Skip to content
agentgateway has joined the Agentic AI Foundation — Learn more

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Serve the UI on a gateway

Verified : Code examples on this page have been automatically tested and verified.
Page as Markdown

Give the UI a gateway of its own so that UI traffic and proxy traffic do not share a port.

About

A generated configuration attaches the UI to the same default gateway that serves your proxy traffic. Giving the UI a gateway of its own keeps UI traffic and proxy traffic on separate ports. Separate ports let you publish the proxy port while the UI port stays internal, and they let you apply different authentication policies to each.

A gateway of its own is also the prerequisite for the next two guides, because an authentication policy in ui.policies applies to the gateway that serves the UI, and a TLS certificate is configured on that gateway.

Before you begin

  1. Install standalone agentgateway.
  2. Launch the UI so that you know where agentgateway serves it today.

Serve the UI on its own gateway

You can make this change in the UI or in your configuration file.

The UI must be able to save changes, which depends on your storage mode. For more information, see Save changes from the UI.

In Docker or Helm, publish port 4001 before you start. The UI cannot publish a port, and the request in step 5 fails without it. For the steps, see the Docker or Helm tab in the Config file tab.

  1. Add a gateway for the UI.

    1. Open Traffic > Gateways, and click Add gateway.
    2. Enter ui-gateway for the Name and 4001 for the Port, and click Save gateway.
  2. Open the Settings > UI page, such as http://localhost:15000/ui/settings/ui.

  3. From the Public gateway dropdown, select ui-gateway. To serve the UI only on the admin interface, select None instead.

    Settings UI page with the Public gateway dropdown set to ui-gateway, the Save UI gateway button, and the UI access policy cards
    Settings UI page with the Public gateway dropdown set to ui-gateway, the Save UI gateway button, and the UI access policy cards
  4. Click Save UI gateway. If the UI is already served on a gateway, confirm the change in the Change UI gateway? dialog.

    If you opened the UI through the gateway that you changed or removed, the page stops loading. Open the UI on the new gateway or on the admin interface. If you chose None, the UI also removes the ui section from your configuration, including any ui.policies.

  5. Confirm that the UI answers on its own port.

    curl -s -o /dev/null -w "%{http_code}\n" http://localhost:4001/ui

    Example output:

    200

Note

The UI gateway is an addition, not a replacement. Agentgateway still serves a copy of the UI on the admin interface, which is loopback-only and which you do not need to change. Adding this gateway does not put the admin interface’s debugging endpoints on it. For more information, see The UI and the admin interface are not the same thing.

Next steps

Was this page helpful?
Agentgateway assistant

Ask me anything about agentgateway configuration, features, or usage.

Note: AI-generated content might contain errors; please verify and test all returned information.

Tip: one topic per conversation gives the best results. Use the + button in the chat header to start a new conversation.

Switching topics? Starting a new conversation improves accuracy.
↑↓ navigate ↵ select esc dismiss

What could be improved?

Your feedback helps us improve assistant answers and identify docs gaps we should fix.

Need more help? Join us on Discord: https://discord.gg/y9efgEmppm

Want to use your own agent? Add the Solo MCP server to query our docs directly. Get started here: https://search.solo.io/.