Skip to main content
Back to projects

Multi-tenant API Gateway

Go-based API gateway replacing an NGINX bottleneck. Per-tenant rate limits, OAuth2, and a single observable choke point.

Year 2024
Role Architect + senior engineer
Type Client engagement
Status Live

About this project.

A Go-based, observable API gateway built to replace an aging NGINX routing layer for a fintech platform.

Feature set

Per-tenant control

  • OAuth2 token introspection
  • Per-tenant rate limits + quotas
  • Request shaping & rewriting

Observable

  • OpenTelemetry traces end-to-end
  • Per-route SLO dashboards
  • Error budgets surfaced in Grafana

Hardened edge

  • mTLS between gateway and upstreams
  • WAF rules tuned per tenant tier
  • Auto-revocation on compromised tokens

Zero-downtime cutover

  • Shadow traffic mirroring for 2 weeks
  • Per-route gradual rollout
  • Rollback in under 60 seconds

You might also like.