Spring Cloud Gateway for Kubernetes and API Portal for VMware Tanzu – overview
Before jumping into the product installation, let’s revisit why we’re here. I like to think of the API space in terms of three personas. There’s the API Developer, the API Consumer, and the API Operator. Each has its own set of problems.
If I develop APIs, there are some recurring problems that I must solve with every single project:
- Exposing my API to my customers
- Terminating TLS
- Handling CORS and browser restrictions
- Making my API discoverable
- Securing my API endpoints so that only certain groups can execute certain functions
- Protecting against misuse by rate-limiting requests
- Rewriting request paths
- Rewriting request and response headers
API terminology
Transport Layer Security (TLS) is the cryptographic technology behind the reassuring lock next to your bank’s website’s URL in your web browser. It is especially...
