3scale: what a really good product to secure an unsecure API if you have multiple backend unsecured routes provided by an ESB (Red Hat Fuse), and available through one unique frontend acting as a secure gateway (with HTTPS protocol and API keys).
TechOps Engineer - Middleware & Containers specialist at EBRC -European Business Reliance Centre
Really simple integration for developers workflow
Pros and Cons
- "3scale: what a really good product to secure an unsecure API if you have multiple backend unsecured routes provided by an ESB (Red Hat Fuse), and available through one unique frontend acting as a secure gateway (with HTTPS protocol and API keys)."
- "Setting up OIDC authentication would be another use case for this product."
What is our primary use case?
How has it helped my organization?
Really simple integration for developers workflow because we have a unique entry point to integrate multiple APIs behind, really straight forward.
What is most valuable?
Thanks to open source communities based on Apiman/Keycloak products, Red Hat adds stable features for production perspectives.
What needs improvement?
Setting up OIDC authentication would be another use case for this product.
That would require at least three components :
- Red Hat 3scale API Management (manager plus gateway)
- Red Hat Single Sign-On
- Customer IdP.
Thanks to Openshift Container Platform integration program and features, an all in one product merge is going to be available shortly.
Buyer's Guide
API Management
June 2026
Find out what your peers are saying about Red Hat, Google, IBM and others in API Management. Updated: June 2026.
900,644 professionals have used our research since 2012.
For how long have I used the solution?
Less than one year.
What do I think about the stability of the solution?
The resource consumption is quite good, checked by design because the application behind is running in cloud in containers where resource capping takes place.
What do I think about the scalability of the solution?
For standalone host solution, it is possible to instantiate multiple JVM (Java Virtual Machine) based on Wildfly or JBoss and use session memory replication.
For container solution, docker perspectives on Plateforme as a Service high availability mechanisms , it is more easy to clone dynamically containers on automatic load triggers.
Which solution did I use previously and why did I switch?
I previously used Apiman and Keycloak community version.
Our clients need security patch management, that's why we are using 3Scale from Red Hat in order to get erratas (security fixes) integrated.
How was the initial setup?
Not complex, the cloud integration is even the quickest one based on containers.
What's my experience with pricing, setup cost, and licensing?
Red Hat is a good compromise for now on service support, and it provides short release cycle of open source community (stable features needs by developers).
Which other solutions did I evaluate?
For cloud solution, we evaluated Apiman/Keycloak community version, then 3scale in OpenShift and Azure API Management.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Co-Founder at a tech vendor with 1-10 employees
Easy to deploy
Pros and Cons
- "It's good that they aren't adding a lot of features like ESP, etc. It's okay with just being a gateway."
- "One of the most valuable aspects of this solution for us is its ease of deployment."
- "I believe the CMS part of it has room for improvement though. That is where you write a couple of things if you want to publish your API. It's based on liquid scripting, which doesn't seem like the obvious ones to script with."
What is our primary use case?
Our primary use for 3scale is for promising internal and external exacts, as well as providing HIT to computers.
What is most valuable?
One of the most valuable aspects of this solution for us is its ease of deployment. Also the fact that it's not adding a lot of features like ESP or similar features is good. It's okay with just being a gateway.
What needs improvement?
We haven't been working so long, so we are just starting to use it. I believe the CMS part of it has room for improvement though. That is where you write a couple of things if you want to publish your API. It's based on liquid scripting, which doesn't seem like the obvious ones to script with.
I would also like to see it work with open API specification 3.
For how long have I used the solution?
We've been using 3scale for about one month.
What do I think about the stability of the solution?
It seems stable. It does what it does and it doesn't have that many features, but it seems to be working when you're using those features.
What do I think about the scalability of the solution?
We will see about scalability when we begin to use it more, but all the ops files are done by four people. That's including all other ops as well, so I can't say exactly how much it would take, but it should fit into the ordinary work. We are planning on increasing the usage of 3scale, extensively I think, but we're just in the beginning.
How are customer service and technical support?
I have a case right now actually. They have been answering, so it has been fine so far, but I haven't used it a lot.
Which solution did I use previously and why did I switch?
We checked Apigee, but it mainly failed for us. The way we wanted to write it required a cloud and our organization was not ready for pre-cloud solutions. It wasn't a good fit. It was possible to run it on prime, but that seemed like quite a big installation and ops to be running.
How was the initial setup?
I would say the initial setup is straightforward. I haven't been doing the installation by myself. The operation people have done that, but it went well and we had no problem with that.
They said it should take just an hour or two, and we were laughing. That's what it should've taken, but I would say that they were done in a week. I think when you come to a new environment, it's not just the product. It's other things as well. So I would say that one week is pretty efficient.
What about the implementation team?
We had some assistance from Redhat, but it was quite straightforward. We didn't bump into any issues at all. It was on Openshift, so it was straightforward
What other advice do I have?
I would rate 3scale as a seven or eight out of ten. I've had more issues with supporting it. Also, the CMS and Open API specification issues I mentioned above. Those things could be better or simpler.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free API Management Report and find out what your peers are saying about Red Hat, Google, IBM, and more!
Updated: June 2026
Product Categories
API ManagementPopular Comparisons
Microsoft Azure API Management
Amazon API Gateway
webMethods.io
IBM API Connect
IBM DataPower Gateway
Kong Gateway Enterprise
SEEBURGER Business Integration Suite
MuleSoft API Manager
Postman Enterprise
WSO2 API Manager
Layer7 API Management
Apache APISIX
SwaggerHub
Buyer's Guide
Download our free API Management Report and find out what your peers are saying about Red Hat, Google, IBM, and more!
Quick Links
Learn More: Questions:
- Can we use Mulesoft Anypoint API Manager to manage 3scale API Gateway? Any alternative API Management tools?
- Which solution is better on a private cloud: Apigee, MuleSoft, or 3scale?
- Which solution do you prefer: Kong Enterprise or 3sce API Management?
- When evaluating API Management, what aspect do you think is the most important to look for?
- What is the difference between an API Gateway and ESB?
- In a Digital Banking Environment how do we see the role of ESB/ API Managers?
- What is an API Gateway?
- How do you protect your API from security threats?
- What should one take into consideration when choosing an API management solution to manage Microservices?
- Which API Management tools have the best developer portal?














