Microgateway 4.7
Microgateway 4.7 introduces multiple improvements that make operating in Kubernetes environments more efficient: enhanced performance with documented performance data, new options for session handling, and extended OIDC functionality.
Performance
For Microgateway 4.7, performance improvements were a primary focus. Detailed performance metrics are now available, providing valuable guidance for architecture design and environment sizing. Even before go-live, the various performance profiles show how few resources Airlock Microgateway requires and how quickly it processes requests.
The example shows how different operating modes affect throughput:
- Reverse Proxy only delivers maximum raw performance without security filters.
- Filtering enables content security filters for strong protection while maintaining high throughput.
- Filtering + Authentication combines content security filters with OIDC, token introspection, and token exchange – ensuring maximum security with predictable load.
Session handling enhancements
Administrators now have significantly more control over session behavior:
- Session Idle Timeout – Configurable idle time for sessions.
- Session Cookie – Attributes such as name, domain, path, and other settings are now freely configurable.
- Session Mode – The new mode allows for sessionless operation if desired.
- Session ID – Simplifies analysis and tracking of requests processed within a session.
These enhancements lay the groundwork for upcoming features such as Single Logout (SLO), logout propagation, session hijacking prevention, and more.
OIDC enhancements
Airlock Microgateway 4.7 introduces substantial improvements in the area of OpenID Connect (OIDC) for more flexible and secure integration with identity providers:
- Token Introspection – new strategy "periodic": To maintain high security while reducing load on the OIDC provider, the new “periodic” strategy has been introduced. Token validity is checked at configurable intervals – ideal for high-traffic environments.
- Token Exchange – configurable subject_token_type: Expands the possibilities for secure token exchange between services. This allows complex OIDC topologies to be mapped even more effectively – for example, when accessing resources across different domains or in cross-microservice authentication flows.
With these enhancements, we continue to develop OIDC functionality and lay the foundation for new use cases.
This new release introduces numerous improvements for greater security, flexibility, and seamless integration. We look forward to your suggestions and feedback as we continue to improve Microgateway!
Airlock Microgateway 4.7 release video
Watch our release video to find out about all the new features of Airlock Microgateway 4.7.