What is API Gateway? — UK Software Development Guide
Direct Answer
An API Gateway is a server that acts as an entry point for API requests from clients. It sits in front of one or more backend services and provides: request routing, authentication and authorisation, rate limiting, SSL termination, request/response transformation, and caching. Common API gateways include AWS API Gateway, Azure API Management (APIM), and Kong.
Api-gateway in the UK
API Gateways are important for UK GDPR compliance and Cyber Essentials: centralised authentication (OAuth 2.0 JWT validation) at the gateway layer means authentication logic is not duplicated across services; centralised rate limiting prevents API abuse; and centralised logging at the gateway provides the audit trail required for UK GDPR accountability and ICO enforcement evidence. For UK government API implementations (HMRC MTD, NHS APIs), gateways provide the transport security layer required by the GDS API design guide.
Related Glossary Terms
API
API explained for UK software developers and business owners. An API (Application Programming Interface) is a defined set of rules and protocols that allows different software system... UK context, examples, and related services.
Microservices
Microservices explained for UK software developers and business owners. Microservices architecture is a software design approach where an application is built as a collection of small, indepen... UK context, examples, and related services.
Open Banking
Open Banking explained for UK software developers and business owners. Open Banking is the UK's implementation of PSD2 (Payment Services Directive 2) — a regulatory framework that requires th... UK context, examples, and related services.
Kubernetes
Kubernetes explained for UK software developers. Kubernetes (commonly abbreviated as K8s) is an open-source container orchestration platform that automates the deploymen... UK context and related services.
GRAPHQL
GraphQL explained for UK software developers. GraphQL is a query language for APIs and a server-side runtime for executing those queries, developed by Meta (Facebook)... UK context and related services.
OAUTH
OAuth 2.0 explained for UK software developers. OAuth 2.0 is an authorisation framework that allows applications to obtain limited access to a user's account on another...
Get Expert Advice on Api-gateway
Speak with our UK software development experts about Api-gateway. Free consultation, transparent pricing, no obligation.