Api Gateway
API Gateway responsibilities — TLS termination, routing, auth, rate limiting, and centralized API management.
Lorem ipsum dolor sit amet, consectetur adipiscing elit,sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad miveniam, quis nostrud exercitaullamco laboris nisi ut aliquip ex ea ommodo consequat. Duis aute irure dolor in reprehenderit i
Lorem ipsum dolor s, consectetur adipng d do eiusmopor incididunt ut labore et dolore magna aliqua. Ut enim ad miveniam, quis nostrud exercitaullamco laboris nisi ut aliquip ex ea ommodo consequat. Duis aute
Web Application
# Functional Requirements / Purpose
### TLS Termination
The API Gateway accepts HTTPS requests and decrypts the traffic. It may then forward the request to backend services using HTTP or another TLS connection.
### Request Routing
The gateway decides which backend service should receive a request. It usually routes using the URL path, HTTP method, hostname, headers, or query parameters.
### Load Balancing
The gateway distributes requests across multiple instances of the same service. This prevents overload and improves service availability.
### Service Discovery
The gateway identifies the current network addresses of available service instances. It may use Kubernetes, Consul, DNS, or another service registry.
### Authentication
Authentication verifies who is making the request. The gateway may validate JWTs, API keys, OAuth tokens, cookies, or client certificates.
### Authorization
Authorization checks whether the authenticated user is allowed to perform an action. It may use roles, permissions, policies, or token scopes.
### Request Validation
The gateway checks whether a request has the correct headers, parameters, body format, content type, and size. Invalid requests are rejected before reaching the service.
### Rate Limiting
Rate limiting controls how many requests a client can make during a specific time period. Limits may be applied by user, API key, IP address, tenant, or endpoint.
### Traffic Throttling
Traffic throttling reduces or rejects traffic when the system reaches its processing limit. It protects backend services from sudden spikes and overload.
### Request Transformation
The gateway modifies a request before forwarding it to a backend. It may change headers, paths, parameters, or body formats.