Express Gateway Roadmap

The Express Gateway roadmap consists of two parts:

1. this wiki documentcaptures all features being considered at the epic level
2. the Waffle.io task board that the Express Gateway contributors use to prioritize feature for the next release

Timeframes

The timeframes for consideration to implement new features

Timeframe	Description
Backlog	immediately being considered or worked on for next release
Short Term	a few minor releases out
Medium Term	several minor releases out
Long Term	not until the next major release

New Features

Backlog (Next Couple of Minors)

• Plugin Framework
  • revise spec
  • refactor OAuth 2.0 policy out of core
  • create new plugin walkthrough example
  • story prefix "Plugin Framework:" in Waffle.io task board
• Microservice/Service discovery and orchestration
  • create spec
  • spike
  • story prefix "Service Discovery:" in Waffle.io task board
• High Availability through Clustering
  • create spec
  • spike
  • story prefix "Clustering:" in Waffle.io task board

Short Term (Few Minors Out)

• JWT Authentication
• Datastore - Postgres
• CLI Interface Enhancements
• API (group of API endpoints)
• Microservice (group of service endpoints)
• OpenAPI Support - ingest an OpenAPI Spec and config system with API endpoints
• Advanced Logging format
• (TBD from perf testing)
• Request Policy (massage inbound payload)
• Response Policy (massage outbound payload)

Medium Term (Several Minors Out)

• Serverless Integration (Lambda)
• Serverless Integration (OpenWhisk)
• Express Middleware to EG Policy transformer/converter
• Quota Policy
• OAuth2 Introspection (Resource server only)
• RBACL
• Bot Detection Policy
• Logging - statsd Policy
• Logging - syslog Policy

Long Term (Next Major)

• GraphQL
• OpenID 1.0 Policy
• LDAP Policy
• Caching Policy
• SAML Policy (see Auth Integration)
• LDAP Policy (see Auth Integration)
• HMAC Policy

Completed Features

v1.1.0

• Proxy Load Balancing with Round Robin

v1.0.0 (MVP + Phase 1)

• EG Foundational Core
• API Endpoints
• Service Endpoints
• Pipelines
• Policies (multiple condition + action pairs)
  • Condition -- Parameter
  • Action -- Parameter
• Scopes
• CLI interface
• Partial REST Admin API (enter application data only)
• Hot Reload and Dynamic Config
• Docker support and Docker Image
• TLS/SNI Management
• Policies
  • Simple Reverse Proxy - LoadBalancing
  • CORS
  • Rate Limiting
  • Simple Logging
  • Basic Auth
  • Key Auth
  • OAuth2 (authorization and resource server) Authentication And Authorization
• Consumer Management
  • Users
  • Apps
  • Credentials
  • Credentials Scopes
  • Token Management (auth and refresh)
• Datastore - Redis