Ocelot vs VaporBoy

Ocelot is a free, MIT-licensed.NET API gateway for microservices that need a unified entry point. It handles HTTP and HTTPS services on platforms supported by ASP.NET Core and supports WebSocket and secure WebSocket connections. Developers install it as a NuGet package in an ASP.NET Core project, configure static or dynamic routes, and deploy the result as a self-hosted ASP.NET Core application. Gateway capabilities include caching, request aggregation, authentication, load balancing, rate limiting, logging, and request and response transformations. Documented service discovery providers include Consul, Kubernetes, Eureka, and Azure Service Fabric. Routes can use registered ASP.NET Core authentication schemes, including JWT bearer tokens, and restrict access by scopes. Documentation includes Auth0, Okta, and IdentityServer bearer-token examples. Ocelot targets.NET 8,.NET 9, and.NET 10. The listed plan costs nothing. Ocelot does not directly support GraphQL and points developers to GraphQL for.NET for integration. The repository reports no SECURITY.md file and no published security advisories.

VaporBoy has no write-up on Specifiction yet; its figures are above.