All posts tagged

Learn how machine-readable schemas, stable JSON, scoped access, idempotency, and explicit change workflows make control-plane APIs safer for AI agents.

Learn where SAML, OIDC, OAuth access tokens, and API gateway policy belong when enterprise SSO and machine APIs share one application boundary.

Explore enterprise API management architecture across control and data planes, gateway runtime, portals, identity, analytics, and multi-cluster deployment.

Speed up AI-heavy delivery by putting API contract, gateway policy, and compatibility checks on the shortest reliable CI path.

Use Kubernetes 1.37 Memory QoS deliberately to protect API gateway latency, avoid memory cliffs, and roll out cgroup v2 controls safely.

Design an inference gateway that controls identity, cost, provider traffic, streaming failures, and telemetry without confusing gateway policy with model safety.

Design financial API gateway controls around verified identity, sender-constrained access, transaction authorization, audit evidence, and explicit failure behavior.

Design an e-commerce gateway around workload isolation, checkout idempotency, safe retries, controlled releases, and peak-traffic failure behavior.

Design a mobile API gateway around native-app OAuth, token validation, network-aware payloads, compatibility contracts, and safe deprecation.

Compare Apigee, MuleSoft, and Amazon API Gateway by operating model, integration scope, governance, runtime placement, portability, and total ownership.

Decide when to keep databases behind services, how to handle narrow exceptions, and how to test identity, pooling, transactions, and failure behavior.

Design a SaaS gateway around verified tenant context, isolation budgets, regional cells, policy ownership, observability, and controlled failure.

Build a gateway delivery pipeline that validates immutable configuration, tests behavior, promotes progressively, observes outcomes, and rolls back safely.

Learn how Prometheus native histograms improve API latency visibility and how to migrate gateway dashboards, alerts, and SLOs safely.

Learn how TLS 1.3 key-share selection affects API gateway origin latency, post-quantum readiness, compatibility, and rollout safety.

Combine an API gateway with Istio by assigning ingress, mesh, identity, routing, retries, and policy to explicit owners and testing every handoff.

Decide whether NGINX should remain the edge, become a transport proxy, or be replaced by an API gateway without breaking client IP, TLS, retries, or rollback.

Use Envoy as a gateway data plane, a standalone proxy, or a mesh component while making xDS, identity, authorization, retries, and failure behavior explicit.

Combine Cloudflare API Shield with an origin API gateway by separating edge detection, enforcement, identity, origin authentication, and application authorization.

Choose among Amazon API Gateway REST, HTTP, and WebSocket APIs by integration, security, endpoint, quota, observability, and operating-model requirements.

Use Kubernetes 1.37 HPA scale-to-zero safely for API-triggered workers with durable queues, external metrics, and an always-available API Gateway.

API7 Gateway 3.10.6 scopes custom plugins to gateway groups, making extension delivery safer across staging and production.

Learn how cache-key cardinality, entry layout, TTLs, response limits, and realistic benchmarks keep API Gateway caches fast without wasting memory.

See how exposed endpoints can turn an account-recovery workflow into account takeover, and map each step to gateway and application security controls.

Debug sessions in API7 Gateway capture the full execution timeline of individual requests — every phase, every plugin in execution order, and the request's own log lines. An alert policy can start the capture itself, so the traffic that triggered the alert is the traffic you get to inspect.

Learn how metrics, logs, traces, analytics, and SLOs help teams monitor, troubleshoot, and improve API reliability across distributed systems.

Learn API security architecture, common risks, authentication, authorization, runtime protection, testing, and best practices for modern API environments.

Plan a Kubernetes migration from workload assessment and containerization through networking, security, observability, cutover, rollback, and operations.

Learn microservices architecture, service boundaries, communication, discovery, resilience, security, observability, and migration best practices.

Learn how AI Gateway load balancing routes traffic across models, providers, regions, quotas, and fallback paths for reliable enterprise LLM applications.

Configure AISIX metrics, access logs, response headers, and usage events to investigate AI requests, tokens, latency, routing, and cost.

Cloudflare's x402 Monetization Gateway shows why paid API access needs gateway-level controls for identity, policy, limits, observability, and developer trust.

Learn how enterprise API management connects lifecycle, governance, security, observability, developer portals, and multi-cloud operations.

Plan an enterprise API management rollout across architecture, lifecycle workflows, portals, governance, observability, and multi-cloud operations.

Learn how API Gateway policies help teams govern AI crawler traffic with identity, rate limiting, bot controls, observability, and content access rules.

Configure and verify AISIX request, token, and concurrency limits across callers, teams, models, providers, and AISIX Cloud budgets.

Compare open source AI Gateway options and learn how to evaluate AI traffic control, security, cost governance, and enterprise readiness.

Learn how runtime gateways, management control planes, developer portals, and AI gateways work together as an enterprise API delivery platform.

New browser-based AI agent projects show why teams need API boundaries, egress controls, audit logs, and gateway policies for agentic workflows.

Compare LLM Gateway, AI Gateway, and API Gateway architectures, use cases, and enterprise requirements for governing AI traffic.

Apple's container tooling shows why cloud-native teams need local API Gateway parity before production.

Explore an enterprise AI gateway reference architecture, request flow, governance controls, and use cases for LLM and agent traffic.

Compare API proxy, reverse proxy, and API gateway patterns, including key differences, use cases, and APISIX examples.

npm v12 tightens install security, but enterprises still need API Gateway controls after code reaches runtime.

See how API Gateways reduce supply-chain blast radius with auth, rate limits, logging, and traffic policy.

Master API security fundamentals: Learn the critical differences between access control, authentication, and authorization with practical implementation examples.

Understand the key differences between API gateways and API integration platforms. Learn when to use each and whether your architecture needs both.

Learn how to prevent AI API vulnerabilities with authentication, authorization, and prompt injection defenses after Copilot incident.

Learn what an API is, how APIs work, and how to manage APIs effectively with API Gateway and API management solutions.

Learn how API Gateways protect against npm supply chain attacks with runtime security, traffic analysis, and zero-trust policies.

Explore why building custom web servers in assembly isn't scalable. Learn how API Gateways deliver performance at scale.

Learn how API Gateways add security layers to protect against CVE vulnerabilities like curl exploits through defense-in-depth.

Discover how API Gateways like API7 Enterprise securely and efficiently route AI agent requests to diverse data sources, enhancing context and performance.

Discover why structured APIs are 45x more cost-effective than raw LLM computer use and how API7/APISIX can manage them for AI consumption.

Explore how API7 Enterprise and Apache APISIX provide the high-performance, low-latency proxying required for real-time AI applications like voice.

AI agents interacting with infrastructure APIs like Cloudflare need an AI Gateway for security, rate-limiting, and cost management.

Explore AI agent vulnerabilities and how API7/APISIX as an AI Gateway secures interactions, preventing exploitation.

Learn how API Gateway, like API7/APISIX, can prevent supply chain attacks by enforcing security policies and monitoring traffic.

LLMs are finding real vulnerabilities. Learn how API7/APISIX provides dynamic, real-time API security and virtual patching.

Discover how to secure autonomous AI agent payments and manage API billing using Apache APISIX and API7 Enterprise.

Explore how WebAssembly (Wasm) plugins in Apache APISIX provide a secure, high-performance way to extend your API gateway functionality.

Learn how API7 Enterprise and Apache APISIX act as an AI Gateway to prevent AI sandbox escapes, prompt injection, and malicious API calls.

Learn how API Gateway permission guards enforce context-aware policies, protecting sensitive files, production databases, and external APIs.

This article explores the best practices to handle API-breaking changes with API Gateway.

As a prominent player in the CDN cloud services sector, UPYUN has integrated Apache APISIX into its infrastructure, particularly in the gateway for its public network and Ingress controller.