Last Updated: Sep 30, 2017

API Gateway provides the following features:

API lifecycle management

  • A range of lifecycle management functions, including API release, API testing, and API removal are supported.
  • Routine maintenance functions such as API management, API version management, quick API rollback and more are supported.

Comprehensive security protection

  • Multiple authentication methods, as well as HMAC (SHA-1, SHA-256) algorithms for signatures are supported.
  • HTTPS protocol and SSL encryption are supported.
  • Active mechanisms such as anti-attack, anti-injection, anti-request replay, and anti-request tampering are supported.

Flexible permission control

  • Users can use apps as the identity for API request, and the gateway supports app-based permission control.
  • Only authorized apps can send requests to the API.
  • API providers can authorize an app to call an API.
  • If an API is available on the API marketplace, buyers can grant their own apps with the purchased API.

Precise traffic control

  • Traffic control can be used to control API access frequency, app request frequency and user request frequency.
  • Traffic control can be measured in minutes, hours, or days.
  • The gateway also supports traffic control exceptions, allowing you to set special apps and users.

Request verification

  • API Gateway supports parameter type and parameter value (range, enumeration, regular expression, and JSON Schema) verification. Invalid parameter types and values will result in immediate rejection by the API gateway. This minimizes waste of backend resources on invalid requests and significantly reduces backend service processing costs.

Data conversion

  • By configuring mapping rules, data between the frontend and backend can be translated. Front end requests and returned results are able to be converted through API Gateway.

Monitoring and alarms

  • API Gateway provides visualized API monitoring in real time, including call volume, traffic volume, response times, error rates, and successively added dimensions.
  • Historical data querying and the facilitation of overall analysis is supported.
  • You can also configure warning methods (notifications sent through SMS or email) as well as subscribe to warning notifications to stay informed about your API operational status in real time.

Automated tools

  • API Gateway automatically generates API documentation which can be viewed online.
  • API Gateway provides demo SDKs in multiple languages for better accessibility and helping to reduce O&M costs.
  • API Gateway provides visualized debugging tools for rapid testing and release.

API marketplace

  • You can release APIs on the API marketplace for other developers to purchase and use.
Thank you! We've received your feedback.