3scale: what a really good product to secure an unsecure API if you have multiple backend unsecured routes provided by an ESB (Red Hat Fuse), and available through one unique frontend acting as a secure gateway (with HTTPS protocol and API keys).
TechOps Engineer - Middleware & Containers specialist at EBRC -European Business Reliance Centre
Really simple integration for developers workflow
What is our primary use case?
How has it helped my organization?
Really simple integration for developers workflow because we have a unique entry point to integrate multiple APIs behind, really straight forward.
What is most valuable?
Thanks to open source communities based on Apiman/Keycloak products, Red Hat adds stable features for production perspectives.
What needs improvement?
Setting up OIDC authentication would be another use case for this product.
That would require at least three components :
- Red Hat 3scale API Management (manager plus gateway)
- Red Hat Single Sign-On
- Customer IdP.
Thanks to Openshift Container Platform integration program and features, an all in one product merge is going to be available shortly.
Buyer's Guide
API Management
January 2025
Find out what your peers are saying about Red Hat, Google, IBM and others in API Management. Updated: January 2025.
832,138 professionals have used our research since 2012.
For how long have I used the solution?
Less than one year.
What do I think about the stability of the solution?
The resource consumption is quite good, checked by design because the application behind is running in cloud in containers where resource capping takes place.
What do I think about the scalability of the solution?
For standalone host solution, it is possible to instantiate multiple JVM (Java Virtual Machine) based on Wildfly or JBoss and use session memory replication.
For container solution, docker perspectives on Plateforme as a Service high availability mechanisms , it is more easy to clone dynamically containers on automatic load triggers.
Which solution did I use previously and why did I switch?
I previously used Apiman and Keycloak community version.
Our clients need security patch management, that's why we are using 3Scale from Red Hat in order to get erratas (security fixes) integrated.
How was the initial setup?
Not complex, the cloud integration is even the quickest one based on containers.
What's my experience with pricing, setup cost, and licensing?
Red Hat is a good compromise for now on service support, and it provides short release cycle of open source community (stable features needs by developers).
Which other solutions did I evaluate?
For cloud solution, we evaluated Apiman/Keycloak community version, then 3scale in OpenShift and Azure API Management.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Co-Founder at a tech vendor with 1-10 employees
Easy to deploy
Pros and Cons
- "It's good that they aren't adding a lot of features like ESP, etc. It's okay with just being a gateway."
- "I believe the CMS part of it has room for improvement though. That is where you write a couple of things if you want to publish your API. It's based on liquid scripting, which doesn't seem like the obvious ones to script with."
What is our primary use case?
Our primary use for 3scale is for promising internal and external exacts, as well as providing HIT to computers.
What is most valuable?
One of the most valuable aspects of this solution for us is its ease of deployment. Also the fact that it's not adding a lot of features like ESP or similar features is good. It's okay with just being a gateway.
What needs improvement?
We haven't been working so long, so we are just starting to use it. I believe the CMS part of it has room for improvement though. That is where you write a couple of things if you want to publish your API. It's based on liquid scripting, which doesn't seem like the obvious ones to script with.
I would also like to see it work with open API specification 3.
For how long have I used the solution?
We've been using 3scale for about one month.
What do I think about the stability of the solution?
It seems stable. It does what it does and it doesn't have that many features, but it seems to be working when you're using those features.
What do I think about the scalability of the solution?
We will see about scalability when we begin to use it more, but all the ops files are done by four people. That's including all other ops as well, so I can't say exactly how much it would take, but it should fit into the ordinary work. We are planning on increasing the usage of 3scale, extensively I think, but we're just in the beginning.
How are customer service and technical support?
I have a case right now actually. They have been answering, so it has been fine so far, but I haven't used it a lot.
Which solution did I use previously and why did I switch?
We checked Apigee, but it mainly failed for us. The way we wanted to write it required a cloud and our organization was not ready for pre-cloud solutions. It wasn't a good fit. It was possible to run it on prime, but that seemed like quite a big installation and ops to be running.
How was the initial setup?
I would say the initial setup is straightforward. I haven't been doing the installation by myself. The operation people have done that, but it went well and we had no problem with that.
They said it should take just an hour or two, and we were laughing. That's what it should've taken, but I would say that they were done in a week. I think when you come to a new environment, it's not just the product. It's other things as well. So I would say that one week is pretty efficient.
What about the implementation team?
We had some assistance from Redhat, but it was quite straightforward. We didn't bump into any issues at all. It was on Openshift, so it was straightforward
What other advice do I have?
I would rate 3scale as a seven or eight out of ten. I've had more issues with supporting it. Also, the CMS and Open API specification issues I mentioned above. Those things could be better or simpler.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
API Management
January 2025
Find out what your peers are saying about Red Hat, Google, IBM and others in API Management. Updated: January 2025.
832,138 professionals have used our research since 2012.
Principal Architect at a tech services company with 11-50 employees
Good gateway and security features, but the developer portal needs to be improved
Pros and Cons
- "The most valuable features are the gateway and security features."
- "It would be helpful to improve the customization features so that the customer can do it based on their own needs."
What is our primary use case?
We are a solution provider and this is one of the products that we implement for our clients.
This is a container platform with a developer portal.
How has it helped my organization?
3scale API Managment provides a platform facilitating Trusted Service Providers communicating with the service provider securely and efficiently. Greatly enhance direct business transactions and application to application communications
What is most valuable?
The most valuable features are the gateway and security features.
What needs improvement?
It would be helpful to improve the customization features so that the customer can do it based on their own needs.
Some of the portal features are in need of improvement. The API onboarding process is quite primitive. It may not fit for an enterprise who is trying to manage their API users and the approval process. The development portal needs to better address this functionality.
API management functionality should be improved so that the partner can better group it, and use it.
For how long have I used the solution?
We have been using 3scale API Management for one year.
What do I think about the stability of the solution?
As we are new to this product, I'm not sure about stability. At this stage, it has been okay. We have not experienced any serious issues or crashes.
What do I think about the scalability of the solution?
We have done some scalability and performance testing in our office, and it has been pretty good. We have eight people in the company who are working with it.
The majority of our customers are large companies and I would say that this solution is more enterprise-driven. The entry point and required skill set are quite high.
How are customer service and technical support?
We have been in contact with technical support and so far they have been good. With the cases we have logged, they have given us responses quickly.
Which solution did I use previously and why did I switch?
I have used similar solutions and I find that 3scale is more technical-driven. It uses great technologies and it is still easy for us to customize ourselves.
In terms of API management features, I think that it is less rich than the other major competitors. The way they manage the API is different, which is something that they can improve.
How was the initial setup?
The initial setup is complex at the beginning because there are a lot of steps that we have to follow. Two to three people are needed for deployment and maintenance, at least.
It takes approximately six months to deploy.
What other advice do I have?
This is a product that I like, and have a lot of interest in learning. It is one that I recommend to our clients.
I would rate this solution a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Download our free API Management Report and find out what your peers are saying about Red Hat, Google, IBM, and more!
Updated: January 2025
Product Categories
API ManagementPopular Comparisons
Microsoft Azure API Management
Amazon API Gateway
webMethods.io
MuleSoft API Manager
IBM API Connect
Kong Gateway Enterprise
IBM DataPower Gateway
WSO2 API Manager
Layer7 API Management
Apache APISIX
SwaggerHub
Axway AMPLIFY API Management
IBM Cloud Pak for Integration
Buyer's Guide
Download our free API Management Report and find out what your peers are saying about Red Hat, Google, IBM, and more!
Quick Links
Learn More: Questions:
- Can we use Mulesoft Anypoint API Manager to manage 3scale API Gateway? Any alternative API Management tools?
- Which solution is better on a private cloud: Apigee, MuleSoft, or 3scale?
- Which solution do you prefer: Kong Enterprise or 3sce API Management?
- When evaluating API Management, what aspect do you think is the most important to look for?
- What is the difference between an API Gateway and ESB?
- In a Digital Banking Environment how do we see the role of ESB/ API Managers?
- What is an API Gateway?
- How do you protect your API from security threats?
- What should one take into consideration when choosing an API management solution to manage Microservices?
- Which API Management tools have the best developer portal?