Hanzo Gateway
Unified API gateway
One front door for every Hanzo service. Authentication, rate limiting, intelligent routing, and full observability — built into a single high-performance edge.
Everything Routes Through Gateway
Auth, rate limit, route, and observe — one gateway, every service.
Native IAM Auth
JWT validation at the edge. Identity headers injected into every upstream. Client-supplied identity headers stripped.
Rate Limiting
Per-org, per-user, per-route token bucket limits. Burst tolerant. Backed by Valkey for cluster-wide consistency.
Smart Routing
Path-based, header-based, and weighted routing. Canary deploys, A/B traffic splits, and zero-downtime cutovers.
Observability
Structured logs, metrics, and distributed traces for every request. OTLP export to your collector of choice.
Extensible
Plugin architecture for custom auth, transforms, and policies. Write in Go or use the embedded Lua VM.
TLS Everywhere
Automatic certificate provisioning via ACME. mTLS for service-to-service. HTTP/2 and HTTP/3 ready.