Tyk

Tyk Gateway sits in front of your APIs and absorbs the work that would otherwise be duplicated inside every service behind it. Authentication, rate limiting, quotas and analytics arrive switched on, with no feature held back for a paid tier.

It has been in development since 2014 and speaks REST, SOAP, GraphQL, gRPC and TCP. Kubernetes users can drive it declaratively through the Tyk Operator, and installations exist for Docker, Helm, Ansible, Red Hat, Ubuntu and CentOS, or you can compile it from source.

The middleware chain covers the demands usually placed on a gateway.

• Authentication: OIDC, JWT, bearer tokens, basic auth and client certificates.
• Traffic control: rate limits and quotas per consumer, IP allowlisting and CORS rules per API.
• Content mediation: transform request and response headers, or convert between SOAP and GraphQL.
• Versioning and access: versions set and sunset at a chosen date, with access granted per version and operation.
• Plugins: middleware written in Python, JavaScript, Go or any language that speaks gRPC.
• Hitless reloads: configuration altered and the service restarted without disturbing active requests.

A Docker Compose setup with Redis gets a gateway answering requests in a few minutes, and a hello endpoint confirms it is alive. Tyk Technologies runs the same gateway across its own products, with a commercial control plane, dashboard and developer portal available on top for teams that need them.