Conflux lets your teams publish, secure, monitor, govern, and scale APIs from a single console: in the cloud, on-premise, or hybrid, with enterprise-grade security at every layer.
REQUESTS / MIN
184,220
▲ 6.2%
P95 LATENCY
86 ms
▼ 11 ms
ERROR RATE
0.14%
SLA on track
Gateway traffic · last 60 min
The life of a request
trace_id: 8f3a-22c1 · total 86 ms
Client request
Authenticate
Apply policies
Transform
Route
Upstream service
Every stage is observable, every policy is configurable, and every hop is captured in the audit trail. That is what a control plane should mean.
Platform
From the first draft to retirement, Conflux gives platform teams, architects, and API consumers a shared source of truth.
High-performance routing, transformation, caching, and traffic control for REST, SOAP, GraphQL, gRPC, and WebSocket APIs.
OAuth 2.0, OIDC, mTLS, SAML, and fine-grained RBAC, backed by rate limiting, quotas, DDoS and bot protection, and WAF integration.
A self-service catalog with OpenAPI docs, an interactive playground, sandbox keys, sample code, and SDK downloads.
Draft, review, approve, publish, version, deprecate, and retire APIs with environment promotion and one-click rollback.
Policy templates, naming standards, approval workflows, change management, and an immutable audit trail across environments.
Real-time usage, latency, error, and SLA dashboards with alerting, log aggregation, and distributed tracing built in.
Module · API Gateway
Ship changes safely with canary and blue-green deployments, split traffic by version, and keep upstreams protected with circuit breakers, retries, and timeout policies. Caching, compression, and connection pooling keep latency low even under heavy load.
Release · payments-api v2.4
Canary liveCIRCUIT
Closed
RETRIES
3 max
TIMEOUT
2.5 s
Module · Security
Define authentication, authorization, and protection once, then enforce it across every API, environment, and gateway node. Conflux plugs into your identity stack and applies defense in depth at the edge.
Authentication
OAuth 2.0, OpenID Connect, JWT, API keys, SAML, mutual TLS, LDAP, and Active Directory.
Authorization
RBAC with fine-grained, resource-level, scope-based, and claims-based permissions.
Threat protection
Rate limiting, throttling, quotas, DDoS and bot protection, and WAF integration.
Access controls
IP allow and deny lists, geo restrictions, and token validation at every hop.
Encryption in transit and at rest, with certificate and secret management handled centrally in the admin console.
# Security policy · applied at the gateway
authentication:
method: oauth2
token_validation: jwt
fallback: mtls
authorization:
model: rbac
scopes: [payments.read, payments.write]
protection:
rate_limit: 5000/min
quota: 2M/day
geo_restrictions: enforced
bot_protection: on
waf: integratedModule · Developer Portal
Discovery, documentation, subscription, and testing in one self-service experience. Developers find an API, try it in the sandbox, generate keys, and ship: no tickets, no waiting.
Payments API
Process transactions, refunds, and settlement reports.
TRY IT · SANDBOX
POST /v2/payments { "amount": 129.99, "currency": "USD" } 201 Created · 92 ms { "id": "pay_84h2", "status": "approved" }
Docs that stay current
Swagger and OpenAPI rendering with version history, lifecycle visibility, and sample code in the languages your consumers use.
Self-service credentials
Subscription workflows, key generation, and credential management with a safe sandbox environment for testing.
Usage in plain sight
Per-consumer usage dashboards so developers see their own traffic, quotas, and errors without opening a ticket.
Modules · Lifecycle & Governance
Every API moves through a governed pipeline with approvals, environment promotion, and a complete audit trail. Standards are enforced by the platform, so reviews focus on design instead of formatting.
STAGE 1
Draft
Design the spec, clone from an existing API, or import OpenAPI.
STAGE 2
Review
Naming standards and policy checks run automatically.
STAGE 3
Approve
Configurable approval workflows with change management.
STAGE 4
Publish
Promote across dev, staging, and production environments.
STAGE 5
Version
Side-by-side versions with routing and one-click rollback.
STAGE 6
Retire
Deprecate on a schedule, archive, and keep the history.
Policy templates & standards
Centralized policy management, reusable templates, API classification, and naming standards applied across every team.
Immutable audit history
User activity, configuration history, and security events captured in tamper-evident logs with configurable retention and export.
Audit-ready reporting
Compliance-aligned reports and environment governance that give your risk and audit teams the evidence they ask for.
Modules · Analytics & Monitoring
Real-time dashboards for usage, latency, error rate, throughput, and availability, sliced by API, consumer, and geography. Operational monitoring watches every gateway node and endpoint, with alerting, log aggregation, and distributed tracing wired in from day one.
SLA overview · Q3
Export reportDISTRIBUTED TRACE · /v1/orders
Module · Integration Framework
Prebuilt connectors for identity, ITSM, observability, cloud, CI/CD, and messaging, plus an extensible plugin framework and platform APIs for everything else.
Identity providers
ITSM
Observability
Cloud
CI/CD
Messaging
DevOps-native by default
GitOps workflows, Infrastructure as Code, automated testing, configuration export and import, and deployment pipelines.
Module · Deployment
Cloud-native and microservices-based, packaged for Kubernetes and Docker, and proven across multi-region, multi-cluster topologies. Your data residency and network rules decide the deployment model, not ours.
Deploy on AWS, Azure, or Google Cloud with auto scaling, high availability, and zero-downtime upgrades.
Full platform inside your data center for regulated workloads, with backup, restore, and disaster recovery built in.
Gateways at the edge and in your VPCs, one control plane over all of them, synchronized across environments.
99.9%+
Availability design target
Multi-region
Active-active clusters
Zero
Downtime deployments
DR-ready
Backup, restore, failover
Beyond the software
A platform is only as good as the team behind it. Conflux ships with the documentation, training, and support model that enterprise operations expect.
Talk through your requirements24×7 support
Ticketing with SLA management, incident and problem management, patch management, upgrades, performance tuning, and health checks.
Training programs
Administrator, developer, and operations tracks with an online learning portal, video tutorials, and in-product guidance.
Complete documentation
Admin, developer, and installation guides, API references, architecture docs, runbooks, and operational manuals.
Open and accessible
Open standards, API-first architecture, WCAG-aligned interfaces, cross-browser support, and a mobile-responsive admin portal.