BestHub
Sign in
Tagged articles

gateway

206 articles · Page 1 of 3
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Jul 3, 2026 · Backend Development

7 Ways to Add a Unified Prefix to Spring Boot Controllers

This article explains why a common API prefix (e.g., /api/v1) is useful in microservice or front‑back separation projects and demonstrates seven practical techniques—custom DispatcherServlet registration, YAML configuration, SpEL‑based @RequestMapping, custom composed annotation, WebMvcConfigurer addPathPrefix, internal forwarding, Spring Cloud Gateway ProxyExchange, and Nginx reverse proxy—using Spring Boot 3.5.0 examples and code snippets.

JavaNGINXSpring Boot
0 likes · 8 min read
7 Ways to Add a Unified Prefix to Spring Boot Controllers
Sohu Tech Products
Sohu Tech Products
Jun 24, 2026 · Cloud Native

Cloud‑Native Dynamic Routing & Session Persistence for AI Sandboxes via Web VNC

The article details how the team built a high‑performance, reliable cloud‑native gateway for millions of AI sandbox VNC sessions, addressing challenges of dynamic pod IPs, multi‑stage Web VNC traffic, session consistency, and security by using OpenResty, Lua scripts, Redis‑backed routing, cookie‑based state storage, and extensive Nginx tuning.

AI sandboxCloud NativeLua
0 likes · 26 min read
Cloud‑Native Dynamic Routing & Session Persistence for AI Sandboxes via Web VNC
James' Growth Diary
James' Growth Diary
Jun 15, 2026 · Backend Development

How Slash Commands Are Routed in the Hermes TUI Gateway

The article explains the design of Hermes' terminal UI gateway, detailing why the TUI does not import the Agent directly, how JSON‑RPC over stdio or WebSocket enables local and remote modes, and how slash commands are processed through a two‑layer routing system with a dedicated _SlashWorker subprocess and a pure‑function crash‑recovery plan.

Crash recoveryHermesJSON-RPC
0 likes · 16 min read
How Slash Commands Are Routed in the Hermes TUI Gateway
MaGe Linux Operations
MaGe Linux Operations
May 31, 2026 · Fundamentals

Essential Network Basics for Ops: IP Addresses, Subnet Masks, and Gateways Explained

This guide walks operations engineers through core networking concepts—including IP address structure, binary‑decimal conversion, private address ranges, subnet masks, CIDR notation, gateway functions, VLAN isolation, routing tables, DNS resolution, Docker/Kubernetes networking, and firewall configuration—while providing concrete command‑line examples and step‑by‑step troubleshooting workflows.

DockerIP addressingLinux
0 likes · 35 min read
Essential Network Basics for Ops: IP Addresses, Subnet Masks, and Gateways Explained
Java Tech Workshop
Java Tech Workshop
May 30, 2026 · Backend Development

Implement SpringBoot API Rate Limiting with Gateway and Redis

The article explains why placing rate limiting at the Spring Cloud Gateway layer, using Redis and Lua scripts, provides a high‑performance, distributed defense against traffic spikes, and walks through three algorithms, configuration parameters, code examples, and custom error handling for robust backend services.

LuaMicroservicesRedis
0 likes · 8 min read
Implement SpringBoot API Rate Limiting with Gateway and Redis
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
May 25, 2026 · Backend Development

7 Practical Ways to Secure Spring Boot APIs with Permission Control

This article walks through seven concrete implementations for controlling access to Spring Boot 3.5.0 controller endpoints—including Spring Security, Sa‑Token, custom annotation with AOP, interceptor, URL‑based filter, custom HandlerMapping, and a Spring Cloud Gateway filter—providing code samples, configuration details, and test results to help developers choose the right approach for API security.

AOPAPI SecurityPermission control
0 likes · 14 min read
7 Practical Ways to Secure Spring Boot APIs with Permission Control
Coder Trainee
Coder Trainee
May 18, 2026 · Cloud Native

Spring Cloud Microservices Tutorial – Sentinel for Fault Tolerance and Rate Limiting

This article walks through adding Alibaba Sentinel to a Spring Cloud microservice suite to protect against service outages, traffic spikes, and slow calls by configuring rate limiting, circuit breaking, and fallback mechanisms across user, order, and gateway services, with full Docker‑compose setup and testing steps.

FeignMicroservicesSentinel
0 likes · 14 min read
Spring Cloud Microservices Tutorial – Sentinel for Fault Tolerance and Rate Limiting
Su San Talks Tech
Su San Talks Tech
May 11, 2026 · Artificial Intelligence

Designing a Production‑Ready LLM Gateway: Architecture, Routing, Fallback, and Observability

This article outlines a production‑grade LLM Gateway design, detailing a three‑layer architecture, capability‑, cost‑, latency‑ and semantic‑based routing strategies, multi‑level fallback mechanisms, specialized load balancing, unified API adaptation, semantic caching, observability, and compares popular open‑source implementations.

FallbackLLMObservability
0 likes · 17 min read
Designing a Production‑Ready LLM Gateway: Architecture, Routing, Fallback, and Observability
DeWu Technology
DeWu Technology
Apr 29, 2026 · Information Security

How a General AI Agent Powers Scalable Gateway Route Security Audits

The article presents a practical AI‑driven security audit system for gateway routes that uses a layered “general Agent + business Skill” design, combines batch AI filtering with human verification, achieves full‑coverage, minute‑level detection, and reduces token costs by over 95 % through multiple optimizations.

AI AgentAPI SecurityMCP Tool
0 likes · 15 min read
How a General AI Agent Powers Scalable Gateway Route Security Audits
Ray's Galactic Tech
Ray's Galactic Tech
Apr 26, 2026 · Backend Development

Dissecting MCP Protocol: Scaling Java Microservices for AI‑Native Tooling

This article analyzes the Model Context Protocol (MCP), detailing its architecture, JSON‑RPC extensions, Streamable HTTP transport, and governance layers, and demonstrates how to transform high‑traffic Java microservices into a secure, observable AI‑native capability layer using an independent MCP gateway, tooling standards, and production‑grade implementations.

AI-nativeJavaMCP
0 likes · 46 min read
Dissecting MCP Protocol: Scaling Java Microservices for AI‑Native Tooling
Coder Trainee
Coder Trainee
Apr 25, 2026 · Cloud Native

How to Expose Spring Cloud Microservices to Frontends with Spring Cloud Gateway

This article explains why a gateway is needed in a Spring Cloud microservice architecture, compares Spring Cloud Gateway with Zuul, introduces its core concepts of routes, predicates, and filters, and provides step‑by‑step code examples for dependency setup, configuration, custom authentication and logging filters, rate limiting, circuit breaking, troubleshooting tips, and a complete gateway configuration for a blog system.

API GatewaySpring Bootcircuit breaker
0 likes · 14 min read
How to Expose Spring Cloud Microservices to Frontends with Spring Cloud Gateway
AI Step-by-Step
AI Step-by-Step
Apr 19, 2026 · Operations

Seamless Cross‑Domain Connections in Hermes Agent via Gateway Boundary Separation

Hermes introduces a layered Gateway architecture that cleanly separates entry points—CLI, messaging platforms, and HTTP—from the core AIAgent, enabling stable reuse across multiple channels while handling streaming adaptation, session routing, approvals, execution isolation, and deployment packaging in a unified control plane.

AgentExecution IsolationHermes
0 likes · 14 min read
Seamless Cross‑Domain Connections in Hermes Agent via Gateway Boundary Separation
CodeTrend
CodeTrend
Apr 11, 2026 · Artificial Intelligence

Inside OpenClaw: Architecture, Core Technologies, and Security Risks

The article provides a detailed technical analysis of the OpenClaw AI‑agent framework, covering its three‑layer architecture, prompt compiler, heartbeat mechanism, file‑based memory, skill system, ReAct loop, model‑agnostic routing, reinforcement‑learning extension, security concerns, and a side‑by‑side comparison with Hermes Agent.

Agent frameworkOpenClawfile-based memory
0 likes · 13 min read
Inside OpenClaw: Architecture, Core Technologies, and Security Risks
Shuge Unlimited
Shuge Unlimited
Mar 20, 2026 · Artificial Intelligence

How a Single Gateway Manages 30+ Messaging Platforms in OpenClaw

This article dissects OpenClaw’s low‑level architecture, showing how a long‑lived Gateway process coordinates over 30 messaging platforms, how the pi‑mono embedded agent runtime drives the thinking cycle, and how the Context Engine and Session Management ensure consistent state, persistence, and extensibility.

AI assistantAgent RuntimeContext Engine
0 likes · 17 min read
How a Single Gateway Manages 30+ Messaging Platforms in OpenClaw
Frontend AI Walk
Frontend AI Walk
Mar 18, 2026 · Operations

17 Essential OpenClaw Pitfalls and How to Fix Them for Beginners

This guide walks you through the 17 most common OpenClaw issues—from installation and Node.js version mismatches to gateway port conflicts, token authentication failures, channel integration quirks, multi‑agent communication problems, and performance bottlenecks—providing step‑by‑step diagnostics, concrete command‑line examples, scripts and preventive measures to help you avoid hours of troubleshooting.

InstallationOpenClawdevops
0 likes · 44 min read
17 Essential OpenClaw Pitfalls and How to Fix Them for Beginners
Architect
Architect
Mar 5, 2026 · Artificial Intelligence

How to Turn a Single OpenClaw Agent into a Multi‑Agent Team: A Step‑by‑Step Guide

This article walks you through the complete process of converting a single‑agent OpenClaw deployment into a multi‑agent architecture, covering agent isolation resources, when to split, creating agents, routing rules, DM safety, sandbox options, multi‑gateway setups, remote access, hot‑reload configuration, and a pre‑deployment checklist.

Agent RoutingConfigurationOpenClaw
0 likes · 23 min read
How to Turn a Single OpenClaw Agent into a Multi‑Agent Team: A Step‑by‑Step Guide
Efficient Ops
Efficient Ops
Mar 2, 2026 · Artificial Intelligence

Deploy OpenClaw: Your Multi‑Channel AI Agent Gateway Made Easy

OpenClaw is an AI agent gateway that supports WhatsApp, Telegram, Discord and other platforms, offering a quick curl‑based installation, a guided configuration wizard, extensible Skills system, token‑saving plugins, and operational tools for DevOps and SRE tasks.

AI AgentInstallationMulti-Channel Messaging
0 likes · 6 min read
Deploy OpenClaw: Your Multi‑Channel AI Agent Gateway Made Easy
AI Architecture Hub
AI Architecture Hub
Feb 25, 2026 · Artificial Intelligence

How OpenClaw Turns AI Agents into Production‑Ready Infrastructure

This article analyzes OpenClaw’s engineering‑focused architecture, detailing its three‑layer component boundaries, gateway‑centric session management, concurrency controls, fault‑self‑healing mechanisms, context handling, multi‑agent routing, and practical deployment scenarios for building stable, auditable AI agent systems.

AI AgentsOpenClawfault tolerance
0 likes · 20 min read
How OpenClaw Turns AI Agents into Production‑Ready Infrastructure
Architect
Architect
Feb 21, 2026 · Artificial Intelligence

How OpenClaw Turns AI Agents into a Reliable, Auditable Infrastructure – 7 Key Takeaways

OpenClaw treats agents as infrastructure by introducing explicit queues, session boundaries, tool permissions, and persistence layers, ensuring that multi‑channel AI assistants run predictably without chaotic side effects, and the article walks through its architecture, concurrency model, session management, context handling, tool sandboxing, and fail‑over strategies.

Context ManagementOpenClawTool Security
0 likes · 27 min read
How OpenClaw Turns AI Agents into a Reliable, Auditable Infrastructure – 7 Key Takeaways
macrozheng
macrozheng
Feb 10, 2026 · Operations

How Nginx Turns a Simple HTML File into a High‑Performance Gateway

This article explains how a local HTML file can be served via Nginx, covering HTTP server basics, reverse‑proxy concepts, modular gateway features, configuration files, single‑thread design, multi‑worker processes, shared memory, proxy caching, master‑worker coordination, performance characteristics, and the single‑point‑of‑failure issue.

NGINXReverse ProxyWeb Server
0 likes · 11 min read
How Nginx Turns a Simple HTML File into a High‑Performance Gateway
360 Smart Cloud
360 Smart Cloud
Jan 20, 2026 · Information Security

How to Secure APIs: Core Risks and Multi‑Layer Defense Strategies

This article outlines the four primary API security risks—malicious calls, data tampering, sensitive data leakage, and XSS propagation—and presents a comprehensive, multi‑layered protection framework spanning frontend safeguards, firewalls, gateways, and fine‑grained API design guidelines within APICloud.

API SecurityEncryptionauthentication
0 likes · 12 min read
How to Secure APIs: Core Risks and Multi‑Layer Defense Strategies
Linux Ops Smart Journey
Linux Ops Smart Journey
Dec 11, 2025 · Cloud Native

How to Rewrite URL Paths and Hostnames with Envoy Gateway

This guide shows how to configure Envoy Gateway's URLRewrite filter to transform request prefixes, replace full paths, and rewrite hostnames, providing step‑by‑step YAML examples, kubectl commands, and validation screenshots for microservice integration on Kubernetes.

APICloudNativeEnvoy
0 likes · 4 min read
How to Rewrite URL Paths and Hostnames with Envoy Gateway
Ray's Galactic Tech
Ray's Galactic Tech
Dec 10, 2025 · Information Security

Secure Your Elasticsearch with INFINI Gateway: TLS, Auth, Multi‑Tenant & HA Guide

This guide explains why Elasticsearch often becomes a security risk, then shows how to use INFINI Gateway as a non‑intrusive front‑end proxy to add TLS encryption, basic authentication, unified entry, multi‑tenant routing, rate‑limiting, auditing, and high‑availability for any 6.x/7.x/8.x version.

Basic AuthElasticsearchHigh Availability
0 likes · 9 min read
Secure Your Elasticsearch with INFINI Gateway: TLS, Auth, Multi‑Tenant & HA Guide
IT Services Circle
IT Services Circle
Nov 23, 2025 · Fundamentals

How Does Your Device Get an IP Address? Inside the DHCP Journey

When a device connects to a network, it initiates a DHCP discovery process, receives an IP address offer, confirms the assignment, and eventually leases the address, with static and dynamic options, subnet masks, gateways, DNS settings, renewal cycles, and conflict resolution all playing crucial roles.

DHCPDNSDynamic IP
0 likes · 12 min read
How Does Your Device Get an IP Address? Inside the DHCP Journey
Ray's Galactic Tech
Ray's Galactic Tech
Nov 10, 2025 · Cloud Native

How to Build a Highly Available Nacos + Higress Microservice Gateway on Kubernetes

This guide provides a production‑ready, step‑by‑step solution for deploying a high‑availability microservice gateway using Nacos as a service‑registry and configuration center together with Higress as a cloud‑native gateway on Kubernetes, covering architecture, prerequisites, Helm commands, key values.yaml examples, observability, security, backup, upgrade, recovery runbooks, and common troubleshooting.

Higressgatewayhelm
0 likes · 15 min read
How to Build a Highly Available Nacos + Higress Microservice Gateway on Kubernetes
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Oct 29, 2025 · Backend Development

Designing a Million‑Concurrent Backend: LVS, Nginx, and Spring Cloud Gateway

This article explains how to build a high‑performance, million‑concurrent backend architecture by combining LVS for L4 load balancing, Nginx for L7 routing, and Spring Cloud Gateway as a resilient microservice gateway, covering traffic distribution, gateway responsibilities, and fault‑tolerance mechanisms.

High concurrencyLVSMicroservices
0 likes · 6 min read
Designing a Million‑Concurrent Backend: LVS, Nginx, and Spring Cloud Gateway
Selected Java Interview Questions
Selected Java Interview Questions
Oct 26, 2025 · Backend Development

Build High‑Availability Microservices with Spring Cloud Gateway and Nacos Load Balancing

This step‑by‑step tutorial shows how to eliminate single‑point failures by deploying multiple service instances, registering them with Nacos, configuring Spring Cloud Gateway, and using the lb:// protocol to achieve automatic client‑side load balancing for resilient microservices.

Backend DevelopmentMicroservicesgateway
0 likes · 14 min read
Build High‑Availability Microservices with Spring Cloud Gateway and Nacos Load Balancing
Efficient Ops
Efficient Ops
Sep 24, 2025 · Fundamentals

What Is a VLAN and How Do Routers, Switches, and Gateways Work?

This article explains VLAN concepts, using classroom analogies, then details single‑arm routing, layer‑3 switches, gateways, DNS, MAC addresses, and subnet masks, illustrating how network segmentation improves efficiency and how devices communicate across different broadcast domains.

DNSLayer 3 SwitchMAC address
0 likes · 13 min read
What Is a VLAN and How Do Routers, Switches, and Gateways Work?
Code Wrench
Code Wrench
Aug 4, 2025 · Frontend Development

Revolutionizing Frontend with a Honeycomb Architecture: Inside easy.ui

The article introduces easy.ui's honeycomb architecture that splits a monolithic frontend into an Express gateway, independent Nuxt sub‑projects, and a shared component library, detailing core code, development workflow, tech choices, pitfalls, and a future roadmap.

Component LibraryExpressMicroservices
0 likes · 5 min read
Revolutionizing Frontend with a Honeycomb Architecture: Inside easy.ui
Architect
Architect
Jul 17, 2025 · Backend Development

Why Token Passing Is a Bad Idea and Better Alternatives for Microservice Calls

This article critiques the common practice of token passthrough for microservice authentication, explains why it hampers design and code reuse, and compares several internal call strategies—including Feign, Dubbo, Spring Boot Web with Dubbo, and K8s‑integrated approaches—highlighting their pros, cons, and best‑practice recommendations.

Feignauthenticationgateway
0 likes · 10 min read
Why Token Passing Is a Bad Idea and Better Alternatives for Microservice Calls
MaGe Linux Operations
MaGe Linux Operations
Jul 15, 2025 · Operations

Why Your Linux Network Keeps Failing? Master Subnet Masks and Gateways

This guide walks Linux administrators through the essential concepts of IP addressing, subnet masks, CIDR notation, gateway configuration, and routing, providing detailed examples for RedHat/CentOS, Debian/Ubuntu, and cloud environments, plus troubleshooting steps and advanced topics like bonding, VLANs, firewalls, and performance tuning.

Network ConfigurationRoutinggateway
0 likes · 21 min read
Why Your Linux Network Keeps Failing? Master Subnet Masks and Gateways
Top Architect
Top Architect
May 26, 2025 · Backend Development

Implementing Gray (Canary) Release in Spring Cloud with Nacos and Custom Load Balancer

This article explains how to implement gray (canary) release in a Spring Cloud project using Nacos for service discovery, custom request headers, ThreadLocal gray flags, Spring Cloud Gateway filters, custom Ribbon load balancer rules, and provides full code snippets, configuration steps, and deployment instructions.

Canary DeploymentMicroservicesRibbon
0 likes · 20 min read
Implementing Gray (Canary) Release in Spring Cloud with Nacos and Custom Load Balancer
Go Programming World
Go Programming World
May 15, 2025 · Cloud Native

Deploying MCP Gateway on Kubernetes: A Step‑by‑Step Guide

This article explains how to quickly turn existing HTTP APIs into MCP services using the Go‑based mcp‑gateway, covering the installation of a local Kind Kubernetes cluster, the required YAML manifests, Docker image handling, OpenAPI import, and verification through the web console and chat interface.

Cloud NativeGoMCP
0 likes · 14 min read
Deploying MCP Gateway on Kubernetes: A Step‑by‑Step Guide
Liangxu Linux
Liangxu Linux
May 11, 2025 · Backend Development

How Nginx Turns a Simple TXT File into a Powerful HTTP Server and Reverse Proxy

This article explains how a plain text file can be transformed into an HTML page, why an HTTP server like Nginx is needed to serve remote HTML, and how Nginx’s modular design provides reverse‑proxy, load‑balancing, caching, multi‑worker, and master‑process features to build a high‑performance, scalable gateway while addressing single‑point‑of‑failure concerns.

HTTP serverNGINXReverse Proxy
0 likes · 11 min read
How Nginx Turns a Simple TXT File into a Powerful HTTP Server and Reverse Proxy
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
May 10, 2025 · Backend Development

7 Advanced Spring Boot Cases: Resilience4j, Actuator, Cache & More

This article presents seven advanced Spring Boot topics—including Resilience4j circuit breaking, custom Actuator health checks, Saga-based distributed transactions, cache optimization, asynchronous processing, Gateway vs. Zuul, and OAuth2/JWT security—each illustrated with concise explanations, implementation steps, and code samples.

CacheResilience4jSpring Boot
0 likes · 11 min read
7 Advanced Spring Boot Cases: Resilience4j, Actuator, Cache & More
macrozheng
macrozheng
Apr 22, 2025 · Operations

How Nginx Turns a Simple HTML File into a High‑Performance Gateway

This article explains how Nginx works as an HTTP server and reverse proxy, detailing its modular gateway capabilities, single‑thread design, multi‑worker architecture, shared memory, proxy caching, master‑worker coordination, and how to address its single‑point‑of‑failure limitations.

Reverse ProxyWeb Servergateway
0 likes · 12 min read
How Nginx Turns a Simple HTML File into a High‑Performance Gateway
Huolala Safety Emergency Response Center
Huolala Safety Emergency Response Center
Apr 14, 2025 · Information Security

How a Key Gateway Secures Third‑Party API Calls and Prevents Key Leaks

This article analyzes the security risks of exposing third‑party service keys in modern applications, examines traditional and ideal key‑management approaches, and presents a detailed design of a Key Gateway that centralizes signing, encryption, token handling, multi‑tenant support, and robust exception management to protect sensitive credentials.

API SecurityAccess ControlEncryption
0 likes · 17 min read
How a Key Gateway Secures Third‑Party API Calls and Prevents Key Leaks
IT Services Circle
IT Services Circle
Apr 11, 2025 · Operations

Understanding Nginx: HTTP Server, Reverse Proxy, and Modular Gateway Architecture

This article explains how Nginx transforms a simple local HTML file into a high‑performance HTTP server and reverse‑proxy gateway, detailing its modular capabilities, configuration via nginx.conf, single‑thread design, multi‑worker processes, shared memory, proxy caching, master‑worker coordination, and the challenges of single‑point failure.

HTTP serverNGINXReverse Proxy
0 likes · 10 min read
Understanding Nginx: HTTP Server, Reverse Proxy, and Modular Gateway Architecture
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Apr 9, 2025 · Backend Development

Master Spring Boot 3: 8 Real-World Cases to Boost Your Backend Skills

This article presents eight practical Spring Boot 3 examples—including Resilience4j protection, custom Actuator endpoints, distributed transactions, caching, asynchronous programming, API gateway, OAuth2/JWT security, and scheduled tasks—each with code snippets and configuration guidance to help developers build robust backend services.

CachingResilience4jSpring Boot
0 likes · 8 min read
Master Spring Boot 3: 8 Real-World Cases to Boost Your Backend Skills
Xiaohongshu Tech REDtech
Xiaohongshu Tech REDtech
Mar 6, 2025 · Backend Development

ROFF: A High‑Performance Seven‑Layer Rust‑Based Gateway with TLS Offload, QUIC/HTTP3, and Dynamic Module System

ROFF is a Rust‑implemented, seven‑layer gateway that delivers high‑throughput load balancing with memory‑safe performance, TLS hardware offload, native QUIC/HTTP3 support, a hot‑reload/upgrade mechanism, and an extensible module system allowing over thirty built‑in filters and custom Rust macros.

HTTP/3QUICgateway
0 likes · 28 min read
ROFF: A High‑Performance Seven‑Layer Rust‑Based Gateway with TLS Offload, QUIC/HTTP3, and Dynamic Module System
Mingyi World Elasticsearch
Mingyi World Elasticsearch
Feb 17, 2025 · Backend Development

Infinilabs Gateway Config File: A Layer‑by‑Layer Deep Dive

This article walks through the Infinilabs Gateway configuration file from top‑level environment variables down to low‑level disk queues, explaining each section—env, paths, gateway core, stats, API, Elasticsearch services, entry, router, flow, pipelines, metrics, disk queue, Badger KV, floating IP, and global elastic settings—so readers can quickly understand and customize the gateway for microservice and big‑data deployments.

ConfigurationElasticsearchInfinilabs Gateway
0 likes · 18 min read
Infinilabs Gateway Config File: A Layer‑by‑Layer Deep Dive
Alibaba Cloud Native
Alibaba Cloud Native
Jan 3, 2025 · Cloud Native

How We Unified a Complex Multi‑Gateway Architecture with Higress and Istio CRD

Facing thousands of heterogeneous gateway configurations across multiple tech stacks, a Chinese cloud‑native platform consolidated its gateway layer by adopting Higress, Istio CRD, and APISIX, introducing a two‑tier rule model and automated migration tools that cut maintenance effort by 90% while preserving service continuity.

APISIXCloud NativeHigress
0 likes · 14 min read
How We Unified a Complex Multi‑Gateway Architecture with Higress and Istio CRD
Efficient Ops
Efficient Ops
Dec 15, 2024 · Fundamentals

Unlocking Network Basics: How VLANs, Routers, and DNS Shape Modern LANs

This article explains the fundamentals of VLANs, single‑arm routing, layer‑3 switches, gateways, DNS, MAC addresses, and subnet masks, using clear analogies and examples to show how network segmentation and routing enable efficient communication within and between local networks.

DNSMAC addressRouting
0 likes · 11 min read
Unlocking Network Basics: How VLANs, Routers, and DNS Shape Modern LANs
Programmer XiaoFu
Programmer XiaoFu
Sep 19, 2024 · Backend Development

Six Practical Rate‑Limiting Techniques for Microservices

The article walks through six concrete rate‑limiting methods—fixed window, sliding window, leaky bucket, token bucket (Guava RateLimiter), Sentinel middleware, and Spring Cloud Gateway—showing Java implementations, test results, advantages, drawbacks, and how they fit into microservice architectures.

GuavaJavaMicroservices
0 likes · 20 min read
Six Practical Rate‑Limiting Techniques for Microservices
Architect
Architect
Sep 16, 2024 · Backend Development

Seamless Token Refresh in Spring Boot & Axios: Full Implementation Guide

This article explains how to implement invisible token refresh for authentication servers using Spring Boot gateway filters, JWT handling, Axios interceptors, and a client‑side timer, compares client‑ and server‑side approaches, and provides complete code examples and practical recommendations.

JWTSpring BootToken Refresh
0 likes · 21 min read
Seamless Token Refresh in Spring Boot & Axios: Full Implementation Guide
Java Tech Enthusiast
Java Tech Enthusiast
Sep 12, 2024 · Backend Development

Rate Limiting Algorithms and Implementations in Java Microservices

The article explains service rate limiting and demonstrates six Java implementations—Fixed Window, Sliding Window, Leaky Bucket, Token Bucket, Sentinel middleware, and Spring Cloud Gateway—detailing their algorithms, code examples, and configuration to protect microservices from overload.

JavaMicroservicesSentinel
0 likes · 20 min read
Rate Limiting Algorithms and Implementations in Java Microservices
Top Architecture Tech Stack
Top Architecture Tech Stack
Aug 30, 2024 · Backend Development

Understanding Load Balancing and Gateway Architecture Through a Story

The article explains, using a startup scenario, how a single‑server setup leads to performance bottlenecks and single‑point failures, prompting the adoption of load balancing with Nginx and an additional gateway layer for authentication, security, and traffic control, while also containing promotional material for development tools.

NGINXTraffic Managementbackend-architecture
0 likes · 5 min read
Understanding Load Balancing and Gateway Architecture Through a Story
Java Architect Essentials
Java Architect Essentials
Aug 12, 2024 · Backend Development

Implementing Gray (Canary) Release with Spring Cloud Gateway, Nacos and Ribbon

This article explains the concept of gray (canary) release, details the required Spring Boot, Spring Cloud and Nacos versions, describes core components such as Nacos, Spring Cloud Gateway, Ribbon and OpenFeign, and provides a complete code‑first implementation with filters, interceptors, custom load‑balancer rules and deployment instructions for demonstrating gray release scenarios.

JavaRibbongateway
0 likes · 17 min read
Implementing Gray (Canary) Release with Spring Cloud Gateway, Nacos and Ribbon
Top Architect
Top Architect
Jul 18, 2024 · Backend Development

Implementing Gray Release in Spring Cloud with Nacos, Gateway, and Custom Load Balancer

This article provides a step‑by‑step guide to implementing gray (canary) release in a Spring Cloud microservice architecture, covering core components such as Nacos registration, Spring Cloud Gateway filters, custom Ribbon load‑balancing, OpenFeign interceptors, and configuration details with full code examples.

Load BalancerMicroservicesOpenFeign
0 likes · 21 min read
Implementing Gray Release in Spring Cloud with Nacos, Gateway, and Custom Load Balancer
Architecture Digest
Architecture Digest
Jul 10, 2024 · Backend Development

Implementing Internal‑Only API Access with Gateway, Redis Whitelist, and AOP in Spring Cloud

The article explains three approaches for restricting certain APIs to internal service calls—microservice isolation, a gateway‑plus‑Redis whitelist, and a gateway‑plus‑AOP solution—then provides step‑by‑step Spring Cloud code to add a public‑source header, define an AOP aspect with a custom annotation, and annotate internal‑only endpoints.

API Securitygatewayspring-cloud
0 likes · 6 min read
Implementing Internal‑Only API Access with Gateway, Redis Whitelist, and AOP in Spring Cloud
Java Tech Enthusiast
Java Tech Enthusiast
Jul 6, 2024 · Information Security

Seamless Token Auto‑Refresh with Spring Cloud Gateway and Axios

The article presents a full‑stack solution for seamless token auto‑refresh, combining a Spring Cloud Gateway GlobalFilter that signals expiration with a custom 511 status, Axios response interceptors and a TypeScript timer on the client, plus server‑side token metadata, allowing developers to choose server‑centric or client‑centric refresh strategies.

TokenTypeScriptaxios
0 likes · 21 min read
Seamless Token Auto‑Refresh with Spring Cloud Gateway and Axios
Architect
Architect
Apr 27, 2024 · Information Security

How to Stop Malicious API Calls: 8 Practical Defense Strategies

This article walks through eight concrete techniques—firewall rules, captchas, authentication checks, IP whitelists, HTTPS encryption, rate limiting, monitoring, and an API gateway—to prevent abusive requests from draining resources or compromising critical services.

API SecurityHTTPSIP whitelist
0 likes · 11 min read
How to Stop Malicious API Calls: 8 Practical Defense Strategies
Top Architect
Top Architect
Apr 8, 2024 · Backend Development

Why Token Pass‑through Is Discouraged in Microservice Authentication and Alternative Design Patterns

The article explains the drawbacks of token pass‑through in microservice authentication, advocates explicit parameter passing, outlines unified gateway authentication with Feign or Dubbo, explores Kubernetes‑integrated deployment options, and concludes with a promotional invitation to a technical community.

DubboFeignMicroservices
0 likes · 9 min read
Why Token Pass‑through Is Discouraged in Microservice Authentication and Alternative Design Patterns
Java High-Performance Architecture
Java High-Performance Architecture
Mar 27, 2024 · Backend Development

Why Token Pass‑Through Fails and How to Build Secure Unified Auth in Microservices

This article examines the pitfalls of token pass‑through authentication in microservices, proposes explicit userId parameter passing, compares unified auth approaches using Spring Cloud Gateway with Feign or Dubbo, and explores non‑unified alternatives, including K8s Ingress integration and practical code examples.

DubboFeigngateway
0 likes · 10 min read
Why Token Pass‑Through Fails and How to Build Secure Unified Auth in Microservices
DevOps
DevOps
Mar 4, 2024 · Frontend Development

Building QQ Front-end Unified Access Layer: Architecture, Technical Choices, and Performance Insights

This article shares a decade‑long journey of designing and scaling the QQ front‑end unified access layer, covering business background, overall architecture, solution comparisons, core challenges, observability, and performance optimizations while reflecting on practical lessons for large‑scale front‑end systems.

Case StudyObservabilityarchitecture
0 likes · 10 min read
Building QQ Front-end Unified Access Layer: Architecture, Technical Choices, and Performance Insights
Top Architect
Top Architect
Feb 18, 2024 · Backend Development

Why Token Pass‑Through Is Discouraged and Alternative Unified Authorization Designs for Microservices

The article explains why passing tokens between microservices is a poor design, proposes exposing explicit userId parameters, describes unified authentication via an API gateway with Feign, Dubbo or Spring Boot Web implementations, compares their pros and cons, and shows how to integrate these patterns with Kubernetes and internal API path rules.

DubboFeignMicroservices
0 likes · 9 min read
Why Token Pass‑Through Is Discouraged and Alternative Unified Authorization Designs for Microservices
Architect
Architect
Feb 10, 2024 · Backend Development

Why Token Pass‑Through Is Bad and How to Build Unified Auth in Microservices

The article critiques token pass‑through for microservice authentication, explains why internal APIs should stay stateless, and presents unified authorization patterns using Spring Cloud Gateway with Feign, Dubbo, or a gateway‑less design, plus Kubernetes integration and trade‑offs.

DubboFeignMicroservices
0 likes · 9 min read
Why Token Pass‑Through Is Bad and How to Build Unified Auth in Microservices
Architect
Architect
Dec 29, 2023 · Industry Insights

How Bilibili Built a Scalable Anti‑Crawling System: Architecture, Data Flow, and Real‑World Impact

The article details Bilibili's comprehensive anti‑crawling solution, covering the problem background, a two‑layer detection framework integrated with APIGW and GAIA, risk perception, strategy iteration, verification mechanisms, quantitative results, and future improvement directions, all illustrated with concrete examples and performance numbers.

API SecurityBilibiliOperations
0 likes · 23 min read
How Bilibili Built a Scalable Anti‑Crawling System: Architecture, Data Flow, and Real‑World Impact
Open Source Linux
Open Source Linux
Dec 27, 2023 · Cloud Computing

Unlocking High‑Performance Cloud Network Gateways: Insights from the Open Cloud Network Whitepaper

This announcement shares a 43‑page research whitepaper on open cloud network high‑performance gateway technology, explaining SDN fundamentals, analyzing current gateway solutions, and proposing a decoupled stateful‑stateless approach that aligns with open, minimalist network trends, with a download link provided.

Cloud NetworkingSDNgateway
0 likes · 3 min read
Unlocking High‑Performance Cloud Network Gateways: Insights from the Open Cloud Network Whitepaper
High Availability Architecture
High Availability Architecture
Dec 20, 2023 · Information Security

API Anti‑Crawling and Security Architecture: Risk Detection, Strategy, and Effectiveness at Bilibili

This article details Bilibili's comprehensive anti‑crawling system, covering the background of API abuse, the data‑flow framework, risk perception, strategy iteration, verification mechanisms, gateway signing design, and the measurable impact on normal and special‑case interfaces.

BilibiliRisk Detectionanti‑crawling
0 likes · 19 min read
API Anti‑Crawling and Security Architecture: Risk Detection, Strategy, and Effectiveness at Bilibili
Didi Tech
Didi Tech
Oct 10, 2023 · Backend Development

Investigation of 300‑Second Redis Timeout Issues in a Go Service

The article details how a Go service’s 300‑second Redis call timeout was traced to a gateway’s full‑NAT session‑table loss, and explains how targeted retries, proper timeout settings, and rate‑limiting can prevent similar cascading failures in distributed systems.

GoRedisgateway
0 likes · 9 min read
Investigation of 300‑Second Redis Timeout Issues in a Go Service
Alibaba Cloud Native
Alibaba Cloud Native
Sep 9, 2023 · Cloud Native

How to Use Cloud‑Native Gateway Observability for Rapid Fault Detection and Root‑Cause Analysis

This article explains how observability—through logging, metrics, and distributed tracing—enables cloud‑native gateways to detect failures early, pinpoint problematic routes and services with Prometheus and SLS logs, and finally trace root causes using Arms xtrace, improving system reliability and stability.

LoggingMicroservicesgateway
0 likes · 10 min read
How to Use Cloud‑Native Gateway Observability for Rapid Fault Detection and Root‑Cause Analysis
dbaplus Community
dbaplus Community
Aug 23, 2023 · Information Security

Why APISIX TLS Handshakes Failed: Missing SNI and SSLv2 Pitfalls

During a migration from Nginx to APISIX, the team encountered TLS handshake failures caused by missing SNI fields and legacy SSLv2Hello usage, leading to a detailed investigation, protocol explanations, and configuration fixes to restore secure connections without modifying client code.

APISIXSNISSL
0 likes · 11 min read
Why APISIX TLS Handshakes Failed: Missing SNI and SSLv2 Pitfalls
Architect
Architect
Aug 23, 2023 · Backend Development

How to Restrict Certain APIs to Internal Calls Only in a Microservice Architecture

This article examines three practical approaches for preventing external exposure of specific APIs—service isolation, gateway‑based Redis whitelist, and gateway‑plus‑AOP—evaluates their trade‑offs, and provides step‑by‑step Java code to implement the preferred AOP solution in a Spring Cloud environment.

AOPAPI SecurityMicroservices
0 likes · 8 min read
How to Restrict Certain APIs to Internal Calls Only in a Microservice Architecture
Selected Java Interview Questions
Selected Java Interview Questions
Jun 27, 2023 · Backend Development

Implementing Internal‑Only APIs with Microservice Isolation, Redis Whitelist, and Gateway + AOP

This article explores three practical solutions for exposing APIs only to internal services—microservice isolation, a Redis‑based whitelist via the gateway, and a gateway‑plus‑AOP approach—detailing their trade‑offs and providing complete Java code examples for the chosen method.

AOPAccess Controlbackend
0 likes · 7 min read
Implementing Internal‑Only APIs with Microservice Isolation, Redis Whitelist, and Gateway + AOP
Alibaba Cloud Native
Alibaba Cloud Native
Apr 22, 2023 · Cloud Native

Unlock Higress 1.0 RC: A One‑Click Cloud‑Native Gateway with Plugins, Hot Updates, and Full Observability

Higress 1.0.0‑rc offers a ready‑to‑use cloud‑native gateway with one‑click installation via Helm, a console that simplifies Ingress/Gateway APIs, extensive plugin and service‑discovery support, hot‑update capabilities, built‑in observability, and detailed documentation for advanced traffic management and community contribution.

Plugincloud-nativegateway
0 likes · 9 min read
Unlock Higress 1.0 RC: A One‑Click Cloud‑Native Gateway with Plugins, Hot Updates, and Full Observability
Top Architect
Top Architect
Apr 6, 2023 · Backend Development

General Architecture Overview and Implementation for Scalable Backend Systems

This article presents a senior architect's comprehensive guide to evolving a classic three‑tier backend architecture into a flexible system composed of a gateway layer handling HTTP and TCP protocols, a business layer with services, processes and reusable components, and a foundation layer that defines interfaces and essential technical components such as storage, caching, messaging, transactions, and locking.

gatewayservice-layertechnical components
0 likes · 13 min read
General Architecture Overview and Implementation for Scalable Backend Systems
Architects' Tech Alliance
Architects' Tech Alliance
Apr 2, 2023 · Fundamentals

General Software Architecture Overview and Implementation

This article presents a comprehensive overview of a flexible, layered software architecture—covering gateway, business, and foundation layers—explaining how to evolve from simple startup setups to adaptable structures that support HTTP/TCP handling, service design, component abstraction, and common technical components.

Business Layerbackendgateway
0 likes · 12 min read
General Software Architecture Overview and Implementation
Alibaba Cloud Native
Alibaba Cloud Native
Mar 25, 2023 · Cloud Native

How We Built a Transparent Cross‑Network Dubbo Highway for Cloud‑Native Enterprises

This article details the design and implementation of a transparent cross‑network data‑transfer system built on Dubbo, covering its evolution from early one‑way solutions to a highway architecture, the technical challenges encountered, the applied fixes and community contributions, and the roadmap for future stability, extensibility, and multi‑protocol support.

APISIXDubboMicroservices
0 likes · 17 min read
How We Built a Transparent Cross‑Network Dubbo Highway for Cloud‑Native Enterprises
Top Architect
Top Architect
Mar 11, 2023 · Backend Development

General Architecture Overview and Implementation for Backend Systems

The article presents a practical, layered backend architecture—including gateway, business, and foundation layers—designed to replace simple early‑stage setups, improve maintainability, and handle various protocols such as HTTP and TCP while offering reusable components and technical guidelines.

Servicedesigngateway
0 likes · 13 min read
General Architecture Overview and Implementation for Backend Systems
Selected Java Interview Questions
Selected Java Interview Questions
Feb 6, 2023 · Backend Development

Backend Token Authentication, Rate Limiting, and Anonymous Access Design

This article explains a comprehensive backend user login flow, covering token generation, expiration policies, request validation, logout handling, anonymous access strategies, rate‑limiting with authorized tokens, path‑regex filtering, blacklist management, and includes a Spring‑Redis implementation example.

Tokenauthenticationbackend
0 likes · 9 min read
Backend Token Authentication, Rate Limiting, and Anonymous Access Design
Top Architect
Top Architect
Jan 6, 2023 · Backend Development

Janus Gateway: Architecture, Routing Rules, and Performance at Baidu

The article explains Baidu's Janus gateway—its motivations, three‑level routing design, variable and condition expression language, plugin implementations for disaster recovery and caching, and performance benchmarks—showing how it supports millions of QPS while remaining flexible and efficient.

Expression Languagebackendgateway
0 likes · 11 min read
Janus Gateway: Architecture, Routing Rules, and Performance at Baidu
Architecture Digest
Architecture Digest
Dec 14, 2022 · Backend Development

Why Baidu Built Janus: Design and Implementation of a High‑Performance General Gateway

Janus is Baidu’s high‑throughput, multi‑purpose gateway that complements BFE, supporting traffic, business, and hybrid routing for dozens of internal services; the article explains its motivations, architecture, three‑tier routing rules, variable and conditional expressions, plugin system, performance benchmarks, and future extensions.

Backend DevelopmentPlugin systemgateway
0 likes · 12 min read
Why Baidu Built Janus: Design and Implementation of a High‑Performance General Gateway
Selected Java Interview Questions
Selected Java Interview Questions
Dec 9, 2022 · Backend Development

Design and Implementation of BetterGateway for Centralized Error‑Code Management in Distributed Systems

This article describes the background, design, configuration, code implementation, and testing of BetterGateway—a Spring Cloud Alibaba‑based gateway that centralizes error‑code management using Nacos and dynamic refresh to enable fast, accurate exception tracing across micro‑services and third‑party interfaces.

Error handlingdistributed systemsgateway
0 likes · 15 min read
Design and Implementation of BetterGateway for Centralized Error‑Code Management in Distributed Systems
High Availability Architecture
High Availability Architecture
Dec 9, 2022 · Backend Development

Design and Implementation of Baidu's Janus General Gateway Service

The article explains why Baidu built the high‑performance Janus gateway, its architecture and deployment topology, the three routing modes, the three‑level rule system with variable and condition expressions, plugin extensibility, performance benchmarks, and how the design can be generalized to other use cases.

backendcondition expressiongateway
0 likes · 9 min read
Design and Implementation of Baidu's Janus General Gateway Service
Baidu Geek Talk
Baidu Geek Talk
Nov 28, 2022 · Backend Development

How Baidu’s Janus Gateway Powers Millions of QPS with Flexible Routing

This article analyzes Baidu's Janus gateway—why it was built despite BFE, its architecture and deployment, three‑layer routing design, variable and condition expression languages, performance benchmarks versus raw Go code, and how its plugin system enables both generic and highly customized traffic‑dispatch solutions.

Performance BenchmarkPlugin systembackend-architecture
0 likes · 11 min read
How Baidu’s Janus Gateway Powers Millions of QPS with Flexible Routing