---
updatedAt: 2026-04-14T21:01:06.000Z
---

Fetch the complete documentation index at: https://docs.akeyless.io/llms.txt. Use this file to discover all available pages before exploring further. Append .md to any documentation page URL to get its markdown version.

# Gateway Overview

Akeyless Gateway Overview

Akeyless Gateway is a customer-hosted runtime component that sits between internal workloads and the Akeyless SaaS.

In practice, the Gateway is a stateless service that receives requests from applications, authenticates and authorizes those requests, brokers access to Akeyless services, and enforces local controls such as TLS settings, caching, and forwarding rules.

This allows internal systems to consume Akeyless capabilities such as [Dynamic Secrets](https://docs.akeyless.io/docs/how-to-create-dynamic-secret), [Rotated Secrets](https://docs.akeyless.io/docs/rotated-secrets), [KMIP Server](https://docs.akeyless.io/docs/kmip-server), and [Classic Keys](https://docs.akeyless.io/docs/classic-keys) without directly exposing internal resources to the public network.

Gateway management access is configured explicitly through the default Gateway identity and `allowedAccessPermissions`. The primary Gateway identity must have an RBAC Administrative rule scoped to Gateway management with permission scope set to `scope` or `all` for Gateway Console (UI) access. CLI and API management can still be allowed when the role grants the required permissions.

To open Gateway management in the UI, use the Akeyless SaaS Console (`https://console.akeyless.io`) or `<gateway-protocol>://<gateway-host>/console`, then open the **Gateway** tab, select the relevant Gateway, and select **Manage Gateway**.

Users who do not have Gateway-scoped administrative permission (`scope` or `all`) cannot see the Gateway in the **Gateway** list and cannot manage it from the UI.

## What the Gateway Does

The Gateway provides a local control plane and data path for secrets and encryption operations.

Key responsibilities include:

* Brokering requests from workloads to Akeyless APIs.
* Enforcing local authentication and access behavior.
* Managing local cache behavior for resilience during SaaS connectivity issues.
* Applying local transport security and certificate trust settings.
* Forwarding logs and telemetry into enterprise observability systems.

## How It Fits in Your Architecture

At a high level, workloads call the Gateway, and the Gateway communicates with Akeyless SaaS services over outbound connectivity.

For SaaS service endpoint and connectivity requirements, see [Gateway Network Connectivity](https://docs.akeyless.io/docs/gateway-network-connectivity).

## Deployment Models

You can deploy Akeyless Gateway in several operating models, depending on your infrastructure and scaling requirements:

* [Self-managed runtime options](https://docs.akeyless.io/docs/gateway-deploy-standalone-docker)
* [Cloud-managed Kubernetes platforms](https://docs.akeyless.io/docs/gateway-cloud-platform-deployments)
* [Cloud-managed serverless platforms](https://docs.akeyless.io/docs/gateway-cloud-serverless-deployments)

With this Gateway, Akeyless offers:

* Live fallback for network connectivity issues: [Gateway Network Connectivity](https://docs.akeyless.io/docs/gateway-network-connectivity)

* Service continuity through local in-memory caching and offline access patterns: [Gateway Caching](https://docs.akeyless.io/docs/gateway-caching)

* Log forwarding to an existing SIEM server: [Gateway Log Forwarding](https://docs.akeyless.io/docs/gateway-log-forwarding)

* Zero-Knowledge encryption support: [Gateway Zero Knowledge](https://docs.akeyless.io/docs/gateway-zero-knowledge)

## Gateway Lifecycle Navigation

* Start deployment planning in [Choose a Deployment Model](https://docs.akeyless.io/docs/deploy-gateway).
* Configure runtime behavior in [Configure Gateway](https://docs.akeyless.io/docs/configure-gateway).
* Operate and monitor in [Operate Gateway](https://docs.akeyless.io/docs/operate-gateway).
* Review [Gateway Best Practices](https://docs.akeyless.io/docs/gateway-best-practices) for security, management, and high availability guidance.

![Akeyless Gateway Architecture](https://files.readme.io/eaaa39e-Gateway_2.png)

## Tutorial

Check out our tutorial video on [Installing and Configuring the Gateway](https://tutorials.akeyless.io/docs/installing-and-configuring-akeyless-gateway).