handymanServices & Tools
extensionCommon Features
extensionLayer 7 Reverse Proxying
API proxies terminate HTTP/HTTPS connections from clients and forward requests to upstream API services, hiding internal topology and providing a single front door.
extensionTLS Termination and mTLS
Proxies like NGINX, HAProxy, Envoy, and Linkerd2-proxy terminate TLS at the edge and can enforce mutual TLS between services in a mesh.
extensionRouting and Traffic Splitting
Edge proxies route requests by host, path, header, or method, and support traffic splitting, canary releases, and blue-green deployments.
extensionRate Limiting and Throttling
Reverse proxies enforce rate limits, quotas, and concurrency limits at the edge to protect upstream APIs from abuse and overload.
extensionCaching and HTTP Acceleration
Caching proxies like Varnish, NGINX, Squid, and Cloudflare cache API responses to reduce upstream load and improve client latency.
extensionObservability and Access Logging
Proxies emit structured access logs, metrics, and traces (OpenTelemetry, Prometheus, statsd) for every request crossing the edge or mesh.
extensionService Mesh Sidecar Pattern
Sidecar proxies like Envoy, Linkerd2-proxy, and Consul Connect run alongside each service to provide identity, encryption, retries, and traffic policy without changing application code.
extensionWAF and Edge Security
Edge proxies and CDNs like Cloudflare, Akamai, and Azure Application Gateway provide WAF rules, bot mitigation, and DDoS protection in front of APIs.
task_altUse Cases
task_altAPI Edge Termination
Front internal APIs with NGINX, HAProxy, or Envoy to handle TLS, HTTP/2, HTTP/3, compression, and request normalization before requests reach application servers.
task_altMulti-Cluster Ingress
Use Envoy Gateway, Emissary, Ambassador, or Traefik as Kubernetes ingress controllers to expose APIs running across multiple clusters and namespaces.
task_altService Mesh East-West Traffic
Deploy Istio, Linkerd, or Consul Connect to manage service-to-service API calls with mTLS, retries, and traffic policy inside a Kubernetes cluster.
task_altGlobal API Acceleration
Front public APIs with Cloudflare, Fastly, or Akamai to terminate connections at the edge, cache safe responses, and absorb DDoS traffic.
task_altCanary and Progressive Delivery
Use proxy-based traffic splitting in Envoy, Istio, or Linkerd to shift a percentage of API traffic to a new version and roll back on error budget breach.
task_altLegacy API Modernization
Place HAProxy, NGINX, or Apache HTTP Server in front of legacy SOAP or HTTP services to add TLS, modern auth, rate limiting, and observability without rewriting the backend.
task_altAPI Migration and Strangler Pattern
Use a reverse proxy to gradually route traffic from a legacy monolith API to new microservice APIs based on path or header rules.
integration_instructionsIntegrations
integration_instructionsEnvoy
CNCF L7 proxy used as the data plane for Istio, Consul Connect, Envoy Gateway, Ambassador, and Emissary, with an xDS configuration API.
integration_instructionsNGINX
Widely deployed open-source web server and reverse proxy with HTTP/2, HTTP/3, load balancing, caching, and Lua-based extension via OpenResty.
integration_instructionsHAProxy
High-performance TCP and HTTP reverse proxy and load balancer with a runtime Data Plane API for dynamic configuration.
integration_instructionsTraefik
Cloud-native reverse proxy and ingress controller with automatic service discovery for Kubernetes, Docker, and Consul.
integration_instructionsCaddy
HTTP/2 reverse proxy with automatic HTTPS via ACME, a JSON config API, and a plugin architecture.
integration_instructionsIstio
Service mesh that uses Envoy sidecars to provide mTLS, traffic management, and policy for Kubernetes APIs.
integration_instructionsLinkerd
Lightweight CNCF service mesh built around a purpose-built Rust micro-proxy (linkerd2-proxy) for east-west API traffic.
integration_instructionsCloudflare
Global edge proxy and CDN providing TLS termination, WAF, bot management, and caching in front of APIs and websites.
articleLatest API Stories
Most recent 25 stories pulled from across the API Evangelist network blog feeds.