Authorized F5 Reseller

Call a Specialist Today! 866-981-2998

  1. Home
  2. Products
  3. API Gateway
Application Delivery

F5 NGINX API Gateway: Lightweight, secure, and developer friendly. Any environment.

Security-first, developer-friendly. Easy to deploy and manage. One-click WAF and DDoS.

Request a Quote Core Capabilities
Security-first One-click WAF and DDoS
Any environment Kubernetes, cloud, on-prem
Under 60MB Small container image
Authorized Reseller AppDeliveryWorks · BlueAlly
Overview

Multi-cloud API delivery with security and control

Robust API security that’s easy to manage and deliver

NGINX API Gateway delivers robust API security with JWT validation, mTLS, rate limiting, and one-click WAF setup. Designed for Kubernetes, cloud, and on-prem, it supports fine-grained traffic control and policy enforcement. Developers benefit from a large configuration library, simple CI/CD integration, and lightweight, high-performance deployment at scale.

Security and control

Rate limits, auth, and WAF in one data plane

Rate limits and traffic controls

Applies rate limits by IP, key, or route to prevent abuse, absorb bursts, and reduce pressure on backend services.

Comprehensive auth

Supports JWT, OAuth 2.0, OpenID Connect, and mTLS to authenticate users and services and encrypt traffic between trusted endpoints.

WAF and DDoS

Defends against application-later DDoS attacks with route-level access policies and one-click WAF setup for OWASP Top 10 threats and API abuse.

Manage API gateways

Federated management of gateway instances

NGINX API Gateway addresses API sprawl by providing federated management of gateway instances across Kubernetes, cloud, and on-prem. NGINX One centralizes config, monitoring, and updates, with built-in AI-driven guidance , CVE notices and SSL cert management reduces misconfigurations and ensures consistency in policy enforcement across environments.

Distributed management of federated gateways

Manage API gateways across clouds, on-prem, and in Kubernetes with centralized control and fine-grained traffic routing per service or route.

Real-time API policy updates

Push config changes to API Gateway instantly without reloads. Active health checks ensure uptime during updates and upstream failures.

Global, real-time observability and governance

Get a unified view of API traffic across distributed environments. Monitor throughput, errors, and config changes in real time.

DevOps and developer friendly

Fits the workflows your teams already use

NGINX API Gateway integrates into DevOps workflows with support for declarative configuration, CI/CD pipelines, and GitOps practices. Its lightweight footprint fits cloud, on-prem, and containerized environments. Developers can quickly apply policy changes via the NGINX One Console or API, validate configurations, and ship updates without downtime or complex tooling.

Easy to deploy

Runs natively in containers, VMs, or bare metal with minimal setup across Kubernetes, cloud, or on-prem.

Drops into workflows

Works with existing CI/CD pipelines using yaml-based config, api-driven updates, and rollback-friendly version control.

Simplified configuration

Declarative config format with validation and AI-assisted setup via NGINX One helps reduce errors and streamline multi-env policy rollout.

Cloud-native

Cloud-native, containerized for federated APIs

Designed for cloud-native platforms, NGINX API Gateway runs efficiently in containers, scales horizontally, and supports federated API operations across Kubernetes, public cloud, and edge nodes—enabling modern, distributed application delivery.

Kubernetes-native deployment and integration

Runs as a container with full K8s support—CRDs, Helm, and Ingress—for declarative API delivery in cloud-native platforms. Drops into GitOps CI/CD pipelines.

Lightweight and scalable

Small, container-ready footprint. Scales horizontally via orchestration platforms like Kubernetes to handle bursty, dynamic API workloads.

Distributed API gateway control

Enables multiple autonomous gateways to operate with shared visibility and consistent traffic policy enforcement.

Core capabilities

Delivers, controls, and secures API traffic in any environment at any scale.

Allows developers move fast without breaking things while. Giving security teams rock-solid risk management and attack surface reduction with low overhead.

Security API security enforcement Guards against OWASP Top 10 and other API attacks. Blocks DDoS and business logic abuse. Easy to apply granular, rules-based OIDC, JWT, and other authentication per API.
Traffic Granular traffic control Protects APIs with precise per-client rate limiting, burst control.
Observability Deep observability 200+ performance metrics to troubleshoot traffic issues. Easy third-party integrations via OpenTelemetry.
Deployment Deploy anywhere Small Container image (>60MB) runs in cloud, on-prem, across clouds, edge environments.
Extensibility Easy to extend and customize Huge library of existing configs and plugins. Write your own with Lua, njs or YAML/CRDS.
WAF One-click WAF integration F5 WAF for NGINX offers inline inspection of API traffic sharing the same data plane for extra-low latency. Explore WAF
AI NGINX One for AI config, security support NGINX One AI gives expert answers and in-line config suggestions. Explore NGINX
Next Steps

Let’s size and price it together

AppDeliveryWorks is a division of BlueAlly, an authorized F5 reseller. Our specialists help you pick the right F5 form factor, size it for your traffic, and quote licensing, subscriptions and renewals.

Pricing Request a quote Tell us what you need and we’ll come back with F5 pricing and licensing options. Get a quote
Talk to us Contact a specialist Find out how F5 products and solutions can enable you to achieve your goals. Contact us
Call now 866-981-2998 Prefer to talk directly? Call us now for immediate assistance. Call a specialist
Browse Explore the catalog Explore our catalog of F5 products and solutions at your convenience. View all products