Product Pricing Docs Blog Changelog Sign up free

One gateway to
rule them all ship faster scale globally sleep better rule them all

Route, secure, and observe every API call across your stack. Replace fragmented tooling with a single unified gateway — sub-millisecond latency at any scale.

🔒 app.meridian.dev/dashboard/routes
2.1B
Requests today
↑ 12.4%
0.4ms
p99 Latency
↓ 8.2%
99.99%
Success rate
↑ 0.01%
213
Active nodes
↑ 3
RouteMethodUpstreamp99Req/sStatus
/api/v2/usersGETusers-svc0.8ms3,241Healthy
/api/v2/auth/tokenPOSTauth-svc1.2ms1,847Healthy
/api/v2/paymentsPOSTpay-svc2.1ms892Healthy
/api/v2/eventsPOSTevents-svc0.4ms8,412Healthy
/api/v2/configGETconfig-svc0.3ms524Healthy
/api/v2/webhooksPUTwebhook-svc1.8ms167Degraded
/api/v2/searchGETsearch-svc3.4ms2,103Healthy
Traffic Overview
Last 60 minutes
Error rate0.02%
Active conns14,281
Cache hit94.2%
Bandwidth2.16 TB/s
Throttled23
Live requests
14:02:41GET/api/users200
14:02:41POST/api/auth201
14:02:42GET/api/config200
14:02:42PUT/api/hooks429
14:02:43GET/api/events200
14:02:43POST/api/pay201
All systems operational 213 nodes connected Last sync: 2s ago v3.2.1
Trusted by engineering teams at
StripeVercelShopifyDatadogCloudflareLinearNotionFigmaGitLabSupabasePlanetScaleRailway StripeVercelShopifyDatadogCloudflareLinearNotionFigmaGitLabSupabasePlanetScaleRailway
Why Meridian

Everything your APIs need.
Nothing they don't.

Replace your patchwork of proxies, WAFs, and rate limiters with one unified control plane.

Sub-Millisecond Routing

Content-based routing, weighted load balancing, and canary deployments — all at the edge.

Live View2.16 TB/s

Zero Trust Auth

OAuth 2.0, JWT, mTLS, and bot protection baked into every request path.

Shield Active94% CONF
JWT Validated12.4K/s
mTLS Handshakes8.1K/s
Bot Score > 0.9247
Spike in unauthorized access — 3 IPs blocked

99.99% SLA

Global edge deployment with automatic failover and zero-downtime upgrades.

All SystemsOperational
US-East99.99%
EU-West100%
AP-South99.97%

150+ Plugins

Extend with JS, Go, or Rust. Transform requests, inject headers, shape responses.

Registry153 available
RSrate-limiter42K installs
JScors-handler38K installs
GOjwt-validator31K installs
RScache-layer27K installs

Real-Time Observability

Every request logged and traced. Live dashboards, distributed tracing, anomaly alerts.

Stream1.2M req/min
14:02:41GET /api/v2/users 200 0.8ms
14:02:41POST /api/v2/events 201 1.2ms
14:02:42GET /api/v2/config 200 0.3ms
14:02:42PUT /api/v2/routes 429 0.1ms

Global Edge Network

Deploy to 200+ edge locations. Sub-10ms response for every user, everywhere.

Edge Nodes213 active
Avg latency3.2ms
Product

See Meridian in action

From config-as-code to real-time dashboards — a visual tour of the platform.

Comparison

Meridian vs. the rest

Stop paying per-request premiums. Get everything you need in one gateway.

FeatureMeridianKongAWS API GWApigee
p99 Latency0.4ms8ms29ms15ms
Edge Locations200+Self-hosted22 regions5 regions
Config as Code YAML + GitOps decK CloudFormation UI only
Built-in Analytics Full traces Plugin CloudWatch Limited
Custom PluginsJS, Go, RustLuaLambda onlyJava
Multi-Cloud Native Manual Hybrid
Free Tier10M req/moOSS only1M req/moTrial only
SecurityComplianceThreats
All systems protected
Live Threat Feed
BLOCK SQL injection attempt 203.0.113.42
BLOCK Brute force /api/auth 198.51.100.7
RATE 10K+ req/min throttled 192.0.2.15
PASS mTLS verified request internal
BLOCK Invalid JWT signature 203.0.113.99
PASS OAuth2 token refresh internal
SCAN Port scan detected 198.51.100.23
SOC 2
HIPAA
GDPR
PCI DSS
ISO 27001
Zero Trust

End-to-End mTLS

Automatic certificate rotation and pinning across all services. Zero trust from edge to origin — every connection encrypted, every identity verified.

100% encrypted connections
Authentication

OAuth 2.0 + JWT at the Edge

Validate tokens before they reach your services. Block bad actors at the perimeter — sub-millisecond auth that never touches your application code.

0.2ms avg validation time
Geo-Fencing

Geo-Based Policies

Block, route, or rate-limit based on country, ASN, or IP range. Data residency enforcement and compliance built into the infrastructure layer.

195 countries supported
Protection

DDoS Shield & Rate Limiting

Automatic DDoS mitigation at the edge. Configurable rate limits per endpoint, per client, per API key — with intelligent burst handling.

2.4M threats blocked / month
Intelligence

Bot Detection & WAF

ML-powered bot detection that distinguishes real users from automated scrapers. WAF rules auto-update with zero-day vulnerability feeds in real-time.

99.7% bot detection accuracy
Governance

API Key Management

Centralized key issuance, rotation, and revocation. Scoped permissions, usage analytics per key, and automatic rotation on compromise detection.

Auto-rotate on breach detection
2B+Requests / day
200+Edge locations
0.4msp99 Latency
99.99%Uptime SLA
83%Cost reduction
150+Plugins
2B+Requests / day
200+Edge locations
0.4msp99 Latency
99.99%Uptime SLA
83%Cost reduction
150+Plugins
Platform

Built for every workflow

Whether you're deploying microservices or managing a monolith, Meridian adapts.

Intelligent Routing Engine

Content-based routing, load balancing, canary deployments, and circuit breaking — all configured in YAML or our visual editor.

  • Path, header, and body-based routing
  • Weighted round-robin with auto failover
  • Canary deployments with real-time rollback
  • Circuit breaking with configurable thresholds
RoutesRules
Requests12.4K/s MERIDIANrouting engine0.4ms p99 Users APIpath: /api/users/* Auth Servicepath: /api/auth/* Paymentspath: /api/pay/* Analyticspath: /api/events/* Active Rules canary: v2 → 15%circuit-break: 5xx > 5%failover: us-east → eu

Extensible Plugin System

Write edge functions in JavaScript, Go, or Rust with under 10ms cold start. Browse 150+ community plugins or build your own.

  • Request/response transforms
  • Declarative policy engine (CORS, caching)
  • One-click plugin registry deployment
  • Hot-reload without gateway restart
RegistryInstalled
RS rate-limiter
Token bucket and sliding window rate limiting per IP, key, or header.
42K installsv3.2.1
JS cors-handler
Configurable CORS headers with wildcard and credentials support.
38K installsv2.1.0
GO jwt-validator
RFC 7519 JWT validation with JWKS rotation and claim assertions.
31K installsv4.0.3
RS cache-layer
Edge caching with stale-while-revalidate and cache tags for purge.
27K installsv2.8.0
JS body-transform
JSONPath transforms on request/response bodies. GraphQL support.
19K installsv1.5.2
GO circuit-breaker
Configurable thresholds with half-open recovery and metrics export.
15K installsv3.1.0

True Multi-Cloud

One configuration for every cloud. Deploy Meridian across AWS, GCP, Azure, and bare metal with unified management.

  • Unified control plane with GitOps sync
  • Hybrid mesh: connect on-prem + cloud
  • Data residency + compliance controls
  • SOC 2 and HIPAA built in
DeploymentsConfig
Meridian Controlunified config · GitOps sync AWS us-east-1, eu-west-16 gateways · 12 routes ✓ synced 4s ago GCP us-central1, asia-east14 gateways · 8 routes ✓ synced 2s ago Azure westeurope, eastus3 gateways · 6 routes ✓ synced 8s ago On-Premises bare metal · k8s cluster✓ hybrid mesh active
What engineers say

Trusted by the best teams

"We migrated from Kong to Meridian in a weekend. Our p99 latency dropped from 45ms to 2ms. The config-as-code approach made it trivial to replicate across environments."
Daniel Okonkwo
Daniel Okonkwo
VP of Platform, Datadog
"The plugin system is incredible. We wrote a custom auth middleware in Rust that runs at the edge with sub-millisecond overhead. Nothing else comes close."
Kai Nakamura
Kai Nakamura
CTO, Railway
Get Started

Deploy in 30 seconds

One command. Global edge. Zero config files to write.

$ curl -sSL https://get.meridian.dev | sh