apache / apisix

Apache APISIX API Gateway ｜ AI Gateway **Apache APISIX** is a dynamic, real-time, high-performance API Gateway. APISIX API Gateway provides rich traffic management features such as load balancing, dynamic upstream, canary release, circuit breaking, authentication, observability, and more. APISIX can serve as an **AI Gateway** through its flexible plugin system, providing AI proxying, load balancing for LLMs, retries and fallbacks, token-based rate limiting, and robust security to ensure the efficiency and reliability of AI agents. APISIX also provides the plugin to seamlessly convert stdio-based MCP servers to scalable HTTP SSE services. You can use APISIX API Gateway to handle traditional north-south traffic, as well as east-west traffic between services. It can also be used as a k8s ingress controller. The technical architecture of Apache APISIX: Community • Kindly Write a Review for APISIX in G2. • Mailing List: Mail to dev-subscribe@apisix.apache.org, follow the reply to subscribe to the mailing list. • Slack Workspace - invitation link (Please open an issue if this link is expired), and then join the #apisix channel (Channels -> Browse channels -> search for "apisix"). • - follow and interact with us using hashtag • Documentation • Discussions • Blog Features You can use APISIX API Gateway as a traffic entrance to process all business data, including dynamic routing, dynamic upstream, dynamic certificates, A/B testing, canary release, blue-green deployment, limit rate, defense against malicious attacks, metrics, monitoring alarms, service observability, service governance, etc. • **All platforms** • Cloud-Native: Platform agnostic, No vendor lock-in, APISIX API Gateway can run from bare-metal to Kubernetes. • Supports ARM64: Don't worry about the lock-in of the infra technology. • **Multi protocols** • TCP/UDP Proxy: Dynamic TCP/UDP proxy. • Dubbo Proxy: Dynamic HTTP to Dubbo proxy. • Dynamic MQTT Proxy: Supports to load balance MQTT by , both support MQTT 3.1.\*, 5.0. • gRPC proxy: Proxying gRPC traffic. • gRPC Web Proxy: Proxying gRPC Web traffic to gRPC Service. • gRPC transcoding: Supports protocol transcoding so that clients can access your gRPC API by using HTTP/JSON. • Proxy Websocket • Proxy Protocol • HTTP(S) Forward Proxy • SSL: Dynamically load an SSL certificate • HTTP/3 with QUIC • **Full Dynamic** • Hot Updates And Hot Plugins: Continuously updates its configurations and plugins without restarts! • Proxy Rewrite: Support rewrite the , , , , of the request before send to upstream. • Response Rewrite: Set customized response status code, body and header to the client. • Dynamic Load Balancing: Round-robin load balancing with weight. • Hash-based Load Balancing: Load balance with consistent hashing sessions. • Health Checks: Enable health check on the upstream node and will automatically filter unhealthy nodes during load balancing to ensure system stability. • Circuit-Breaker: Intelligent tracking of unhealthy upstream services. • Proxy Mirror: Provides the ability to mirror client requests. • Traffic Split: Allows users to incrementally direct percentages of traffic between various upstreams. • **Fine-grained routing** • Supports full path matching and prefix matching • Support all Nginx built-in variables as conditions for routing, so you can use , , etc. as routing conditions to implement canary release, A/B testing, etc. • Support various operators as judgment conditions for routing, for example • Support custom route matching function • IPv6: Use IPv6 to match the route. • Support TTL • Support priority • Support Batch Http Requests • Support filtering route by GraphQL attributes • **Security** • Rich authentication & authorization support: • key-auth • JWT • basic-auth • wolf-rbac • casbin • keycloak • casdoor • IP Whitelist/Blacklist • Referer Whitelist/Blacklist • IdP: Support external Identity platforms, such as Auth0, okta, etc.. • Limit-req • Limit-count • Limit-concurrency • Anti-ReDoS(Regular expression Denial of Service): Built-in policies to Anti ReDoS without configuration. • CORS Enable CORS(Cross-origin resource sharing) for your API. • URI Blocker: Block client request by URI. • Request Validator • CSRF Based on the way, protect your API from CSRF attacks. • **OPS friendly** • Zipkin tracing: Zipkin • Open source APM: support Apache SkyWalking • Works with external service discovery: In addition to the built-in etcd, it also supports Consul, Consul_kv, Nacos, Eureka and Zookeeper (CP). • Monitoring And Metrics: Prometheus • Clustering: APISIX nodes are stateless, creates clustering of the configuration center, please refer to etcd Clustering Guide. • High availability: Support to configure multiple etcd addresses in the same cluster. • Dashboard • Version Control: Supports rollbacks of operations. • CLI: start\stop\reload APISIX through the command line. • Standalone: Supports to load route rules from local YAML file, it is more friendly such as under the kubernetes(k8s). • Global Rule: Allows to run any plugin for all request, eg: limit rate, IP filter etc. • High performance: The single-core QPS reaches 18k with an average delay of fewer than 0.2 milliseconds. • Fault Injection • REST Admin API: Using the REST Admin API to control Apache APISIX, which only allows 127.0.0.1 access by default, you can modify the field in to specify a list of IPs that are allowed to call the Admin API. Also, note that the Admin API uses key auth to verify the identity of the caller. • External Loggers: Export access logs to external log management tools. (HTTP Logger, TCP Logger, Kafka Logger, UDP Logger, RocketMQ Logger, SkyWalking Logger, Alibaba Cloud Logging(SLS), Google Cloud Logging, Splunk HEC Logging, File Logger, SolarWinds Loggly Logging, TencentCloud CLS). • ClickHouse: push logs to ClickHouse. • Elasticsearch: push logs to Elasticsearch. • Datadog: push custom metrics to the DogStatsD server, comes bundled with Datadog agent, over the UDP protocol. D…