Every feature backed by production code. No vaporware, no roadmap promises.
Three-layer protection: kernel iptables packet dropping, TCP socket termination, and application-level threat detection. Bans propagate across all nodes instantly.
Constant-memory streaming via undici with connection pooling and pipelining. Responses are streamed directly — no buffering in the gateway.
512
Connections
×10
Pipelining
0 B
Buffering
Redis Lua scripts check RPS + monthly quota in a single roundtrip. Zero race conditions, zero double-counting.
INCR rps_key + INCR monthly_key
→ 1 Redis roundtrip, 0 race conditionsDetailed observability: latency breakdown, geo maps, device detection, bot scores, and cache analytics — all stored in ClickHouse.
Latency
5+ fields
Geo
5+ fields
Device
5+ fields
Security
5+ fields
Cache
5+ fields
Service
5+ fields
L1 in-memory LRU + L2 Redis cache with FNV-1a hashing. Early cache middleware serves responses before the proxy even starts.
Automatic failure detection with Redis-backed state machine. Half-open probing, configurable thresholds, and instant recovery.
16 built-in actions: JWT claim extraction, header injection, PII masking, field renaming, security headers — all with conditional execution.
Define routes in nolxy.config.ts, version control them, and sync via CLI or CI/CD. Diff-based updates with dry-run mode.
Built-in portal for API consumers: self-serve key generation, route discovery, and OpenAPI spec display.
One request through Nolxy. Sub-millisecond overhead. Zero config on your backend.
curl https://api.yourapp.com/v1/todos \ -H "x-nolxy-api-key: YOUR_API_KEY"
# or with default proxy URL: # curl https://proxy.nolxy.com/u_a8f3/todos
From request to response in four steps. Zero code changes on your backend.
Request
Consumer calls your API through Nolxy
Authenticate & Protect
API key validation, rate limiting, IP checks
Cache, Transform & Proxy
Cache check, request transforms, upstream call
Response in <1ms overhead
Logged, metered, returned to consumer
Nolxy handles the gateway layer so you can focus on your API.
ProxyShield
Multi-layer DDoS protection
Low Overhead
Minimal gateway latency
Analytics
Built-in request observability
API Keys
Scoped, hashed, rate-limited
Start free, scale as you grow. No hidden fees, cancel anytime.