【Tyk介绍】

Tyk 是一个开源的、轻量级的、快速可伸缩的 API 网关，支持配额和速度限制，支持认证和数据分析，支持多用户多组织，提供全 RESTful API。

tyk是一款采用golang语言实现的API网关，具有API Gateway、Tyk Dashboard、 Tyk Pumpd和Tyk Identity Broker等几大组件。不过只有API Gateway的源代码是开放的。

 

 

Tyk is a lightweight, open source API Gateway and Management Platform enables you to control who accesses your API, when they access it and how they access it. Tyk will also record detailed analytics on how your users are interacting with your API and when things go wrong.

 

 

What is an API Gateway?

An API Gateway sits in front of your application(s) and manages the heavy lifting of authorisation, access control and throughput limiting to your services. Ideally, it should mean that you can focus on creating services instead of implementing management infrastructure. For example if you have written a really awesome web service that provides geolocation data for all the cats in NYC, and you want to make it public, integrating an API gateway is a faster, more secure route than writing your own authorisation middleware.

 

 

Key Features of Tyk

Tyk offers powerful, yet lightweight features that allow fine grained control over your API ecosystem.

 

RESTFul API - Full programmatic access to the internals makes it easy to manage your API users, keys and Api Configuration from within your systems

Multiple access protocols - Out of the box, Tyk supports Token-based, HMAC Signed, Basic Auth and Keyless access methods

Rate Limiting - Easily rate limit your API users, rate limiting is granular and can be applied on a per-key basis

Quotas - Enforce usage quotas on users to manage capacity or charge for tiered access

Granular Access Control - Grant api access on a version by version basis, grant keys access to multiple API's or just a single version

Key Expiry - Control how long keys are valid for

API Versioning - API Versions can be easily set and deprecated at a specific time and date

Blacklist/Whitelist/Ignored endpoint access - Enforce strict security models on a version-by-version basis to your access points

Analytics logging - Record detailed usage data on who is using your API's (raw data only)

Webhooks - Trigger webhooks against events such as Quota Violations and Authentication failures

IP Whitelisting - Block access to non-trusted IP addresses for more secure interactions

Zero downtime restarts - Tyk configurations can be altered dynamically and the service restarted without affecting any active request

Tyk is written in Go, which makes it fast and easy to set up. Its only dependencies are a Mongo database (for analytics) and Redis, though it can be deployed without either (not recommended).