Proxy OpenAI Requests

OpenAI provides access to state-of-the-art AI models, such as GPT-3, for various applications including natural language processing, text generation, and more. Integrating OpenAI's APIs into your applications can unlock powerful capabilities for text analysis, content generation, and other AI-driven tasks.

APISIX provides capabilities for secret management, response streaming, rate limiting, and more, making it an excellent choice for proxying requests from OpenAI's API endpoints.

This guide will show you how to configure APISIX to integrate with OpenAI APIs to proxy user requests and model responses.

Prerequisite(s)

• Install Docker.
• Install cURL to send requests to the services for validation.
• Follow the Getting Started Tutorial to start a new APISIX instance in Docker or on Kubernetes.

Obtain an OpenAI API Key

Create an OpenAI account and an API key before proceeding. You can optionally save the key to an environment variable as such:

export OPENAI_API_KEY=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   # replace with your API key

Create a Route to OpenAI API

There are two main approaches to configure this route:

• Create a route to the OpenAI endpoint and attach API key using proxy-rewrite.
• Create a route with the ai-proxy plugin, in which you can configrue model parameters.

Using proxy-rewrite

Create a route to OpenAI's chat endpoint and use proxy-rewrite plugin to attach the API key to request headers:

Admin API

curl "http://127.0.0.1:9180/apisix/admin/routes" -X PUT -d '{
  "id": "openai-chat",
  "uri": "/v1/chat/completions",
  "plugins": {
    "proxy-rewrite": {
      "headers": {
        "set": {
          "Authorization": "Bearer '"$OPENAI_API_KEY"'"
        }
      }
    }
  },
  "upstream": {
    "scheme": "https",
    "nodes": {
      "api.openai.com:443": 1
    },
    "type": "roundrobin"
  }
}'

❶ Configure the route to OpenAI API's chat endpoint. You can adjust the endpoint per your need.

❷ Attach OpenAPI API key to Authorization request header.

❸ Set the scheme to HTTPS.

❹ Set the upstream node to OpenAI's API domain.

ADC

adc.yaml

services:
  - name: OpenAI Service
    routes:
      - uris:
          - /v1/chat/completions
        name: openai-chat
        plugins:
          proxy-rewrite:
            headers:
              set:
                Authorization: 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
    upstream:
      scheme: https
      type: roundrobin
      nodes:
        - host: api.openai.com
          port: 443
          weight: 1

❶ Configure the route to OpenAI API's chat endpoint. You can adjust the endpoint per your need.

❷ Attach OpenAPI API key to Authorization request header.

❸ Set the scheme to HTTPS.

❹ Set the upstream node to OpenAI's API domain.

Synchronize the configuration to APISIX:

adc sync -f adc.yaml

Ingress Controller

Create a Kubernetes manifest file to configure a route using the ApisixRoute custom resource:

openai-route.yaml

apiVersion: apisix.apache.org/v2
kind: ApisixRoute
metadata:
  name: openai-route
  namespace: ingress-apisix
spec:
  http:
    - name: openai-route
      match:
        paths:
          - /v1/chat/completions*
      upstreams:
      - name: openai-upstream
      plugins:
      - name: proxy-rewrite
        enable: true
        config:
          headers:
            Authorization: "Bearer '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'"

❶ Configure the route to OpenAI API's chat endpoint. You can adjust the endpoint per your need.

❷ Attach OpenAPI API key to the Authorization header. Alternatively, you can use Kubernetes secrets, Helm values file, or kustomize to handle environment variables.

Create another Kubernetes manifest file to configure how the upstream should pass the host header using the ApisixUpstream custom resource:

openai-upstream.yaml

apiVersion: apisix.apache.org/v2
kind: ApisixUpstream
metadata:
  name: openai-upstream
  namespace: ingress-apisix
spec:
  scheme: https
  passHost: node
  loadbalancer:
    type: roundrobin
  externalNodes:
  - type: Domain
    name: api.openai.com
    port: 443

❶ Set the upstream scheme to HTTPS.

❷ Set the upstream node to OpenAI's API domain and the listening port to 443.

Apply the configurations to your cluster:

kubectl apply -f openai-route.yaml -f openai-upstream.yaml

Using ai-proxy

Create a route with the ai-proxy plugin as such:

note

The updated plugin usage below is currently only available in API7 Enterprise and will become available in APISIX in the 3.12.0 release.

Admin API

curl "http://127.0.0.1:9180/apisix/admin/routes" -X PUT -d '{
  "id": "openai-chat",
  "uri": "/anything",
  "plugins": {
    "ai-proxy": {
      "provider": "openai",
      "auth": {
        "header": {
          "Authorization": "Bearer '"$OPENAI_API_KEY"'"
        }
      },
      "model": "gpt-3.5-turbo"
      }
    }
  }
}'

❶ Set the provider to openai, which will proxy requests to the OpenAI endpoint.

❷ Attach OpenAPI API key to Authorization request header.

❸ Set the model to gpt-3.5-turbo.

ADC

adc.yaml

services:
  - name: OpenAI Service
    routes:
      - uris:
          - /anything
        name: openai-chat
        plugins:
          ai-proxy:
            provider: openai
            auth:
              header:
                Authorization: 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
            model: "gpt-3.5-turbo"

❶ Set the provider to openai, which will proxy requests to the OpenAI endpoint.

❷ Attach OpenAPI API key to Authorization request header.

❸ Set the model to gpt-3.5-turbo.

Synchronize the configuration to APISIX:

adc sync -f adc.yaml

Ingress Controller

Create a Kubernetes manifest file to configure a route using the ApisixRoute custom resource:

openai-route.yaml

apiVersion: apisix.apache.org/v2
kind: ApisixRoute
metadata:
  name: openai-route
  namespace: ingress-apisix
spec:
  http:
    - name: openai-route
      match:
        paths:
          - /anything
      plugins:
      - name: ai-proxy
        enable: true
        config:
          provider: openai
          auth:
            header:
              Authorization: "Bearer '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'"
          model: "gpt-3.5-turbo"

❶ Set the provider to openai, which will proxy requests to the OpenAI endpoint.

❷ Attach OpenAPI API key to Authorization request header.

❸ Set the model to gpt-3.5-turbo.

Apply the configuration to your cluster:

kubectl apply -f openai-route.yaml

Verify

Admin API

ADC

Ingress Controller

First, expose the service port to your local machine by port forwarding:

kubectl port-forward svc/apisix-gateway 9080:80 &

The command above runs in the background and maps port 80 of the apisix-gateway service to port 9080 on the local machine.

If you have configured the route with proxy-rewrite, send the following request to the route:

curl "http://127.0.0.1:9080/v1/chat/completions" -X POST \
  -H "Content-Type: application/json" \
  -H "Host: api.openai.com:443" \
  -d '{
    "model": "gpt-3.5-turbo",
    "messages": [
      {
        "role": "system",
        "content": "You are a computer scientist."
      },
      {
        "role": "user",
        "content": "Explain in one sentence what a Turing machine is."
      }
    ]
  }'

If you have configured the route with ai-proxy, send the following request to the route:

curl "http://127.0.0.1:9080/anything" -X POST \
  -H "Content-Type: application/json" \
  -H "Host: api.openai.com:443" \
  -d '{
    "messages": [
      {
        "role": "system",
        "content": "You are a computer scientist."
      },
      {
        "role": "user",
        "content": "Explain in one sentence what a Turing machine is."
      }
    ]
  }'

In both cases, you should receive a response similar to the following:

{
  ...,
  "choices": [
    {
      "index": 0,
      "message": {
        "role": "assistant",
        "content": "A Turing machine is an abstract mathematical model that manipulates symbols on an infinite tape according to a set of rules, representing the concept of a general-purpose computer."
      },
      "logprobs": null,
      "finish_reason": "stop"
    }
  ],
  ...
}

See OpenAI's API specifications for more information about how to compose the request.

Next Steps

You have now learned how to integrate APISIX with OpenAI. See OpenAI's API reference to learn more about OpenAI's capabilities.

If you would like to integrate with OpenAI's streaming API, you can use the proxy-buffering plugin to disable NGINX's proxy_buffering directive to avoid server-sent events (SSE) being buffered.

In addition, you can integrate more capabilities that APISIX offers, such as rate limiting and caching, to improve system availability and user experience.