Blog
TenthMatrix WSL Proxy: API Gateway, CDN & Agent Edge
Complete API gateway and CDN from the TenthMatrix team — live rules, WAF, multi-POP, plus Agents Gateway and MCP Gateway underway
On this page
TenthMatrix WSL Proxy (WSLProxy) is TenthMatrix’s open API gateway and CDN edge control plane — live routing, WAF, cache, multi-POP DNS, and MCP for agents. Product page: /wsl-proxy. Deep dive: long article.
Watch: TenthMatrix WSL Proxy intro
Watch: youtu.be/7NJulclG5sQ · Product: wslproxy.org
What it is
WSLProxy is a dynamic API gateway and reverse proxy on OpenResty. Operators manage virtual hosts, rules, WAF, cache, traffic splits, and edge POPs from an Admin UI, REST API, MCP tools, or wslproxy-cli. It is built for multi-POP edges, GitOps-style config, and AI agents — the same stack that fronts tenthmatrix.com traffic in production patterns.
Complete API gateway + CDN
- Routing: path / IP / country / JWT / cookie match → proxy, redirect, HTML, CAPTCHA.
- Traffic: weighted, RR, canary, sticky, least-conn; promote and rollback backends.
- WAF: policy packs, anomaly scoring, monitor/block, events API — see the explainable WAF blog and technical article.
- CDN cache: edge static cache, optional Docker blob cache, Varnish hooks.
- POPs + DNS: declare edges; Cloudflare A-record provisioning with guardrails.
- Control plane: React Admin, Swagger, MCP (Claude/Cursor), CLI image on GHCR.
Agents Gateway & MCP Gateway (roadmap)
TenthMatrix is extending the same edge into the agent era:
- MCP Gateway (in progress): governed front door for external MCP servers — auth bridging, tool allow/deny, audit of
tools/call, per-tool rate limits. - Agents Gateway (in progress): policy and observability for multi-agent traffic through the TenthMatrix WSL Proxy edge.
- MCP management (available now): drive WSLProxy’s own Admin surface from Claude/Cursor via MCP tools.
Where to start
- Open wslproxy.org and the Swagger API.
- Clone github.com/bwalia/wslproxy and run Compose or Helm for k3s.
- Read the technical article or the product page.
- For edge protection: read the WSL Proxy WAF blog, the WAF technical brief, watch the WAF tour, or visit wslproxy.org/waf.
Published by TenthMatrix.
Product site: https://wslproxy.org
More from the blog
Observability Is Not Optional: Make It a Business Standard
Why fragmented monitoring creates blind spots, duplicate spend, and slow incidents — and how to make centralised observability a non-negotiable company standard.
WSL Vault for Compliance: One Tenant Never Opens Another’s Secrets
How WSL Vault keeps app, team, and environment tenants cryptographically isolated — so a stolen root-style token cannot empty the estate — and why dual-tenant control beats secrets sprawl.
Workstation AI Shop: Promoting the AI Sales Storefront Through int → test → acc → prod
Workstation AI Shop sells GPU machines with a fully autonomous AI Sales Agent that configures the basket. See how Ring Promoter moves each build through int → test → acc → prod — with Orbit screenshots release engineers and stakeholders share.