What’s the Best API Gateway for Basic Needs Like Auth and Monitoring?

You might want to check out Kong OSS; it's a solid option and free. Just keep in mind there's no UI unless you go for their enterprise version, so you'll be dealing with config files, which can make onboarding new team members a bit tricky.

If you’re already using AWS, their API Gateway could be a good fit. The per-request pricing can be a downside at scale, but if your traffic is moderate, the zero-operations management can be a nice perk.

Traefik is great for handling JWT and rate limiting. While it’s not technically an API gateway, it might still meet your requirements effectively.

Have you looked into Zuplo? It’s not tied to any specific cloud provider, though it’s not open-source. It handles JWT validation, rate limiting per key, and even provides analytics for traffic on your endpoints. Just be aware it's cloud-based, so it won't stay within your Kubernetes environment, but it's definitely worth considering.

Gravitee might be exactly what you're looking for. It covers all your needs: JWT, per-key rate limiting, routing, and monitoring dashboard—all available in the free open-source version with a UI. Unlike Kong, you won’t have to pay for the basic features.

Kong OSS and Traefik are usually the go-to choices. Kong does everything you need but lacks a friendly UI unless you opt for the paid version. On the flip side, Traefik is simpler and quicker to set up, making it decent for basic auth and rate limiting—a less painful option if you're working with Kubernetes.