“APISIX helped us greatly improve service quality under active-active architecture. Its complete monitoring feature has effectively supported troubleshooting, and updating the service list has become very simple.”
Wenjie Shi
,
Senior Development Engineer at Infra Team
of RPC calls per day easily
in web traffic peak period
Founded in 2010, Snowball Finance started as an investment community and has now become a leading online finance management platform in China.
Currently, the platform has amassed a user base exceeding 43 million, capturing 24% of the market share in China. The platform boasts a monthly active user count of over 2.95 million.
Before using Apache APISIX, there were many shortcomings in the system.
Complex SDK authentication modules increase system complexity and security risks when the user center is accessed across regions due to the active-active architecture being only available in the market service module
OpenResty lacks a robust monitoring system for observability and needs customized scripts to achieve scalability, resulting in higher development and operation costs
An incomplete NGINX registry center with no heartbeat mechanism lowers availability and stability, making it unable to promptly handle system failures
Used the API gateway to uniformly manage the authentication. Snowball Finance replaced the original JWT authentication with APISIX's jwt-auth plugin and used the grpc-transcode plugin to handle the previous OAuth 2.0-related authentication.
Established multi-dimensional monitoring with APISIX's Prometheus plugin for the following metrics: NGINX connection status and inbound/outbound traffic, HTTP error status code rate, and APISIX request latency.
Used the APISIX official plugin apisix-seed to integrate ZooKeeper for service discovery.
Within Snowball Finance, its RPC calls reach around tens of billions per day, and the peak volume can reach 50,000 QPS, which can result in high latency. Our solution can ease such conditions easily. Built on top of NGINX and LuaJIT, our solution can handle traffic at a rate of up to 18,000 QPS per CPU core with a latency of just 0.2 ms.
No uniform authentication methods in the original architecture result in poor scalability and cumbersome processes. Snowball Finance expects the new gateway to have strong scalability. Our solution supports over 100 plugins, enabling quick adaptation to Snowball Finance's business changes.
The main technology stack inside Snowball Finance is related to gRPC, so it needs a new gateway to forward and call services at the gateway layer, and also supports protocol translation. Our solution can perform functions such as load balancing, rate limiting, and authentication, and it can also translate between protocols to support different types of clients.
Snowball Finance hopes to realize authentication at the gateway layer, and requires that the cost of transformation is relatively low. Our solution supports a variety of authentication methods like Keycloak, OAuth and Okta, and the operation is simple and visualized, which effectively helps Snowball Finance reduce authentication costs.
Snowball Finance implemented the unified authentication, circuit breaking, and rate limiting at the gateway layer, reducing system coupling and improving service quality in dual data center scenarios
Snowball Finance established a unified monitoring solution from the gateway to the service layer leveraging the APISIX's Prometheus plugin and provided excellent support for global troubleshooting
Our solution provided Snowball Finance an elegant implementation approach for gRPC protocol translation and service management.
APISIX meets our requirement on speeding development and iteration. What distinguishes APISIX is its rich plugins, visible configuration, fine-grained verification, abundant features, active community, and high performance.
Drawing from API7's use cases in the automotive industry, Lotus Cars utilizes API7 Enterprise to manage core traffic, accelerate product delivery, and optimize time to market, all while reducing manpower and saving costs.
API7 commercial support is great for security control and comprehensive support. We chose API7 also because it is marvelous at supporting k8s.