Ferrum Edge Logo

The Rust-Powered
Edge Gateway Built for
Modern Infrastructure

Lock-free. Lightning-fast. Protocol-agnostic.

High-performance API gateway engineered in Rust. Zero mutex blocking on request paths, 51 built-in plugins, and full multi-protocol support from HTTP/1.1 to HTTP/3 QUIC.

HTTP/1.1 HTTP/2 HTTP/3 QUIC WebSocket gRPC TCP UDP TLS/DTLS
102K+
Requests per second (HTTP/1.1)
51
Built-in plugins
4
Deployment modes
0
Mutex locks on hot path

Up and Running in Minutes

bash
# Download the latest release (Linux x86_64)
curl -LO https://github.com/ferrum-edge/ferrum-edge/releases/latest/download/ferrum-edge-linux-x86_64
chmod +x ferrum-edge-linux-x86_64
sudo mv ferrum-edge-linux-x86_64 /usr/local/bin/ferrum-edge

# Create a minimal config
cat > config.yaml << 'EOF'
proxies:
  - id: "proxy-my-api"
    name: "My API"
    listen_path: "/api"
    backend_protocol: http
    backend_host: "localhost"
    backend_port: 3000
    strip_listen_path: true
    auth_mode: single
    plugins: []
EOF

# Start Ferrum Edge (auto-detects file mode from --spec)
ferrum-edge run --spec config.yaml -v

Everything You Need at the Edge

Ferrum Edge is engineered from the ground up for speed and reliability — no compromises, no garbage collection pauses, no mutex contention on the request path.

🔒

Lock-Free Architecture

ArcSwap atomic reads + DashMap concurrent maps keep every hot path free of mutex blocking. Config updates are atomic swaps — zero downtime, zero stalls.

🔌

51 Built-in Plugins

Auth, rate limiting, AI/LLM, observability, transformation, routing, WebSocket, gRPC — all available as first-class plugins with per-route priority ordering.

🌐

Multi-Protocol Support

HTTP/1.1 through HTTP/3 QUIC, WebSocket, gRPC, TCP, and UDP — all with optional TLS/DTLS. One gateway, every protocol your stack needs.

🤖

AI/LLM Gateway Ready

Token metrics, prompt shield, request guard, and token rate limiter plugins purpose-built for LLM API proxying. Control costs and protect your AI endpoints.

Zero-Downtime Reloads

Push config changes via the Admin API. Ferrum Edge performs an atomic ArcSwap — in-flight requests complete uninterrupted while new requests immediately see the updated config.

🌐

Distributed CP/DP Mode

Scale with a dedicated Control Plane pushing config to multiple Data Plane instances via gRPC streaming. Ideal for geo-distributed and high-availability deployments.

Four Operating Modes

From a single-node file-based config to a globally distributed Control Plane / Data Plane architecture.

📄

File Mode

YAML config file. Perfect for development, single-node, or GitOps-style deployments.

🗃

Database Mode

PostgreSQL, MySQL, SQLite, or MongoDB. Admin API for dynamic config management.

🎉

Control Plane

Central hub that reads from DB and pushes config to Data Planes via gRPC streaming.

Data Plane

Stateless request processors. Receive config from CP. Auto-reconnect and local caching for resilience.

Built to Be Invisible

Ferrum Edge delivers 102,183 RPS on HTTP/1.1 and over 108K on HTTP/2 and raw TCP — tested on Apple Silicon with 200 concurrent connections. The goal: your backend is your bottleneck, not your gateway.

  • 102,183 RPS on HTTP/1.1 (Apple Silicon, 200 concurrent)
  • 101,317 RPS on HTTP/1.1 + TLS
  • 108,841 RPS on raw TCP proxy
  • 103,830 RPS on WebSocket
  • Lock-free O(1) route lookup, O(1) plugin execution
RPS by Protocol
TCP Proxy
108K
HTTP/2
108K
WebSocket
103K
HTTP/1.1
102K
HTTP/1.1+TLS
101K
gRPC
68K
HTTP/3 QUIC
53K

Rust-Native. Not Wrapped. Not Ported.

Unlike gateways that bolt Rust on top of a C or Go core, Ferrum Edge is built in Rust from the ground up. Memory safety without GC. Fearless concurrency without mutexes. The ArcSwap + DashMap combination means your request thread never waits for a config lock.

🦊
Memory Safe
No buffer overflows. No use-after-free. Rust's borrow checker guarantees it.
Zero GC Pauses
No garbage collector means predictable latency at any throughput level.
🔒
Lock-Free Hot Path
ArcSwap atomic reads mean request threads never block waiting for config.
Learn More About Why Ferrum Edge →

51 Plugins, Ready to Go

Every capability you need, built in. No marketplace hunting, no compatibility nightmares.

🔐 Authentication
JWT, JWKS, mTLS, API Key, LDAP, Basic, HMAC, SOAP WS-Security
🏳 Rate Limiting
HTTP, WebSocket, UDP rate limiting + TCP connection throttling
🤖 AI / LLM
Token metrics, prompt shield, request guard, token rate limiter
📊 Observability
OpenTelemetry, Prometheus, Loki, StatsD, structured HTTP logging
Browse All 51 Plugins →

Meet Ferrum Foundry

The admin panel for your Ferrum Edge gateway. Manage proxies, consumers, plugins, and upstreams through a modern web UI — with real-time metrics, circuit breaker alerts, and health monitoring built in.

  • Full CRUD for proxies, consumers, plugins, and upstreams
  • Real-time metrics dashboard with configurable auto-refresh
  • Circuit breaker states and connection pool monitoring
  • Multi-namespace support for tenant isolation
  • Dark and light themes
Ferrum Foundry Dashboard

Ready to Try Ferrum Edge?

Download the pre-built binary, or explore the source on GitHub. Free for noncommercial use under the PolyForm Noncommercial license.

Download v0.9.0 Installation Guide View Licensing