Init guide environment...
Centralized identity provider integration (OIDC/SAML), JWT validation, and IP whitelisting.
Protect backends from DDoS and traffic spikes using Token Bucket or Leaking Bucket algorithms.
Modify headers, strip cookies, or convert protocols (e.g., HTTP/Rest to gRPC/Websocket).
Internal traffic distribution across multiple instances of the same microservice.
BFF (Backend for Frontend) pattern: Combine data from multiple services into one response.
Unified logging of all transit traffic, latency monitoring, and distributed tracing IDs.
Follow a request as it traverses the gateway layers
| Gateway | Technology | Best For | Market Share |
|---|---|---|---|
| NGINX / OpenResty | C / Lua | Static performance, basic routing | |
| Kong | Lua / Postgres | Plugin ecosystem, enterprise features | |
| AWS API Gateway | Cloud Native | Serverless (Lambda integration) | |
| Apigee | Java / Google | API Monetization, legacy systems | |
| Tyk | Go | High performance, developers | |
| KrakenD | Go | Stateless, extreme throughput |