api gateway: centralized logic or distributed responsibility?

hey everyone im wrestling with api gateway patterns were looking at consolidating some crosscutting concerns like auth logging and maybe even some request transformation the obvious choice seems to be a centralized api gateway but what are the downsides does it become a bottleneck do we lose the benefits of microservices by putting too much logic there how do you decide what belongs in the gateway versus in the individual services