Overview
Esich Model Router is a container you deploy in your own AWS account. It accepts normal OpenAI API calls and forwards them to upstream models based on rules you define.
Most teams adopt it when different services already call different vendors and nobody has a shared view of cost, failures, or who used which model. Esich does not host your traffic. Prompts and keys stay in your VPC.
What it does
The router exposes /v1/chat/completions, /v1/embeddings, /v1/responses, /v1/images/generations, /v1/audio/speech, and /v1/models. You can pin a model in the request or let routing rules decide. Rules support priority, conditions, splits across targets, and fallback when a provider returns errors or hits a budget cap.
Governance checks can flag PII, SSN patterns, and leaked API keys in prompts. API keys are scoped to org, team, or project. Provider credentials are encrypted at rest.
Running it on AWS
Common setup: EKS with the included Helm chart, RDS for Postgres, ElastiCache for Redis, S3 for exports, ALB for ingress. ECS Fargate and a single EC2 host with Docker Compose also work for smaller installs.
Put the router in private subnets. It needs outbound HTTPS to reach model APIs unless you only use internal endpoints like Ollama or vLLM.
Set ESICH_AIRGAP=true if the environment must not phone home.
Bundled pieces Router image (Go, distroless, non-root) Admin UI at /admin Prometheus metrics at /metrics Grafana dashboard definitions Docker Compose, Helm, and plain Kubernetes manifests
Docs: https://esichholding.com/docs
Support
Highlights
- VPC-hosted LLM router with OpenAI-compatible API and YAML routing rules.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/month |
|---|---|---|
Starter | Up to 5M routed requests/month, 3 provider connections, basic routing, email support | $500.00 |
Business | Up to 50M routed requests/month, unlimited providers, RBAC, budgets, caching, priority support | $8,000.00 |
Vendor refund policy
Esich Holdings LLC - Esich Model Router. Monthly Marketplace contracts are not refunded after the billing period starts. Cancel in the AWS Marketplace console to stop the next renewal; access continues until period end. First paid subscription: full refund within 14 days if you cannot deploy using our documentation and we cannot fix the issue within 5 business days. Email sales@esichholding.com with your AWS account ID.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
VPC container (EKS or Compose)
- Amazon ECS
- Amazon EKS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Provider and model management in the admin console: enable/disable providers and models, save provider API keys in the UI (encrypted at rest), and add custom models without a restart.
Security: the router refuses to start with default ESICH_ENCRYPTION_KEY / ESICH_JWT_SECRET. The hardcoded esich-dev-key gateway bypass is disabled unless ESICH_DEV=true.
Admin fixes: working API key creation, Account page for login email/password changes, provider credential forms, model toggles.
Additional details
Usage instructions
What you need
AWS subscription; EC2 with Docker or EKS PostgreSQL 14+, Redis 7+, NATS 2.10+ (included Compose stack works) At least one LLM provider API key Image: 709825985650.dkr.ecr.us-east-1.amazonaws.com/esich-holdings/model-router:1.0.1
Pull
aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com docker pull 709825985650.dkr.ecr.us-east-1.amazonaws.com/esich-holdings/model-router:1.0.1
Compose (easiest)
export ESICH_ENCRYPTION_KEY, ESICH_JWT_SECRET (openssl rand -base64 32 each), ESICH_OPENAI_API_KEY=sk-...
docker tag 709825985650.dkr.ecr.us-east-1.amazonaws.com/esich-holdings/model-router:1.0.1 esich/model-router:1.0.1 export ESICH_VERSION=1.0.1 && docker compose up -d --no-build
Verify: curl -s http://localhost:8080/healthz && curl -s http://localhost:8080/readyz