In this article, we look at what an API Gateway is, in the context of microservices.
You will learn
- What is an API Gateway?
- Why do we need API Gateways?
- How does an API Gateway Work?
Cloud and Microservices Terminology
This is the third article in a series of six articles on terminology used with cloud and microservices:
- 1 - Microservices Architectures - What is Service Discovery?
- 2 - Microservices Architectures - Centralized Configuration and Config Server
- 3 - Microservices Architectures - API Gateways
- 4 - Microservices Architectures - Importance of Centralized Logging
- 5 - Microservices Architectures - Introduction to Auto Scaling
- 6 - Microservices Architectures - What is Fault Tolerance?
Handling Cross Cutting Concerns
Whenever we design and develop a large software application, we make use of a layered architecture. For instance, in a web application, it is quite common to see an architecture similar to the following:
Here, we see that the application is organized into a Web layer, a Business layer, and a Data layer.
In a layered architecture, there are specific parts that are common to all these different layers. Such parts include:
- Logging
- Security
- Performance
- Auditing
All these features are applicable across layers, hence it makes sense to implement them in a common way.
Aspect Oriented programming is a well established way of handling these concerns. Use of constructs such as filters and interceptors is common while implementing them.
The Need For API Gateway
When we talk about a microservices architecture, we deal with multiple microservices talking to each other:
Where do you implement all the features that are common across microservices?
- authentication
- logging
- auditing
- rate limiting
That’s where the API Gateway comes into the picture.
How does an API Gateway Work?
In microservices, we route all requests - both internal and external - through API Gateways. We can implement all the common features like authentication, logging, auditing, and rate limiting in the API Gateway.
For example, you may not want Microservice3 to be called more than 10 times by a particular client. You could do that as part of rate limiting in the API gateway.
You can implement the common features across microservices in the API gateway. A popular API Gateway implementation is Zuul API Gateway.
Do check out our video on this:
Summary
Just like AOP handles cross cutting concerns in standalone applications, the API gateway manages common features for microservices in an enterprise.
Just Released
