Skip to main content

Version: 3.2.8.1

Overview

API7 Enterprise extends the core open-source functionality of Apache APISIX to provide customized, full-lifecycle API management for enterprises. It offers enterprise-level 24/7 support, advanced features, system integration, and SLA guarantees, to unleash the full potential of APISIX-powered API management.

What Is API7 Enterprise?

API7 Enterprise is a full lifecycle API management solution designed specifically for enterprises, offering a wide range of essential functionalities. These include multi-tenancy, Role-Based Access Control (RBAC), a developer portal, and more.

With a variety of protocol transcoding plugins and professional and timely technical support, API7 Enterprise modernizes legacy applications, monetizes your APIs, and delivers products faster and more securely.

Why API7 Enterprise?

Going beyond the core open-source capabilities, API7 Enterprise extends Apache APISIX to provide full lifecycle API management tailored for enterprises. It delivers enterprise-grade 24/7 support, commercial features, plugin integrations and SLA guarantees to realize the maximum potential from APISIX-driven API management.

API7 Enterprise includes the most requested enterprise-grade capabilities tested and validated by the market. With robust support for security, traffic management, analytics and developer engagement, API7 Enterprise adapts to diverse enterprise API requirements and use cases across sectors.

By complementing Apache APISIX with enterprise-grade support and capabilities, API7 Enterprise enables enterprises to focus on delivering business value from APIs rather than complex management.

With API7 Enterprise, enterprises can accelerate and optimize their end-to-end API lifecycle without having to build in-house expertise:

  • Govern API security, access and traffic at scale
  • Gain visibility through analytics across the full lifecycle
  • Integrate API gateways with existing systems and processes
  • Future-proof API infrastructure management as needs grow
  • Provide fine-grained traffic control with dynamic load balancing, circuit breaking, rate limiting, and so on

API7 Enterprise enables enterprises to realize the full potential from APIs while addressing complexities at scale.

How It Works

As the high-performance cloud-native API gateway built on NGINX and etcd, API7 Enterprise utilizes a scalable, flexible architecture to meet the requirements of enterprise-grade API management. This foundation handles security, traffic control, and resilience at scale.

how api7 works

  • Data Plane: The API7 Gateway handles all API traffic. After configuring routing rules, administrators can route incoming requests to appropriate upstream services based on predefined criteria. API7 Enterprise provides over 60 built-in plugins to address common requirements like authentication, traffic control, transformations, analytics etc. If needed, you can also develop custom plugins in Lua, Java, Go or Python and integrate them with API7 Enterprise to intervene at various stages of the request/response lifecycle.

  • Control Plane: The API7 control panel simplifies gateway management through an intuitive web interface (API7 Dashboard). Key capabilities include monitoring APIs, analyzing traffic, auditing logs, and switching between gateway groups. This centralized API Dashboard streamlines gateway administration and enhances visibility into API operations.

Advantages and Highlights

advantages-and-highlights

  • Cloud-Native

    API7 Enterprise is a cloud-native gateway that is platform-agnostic, eliminating the risk of vendor lock-in. It supports various environments including bare metal, virtual machines, Kubernetes, OpenShift, and ARM64. In addition, API7 Enterprise seamlessly integrates with other components like SkyWalking, Prometheus, Kafka, Zipkin, and others, providing comprehensive capabilities for enterprises.

  • High Availability

    API7 Enterprise by default employs etcd as the configuration center, benefiting from its native support for distributed, high-availability setups, and extensive practical experience in fields like Kubernetes (K8s). This enables API7 Enterprise to effortlessly handle millisecond-level configuration updates and support thousands of gateway nodes. The statelessness of gateway nodes allows for effortless scaling and resizing.

  • Multiple Protocol Conversion

    API7 Enterprise supports a wide range of protocols, including TCP/UDP, Dubbo, MQTT, gRPC, SOAP, and WebSocket.

  • Enhanced Security and Protection API7 Enterprise comes with a variety of built-in authentication and security capabilities, such as Basic Auth, JSON Web Token, IP blacklists/whitelists, and OAuth.

  • Exceptional Performance

    With its Radixtree algorithm for high-performance and flexible routing, API7 Enterprise achieves impressive results on AWS 8-core servers. API7 Enterprise can handle approximately 140,000 queries per second (QPS) with a latency of around 0.2 milliseconds.

  • Fully Dynamic

    Modifications to gateway configurations, additions or alterations of plugins can take effect in real-time without requiring gateway service restarts. API7 Enterprise also supports dynamic loading SSL certificates.

  • Strong Extensibility

    With the flexible plugin mechanism, API7 Enterprise allows for customizations catering to specific internal business requirements. It supports custom load balancing and routing algorithms and facilitates Serverless execution through runtime execution of user-defined functions. Therefore, API7 Enterprise enhances flexibility at the gateway's edge nodes.

  • Comprehensive Governance

    API7 Enterprise provides a rich set of governance capabilities, such as fault isolation, circuit-breaking, rate limiting, and throttling. By enabling active health checks, the gateway intelligently tracks the health status of upstream nodes and automatically filters out unhealthy nodes, enhancing overall service stability.

Supported Functionalities

  • API Publishing
    • Request routing
      • URI parameter matching
      • HTTP request header matching
      • HTTP request method matching
      • Conditional expressions
      • IPv6
      • GeoIP location matching
      • Routing time-to-live (TTL)
      • Priority matching
    • Request rewrite
      • URI rewrite
      • Add, modify, and delete HTTP request headers
      • 301, 302 redirect
      • Force redirect to HTTPS
    • Response rewrite
      • Add, modify, and delete HTTP response headers
      • Modify HTTP response code
      • Modify response body
    • Protocol conversion
      • HTTP/1.1, HTTP2
      • HTTP/3
      • TLS/HTTPS
      • MQTT
      • UDP
      • WebSocket
      • Dubbo
      • Custom Layer 4 protocol
      • Custom Layer 7 protocol
    • Canary release
      • Canary release
      • Blue-green deployment
    • Response caching
    • Traffic mirroring
    • Circuit breaking
      • API circuit breaking
      • Service degradation
    • Fault injection
    • Traffic staining
  • API Consumption
    • Consumer Management
  • API Runtime
    • Monitoring
      • Data throughput
      • Response time
      • Upstream response time
      • Status code
      • API call volume
      • Gateway instance version and status
      • Certificate expiration
    • Logging
      • Push to HTTP/TCP/UDP log servers
      • SkyWalking
      • Kafka
      • RocketMQ
      • Clickhouse
      • Syslog
      • Aliyun SLS
      • Google Cloud Logging Service
      • Splunk HTTP Event Collector (HEC)
      • Specific file on disk
      • Elasticsearch
      • Tencent Cloud CLS
      • Grafana Loki
    • Tracing
      • SkyWalking
      • Zipkin
      • OpenTracing
  • API Security
    • Request authentication
      • JWT
      • Key-auth
      • HMAC
      • Basic-auth
      • Keycloak
      • Casdoor
      • OpenID connect
      • LDAP
      • Lua Casbin
      • Open Policy Agent
      • External auth servers (Auth0, Okta, etc.)
      • OAuth2
    • Rate limiting
      • Request limiting based on a fixed window
      • Request limiting based on the leaky bucket principle
      • Limiting concurrent requests
    • IP restriction
      • Blacklist
      • Whitelist
      • Preventing ReDOS attacks
      • Preventing replay attacks
    • URI restriction
      • Blacklist
      • Whitelist
    • CORS
  • User Management
    • Role-based Access Control (RBAC)
  • Data Security
    • mTLS
    • FIPs
    • SSL certificate rotation
  • Tools
    • CLI
    • Helm charts
    • Rollback
    • YAML for standalone mode
  • Advanced
    • Data sovereignty
    • Configuration hot update

API7.ai Logo

API Management for Modern Architectures with Edge, API Gateway, Kubernetes, and Service Mesh.

Product

API7 Cloud

SOC2 Type IRed Herring

Copyright © APISEVEN Ltd. 2019 – 2024. Apache, Apache APISIX, APISIX, and associated open source project names are trademarks of the

Apache Software Foundation