Relayna Gateway¶
Relayna Gateway is the Rust control plane and proxy for Relayna AI traffic. It gives external clients, SDKs, Studio, and Relayna workers a single governed API surface for model access instead of exposing provider credentials directly.
The gateway validates Relayna virtual keys, enforces policy, forwards OpenAI-compatible traffic to LiteLLM or direct providers, records usage events, and exposes an operator admin portal from the same binary.
What Runs¶
- Proxy listener for OpenAI-compatible traffic, including
POST /v1/chat/completionsandPOST /v1/responses. - Registered service wildcard routes under
/services/<service-name>/*, with per-service allowed method controls. - Control listener for health, readiness, metrics, and admin APIs under
/admin-ui/*. - PostgreSQL-backed projects, virtual keys, route policies, service links, usage records, services, operator tokens, portal members, browser sessions, and managed-identity bindings.
- Redis-backed request rate-limit, token rate-limit, budget, and reservation state, with budget counters rehydrated from PostgreSQL usage records.
- Embedded Admin UI 2.0 for Monitor, Discover, and Govern workflows across project-first keys, services, usage, health, audit, and policy operations.
Runtime Requirements¶
- PostgreSQL 14 or newer.
- Redis 6 or newer.
- LiteLLM or another OpenAI-compatible upstream.
- A secure operator workflow for the first bootstrap token, either seeded from
GATEWAY_ADMIN_TOKENon a fresh database or generated and printed once.
Documentation Map¶
- Architecture explains the request path, crate ownership, data stores, and trust boundaries.
- Database documents the PostgreSQL schema, required records, endpoint-level usage metadata, keys, and operational data.
- Redis Keys documents rate-limit, budget, and reservation keys used in Redis.
- Getting Started covers local PostgreSQL, Redis, LiteLLM, and gateway startup.
- Admin Portal covers the embedded operator console.
- OpenAPI Service Pricing explains registered service discovery, endpoint billing, multipart selectors, and budget rules.
- Current Feature Highlights summarizes the
v0.1.26feature set, including Admin UI screenshots. - Entra Portal and Service-owner Monitoring covers browser OIDC, member approval, service assignments, managed identities, and local development personas.
- LiteLLM Passthrough covers wildcard passthrough,
canonical route modes, credential translation,
/uiexposure, and browser access constraints. - Entra ID Auth explains the opt-in Microsoft Entra ID front-door authorization mode for provider traffic.
- Apigee Gateway Path explains the Apigee JWT revalidation and trusted signed-header patterns in front of Relayna Gateway.
- Guardrails covers catalog setup, global runtime config, and per-key overrides.
- Provider Intelligence covers routing strategies, fallback, circuit breakers, debug bundles, and service import rollback.
- Deployment covers Docker and Kubernetes.
- Operations covers readiness, logs, metrics, secrets, and releases.