Frequently asked questions
If you can't find your answer, write to info@apiruler.com.
What is apiRuler?
apiRuler is an API gateway and security platform built on trusted open source applications and run on your own infrastructure. It brings authentication, routing, traffic management, monitoring and AI proxying together in one visual console.
Does our data leave for the cloud?
No. apiRuler is self-hosted, so your traffic, logs and configuration stay on your own servers or Kubernetes cluster.
Do we need to replace our existing WAF?
No. A WAF focuses on blocking attacks, while apiRuler provides API management, authentication, rate limiting and logging. apiRuler sits behind the WAF/DMZ layer as a complement.
Which authentication methods are supported?
JWT, OAuth2, API Key, LDAP, HMAC and session-based authentication. The Keycloak integration connects apiRuler to your corporate SSO.
Where can it be installed?
Standalone on Windows Server, major Linux distributions, virtual machines and bare metal servers, or highly available on Kubernetes with Helm.
What is used for monitoring and logging?
apiRuler shows request, latency and bandwidth metrics in its own console and feeds your existing observability stack through Prometheus, Grafana and the ELK Stack.
Ready to take control of your APIs?
Our team is ready to plan the right deployment for your infrastructure with you and show you a live demo.