Tencent Cloud API Gateway

Tencent Cloud API Gateway is a cloud service for managing APIs from creation and release through operation and deactivation. It provides testing, staging, and production environments, along with API versioning and rollback. Authentication supports HMAC signatures using gateway-issued keys; users can set per-second call limits and use SSL certificates at the API frontend for data transfer security. Monitoring covers request counts, public outbound traffic, response time, and frontend and backend errors. APIs can be published as purchasable products through API Market. The service integrates with Tencent Cloud SCF and can route APIs to SCF functions and COS resources. Dedicated instances support VPC and Direct Connect connections, while shared instances cannot connect to VPC. Shared instances support requests up to 16 MB and up to 500 QPS per service; requests may be discarded at the QPS limit. New users receive a first-year monthly allowance of one million calls and 1 GB of public outbound traffic, with unused monthly allowance not carried forward. Tencent Cloud is headquartered in Shenzhen, China.

Tencent Cloud API Gateway covers API lifecycle management, traffic controls, monitoring, and integrations with other Tencent Cloud services. The distinction between shared and dedicated instances matters for network access and request limits.

It suits teams managing API release and operation that need environments, versioning, traffic controls, and monitoring. Dedicated instances may fit users needing VPC or Direct Connect connectivity.

Tencent Cloud API Gateway is a managed cloud service for building, releasing, and operating hosted APIs. It suits teams already using Tencent Cloud, especially those that need controlled releases, throttling, and connections to Tencent services. The shared tier is inexpensive to start, but private-network access and sustained high traffic point toward a dedicated instance.

Overview

The service covers the API lifecycle from creation and testing through production operation and deactivation. Separate testing, staging, and production environments, API versioning, and rollback give release teams practical safeguards when an update misbehaves. HMAC key-pair authentication controls client access, while SSL certificates protect data in transit.

Monitoring exposes request counts, public outbound traffic, response times, and frontend and backend errors. That combination helps operators distinguish demand, latency, and endpoint failures rather than relying on a single availability signal. API Market can turn configured APIs into purchasable products, which is useful for teams commercializing interfaces rather than keeping them entirely internal.

Key features

Traffic and capacity

Per-second throttling lets administrators set how many calls an API may receive. Shared instances accept requests up to 16 MB and support up to 500 QPS per service. Requests may be discarded when that ceiling is reached, so shared capacity is a reasonable low-cost entry point but a poor fit for traffic that must never be dropped. The listed monthly request limit is 10,000,000.

Cloud integration and networking

APIs can route to Tencent Cloud SCF functions and COS resources, reducing the need to build separate glue between gateway endpoints, serverless code, and object storage. Dedicated instances connect to VPC and Direct Connect instances; shared instances cannot connect to VPC. Dedicated capacity can also connect to Tencent Cloud WAF and EIAM, making it the more credible option for private-network or security-service integrations.

Operations and resilience

The gateway supports HTTP and HTTPS, request transformation, load balancing, autoscaling, Kubernetes, managed databases, and object storage. Cloud and network fault injection, experiment scheduling, and blast-radius controls support structured resilience work rather than ad hoc failure testing. Kibana, managed backups, SSO, automated key rotation, HSM support, BYOK, audit logs, and SM4, AES-256, RSA-2048, SM2, and ECC managed key types broaden its operational and security tooling. WAF is not included, so that protection requires a separate arrangement.

Pricing

Shared instance

The shared instance is free at no cost. New users receive one million API calls and 1 GB of public outbound traffic per month during the first year; unused monthly allowance does not carry forward. Excess calls and public-network outbound traffic are pay-as-you-go and billed hourly. The stated excess-call rate is $0.0089 per 10,000 calls for up to 10 million monthly calls. This tier fits prototypes, modest public APIs, and teams validating Tencent Cloud integrations, provided they can accept the 500-QPS service ceiling and no VPC connection.

Dedicated instance

Dedicated pricing is custom: charges can be monthly subscription or pay-as-you-go, with instance and public-network outbound-traffic charges. Monthly subscriptions require at least one month; pay-as-you-go is billed by the second and settled hourly. Prices vary by region and specification. Exclusive resources, private-network connectivity, and higher-control deployments justify investigating this tier when shared limits or isolation requirements become material.

Platforms

Tencent Cloud API Gateway is delivered as a cloud service for API and web use. It supports 22 regions, giving distributed teams more placement choices, while HTTP and HTTPS cover standard service-to-service and browser-facing traffic.

Who it's for

Choose it for Tencent Cloud-centered applications that need staged API releases, rollback, rate controls, monitoring, and routes into SCF or COS. It is also a fit for organizations that need Kubernetes support, resilience experiments, or integrated identity and key-management controls. Look elsewhere if VPC access is mandatory but the budget only supports shared capacity, or if unavoidable request loss at a 500-QPS ceiling conflicts with service requirements.

Pros and cons

Pros

• Complete release workflow: testing, staging, production, versioning, and rollback support safer API changes.
• Useful Tencent integration: SCF, COS, API Market, VPC, Direct Connect, WAF, and EIAM connections can reduce platform sprawl.
• Broad operations toolkit: monitoring, autoscaling, load balancing, fault injection, backups, SSO, and key controls cover both delivery and governance.
• Low-cost start: the first-year shared allowance covers one million calls and 1 GB of outbound traffic each month.

Cons

• Shared-instance constraints: no VPC connectivity, a 500-QPS-per-service limit, 16 MB request maximum, and possible request discards at the limit.
• Dedicated cost uncertainty: instance and outbound charges vary by region and specification, complicating budgeting before a quote.
• No included WAF: web-application firewall protection is not bundled.
• Allowance expiry: unused free-tier capacity does not roll into the next month.

Alternatives

For broader gateway comparisons, see API Gateway Software. Teams focused on key governance can compare Encryption Key Management Software, while traffic-attack defenses are covered in DDoS Protection Software.

Entrust Certificate Manager is a paid option across Android, iOS, Linux, self-hosted, web, and API environments; choose it when certificate management, rather than API routing, is the central need. Thales CipherTrust Data Security Platform offers a free Community Edition and a free trial for teams prioritizing data-security tooling. Oracle Cloud Infrastructure Secret Management is free and API/web based, making it a better match for secret storage than gateway operations. OpenStack Barbican is free, open-source, and suited to API, Linux, or self-hosted deployments. AWS Key Management Service has a free plan and a $1.00-per-month key charge, with API requests billed separately, for AWS-centered key management. Bloombase KeyCastle, CrystalKey 360, and OpenKCM (Open Key Chain Manager) are alternatives for readers evaluating key-management products rather than a Tencent API gateway.

Verdict

Recommend Tencent Cloud API Gateway to Tencent Cloud teams that want one service for API lifecycle control, throttling, monitoring, and native SCF or COS integration. Its first-year shared allowance lowers the barrier to entry, but dedicated pricing and the shared tier's network and QPS limits deserve scrutiny. Choose another platform when private networking is essential without a dedicated-instance budget, or when a specialist key-management product is the actual requirement.