Cross-cutting
Auth (JWT validation), rate limits (per API key), CORS, header manipulation. Handled centrally. Backend focuses on business logic.
Advertisement
Routing
Path-based + host-based routing. Weighted for canary. Backend load balancing.
Advertisement
Transformation
Request/response transforms. Older client speaks v1, backend v2. Gateway adapts.