A Secure, Open Source, Self-Hosted, Scalable API Gateway

A Scalable Platform Built as a Zero Trust Architecture on top of Kubernetes for Automatic Horizontal Scalability and Availability that provides Remote Access and Dynamic Routing to your Upstreams, Identity and User Management as well as Advanced L7 Aware Access Control and Visibility.

Seamless Access to your API Upstreams Wherever They Are: Internal/Private behind NAT in any Environment and Scattered across Multiple Clouds as well as Publicly Protected Resources by API Keys. Octelium can even act as a PaaS and Deploy as well as Scale your Containers and Microservices as Upstreams.

Apply your Own Custom Identity-based, Context-aware Request/Response Manipulation via Lua Scripts and Envoy ExtProc Compliant Servers. Dynamically Enforce Dynamic Rate Limiting, Caching, JSON Schema Validation and Custom Direct Responses on a Per-Request Basis.

Application-layer Aware Access Control where You can Control Access to HTTP Paths, Methods, Headers and JSON-based body requests via Identity-based Context-aware ABAC and Policy-as-Code via CEL and Open Policy Agent (OPA) on a per-Request Basis.

Application-layer Aware Dynamic Configuration where You can Route to Different Upstreams (e.g. Multiple API Versions), Set Different Upstream API Keys, Access Tokens and mTLS Private Keys Corresponding to Different Upstream Contexts and Accounts Depending on The Identity and Context via Policy-as-Code

Provide Unified Access to all your REST and gRPC APIs for your Workloads written in any Programming Language via Standard OAuth2 Client-Credentials Flow without having to use Special SDKs

Designed to be Administered like Kubernetes via DevOps/GitOps-friendly Centralized and Declarative Way. The Cluster is furthermore fully Programmable over gRPC.

OpenTelemetry-ready Layer-7 Aware, Real-Time Visibility and Auditing to Your Log Management and SIEM Providers