API gateway patterns in Rest API - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the primary role of an API Gateway in system design?

An API Gateway acts as a single entry point for clients to access multiple backend services. It handles request routing, composition, and protocol translation, simplifying client interactions.

intermediate

Explain the 'Backend for Frontend' (BFF) pattern.

The BFF pattern creates separate API gateways tailored for different client types (like web, mobile). Each gateway provides a customized API optimized for its client, improving performance and user experience.

intermediate

What is the 'Aggregator' pattern in API gateways?

The Aggregator pattern combines responses from multiple backend services into a single response for the client. This reduces the number of client requests and simplifies client logic.

beginner

How does the API Gateway pattern improve security?

API Gateways centralize security by enforcing authentication, authorization, and rate limiting. This protects backend services and reduces duplicated security logic across services.

advanced

What are some challenges when using an API Gateway?

Challenges include creating a single point of failure, increased latency if not optimized, and complexity in managing the gateway itself. Proper design and scaling strategies are needed to address these.

What pattern involves creating separate API gateways for different client types?

A Proxy

B Aggregator

C Backend for Frontend (BFF)

D Circuit Breaker

The Backend for Frontend (BFF) pattern creates tailored gateways for each client type.

Which API gateway pattern combines multiple backend responses into one?

A Aggregator

B Proxy

C Backend for Frontend

D Rate Limiter

The Aggregator pattern merges responses from multiple services into a single response.

How does an API Gateway improve security?

A By enforcing authentication and rate limiting centrally

B By decentralizing authentication

C By removing all security checks

D By exposing backend services directly

API Gateways centralize security controls like authentication and rate limiting.

What is a potential risk of using an API Gateway?

A It reduces latency to zero

B It eliminates the need for backend services

C It removes the need for client requests

D It can become a single point of failure

An API Gateway can be a single point of failure if not properly managed.

Which of the following is NOT a typical responsibility of an API Gateway?

A Request routing

B Data storage

C Protocol translation

D Request aggregation

API Gateways do not store data; they route and manage requests.

Describe the main patterns used in API gateways and their purposes.

Think about how API gateways tailor responses and combine backend data.

What are the benefits and challenges of using an API Gateway in a microservices architecture?

Consider both advantages and risks of centralizing API management.