iDev API Gateway 开源发布：高性能云原生网关
iDev API Gateway Open Source Release: High-Performance Cloud-Native Gateway
| iDev Product | 2026-08-27T11:11:40
iDev 宣布将内部使用的高性能 API 网关 iGate 正式开源，基于 Rust 构建，支持每秒百万级请求处理，延迟低于 1ms，兼容 Envoy xDS API。
iDev announces the open-source release of iGate, its internally-used high-performance API gateway built with Rust, supporting millions of requests per second with sub-1ms latency and Envoy xDS API compatibility.
开源动机iGate 是 iDev 内部使用超过 18 个月的 API 网关。在日均处理 5 亿次 API 请求的生产验证后，我们决定将其开源，回馈社区。核心特性极致性能基于 Rust + Tokio 异步运行时，零 GC 暂停单实例支持 100 万 QPS（4 核 8G 配置）P99 转发延迟低于 0.8ms内存占用约 50MB（处理 10K 并发连接）功能特性动态路由：支持基于 Header、Path、Method 的灵活路由规则限流熔断：令牌桶 + 滑动窗口双算法认证鉴权：内置 JWT、OAuth 2.0、API Key 验证可观测性：内置 Prometheus metrics 和 OpenTelemetry tracing热更新：配置变更无需重启，零停机生效架构设计Client -> iGate (Rust) | |-- 路由匹配（Trie + Regex） |-- 中间件链（认证、限流、日志） |-- 负载均衡（WRR、一致性哈希） |-- 连接池管理（HTTP/1.1、HTTP/2、gRPC） | UpstreamxDS 兼容iGate 兼容 Envoy xDS v3 API，可以直接接入 Istio 控制面作为数据面代理，替代 Envoy Sidecar。在相同配置下，iGate 的 CPU 使用率比 Envoy 低 40%。参与贡献项目已在 GitHub 发布（Apache 2.0 协议），欢迎社区参与贡献。计划建立 iGate 社区工作组，定期举办线上技术分享。路线图未来将支持 WebSocket 长连接代理、WASM 插件扩展和 GraphQL 路由等高级功能。
Open Source MotivationiGate has been iDev's internal API gateway for over 18 months. After production validation handling 500 million daily API requests, we have decided to open-source it to give back to the community.Core FeaturesExtreme PerformanceBuilt on Rust + Tokio async runtime, zero GC pausesSingle instance supports 1 million QPS (4-core 8GB configuration)P99 forwarding latency under 0.8msMemory usage approximately 50MB (handling 10K concurrent connections)Functional FeaturesDynamic Routing: Flexible routing rules based on Header, Path, and MethodRate Limiting and Circuit Breaking: Token bucket + sliding window dual algorithmsAuthentication: Built-in JWT, OAuth 2.0, and API Key validationObservability: Built-in Prometheus metrics and OpenTelemetry tracingHot Reload: Configuration changes take effect without restart, zero downtimeArchitecture DesignClient -> iGate (Rust) | |-- Route Matching (Trie + Regex) |-- Middleware Chain (Auth, Rate Limit, Logging) |-- Load Balancing (WRR, Consistent Hash) |-- Connection Pool (HTTP/1.1, HTTP/2, gRPC) | UpstreamxDS CompatibilityiGate is compatible with Envoy xDS v3 API, enabling direct integration with the Istio control plane as a data plane proxy, replacing Envoy Sidecar. Under the same configuration, iGate uses 40% less CPU than Envoy.ContributingThe project is published on GitHub under the Apache 2.0 license. Community contributions are welcome. Plans include establishing an iGate community working group with regular online tech sharing sessions.RoadmapFuture features include WebSocket long-connection proxying, WASM plugin extensions, and GraphQL routing.