🛡️ Security

API Gateway

A reverse proxy that sits in front of backend services, authenticating clients, enforcing rate limits and policy, and routing requests. Because it registers every client and stores every backend definition, an administrator on the gateway can reach credentials for everything it fronts.

📚 Deep Dive

Learn Article

Why an API Management Plane Is a Credential Vault for Every Backend It Fronts

An API gateway stores every client's keys, every backend's address and credentials, and the power to redirect traffic. Why it belongs at tier zero and what changes once it is classified that way.

intermediate 6 min read

Back to Glossary