Spring Cloud Gateway实战：微服务API网关从零到一

一、核心概念Route路由网关的基本构建块包含 ID、目标 URI、Predicate、FilterPredicate断言匹配请求条件路径、Header、参数等Filter过滤器对请求进行前置/后置处理鉴权、限流、日志等回到顶部二、快速搭建!-- pom.xml -- dependency groupIdorg.springframework.cloud/groupId artifactIdspring-cloud-starter-gateway/artifactId /dependency # application.yml server: port: 8080 spring: application: name: api-gateway cloud: gateway: routes: - id: user-service uri: lb://user-service predicates: - Path/api/users/** filters: - StripPrefix1 - id: order-service uri: lb://order-service predicates: - Path/api/orders/** filters: - StripPrefix1 discovery: locator: enabled: true # 自动发现服务回到顶部三、自定义全局过滤器JWT 鉴权Component public class AuthGlobalFilter implements GlobalFilter, Ordered { Override public MonoVoid filter(ServerWebExchange exchange, GatewayFilterChain chain) { String path exchange.getRequest().getPath().value(); // 白名单路径跳过鉴权 if (path.startsWith(/api/auth/login) || path.startsWith(/api/auth/register)) { return chain.filter(exchange); } String token exchange.getRequest() .getHeaders().getFirst(Authorization); if (token null || !token.startsWith(Bearer )) { exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED); return exchange.getResponse().setComplete(); } // 验证 JWT简化示例 try { String jwt token.substring(7); Claims claims Jwts.parser() .setSigningKey(secret-key).parseClaimsJws(jwt).getBody(); String userId claims.getSubject(); ServerHttpRequest request exchange.getRequest() .mutate().header(X-User-Id, userId).build(); return chain.filter(exchange.mutate().request(request).build()); } catch (Exception e) { exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED); return exchange.getResponse().setComplete(); } } Override public int getOrder() { return -100; } }回到顶部四、自定义 GatewayFilter限流Component public class RateLimitFilter implements GatewayFilter, Ordered { private final RateLimiter rateLimiter RateLimiter.create(100); Override public MonoVoid filter(ServerWebExchange exchange, GatewayFilterChain chain) { if (!rateLimiter.tryAcquire()) { exchange.getResponse().setStatusCode(HttpStatus.TOO_MANY_REQUESTS); return exchange.getResponse().setComplete(); } return chain.filter(exchange); } Override public int getOrder() { return 0; } } # 在路由中使用自定义过滤器 spring.cloud.gateway.routes[0].filters: - name: RateLimit args: redis-rate-limiter.replenishRate: 10 redis-rate-limiter.burstCapacity: 20回到顶部五、跨域配置Configuration public class CorsConfig { Bean public CorsWebFilter corsWebFilter() { CorsConfiguration config new CorsConfiguration(); config.addAllowedOrigin(*); config.addAllowedHeader(*); config.addAllowedMethod(*); config.setAllowCredentials(true); UrlBasedCorsConfigurationSource source new UrlBasedCorsConfigurationSource(); source.registerCorsConfiguration(/**, config); return new CorsWebFilter(source); } }回到顶部六、网关 vs Nginx# Nginx反向代理 负载均衡 # 适合静态资源、SSL 终止、四层/七层负载均衡 # Spring Cloud Gateway业务网关 # 适合动态路由、JWT 鉴权、限流、熔断、灰度发布 # 生产推荐Nginx前置 Gateway后置 # 请求链路Client → Nginx → Gateway → Microservice