Schema-validating, policy-aware, and built to terminate requests as close to your node js handlers as possible.
Reject malformed payloads before they touch a node-js worker.
Token-bucket and sliding-window strategies, enforced per region.
Verified at the gateway, propagated as workload identity downstream.
Express request transforms in TypeScript — no DSL required.
Stale-while-revalidate for read-heavy nodejs endpoints.
Inject latency or errors into a slice of traffic for resilience drills.
gateway.route("/v1/orders/:id")
.schema(OrderSchema)
.auth("oidc")
.rateLimit({ rps: 200, burst: 400 })
.cache("public, s-maxage=15")
.forward("orders-api")