How should API Gateway be used in production for Microservices Architecture?

Keep the gateway focused on edge concerns, secure it, scale it independently, use rate limits and observability, and avoid hiding unstable internal contracts behind excessive transformation.