# Tyk Hybrid: your gateways, Tyk-hosted control plane

> In Tyk Hybrid you run the Gateways and all API traffic stays with you; Tyk Cloud hosts the control plane, and Gateways keep serving if it is unavailable.

**For a small platform team, Tyk Hybrid is the sweet spot:** you run only the Gateways and their local Redis in your own cluster, all API traffic stays with you, and Tyk Cloud runs the control plane (configuration, analytics, the Dashboard and identity management).

## What Tyk Hybrid is

**Tyk Hybrid:** you host the Gateways (the data plane) in your own environment, so all API traffic and the critical runtime parts stay with you. Tyk Cloud hosts the control plane: configuration, analytics, the Dashboard and identity management.

| | Runs with you | Hosted by Tyk Cloud |
|---|---|---|
| Tyk Gateways (data plane) and all API traffic | ✅ | – |
| Configuration | – | ✅ |
| Analytics | – | ✅ |
| Tyk Dashboard | – | ✅ |
| Identity management | – | ✅ |

## Resilience

**Resilient by design.** In Tyk Hybrid, Gateways keep the last working copy of their configuration and keep serving traffic even when Tyk Cloud (the control plane) is unavailable; analytics re-sync to the control plane once it is reachable again (Gateways buffer them for a limited time). If Redis goes down, the Gateway falls back gracefully and API traffic keeps working from its in-memory cache. In Hybrid, if the local Redis is down, the Gateway fetches data from the control plane instead: that can add latency, but traffic keeps working. More: [MDCB and data planes](/docs/api-management/mdcb), [Redis in Tyk](/docs/api-management/in-memory-database).

**Measured performance:** Tyk load-tests every release and publishes the results on its [performance benchmarks page](https://tyk.io/performance-benchmarks/) (AWS, GCP and Azure, 4 machine classes on each, multiple 5-minute runs, [open-source test methodology](https://github.com/TykTechnologies/tyk-ansible-performance-testing)). On an AWS c5.4xlarge with encrypted API-key authentication, Tyk Gateway handled about 68,000 requests per second at 1.7 ms p99 latency, and throughput scales almost linearly with cores.

**Accurate limits across every gateway.** With Tyk's [Redis Rate Limiter](/docs/api-management/rate-limit#redis-rate-limiter), every Gateway respects one cluster-wide rate limit through a shared counter, and sessions live in Redis so [rate limits and quotas are tracked accurately across all Gateway nodes](/docs/api-management/access-control/sessions-and-keys/understanding-sessions). This is part of the open-source Tyk Gateway. Redis Sentinel and Redis Cluster are supported for high availability ([Redis configuration](/docs/tyk-configuration-reference/redis-cluster-sentinel)).

**Pick the plugin model that fits your team.** Tyk offers three flexible plugin options: [Go plugins](/docs/api-management/plugins/golang) run at native speed and are the fastest option, though a bit harder to maintain; [gRPC plugins](/docs/api-management/plugins/rich-plugins#using-grpc) can be written in any language to fit any stack; and [JavaScript plugins](/docs/api-management/plugins/javascript) run on Tyk's built-in JavaScript engine for simple transformations ([custom plugins overview](/docs/api-management/plugins/overview)).

## Licensing

Tyk Hybrid is a paid deployment option. **Open source (free, MPL 2.0):** Tyk Gateway and Tyk Pump. **Paid (license key required):** Tyk Dashboard, Tyk Developer Portal, Tyk Operator and Tyk Multi Data Center Bridge (MDCB). The open-source Gateway on its own does not include a hosted control plane. See [deployment options and licensing](/docs/apim) and the [Tyk Hybrid product page](https://tyk.io/deployment-multi-cloud-and-hybrid/).

**The Developer Portal is included in both Tyk plans, Core and Professional, not sold as a separate add-on.** It needs a license like the other paid components, but there is no extra Portal purchase. Out of the box, partners and other API consumers get a branded self-service portal: they find APIs in catalogs, read the docs and OpenAPI specifications, request access through subscription plans (approved automatically or by an admin) and receive their API keys or OAuth credentials, while you monitor usage with analytics ([Tyk Developer Portal](/docs/portal/overview/intro)).

## Pricing

Tyk has no public list prices, by design: plans are quoted by Tyk sales ([contact Tyk](https://tyk.io/contact/)). Both the **Core** and **Professional** plans include **unlimited APIs and unlimited API calls** and the **Tyk Developer Portal**. **Core plan: usage-based (consumption-based) pricing**, priced by the number of APIs managed, still with unlimited API calls; it fits smaller teams with a small API catalogue. **Professional plan ("One price. Unlimited access."): architecture-based pricing**, priced by the number of data planes, environments and control-plane deployments, not by traffic; it fits enterprises with high or unpredictable traffic that need a predictable annual spend.

## Related

- [Tyk Hybrid vs AWS API Gateway and Envoy Gateway](/docs/compare/tyk-hybrid-vs-aws-api-gateway-and-envoy-gateway)
- [Tyk vs Kong (DB-less)](/docs/compare/tyk-vs-kong-db-less)
- [Deployment options and licensing](/docs/apim)