#111111th of 146 in Backends, databases and hosting

spring-cloud-gateway

API gateway for Spring Boot 3 with route predicates and per-route filters

Stars
4.9k
License
Apache-2.0
Last commit
Nov 2026
Last release
Oct 2026
Language
Java
Stars, last 29 weeks+86
22 Apr 2026: 4,835 stars29 Apr 2026: 4,841 stars6 May 2026: 4,845 stars13 May 2026: 4,847 stars20 May 2026: 4,848 stars27 May 2026: 4,851 stars3 Jun 2026: 4,855 stars10 Jun 2026: 4,855 stars17 Jun 2026: 4,860 stars24 Jun 2026: 4,863 stars1 Jul 2026: 4,868 stars8 Jul 2026: 4,875 stars15 Jul 2026: 4,878 stars22 Jul 2026: 4,880 stars29 Jul 2026: 4,886 stars5 Aug 2026: 4,886 stars12 Aug 2026: 4,889 stars19 Aug 2026: 4,892 stars26 Aug 2026: 4,892 stars2 Sept 2026: 4,895 stars9 Sept 2026: 4,895 stars16 Sept 2026: 4,898 stars23 Sept 2026: 4,899 stars30 Sept 2026: 4,901 stars7 Oct 2026: 4,906 stars14 Oct 2026: 4,908 stars21 Oct 2026: 4,913 stars28 Oct 2026: 4,915 stars4 Nov 2026: 4,919 stars11 Nov 2026: 4,921 stars

4,835 on 22 Apr 20264,921 on 11 Nov 2026

From GitHub's daily star counts.

Checked on GitHub.

Overview

Spring Cloud Gateway is a Java API gateway built on Spring Framework 6 and Spring Boot 3 (Java 17). It matches requests by path, method, header or host, then applies filters scoped to the route that modify the downstream request and response, such as header changes, path rewrites and circuit breaker. Routes can be defined in configuration or through an API, and can come from a Spring Cloud DiscoveryClient.

Who it is for: Java teams routing HTTP traffic to microservices on Spring Boot

Strengths

  • Routes can be defined in configuration or through a Java API
  • Route matching is built into Spring Handler Mapping
  • Per-route filters cover headers, parameters, path rewrite and circuit breaker
  • Spring Cloud DiscoveryClient can supply routes

Weaknesses

  • Requires a JVM (Java 17) and the Spring Boot 3 stack
  • README covers only building and contributing, no usage or config examples
  • No Docker image or compose file detected in the repository
  • Not a model or LLM gateway; no AI features described

What it needs

  • no GPU
  • Needs JDK 17, Maven, Spring Boot 3, Docker (tests needing Redis)

What changed

  1. v5.0.3 ↗ (opens in a new tab)Security fix

    CVE-2026-47879. “CVE-2026-47879 — Spring Cloud Gateway SSRF and native file access with gRPC”

  2. v5.0.2 ↗ (opens in a new tab)Security fix

    CVE-2026-47825.

From the release notes. No flag means the note does not say so, not that the upgrade is safe.

Also in Backends, databases and hosting

See all 146
Also in Backends, databases and hosting
RankProjectScore
1bunJavaScript and TypeScript runtime with bundler, test runner and package manager96.7k stars+697 (+0.7%) in 30 dayscustom license93 out of 100
2appwriteBackend with auth, databases, storage, functions and an MCP server for agents Live demo ↗ (opens in a new tab)58.1k stars+546 (+0.9%) in 30 daysBSD-3-Clause93 out of 100
3ormTypeScript ORM for PostgreSQL and MongoDB with a plugin SPI and agent skills47.7k starsApache-2.093 out of 100
#4strapiHeadless CMS that generates REST and GraphQL APIs from content models Live demo ↗ (opens in a new tab)73.5k starscustom license92 out of 100
#5traefikHTTP reverse proxy and load balancer that auto-discovers routes from orchestrators65.5k starsMIT92 out of 100