Solution

A Secure, Open Source, Self-Hosted, Scalable API Gateway

Everything you need, in one platform.

Secure, Scalable API Gateway

A Scalable Platform Built as a Zero Trust Architecture on top of Kubernetes for Automatic Horizontal Scalability and Availability that provides Remote Access and Dynamic Routing to your Upstreams, Identity and User Management as well as Advanced L7 Aware Access Control and Visibility.

A Unified Architecture to Provide Access and Deployment

Seamless Access to your API Upstreams Wherever They Are: Internal/Private behind NAT in any Environment and Scattered across Multiple Clouds as well as Publicly Protected Resources by API Keys. Octelium can even act as a PaaS and Deploy as well as Scale your Containers and Microservices as Upstreams.

Advanced Request/Response Manipulation and Control

Apply your Own Custom Identity-based, Context-aware Request/Response Manipulation via Lua Scripts and Envoy ExtProc Compliant Servers. Dynamically Enforce Dynamic Rate Limiting, Caching, JSON Schema Validation and Custom Direct Responses on a Per-Request Basis.

Identity-based, L7 aware Access Control

Application-layer Aware Access Control where You can Control Access to HTTP Paths, Methods, Headers and JSON-based body requests via Identity-based Context-aware ABAC and Policy-as-Code via CEL and Open Policy Agent (OPA) on a per-Request Basis.

Dynamic, Identity-based, L7 Aware Routing

Application-layer Aware Dynamic Configuration where You can Route to Different Upstreams (e.g. Multiple API Versions), Set Different Upstream API Keys, Access Tokens and mTLS Private Keys Corresponding to Different Upstream Contexts and Accounts Depending on The Identity and Context via Policy-as-Code

Unified Access and Identity for Workloads via OAuth2

Provide Unified Access to all your REST and gRPC APIs for your Workloads written in any Programming Language via Standard OAuth2 Client-Credentials Flow without having to use Special SDKs

Centralized, Declarative and Programmable Management

Designed to be Administered like Kubernetes via DevOps/GitOps-friendly Centralized and Declarative Way. The Cluster is furthermore fully Programmable over gRPC.

OpenTelemetry-native Real-time Visibility

OpenTelemetry-ready Layer-7 Aware, Real-Time Visibility and Auditing to Your Log Management and SIEM Providers
Get started

Deploy Octelium on your own infrastructure in minutes.

Free and open source. Self-hosted. No vendor lock-in.