All Products
Document Center


Last Updated: Feb 07, 2020

API Gateway provides the following features:

API lifecycle management

  • A range of lifecycle management functions, including API release, API testing, and API removal are supported.
  • Routine maintenance functions such as API management, API version management, quick API rollback and more are supported.

Comprehensive security protection

  • Multiple authentication methods, and HMAC (SHA-1, SHA-256) algorithms for signatures are supported.
  • HTTPS protocol and SSL encryption are supported.
  • Active mechanisms such as anti-attack, anti-injection, anti-request replay, and anti-request tampering are supported.

Flexible permission control

  • Users can use apps as the identity for API request, and the gateway supports app-based permission control.
  • Only authorized apps can send requests to the API.
  • API providers can authorize an app to call an API.
  • If an API is available on the API marketplace, buyers can grant their own apps with the purchased API.

Precise throttling

  • Throttling can be used to control API access frequency, app request frequency and user request frequency.
  • Throttling can be measured in minutes, hours, or days.
  • The gateway also supports throttling exceptions, allowing you to set special apps and users.

Request verification

  • API Gateway supports parameter type and parameter value (range, enumeration, regular expression) verification. Invalid parameter types and values result in immediate rejection by the API gateway. This minimizes waste of backend resources on invalid requests and significantly reduces backend service processing costs.

Data conversion

  • By configuring mapping rules, data between the frontend and backend can be translated. Front end requests and returned results can be converted through API Gateway.

Monitoring and alarms

  • API Gateway provides visualized API monitoring in real time, including call volume, traffic volume, response times, error rates, and successively added dimensions.
  • Historical data querying and the facilitation of overall analysis is supported.
  • You can also configure warning methods (notifications sent through SMS or email) and subscribe to warning notifications to stay informed about your API operational status in real time.

Automated tools

  • API Gateway automatically generates API documentation which can be viewed online.
  • API Gateway provides demo SDKs in multiple languages for better accessibility and helping to reduce O&M costs.
  • API Gateway provides visualized debugging tools for rapid testing and release.

API marketplace

  • You can release APIs on the API marketplace for other developers to purchase and use.