goma-gateway
A lightweight, high-performance API gateway and reverse proxy with declarative YAML configuration, robust middleware, and support for REST, GraphQL, TCP, UDP, and gRPC.
What is goma-gateway?
Goma Gateway is a security-focused, cloud-native API gateway and reverse proxy designed to route, secure, and scale traffic for modern applications. It provides a powerful yet intuitive solution for managing API traffic with enterprise-grade features like declarative YAML configuration, multi-protocol routing, and full observability. It acts as a strategic entry point to manage and secure the flow of API traffic.
Developers and platform engineers building or managing modern, cloud-native applications, microservices architectures, or public APIs that require secure, scalable, and observable traffic management. It is suitable for teams implementing GitOps practices or needing a lightweight, declaratively configured gateway.
Developers choose Goma Gateway for its combination of a simple, declarative YAML configuration with enterprise-grade security and observability features out of the box. Its unique selling point is being a high-performance, modular data plane that remains lightweight while offering advanced capabilities like canary deployments, multi-protocol support, and seamless integration with a separate control plane (Goma Admin) for complex orchestration.
Overview
Goma Gateway – Lightweight, High-Performance API Gateway and Reverse Proxy with declarative config, robust middleware, and support for REST, GraphQL, TCP, UDP, and gRPC.
Use Cases
Best For
- Securing and managing public APIs with built-in authentication (JWT, OAuth, LDAP), automatic HTTPS, and exploit protection (SQLi, XSS).
- Implementing canary deployments for microservices using weighted or conditional routing strategies.
- Building a unified ingress point for heterogeneous services using REST, GraphQL, WebSocket, gRPC, TCP, or UDP protocols.
- Adopting GitOps practices for infrastructure management with version-controlled, declarative YAML configurations that support live reload.
- Gaining full observability into API traffic with integrated Prometheus metrics, structured logging, and pre-built Grafana dashboards.
- Modernizing legacy applications or managing internal microservices with advanced traffic control like rate limiting, load balancing, and health checks.
Not Ideal For
- Teams wanting an all-in-one gateway with built-in UI and Docker provider without additional components
- Projects that prioritize extensive third-party plugin ecosystems or commercial vendor support
- Simple reverse proxy use cases where advanced features like canary deployments or mTLS add unnecessary complexity
Pros & Cons
Pros
Manages routes, middleware, and policies with clear YAML files, supporting single or multi-file setups for maintainability, as shown in the Quickstart guide with config init and check commands.
Offers built-in authentication (JWT, OAuth, LDAP), automatic HTTPS via Let's Encrypt, mTLS, and exploit protection (SQLi, XSS), providing enterprise-grade security out of the box.
Supports REST, GraphQL, WebSocket, gRPC, TCP, and UDP traffic, allowing unified management of diverse service types in modern architectures.
Enables canary deployments with weighted or conditional routing, rate limiting with Redis backend, and health checks, facilitating sophisticated rollouts and reliability.
Includes Prometheus metrics, structured logging, and a pre-built Grafana dashboard (ID: 23799) for full visibility into gateway performance and traffic.
Cons
Requires separate components like Goma Admin for control plane features (e.g., Docker provider, UI), adding deployment complexity compared to all-in-one solutions.
As a newer project, it lacks the extensive plugin library, community contributions, and battle-tested deployments of established gateways like Envoy or Traefik.
Setting up features like mutual TLS or custom middleware plugins can involve steep learning curves, and the documentation, while available, may not cover all edge cases comprehensively.
Frequently Asked Questions
Related Projects
KubernetesProduction-Grade Container Scheduling and Management
MobyThe Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
traefikThe Cloud Native Application Proxy
GiteaGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.