Tyk Gateway on Ubuntu 24.04 LTS

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Tyk Gateway (Open Source) by cloudimg

Deploy the open source Tyk API Gateway on your own Azure infrastructure in minutes - no manual installation, no shared credentials. This image delivers Tyk Gateway 5.14.0 (the open source Gateway edition only, with no Dashboard or commercial components) fully installed and hardened, with its required Redis datastore preconfigured on the same instance, so you can publish and protect your APIs immediately after the VM boots.

Why This Image Instead of Manual Installation

Installing an API gateway by hand means adding the vendor repository, installing and configuring the gateway, standing up and securing a Redis datastore, wiring a reverse proxy and generating a control API secret. This image eliminates that operational burden:

• Tyk Gateway 5.14.0 installed from the official Tyk apt repository and run as a native systemd service
• The gateway's required Redis datastore preconfigured and bound to the loopback interface only
• nginx on port 80 fronting the gateway data plane and its public health endpoint
• Secure by default: the gateway control API secret is generated uniquely per instance on first boot, never shipped as a known value
• The control API is bound to loopback and gated by that per instance secret; nginx returns 403 for the control path on the public port
• A public, unauthenticated health endpoint for load balancer probes
• Ongoing expert support: 24/7 cloudimg engineers handle upgrades, configuration and troubleshooting

Use Case: One Entry Point for Your APIs

A team runs several internal services and wants a single, controlled entry point that authenticates callers, enforces rate limits and quotas, and proxies traffic to the right upstream. With this image they launch a VM, read the per instance control API secret, and publish API definitions over the control API - each with keyless or key based authentication, rate limits and quotas - all within their own VNet, backed by Redis for keys and counters.

Application Stack

Tyk Gateway is a high performance, cloud native API gateway written in Go. It runs here in open source file based mode: API definitions are managed over the gateway control API and stored on the instance, with no Dashboard and no external control plane. The gateway handles authentication, authorization, rate limiting, quotas, request and response transformation, API versioning and analytics. A local Redis datastore holds keys, rate limit counters and analytics, and is bound to the loopback interface. nginx fronts the gateway data plane on port 80 and serves the public health endpoint, while the control API stays on loopback, gated by the per instance secret.

Secure By Default

An API gateway control plane must never ship with a known secret, or anyone could mint and rotate API definitions and keys. This image ships a placeholder control API secret that is rotated to a fresh, unique value on the first boot of every instance, before the gateway starts, and written to a root only credentials file. The control API is bound to loopback and gated by that secret, and nginx returns 403 for the control path on the public port, so the control plane is never reachable from the internet. Redis is bound to the loopback interface. Nothing sensitive ships in the image.

Getting Started

1. Launch the image on your chosen Azure VM size 2. Confirm the public health endpoint responds at http://your-vm-ip/hello 3. Read the per instance control API secret from the root only credentials file over SSH 4. Publish your first API definition over the control API and route traffic to your upstream

Licensing and Pricing

Tyk Gateway (open source edition) is licensed under MPL-2.0 and is free; there is no per-seat fee. The cloudimg charge of 0.04 US dollars per vCPU hour covers packaging, security patching, image maintenance, and 24/7 expert support. This image ships the open source Gateway only and does not include the Tyk Dashboard or any commercial tier components.

cloudimg Support

24/7 technical support by email covers deployment, upgrades, API definition and key configuration, rate limiting and troubleshooting. Critical issues receive a one-hour average response time.

Tyk is a trademark of its respective owner. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.