Skip to main content

Overview

Dryad Gateway is a lightweight reverse proxy and request router for teams running multiple internal services behind a single domain. It terminates TLS, applies per-route rate limits, and forwards traffic to backend services registered through a simple YAML config file.

Key features​

  • Zero-downtime reloads. Configuration changes are picked up via SIGHUP without dropping in-flight connections.
  • Per-route rate limiting. Each route defines its own token-bucket limit, independent of global limits.
  • Health-aware routing. Backends that fail their health check are automatically removed from the routing pool and re-added once they recover.
  • Structured access logs. Every request is logged as JSON with route, backend, latency, and status code.

Deployment model​

Dryad Gateway ships as a single static binary with no runtime dependencies. It reads its configuration from /etc/dryad-gateway/config.yaml on startup and re-reads it on SIGHUP. Most teams run one instance per availability zone behind a cloud load balancer.

Once you're running, see the API Reference for the full admin API — generated directly from the project's OpenAPI spec, so it never drifts from what the service actually implements.