Tencent Cloud API Gateway

Tencent Cloud API Gateway is a managed service for creating, releasing, operating, and retiring hosted APIs. It suits teams that need formal API lifecycle controls, Tencent Cloud integrations, and measurable traffic management, especially when Kubernetes and cloud-native resources are already part of the stack. The shared tier is inexpensive to start, but network connectivity and capacity limits make instance selection a consequential decision.

Overview

The service separates testing, staging, and production environments, then adds API versioning and rollback for controlled releases. HMAC key-pair authentication handles caller verification, while SSL certificates protect data in transit. Monitoring covers request counts, public outbound traffic, response time, and frontend and backend errors, giving operators practical signals for both usage and failures.

It is particularly well matched to Tencent Cloud deployments. APIs can route to SCF functions and COS resources, and configured APIs can be published as purchasable products through API Market. Dedicated instances connect to VPC and Direct Connect instances and can integrate with Tencent Cloud WAF and EIAM. Shared instances cannot connect to VPC, which excludes them from private-network designs that require that path.

Key features

Lifecycle, authentication, and traffic

Testing and staging environments reduce the risk of taking unfinished changes straight to production, while rollback provides a recovery route when a release fails. Per-second throttling lets operators set how many calls an API receives. Shared instances accept requests up to 16 MB and 500 QPS per service; requests may be discarded when that ceiling is reached. That is workable for modest or burst-tolerant services, but unsuitable where dropped requests are unacceptable without dedicated capacity.

Cloud, resilience, and operations

HTTP and HTTPS are supported, with request transformation, load balancing, autoscaling, and managed database and object-storage integrations. Kubernetes support broadens its fit for containerized environments. Cloud and network fault injection, experiment scheduling, and blast-radius controls support planned resilience work rather than ad-hoc failure testing. The service lists 22 regions and premium support.

Operational controls extend into security and key management: SSO, automated key rotation, HSM support, bring-your-own-key control, audit logs, managed backups, and SM4, AES-256, RSA-2048, SM2, and ECC key types are supported. WAF is not included, so teams needing that protection must use a separate service or the dedicated-instance security integrations.

Pricing

API Gateway is paid, with pricing shown from $1.90/mo and a separate paid-from figure of $0.4 /mo. The free Shared instance costs nothing: the first 1 million API calls per month are free during the first year, after which excess calls and public-network outbound traffic are pay-as-you-go and billed hourly. The first-year allowance also includes 1 GB of public outbound traffic per month, and unused monthly allowance does not carry forward. Excess calls cost $0.0089 per 10,000 calls for up to 10 million monthly calls.

Shared capacity is the sensible entry for prototypes, internal services, and low-volume public APIs that can remain within 500 QPS and do not need VPC connectivity. The allowance is time-limited rather than a permanent free plan, and overage costs begin once either monthly allowance is exceeded.

Dedicated instances have custom pricing. They provide exclusive resources, support monthly subscription or pay-as-you-go billing, and add public-network outbound-traffic charges. Monthly subscription requires at least one month; pay-as-you-go is billed by the second and settled hourly. Instance prices depend on region and specification, so this tier is aimed at production workloads that need private connectivity, predictable isolation, or higher capacity.

For billing questions, Tencent Cloud online customer service can help review hourly usage records retained for the last 30 days.

Platforms

Deployment is cloud-based and the listed platforms are API and web. HTTP and HTTPS protocol support covers conventional service endpoints, while Kubernetes support makes the platform relevant to container operations.

Who it's for

Choose it for Tencent Cloud-centered teams managing APIs across controlled release stages, SCF or COS backends, and monitored production traffic. It also suits organizations that need HMAC access control, key-management integrations, resilience experiments, or API monetization through API Market.

Look elsewhere when private VPC access is mandatory but dedicated-instance pricing is outside budget, or when a 500-QPS shared limit and possible request discards create unacceptable service risk. Teams wanting an included WAF should account for the separate requirement.

Pros and cons

Pros

• Complete release workflow: testing, staging, production, versioning, and rollback support safer API changes.
• Strong Tencent integration: SCF, COS, API Market, VPC, Direct Connect, WAF, and EIAM connections cover a broad cloud-native operating model.
• Useful security controls: HMAC authentication, SSL, SSO, key rotation, HSM, BYOK, and audit logs address access and key governance.
• Low-cost starting point: the first-year Shared allowance covers one million calls and 1 GB outbound traffic each month.

Cons

• Shared-instance constraints: no VPC connection, 500-QPS service ceiling, 16 MB request maximum, and possible discarded requests limit critical workloads.
• Free allowance expires: the one-million-call benefit applies only during the first year, with no rollover.
• WAF is not included: web-application protection may require additional service planning.
• Dedicated pricing is custom: regional and specification-based charges make budgeting harder before a quote.

Alternatives

For broader API-gateway comparisons, see API Gateway Software. Teams focused on key governance can compare Encryption Key Management Software, while attack mitigation needs may point to DDoS Protection Software.

Thales CipherTrust Data Security Platform is a freemium option with a free plan and trial across API, Linux, self-hosted, and web deployments. Bloombase KeyCastle is a paid alternative with a free trial and API, desktop, and web platforms. Oracle Cloud Infrastructure Secret Management is free, includes a free plan, and supports API and web use.

Entrust Certificate Manager is a paid, no-free-plan certificate-management option. OpenStack Barbican is free and open source for API, Linux, and self-hosted deployments. CrystalKey 360 is a paid API, Linux, self-hosted, web, and Windows option. Fornetix VaultCore is a paid product with a free trial and hardware, virtual, or cloud deployment. OpenKCM (Open Key Chain Manager) is free for API, Linux, and self-hosted environments.

Verdict

Tencent Cloud API Gateway is a strong choice for Tencent Cloud teams that want lifecycle governance, traffic controls, rich key security, and direct SCF, COS, and private-network integration. Start with Shared for low-volume services that fit its limits; choose Dedicated when isolation and VPC access matter. Look elsewhere if you need permanently free capacity, included WAF, or guaranteed operation beyond shared-instance ceilings without custom-pricing overhead.