API management
API Gateway
Early access
Publish, secure and govern REST APIs on infrastructure you run.
A self-hosted API gateway and management platform. Apache APISIX carries the traffic; a control plane, an admin console and a developer portal manage it. It installs on Kubernetes from an offline image bundle.
What API Gateway does
Features
Publish and route
- Import OpenAPI 3.x specifications to create APIs, routes and catalog entries.
- Route by host, path and method to configured upstreams, scoped per environment.
Secure and control access
- Authenticate callers with API keys, JWT/OIDC or mutual TLS.
- Apply rate limits and quotas per route, plus CORS and IP allow/deny lists.
- Upload and rotate TLS certificates through the control plane.
- Approve developer access requests from the admin console.
Govern change
- Validate and preflight a configuration version, activate it, and roll it back.
- Diff and export environment configuration, and promote it between environments.
- Restrict admin access by role, including environment-scoped admin roles.
Developer self-service
- Developers sign in to a portal, search the API catalog and register applications.
- Developers create, rotate and revoke their own application credentials.
Operate
- Expose Prometheus metrics, with Grafana dashboards included.
- Keep a hash-chained audit log with a verify endpoint and optional SIEM webhook.
- Back up and restore with the scripts provided and a Kubernetes CronJob.
- Install a signed licence file and read its state through the admin API.
How it works
Apache APISIX is the data plane and receives the traffic. A Go control plane stores configuration in PostgreSQL, compiles it into APISIX routes and plugins, and publishes it when you activate a version. The admin console and the developer portal are web applications on the control plane API.
Who it is for
Administrators who need versioned configuration, access approval and an audit trail. Developers who consume those APIs and need to obtain and rotate their own credentials.
User guidance
API Gateway documentation
Getting started
Try API Gateway locally with Docker Compose and sign in to the Admin Console and Developer Portal. Production installs use the offline Kubernetes bundle.
Administrator guide
Configure, govern, deploy, and monitor APIs through the API Gateway Admin Console.
Developer portal
Find APIs, request access, manage applications and credentials, review usage, and test requests.
Troubleshooting
Resolve common Admin Console and Developer Portal authentication, configuration, deployment, and access problems.
Contact
Talk to us about API Gateway
Questions about API Gateway? Email hello@phron.tech.