KrakenD, the high performance open source declarative API gateway, preinstalled and running as a system service behind nginx with a working sample configuration that proxies and aggregates upstream APIs. Define your endpoints in a single declarative file to aggregate, transform, filter, rate-limit and secure your APIs within minutes of launch. Back
Overview
KrakenD is a high performance, stateless, declarative open source API gateway written in Go. It sits in front of your backend services and microservices and lets you compose, aggregate, transform, filter, validate, rate-limit, cache and secure your APIs from a single declarative configuration file, with no code to write and no database to run. This image delivers KrakenD fully installed and running as a system service behind an nginx reverse proxy, with a working sample gateway configuration, so an API gateway appliance is serving and aggregating traffic within minutes of launch.
Declarative API Gateway
The krakend daemon installed from the official package repository and run by the bundled systemd service, started on boot and restarted on failure. The gateway reads one declarative configuration file that describes every endpoint, its upstream backends and the pipeline of middlewares applied to it. A working sample configuration ships ready to run, exposing a direct health endpoint, a multi-backend aggregation endpoint that merges two upstream JSON responses into one, and a single-backend proxy endpoint, so you can confirm the gateway is proxying and aggregating the moment you launch.
Aggregate and Transform
KrakenD aggregates responses from many backends into a single client request, so one call to the gateway fans out to several services in parallel and merges the results. Manipulate the upstream payloads with response filtering to remove or allow specific fields, property mapping to rename them, and collection and grouping operations, so clients receive exactly the shape they need without changing the backends. Add request and response transformations, content negotiation and partial responses declaratively.
Secure and Control
Protect every endpoint with declarative rate limiting at the endpoint and per-user level, JWT validation and signing, role-based access control, CORS, security headers and request validation. Add in-memory response caching, circuit breakers and timeouts per backend to keep the gateway resilient when an upstream is slow or failing. The gateway is stateless, so you scale it horizontally behind a load balancer with no shared state.
Ready To Use
Connect over SSH and the gateway is already serving behind nginx on port 80. Read the welcome notes, curl the sample endpoints to see proxying and aggregation in action, then edit the single configuration file, point the backends at your own services and reload. The gateway runtime logs live on a dedicated, independently resizable data disk.
cloudimg Support
24/7 technical support by email and chat. Help with endpoint and backend configuration, aggregation and response manipulation, rate limiting and security policies, JWT and authentication, caching and resilience, observability and upgrade planning.
Use Cases
An API gateway in front of a microservices backend, aggregating and shaping responses for web and mobile clients. A backend-for-frontend layer that merges several services into one client-facing API. An edge gateway adding authentication, rate limiting and caching to existing services without changing them. A high throughput, stateless gateway tier scaled horizontally behind a load balancer.
All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.