Gateways are dead. They are all vulnerable to the same issue as CVE-2022-3169; an inability to handle a simple FORWARD( W3C standard in all app/web servers) means all security will be bypassed. https://apiexpert.medium.com/why-api-gateways-are-dead-7c9e324ff70a