
Apache APISIX:
Kong:
Observability
Apache APISIX:
Kong:
Built-in Dashboard
Apache APISIX:
Kong:
AI Gateway / LLM Proxy
Apache APISIX:
Kong:
ARM64
Apache APISIX:
Kong:
Kubernetes Ingress
Apache APISIX:
Kong:
License
Apache APISIX:
Kong:
Organization/Company
Apache APISIX:
Kong:
The most fundamental difference between Apache APISIX and Kong is their configuration storage backend. This single architectural choice affects performance, operational complexity, and how your gateway behaves in production.
Apache APISIX uses etcd as its configuration store. etcd is a distributed key-value store (the same technology Kubernetes uses) that provides real-time watch capabilities. When you update a route, plugin, or upstream configuration, APISIX data planes receive the change within milliseconds via etcd's watch mechanism — no polling, no cache invalidation, no restarts.
This architecture enables a clean control plane / data plane separation. The data plane (APISIX) has no direct database dependency at runtime. If etcd goes down temporarily, APISIX continues routing traffic using its in-memory configuration. This makes APISIX extremely resilient and easy to scale horizontally — just add more data plane nodes.
Kong traditionally relies on PostgreSQL (or Cassandra, now deprecated) as its configuration store. Configuration changes are written to the database, then propagated to Kong nodes via a polling-based cache invalidation mechanism. The default polling interval is 5 seconds, meaning configuration changes can take several seconds to propagate across your cluster.
Kong also offers a DB-less mode that loads configuration from a declarative YAML file, eliminating the database dependency. However, DB-less mode does not support the Admin API for runtime configuration changes — you must regenerate and reload the YAML file, which is less flexible for dynamic environments.
| Aspect | Apache APISIX | Kong |
|---|---|---|
| Config Store | etcd (distributed KV) | PostgreSQL / DB-less YAML |
| Propagation Speed | < 1ms (watch-based) | ~5s default (poll-based) |
| Runtime DB Dependency | None | Required (unless DB-less) |
| Horizontal Scaling | Add nodes, auto-sync | Add nodes + DB capacity |
| HA Under Store Failure | Continues routing | Continues with stale cache |
Independent benchmarks consistently show that Apache APISIX outperforms Kong in throughput, latency, and resource efficiency. Here are the key numbers from our APISIX 3.0 vs Kong 3.0 benchmark conducted on identical hardware:
| Metric | Apache APISIX 3.x | Kong 3.x | Difference |
|---|---|---|---|
| QPS (Requests/sec) | ~15,000 per core | ~7,500 per core | 2x higher |
| Average Latency | 0.2ms | 0.7ms | 3.5x lower |
| P99 Latency | 0.5ms | 2.1ms | 4.2x lower |
| Max Latency | 2.2ms | 205ms | 93x lower |
| Memory Usage | ~50MB base | ~200MB base | 4x less |
Both APISIX and Kong are built on NGINX and OpenResty, so what explains the performance gap? The main factors are:
These differences become more pronounced at scale. In production deployments handling millions of requests per second, the 2x QPS advantage translates directly to 50% fewer servers needed for the same workload — a significant cost saving on infrastructure.
Zoomは、プロジェクト、アプリケーション、環境、およびインフラストラクチャ管理の全体管理を実現するために、継続的デリバリーパイプラインにAPISIX Ingress Controllerを統合しています。
iQIYIの技術チームは、APISIXとKongを比較し、iQIYIのインフラストラクチャを更新・統合することで、まったく新しいAPIゲートウェイの構築に成功しました。
区块链独角兽公司Hyperchain如何利用开源API网关APISIX,赋能Hyperchain区块链平台管理web3中的区块链流量,并提及APISIX、Kong和NGINX之间的对比。