28,41,029 requests processed·p99 38ms

One endpoint.
Zero chaos.

Rate-limit, authenticate, and transform millions of requests before they ever touch your origin servers. Route stands between every microservice and the open internet.

route.gateway — live
2026-02-24 12:10:20
TimeMethodPathStatusLatencyRegion
12:10:20.041GET/api/users/profile20012msus-east
12:10:20.055POST/api/orders/checkout20134mseu-west
12:10:20.063GET/api/inventory/sku/98212008msap-south
12:10:20.071DELETE/api/sessions/tok_9xz2045msus-west
12:10:20.089PUT/api/billing/subscription20067mseu-central
12:10:20.102GET/api/analytics/dashboard20022msus-east
12:10:20.118POST/api/auth/token/refresh2009msus-west
streaming live requests...
Uptime: 99.99%Errors: 0.002%Throughput: 142k req/s
All systems nominal
Rate Limiting·JWT Auth·OAuth 2.0·Request Transforms·Load Balancing·Health Checks·Plugin Architecture·OpenTelemetry·gRPC Proxy·WebSocket Support·GraphQL Gateway·Edge Caching·
Subsystem 01

Routing & Load Balancing

Every request hits Route first. It decides where it goes, how many times to retry, and which upstream is healthy — in the time it takes light to cross a data center.

topology — live
ClientRouteUsersAPIOrdersAPIBillingAPILoadBalancer
12
Upstreams
12/12
Healthy
0.18ms
Avg Route

Sub-millisecond routing

Path-based, header-based, and weighted routing decisions in under 0.2ms with zero-copy packet forwarding.

⚖️

Weighted load balancing

Round-robin, least-connections, and canary splits. Roll out to 5% of traffic before going full.

🔁

Automatic retries

Configurable retry budgets with exponential backoff. Never let a transient 503 reach your users.

🩺

Health-aware routing

Active and passive health checks pull unhealthy upstreams from rotation in under 200ms.

Subsystem 02

Auth & Rate Limiting

JWT validation, OAuth 2.0 flows, API key rotation, and adaptive rate limiting — all enforced at the edge before a single byte reaches your services.

14,829
Threats Blocked
+142 this min
2,341
Auth Failures
+18 this min
8,102
Rate Limited
+67 this min
142k/s
Clean Requests
99.97% pass rate
THREAT LOGreal-time attack deflection
BLOCKEDALLOWED
12:10:18.204SQL Injection45.33.32.156/api/users?id=BLOCKED
12:10:18.619Brute Force198.51.100.44/api/auth/loginBLOCKED
12:10:19.001Valid Request203.0.113.12/api/products/listALLOWED
12:10:19.441Rate Limit198.51.100.44/api/auth/loginBLOCKED
12:10:19.882SSRF Attempt192.0.2.77/api/webhooks/urlBLOCKED
WAF + rate limiter active — 14,829 threats blocked this session
Subsystem 03

Plugin Architecture

Every behavior is a plugin. Write one in TypeScript, ship it in seconds. The plugin ecosystem has 400+ community plugins — or write your own in a function that fits in a tweet.

route.plugin.ts
1"color:#6B6B8A">// route.plugin.ts — fits in a tweet
2"color:#C4B5FD">export "color:#C4B5FD">default "color:#7C3AED">definePlugin({
3 name: "strip-pii",
4 on: "response",
5 "color:#7C3AED">transform(ctx) {
6 "color:#C4B5FD">delete ctx.body.password;
7 "color:#C4B5FD">delete ctx.body.ssn;
8 ctx.headers["x-processed"] = "1";
9 "color:#C4B5FD">return ctx;
10 }
11});
280 chars — fits in a tweet
Popular pluginsBrowse 400+ →
J
@route/jwt-authv3.1.0
JWT validation with JWKS rotation
2.1M
downloads
R
@route/rate-limitv2.8.1
Token bucket & sliding window
1.9M
downloads
C
@route/corsv1.4.2
Configurable CORS with wildcards
1.7M
downloads
C
@route/cachev2.0.4
Edge caching with stale-while-revalidate
980K
downloads
O
@route/opentelemetryv1.2.0
Traces, metrics, logs to any backend
840K
downloads
G
@route/graphql-proxyv1.1.3
Schema stitching & query coalescing
620K
downloads
Subsystem 04

Latency Benchmarks

Route adds 0.2ms of overhead at p50. That's the cost of authentication, rate limiting, and transforms. Measured on c6g.2xlarge, 10k concurrent connections.

Gateway
p99 latency (lower is better)
p50
p95
p99
Throughput
Route v2.4
0.9ms
2.1ms
3.8ms
142,000 req/s
Raw upstream
baseline
0.7ms
1.8ms
3.1ms
Kong Gateway
3.4ms
8.2ms
14.1ms
48,000 req/s
AWS API Gateway
12.1ms
28.4ms
51.2ms
10,000 req/s
nginx (manual)
1.8ms
4.1ms
7.3ms
82,000 req/s
Benchmark: wrk2 @ 10k RPS sustained, c6g.2xlarge, us-east-1, 2026-02-24. Route includes JWT validation + rate limiting + 1 transform plugin.
+0.2ms
Gateway overhead at p50
vs raw upstream
142k/s
Max throughput
per instance
28 MB
Memory footprint
idle, single process
< 80ms
Cold start
to first request
Ready to deploy

One command.
Production ready.

You've seen it handle traffic, block threats, and transform payloads. The next keystroke deploys it.

$docker run -d -p 8080:8080 routegateway/route:latest

or Try the Sandbox — GitHub login, no credit card

✓ MIT licensed✓ 8.2k GitHub stars✓ 400+ plugins✓ Runs at Stripe, Linear, Vercel