Tyk Gateway

Website

Open source API gateway for REST, GraphQL, gRPC, and TCP

10.8k stars 1.2k forks last commit first released

Actively maintained

Last commit 26 Aug 2026.

Tyk Gateway screenshot

Tyk Gateway is a cloud-native, open source API gateway used to publish, secure, and manage APIs across on-prem, hybrid, and multi-cloud environments. It sits in front of upstream services to enforce authentication, traffic controls, and governance for multiple protocols.

Key Features

  • Supports multiple protocols including REST, GraphQL, gRPC, and TCP proxying
  • Authentication and authorization options including JWT and OpenID Connect
  • Rate limiting, quotas, and traffic controls to protect upstream services
  • Policy-based access control with per-API and per-endpoint restrictions
  • Request/response transformation and content mediation
  • Plugin and middleware extensibility (including gRPC-based plugins)
  • Analytics and event hooks such as webhooks on gateway events
  • Hot reload / hitless configuration reloads for minimal disruption

Use Cases

  • Central API gateway for microservices with consistent auth and rate limits
  • Exposing internal services to partners with granular access policies
  • Managing mixed API styles (REST/GraphQL/gRPC) behind a single edge layer

Tyk Gateway is suitable for teams that need a flexible, high-performance gateway with strong policy controls and broad protocol support. It can be deployed as a lightweight gateway layer and expanded with additional Tyk components for broader API management needs.

Categories:

Tags:

Tech Stack:

Share:

Similar to Tyk Gateway

Kong Gateway logo

Kong Gateway

Cloud-native API and LLM gateway with extensible plugins

44k
5.2k
Last commit

Kong Gateway is a high-performance, cloud-native API gateway for routing, securing, and observing API traffic, with an extensible plugin system and Kubernetes support.

Apache-2.0Actively maintained
Alternative to:
Amazon API Gateway logo
Amazon API Gateway
+7

OAuth2 Proxy

Reverse proxy and middleware for OAuth2/OIDC authentication

14.9k
2.2k
Last commit

OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2/OIDC login and forwards authenticated user identity to upstream services.

MITActively maintained
Alternative to:
Cloudflare Access logo
Cloudflare Access
+14
KrakenD Community Edition logo

KrakenD Community Edition

High-performance, stateless, declarative API gateway

2.7k
499
Last commit

Open-source API gateway for securing, aggregating, and transforming microservice APIs with a stateless, high-throughput Go-based runtime and declarative configuration.

Apache-2.0Actively maintained
Alternative to:
Amazon API Gateway logo
Amazon API Gateway
+7
Lura logo

Lura

High-performance API gateway framework with extensible middleware

6.8k
582
Last commit

Lura is a stateless, high-performance API gateway framework for building reverse proxies that aggregate, transform, and secure backend APIs via middleware and plugins.

Actively maintained
Alternative to:
Amazon API Gateway logo
Amazon API Gateway
+9
Authgear logo

Authgear

Identity and authentication platform for apps and APIs

2k
125
Last commit

Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.

Apache-2.0Actively maintained
Alternative to:
Auth0 logo
Auth0
+19
ZITADEL logo

ZITADEL

API-first identity and access management platform for applications

14.9k
1.3k
Last commit

ZITADEL is an open source IAM/CIAM platform providing SSO, MFA, OIDC/OAuth2, SAML, user management, and multi-tenant organizations with audit logging.

AGPL-3.0Actively maintained
Alternative to:
Auth0 logo
Auth0
+19