Platform 05 / 18
Business domain
Enterprise Data & IntegrationORIN
API Gateway, ESB & AI Gateway
Enterprise API gateway and integration platform for centralized application management, secure service routing, monitoring, and control. The authentication, authorization, rate limiting, monitoring and audit-trail discipline applied to application-to-application and external API traffic now covers AI traffic too, through the LLM Gateway and MCP Gateway. SAP RFC/BAPI functions are published as REST APIs with no middleware in between. Reverse proxy, service orchestration, SQL-as-Service, authentication, authorization, monitoring, alerting, and administration in a unified solution.
05Highlights
- 01Reverse proxy with smart load balancing
- 02Visual service orchestration (drag & drop chain editor)
- 03SQL-as-Service (DB queries as REST APIs)
- 04SAP RFC/BAPI functions published directly as REST APIs (no middleware required)
- 05LLM Gateway: local and cloud LLM traffic through one gateway, with token and cost metering per model, application and user
- 06MCP Gateway: every tool call authorized, monitored and logged like an API call
- 07LLM fallbacks, scheduled and permission-based model usage
- 08Multi-auth: JWT, API Keys, OIDC, LDAP/AD
- 09Two-factor authentication (TOTP, Email, SMS)
- 107 security policy types (rate limiting, IP filtering, caching, etc.)
- 11Real-time topology map & traffic visualization
- 12ClickHouse-powered request logging & analytics
- 13Service discovery via network traffic capture
- 14Developer portal with API test console
- 15Alert system (Email, Webhook, Slack, SMS, SIEM)
- 16App Center for end-user application catalog
05Modules
| Code | Module | Scope |
|---|---|---|
| IAM/SSO | Identity & Access Management | User authentication, authorization, role-based access control, LDAP/AD, OIDC, JWT, API keys, two-factor authentication (TOTP, Email, SMS) |
| ESB | Service Bus | Reverse proxy, smart load balancing, visual service orchestration (drag & drop chain editor), SQL-as-Service, protocol transformation |
| SAP RFC | SAP Connectivity | SAP RFC/BAPI functions published as REST APIs with no middleware; Basic and SNC authentication, import/export/table parameters, transactional BAPI (commit/rollback), connection pooling, circuit breaker and retry, replay-safe calls with Idempotency-Key, RFC step in the chain editor |
| Discovery | Service Discovery | Network traffic capture and analysis, automatic service detection, application topology mapping, dependency visualization |
| Guard | Policy Management | 7 security policy types (rate limiting, IP filtering, caching, CORS, etc.), DLP policy enforcement from TYRIN, rule-based request/response control |
| LLM Gateway | LLM Gateway | Local and cloud LLM traffic routed through ORIN; token and cost metering per model, application and user, fallbacks between LLMs, scheduled and permission-based model usage, prompts and responses kept in the audit trail |
| MCP Gateway | MCP Gateway | Access to MCP servers routed through ORIN; agents reach only the tools and data they are authorized for via RBAC, every tool call is monitored and logged like an API call; prompts, responses and tool calls in one SIEM-ready audit trail |
| Monitoring | Real-Time Monitoring | ClickHouse-powered request logging & analytics, real-time topology map, traffic visualization, alert system (Email, Webhook, Slack, SMS, SIEM) |
| Dev Portal | Developer Portal | API documentation, interactive test console, sandbox playground for new integrations, API versioning and lifecycle management |
| App Center | Application Center | Centralized entry point for all enterprise applications, end-user app catalog, single sign-on launch, application grouping and access management |
- IAM/SSOIdentity & Access Management
- User authentication, authorization, role-based access control, LDAP/AD, OIDC, JWT, API keys, two-factor authentication (TOTP, Email, SMS)
- ESBService Bus
- Reverse proxy, smart load balancing, visual service orchestration (drag & drop chain editor), SQL-as-Service, protocol transformation
- SAP RFCSAP Connectivity
- SAP RFC/BAPI functions published as REST APIs with no middleware; Basic and SNC authentication, import/export/table parameters, transactional BAPI (commit/rollback), connection pooling, circuit breaker and retry, replay-safe calls with Idempotency-Key, RFC step in the chain editor
- DiscoveryService Discovery
- Network traffic capture and analysis, automatic service detection, application topology mapping, dependency visualization
- GuardPolicy Management
- 7 security policy types (rate limiting, IP filtering, caching, CORS, etc.), DLP policy enforcement from TYRIN, rule-based request/response control
- LLM GatewayLLM Gateway
- Local and cloud LLM traffic routed through ORIN; token and cost metering per model, application and user, fallbacks between LLMs, scheduled and permission-based model usage, prompts and responses kept in the audit trail
- MCP GatewayMCP Gateway
- Access to MCP servers routed through ORIN; agents reach only the tools and data they are authorized for via RBAC, every tool call is monitored and logged like an API call; prompts, responses and tool calls in one SIEM-ready audit trail
- MonitoringReal-Time Monitoring
- ClickHouse-powered request logging & analytics, real-time topology map, traffic visualization, alert system (Email, Webhook, Slack, SMS, SIEM)
- Dev PortalDeveloper Portal
- API documentation, interactive test console, sandbox playground for new integrations, API versioning and lifecycle management
- App CenterApplication Center
- Centralized entry point for all enterprise applications, end-user app catalog, single sign-on launch, application grouping and access management
05Screenshots
05Platforms in the same domain