This version of the docs is a work in progress. If you don’t see what you are looking for check the legacy wiki.

Quick Start

Learn how to stand up Repose as quickly as possible!

Getting Started

We all need to get started somewhere. If this your first time using Repose, then this is the place for you!

Custom Filter for Repose

Learn how to create your own custom filter for Repose!


Learn the basics of running and operating Repose in a Docker container!

Role Based Access Control

Learn how to implement Role-Based Access Control (RBAC) with Repose!

Running Valve

Details the ways which Repose Valve can be run.

Valve Installation

Covers the typical Repose setup — a Valve installation (i.e., standalone application) running as a Linux service.

Echo Server

IN PROGRESS If you’re evaluating Repose and want a simple origin service to test against, you can install a local instance of httpbin that will echo back your requests.

Rate Limiting

Rate limiting is a common use case for Repose and is easy to test.

Multi Tenant Authorization

Handling authorization when resources have multiple tenants.

User Access Events


Basic Authentication




Preventing XML bomb attacks

Details how to configure Repose to help prevent XML bomb attacks.

SSL/TLS Client Authentication

Looking for a little more security talking to Repose or maybe from Repose to your origin service? SSL/TLS Client Authentication will allow you to limit traffic to those who present a valid certificate.

Functional Test Framework

Learn how to use the Repose functional test framework to create tests for features in Repose or its extension components.

Header Splitting

Details how to make version 9.0+ of Repose split headers like earlier versions did.

Reason Phrase Normalization

Details how to normalize the reason phrase on the status line of an HTTP response.

Problematic Header Handling

Details what to do if Repose adds headers that might have non-legal values, that you can’t otherwise change your configuration to remove (like if they are needed for rate limiting).