Ultra-Fast Ingress Router

API Gateway & Ingress
With Zero Lua Scripting

Pranor Gate handles HTTP/gRPC ingress routing, JWT validation, token bucket rate-limiting, and dynamic mTLS in sub-millisecond latencies without complex plugin chains.

Quick Start View on GitHub

Standalone Install: docker run -p 8080:8080 vyuvaraj/pranor-gate:latest

Features

High-Scale Traffic Management

Protect and route backend microservices without Lua scripts or heavyweight control planes.

🛡️

AI Agent Security Firewall & HITL

Inspect AI tool call intent, evaluate risk scores (ALLOW/DENY/TRANSFORM), and manage Human-in-the-Loop approval workflows.

🔒

Dynamic mTLS & JWT Validation

Validate client certificates and decode JWT bearer tokens directly at the edge before traffic reaches your internal services.

⏱️

Token Bucket Rate Limiting

Distribute rate-limiting budgets per IP, API key, or user ID across edge nodes using low-latency atomic sliding windows.

⚡

Hot Config Reloading

Update route targets, headers, and middleware rules instantly with zero dropped HTTP connections.

Comparison Matrix

Gate vs Kong & Nginx

Compare operational complexity and memory footprint.

Feature	Kong / Nginx	Pranor Gate
Configuration Language	✕ Lua / Nginx directives	✓ Declarative YAML / Pranor syntax
Memory Baseline	300MB - 1GB+	✓ ~14MB
Built-in Distributed Tracing	✕ Requires OTel plugin setup	✓ Native OTLP propagation
Interactive Test Client	✕ Requires Postman / Insomnia	✓ Built-in VS Code Webview panel
Hot Reloading	Requires worker restarts	✓ Instant in-memory swap
Open Source (AGPL-3.0)	✓	✓

Code Examples

Use from Any Language or Framework

Pranor Gate routes traffic for services written in Python, Node.js, Go, Rust, or native Pranor.

# Request through Pranor Gate with JWT Bearer Token validation & Rate Limiting
curl -i -X GET http://localhost:8080/api/v1/orders \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1Ni..." \
  -H "X-Client-ID: app_prod_01"
  

from fastapi import FastAPI, Request

# Upstream Python service routed behind Pranor Gate
app = FastAPI()

@app.get("/api/v1/orders")
async def get_orders(request: Request):
    # Headers injected by Pranor Gate after mTLS / Auth validation
    user_id = request.headers.get("X-Pranor-User-ID")
    return {"user_id": user_id, "orders": []}
  

import express from "express";
const app = express();

// Node.js microservice receiving routed ingress traffic from Pranor Gate
app.get("/api/v1/orders", (req, res) => {
  const userId = req.headers["x-pranor-user-id"];
  res.json({ userId, orders: [] });
});
app.listen(3000);
  

package main

import (
    "net/http"
)

func main() {
    // Go backend service running behind Pranor Gate router
    http.HandleFunc("/api/v1/orders", func(w http.ResponseWriter, r *http.Request) {
        userID := r.Header.Get("X-Pranor-User-ID")
        w.Write([]byte(`{"user_id":"` + userID + `"}`))
    })
    http.ListenAndServe(":8081", nil)
}
  

middleware auth_check (req) {
    if req.headers["Authorization"] == nil {
        return { "error": "Unauthorized" }, 401
    }
}

export route "GET" "/api/v1/orders" (req) [auth_check] {
    let orders = db.query("SELECT * FROM orders WHERE user_id = ?", req.user_id)
    return { "orders": orders }
}
  

API Gateway & Ingress With Zero Lua Scripting