the gateway · তোরণPronounced: to-ron · Bengali: তোরণ · “gateway”

One gateway.
Every path.

Toron is an event-driven, high-performance web server, reverse proxy, API gateway and edge security engine—built from the ground up in Go.

Run Toron Read the docs

Pure Go · declarative YAML · HTTP/1.1 · HTTP/2 · HTTP/3 · gRPC · TCP/UDP

HTTP / gRPCKubernetesServices

L4 + L7Transport & application gateway

WAFThreat inspection at the edge

mTLSZero-trust service connectivity

GoOne small, native binary

Capabilities

The edge stack, assembled around the request.

Toron brings traffic management, protocol termination, security enforcement and service connectivity into the same gateway.

↗

Proxy & Gateway

Virtual hosts, prefix and header routing, reverse proxying, load balancing, health probes and circuit breaking.

◌

Modern Protocols

HTTP/1.1, h2c, HTTP/3 over QUIC, WebSockets, gRPC and native L4 TCP/UDP forwarding.

⌁

Performance Engine

Event-driven concurrency, pooled buffers, bounded work, streaming responses and explicit connection deadlines.

✓

Automatic TLS

TLS 1.2/1.3, development certificates, ACME issuance and renewal for production deployments.

⇄

Kubernetes + Mesh

Native Kubernetes Ingress and lightweight sidecar mode for pod-to-pod mTLS and weighted traffic splitting.

▣

REST ↔ gRPC

Transcode JSON REST calls into binary gRPC requests with bounded bodies and protocol-safe header handling.

Routing by design

Describe infrastructure. Then describe traffic.

Toron separates server infrastructure from application routes, keeping operational tuning and service topology independently readable.

Infrastructure configListeners, TLS, HTTP/2/3, compression, cache, WAF, logging and proxy transport.

Routing configStatic sites, upstreams, hosts, headers, load balancing, L4 routes and security policies.

Hot reloadConfiguration changes can be picked up in the background without taking the gateway offline.

routes.yaml

routes:
  - type: "upstream"
    host: "api.example.com"
    prefix: "/v1"
    algorithm: "round_robin"
    health_check_path: "/health"
    targets:
      - "http://api-1:8080"
      - "http://api-2:8080"
    rate_limit: "100/min"
    waf:
      enabled: true
      mode: "enforce"

Security at the edge

Make the gateway part of your security boundary.

Protection is not a separate appliance in the Toron model. It sits directly in the request path, alongside routing and transport controls.

WAFSQLi · XSS · traversal · RCE · custom regex rules

AuthenticationJWT · API key · Basic Auth

mTLSPer-host certificate and client verification policies

ACLsCIDR allow/deny controls and trusted-proxy gating

Request limitsHeader/body ceilings and bounded streaming

Protocol hardeningHeader sanitization and anti-smuggling controls

Rate limitingToken bucket enforcement per route

AuditStructured security logs and Prometheus metrics

Benchmarked in the open

See how Toron compares with the established gateways.

Toron includes a Docker-based comparison harness for Toron, NGINX, Traefik, Caddy and HAProxy, using the same backend services and collecting throughput, tail latency, CPU and memory telemetry.

Recorded Toron run · 16 Sep 2026

4,953 RPS

Actual throughput against a 5,000 RPS target at 100 concurrent connections.

0.095 ms

Median latency (p50) in the recorded 5-second quick run.

0.324 ms

p99 latency in the same recorded run; p99.9 was 2.677 ms.

69 GC cycles

13.8 cycles/sec with 0.0% reported GC CPU overhead and 1 MB peak live heap.

Source: benchmarks/results/benchmark_c100_r5000.json and `.raw.txt`. This particular run used a 0% adversarial-injection ratio; the security figures are therefore not presented as attack-traffic results.

Capability

Toron

NGINX

HAProxy

Traefik

Caddy

Event-driven / high-concurrency core

✓

HTTP/1.1

✓

HTTP/2

✓

HTTP/3 / QUIC

✓

✓*

✓

Native gRPC gateway

✓

Layer 4 TCP + UDP proxy

✓

—

✓*

Built-in WAF

✓

—

✓*

—

Native Kubernetes Ingress

✓

✓*

✓

✓*

Service-mesh sidecar mode

✓

—

✓*

—

REST → gRPC transcoding

✓

—

✓*

Container auto-discovery

Docker / Podman

Docker*

Docker / Swarm / K8s*

Docker*

Declarative YAML routing

✓

✓ indicates a documented capability in the respective product family; * indicates capability may depend on edition, plugin/module, configuration, or external integration. The matrix is intentionally descriptive, not a vendor ranking.

Reproducible comparison harnessThe repository's `benchmarks/docker-compare` suite defines the proxy set, shared backends, concurrency, duration tiers, latency percentiles and container resource telemetry.

Same backends, same workloadThe harness exercises Go fast echo, Go `net/http`, Node.js `llhttp`, and Python `uvicorn/h11` origins behind each proxy.

Measure more than RPSCompare throughput together with p50/p99/p99.9 latency, CPU, memory, GC telemetry and time-series behavior.

Run anywhere

From one host to a service mesh.

Use the same gateway for a simple application, a container estate, Kubernetes ingress, or pod-local service traffic.

Single binary

Build and run Toron directly on Linux, macOS or Windows.

Containers

Discover services from Docker and Podman using Toron labels.

Kubernetes

Operate as a native networking.k8s.io/v1 Ingress controller.

Sidecar

Run alongside workloads for mTLS, canaries and pod-level traffic control.

Operations

Observe the edge, not just the application.

Toron exposes a built-in management surface, Prometheus metrics, structured audit logs and W3C trace context propagation for distributed systems.

↗

Control CenterBuilt-in web dashboard and security audit surface.

◎

PrometheusHTTP counters, latency histograms, WAF and QUIC metrics.

{ }

JSON audit logsStructured security events for SIEM pipelines.

terminal

$ git clone https://github.com/SayantanSaha/toron
$ cd toron_v3

$ go run ./cmd/toron

[TORON] Loaded configuration from config.yaml
[TORON] Routes loaded from routes.yaml
[TORON] Server listening on :8080

$ curl http://localhost:8080/health
{"status":"ok"}

Contact

Building, evaluating, or deploying Toron?

For architecture discussions, security review, benchmarking collaboration, enterprise deployment questions or commercial licensing, get in touch directly.

Sayantan Saha

Project author and maintainer

sayantan.somu@gmail.com

For code, issues and contributions, use the GitHub repository.

Open GitHub

Get started

Put Toron at the edge.

One Go binary. Declarative routing. Security controls. Modern protocols. A gateway that can grow with the system behind it.

View on GitHub Documentation