What Are Gateways?
A gateway is a ready-made record on your domain that points at a
third-party service — pick one from a catalog and nsin fills in the
destination, Host header, and TLS. You get your own hostname, like
ai-40218.example.ir, that answers exactly like the service behind it.
What they’re for
Section titled “What they’re for”Gateways are for API calls and package clients:
- AI & LLM — OpenAI, Anthropic, Google Gemini, OpenRouter, DeepSeek, Groq, Mistral, xAI, Cohere, Hugging Face.
- Packages & build — npm, PyPI, uv, Docker Hub, Microsoft Container Registry, crates.io, Go modules, Maven, Gradle, NuGet, the GitHub API.
- Messaging — Telegram, Discord, Slack, WhatsApp Business.
- Cloud & platform — Google APIs and OAuth, Firebase Cloud Messaging, Firestore, Supabase, Apple APNs, Twilio, SendGrid, the Cloudflare API.
Turning one on
Section titled “Turning one on”- Open your domain and go to Gateways.
- Find the service — search or filter.
- Press Enable.
nsin creates a proxied record, <service>-<5 digits>.<your-domain>, and
issues it a certificate. Rename or remove it anytime.
Requirements
Section titled “Requirements”- Your domain must use nsin’s DNS. See Nameservers.
- Your plan must include gateways. A lock icon means it isn’t on this plan — see Plans & Limits.
- A gateway uses a record slot, same as any other record.
Usage limits
Section titled “Usage limits”Gateway traffic has its own rolling 30-day meter, apart from your site’s traffic.
| Meter | Why it exists |
|---|---|
| Requests | Calls your gateways served. |
| Gigabytes | Data those calls moved. |
Neither predicts the other: docker pull sends mostly tiny requests, but
moves its bytes in one response.
Your plan sets the ceiling on each. The Gateways page shows where you stand.
Pass it, and only the gateway hostnames stop serving — the rest of your domain is fine. The window rolls, so old usage ages out and gateways come back on their own.
Shared egress addresses
Section titled “Shared egress addresses”Gateway traffic leaves from addresses shared with other customers that can change.
A provider that sees an unrecognized or already-flagged IP may restrict or ban your account. That’s why nsin has you accept a short terms notice before your first gateway on a domain goes live — need a stable identity instead? Contact us.
Privacy
Section titled “Privacy”Your credentials travel inside your own request, as without a gateway. nsin never stores them or adds keys of its own — you always authenticate as yourself, and gateway requests show up in your own logs and analytics like any other request.
What’s next
Section titled “What’s next”- Using a Gateway — the base URL, and setup for each kind of client.