Layer7 API Security

PI Planning for PI42 is now complete and development has kicked off. Below you will find the list of items that are included in this PI and a summary of the releases completed in the previous PI. As always, we invite you to provide feedback. We would love feedback on both the current and future PI items to help us prioritize the items that will have the most benefit for our customers.

Recent Releases

The following product versions were released during PI41:

• API Portal 5.3.3 - Release Notes

Release and EOS Calendar

The following image provides a timeline view of past and planned releases (future releases are prefixed with “+”). For planned releases, the timeline, release name/version, and release content are subject to change. End of Service (EOS) dates are shown in gray on the bottom half of the image.

Planned Releases for PI42

The following product versions are planned to be released during the PI. The marquee features for each release are included. For planned releases, the timeline, release name/version, and release content are subject to change.

• API Gateway 11.1.3 (September 2025)

• Embedded & External Gemfire Support (Preview)

• AWS Elasticache for Valkey Support (Preview)

• ARM64 Support for Container Gateway (Preview)

• Dual Stack IPv4/IPv6 Support for Container Gateway

• Enhanced Health Checks

• XAdES-BES Support

• Siteminder 12.9 Support

• API Gateway 11.2 (November 2025)

• Distroless Container Gateway

• Mounted Secrets Formatting Enhancement

• Inbound X25519MLKEM768 key exchange support for PQC

• JDK 21 Upgrade

• Tomcat 10.1 Upgrade

• Apache HTTP Client 5.4 Upgrade

• Spring 6 Upgrade

• Jetty 12 Upgrade

• HSM Client Upgrades

• Debian 13 Upgrade

• MySQL 8.4 Upgrade

• MAG 4.3 (December 2025)

• GW 11.2 Compatibility

• API Portal 5.4 (October 2025)

• Provide additional configuration endpoints for select DB-only configuration

• Bulk API Editing

• API Products - Product Manager Role

• Improved Filter Management

• Custom Roles: Ability to create and manage roles in Portal

• API List Page Filter for Compliance

• Removal of Deprecated PAPI Endpoints

• One step API removal

• PSSG and DSSG Certificate Removal

• API Catalog Access for non-authenticated users in the UI

• Portal Compatibility for GW11.2

• Filter by Product Tiers

• PATCH support for Application Custom Fields

• DCR Authentication Improvements

• Email Template Enhancements for localization

• GW 11.2 Compatibility

PI42 Key Capabilities

The sections below provide a listing of the key capabilities being worked on across the Layer7 family of products. Note that some capabilities will span multiple PIs. 

API Gateway:

• Gateway 11.1.3 Release

• Debian 13 Upgrade [Part 2]

• 11.2 In-place Upgrade [Part 2]

• Mounted secret formatting enhancements [Part 2]

• Support inbound X25519MLKEM768 key exchange [PQC]

• [Preview] Distributed key value storage using embedded/external with Gemfire [Part 2]

• Gateway 11.2 Release

• Common Criteria evaluation for GW 11.1.2 and Debian 12+ for PI42

• Support gzip compression in SMIME sign/verify assertions

• Route via HTTP assertion timeout enhancement

• [Preview] arm64 Compatible Siteminder integration

• [Preview] JSON Patch Assertion

• JDBC setup with Windows Integrated Authentication

• MS AD 2022 certification

• Non-CVE related requirements for Iron Bank [PI42] - Publishing and Validation

• CVE reduction for Iron Bank [PI42]

• Support UTF8 Encoded Authorization Headers

• Hibernate ORM upgrade from 5.6 to 6.6

OAuth Toolkit:

• [Preview] Layer7 Operator support for OTK - Dual GW Ephemeral

• Support for DPoP

• OTK Upgrade Improvements

API Portal:

• One step API removal - GW Published APIs

• Filter by Product Tiers

• DCR Authentication Improvements

• Custom Roles: Ability to customize navigation

• PATCH support for Application Custom Fields

• Email Template Enhancements for localization

• API Catalog Access for non-authenticated users in the UI

• Multi Language Support in main Portal - Excludes PAPI Swagger

• Bulk Product Updates (Add to all apps, remove from all apps, tier add to all, tier replace, add unassigned apps)

• Bulk API Editing: Tags, Management Permissions, & Custom Fields

• API Catalog for non-managed APIs

• Core Stack Updates

• Portal OVA - Debian 12 Patch

• GW 11.2 Compatibility

• Java 21

• Portal OVA + In-place Upgrade  - Debian 13

• Spring Update

• Analytics Update for Kafka 4.x

• SeaweedFS for on-prem

Mobile API Gateway/SDK:

• Multi host support without re-registration

• GW11.2 compatibility for supported MAG versions

Note that some larger capabilities may span multiple PIs and, as always, plans are subject to change based on a number of different factors.

Candidates for PI43 and Beyond

While the capabilities to be included in the next PI are not yet set, please see below for a list of candidates being considered. Of course, not all of these will fit and we will select a subset of these based on your feedback. We'd love to know if there is a capability in the list you are eagerly awaiting and/or plan to use. We also would love to know if there is something missing from the list that is important to you. Please comment in the comments section below with your feedback.

API Gateway:

• Gateway 11.1.4 Release

• Gateway 11.2.1 Release

• New Monthly Software Patches

• Automated Certificate Management

• Graphman client enhancements

• OpenAPI 3.1

• SNI support for HTTPS in Gateway

• Support HTTP/2 streaming

• Support for gRPC

• DCT enhancements

• Preview to GA feature progression

OAuth Toolkit:

• OAuth 2.1

• DPoP Optional Capabilities

API Portal:

• API Revision History Management

• Layer7 Operator GA Support

• Removal of Processed Request Objects

• Allow bulk API editing to force policy template compliance automatically

• Bulk Policy Template Deployments

• API Products - Workflow for Tier Change Requests