A traffic control layer that centralizes authentication, authorization, rate limiting, and API policy enforcement.