Features
Feature overview
API full lifecycle management
Provides full lifecycle management for your APIs. You can quickly build, publish, subscribe to, and manage APIs. Centralizing the management of all your enterprise APIs simplifies maintenance and increases efficiency.
Multiple protocols and protocol transformation
API Gateway supports the HTTP, SOFARPC, and DUBBO protocols. It also supports transformation between these protocols for heterogeneous systems. Support for additional and custom protocols will be added in the future.
Traffic governance
Provides rate limiting at both the API and token bucket levels. The default rate limiting algorithm is the token bucket algorithm, and the leaky bucket and sliding window algorithms are also supported. The gateway can also cache API responses to reduce the load on backend servers.
Cross-origin resource sharing
API Gateway supports cross-domain configurations for HTTP cross-origin requests at both the API and environment levels. You can set standard cross-origin resource sharing (CORS) rules.
Advanced routing
API Gateway supports custom routing rules based on headers or weights, allowing requests to be routed to different servers based on their parameters. If a backend has multiple IP addresses, you can set a load balancing algorithm. The random and polling algorithms are currently supported.
API Gateway also supports routing rules for LDC unitized scenarios. In finance-grade disaster recovery scenarios, this allows for LDC-based routing of east-west traffic within a unitized architecture.
Before you use unitized routing, you must create a unified access instance in the unitized application service. For more information, see Create a unified access instance.
Parameter mapping
You can map request parameters or non-standard backend responses to the response parameters that the backend or client expects. This feature is useful for standardizing parameters and error codes across departments and includes both request and response parameter mapping.
Data model
You can define API service request and response parameters as data models and reuse these models to set parameters more efficiently. Supported parameter types include string, int, long, float, double, boolean, and list.
External authorization
You can create an external authorization API (API A) and associate it with a business API (API B) in the configuration. When a client sends a request to the backend business API B, the gateway extracts authorization parameters from the request's header or cookie. The gateway then places these parameters into the context and calls the external authorization API A. The parameters can be located in the Header, Cookie, or Body.
Batch authorization, import, and export
You can use batch authorization to attach a single API to multiple applications or attach multiple APIs to a single application. During API management, you can also create APIs using batch import and export to significantly improve configuration efficiency.
Security authentication
To ensure data security during transmission, API Gateway supports signature verification. This includes bidirectional data verification between the gateway and the subscriber, and between the provider and the gateway.