WSO2 Universal Gateway is responsible for handling and managing API runtime traffic within the WSO2 API Manager architecture.
It acts as the execution layer where APIs are deployed and exposed to clients, enforcing security, throttling, routing, and mediation policies.
As part of a distributed API management setup, the Universal Gateway works alongside the Control Plane and Traffic Manager to provide a scalable, high-performance API runtime.
Built on a modern, lightweight architecture, it is optimized for high throughput and low latency.
WSO2 provides Docker images on https://hub.docker.com/u/wso2/ for multiple products. These images contain General Availability (GA) versions without WSO2 Updates.
For production deployments, it is recommended to use updated images from the WSO2 Private Docker Registry, which include WSO2 Updates.
WSO2 Universal Gateway Docker images are built for running the API runtime (data plane) component of WSO2 API Manager in containerized environments.
They support multiple base OS variants and are designed for development, testing, and deployment of API-driven architectures.
4.7.0
https://github.com/wso2/docker-apim/blob/v4.7.0.1/dockerfiles/ubuntu/apim-universal-gw/Dockerfile,
https://github.com/wso2/docker-apim/blob/v4.7.0.1/dockerfiles/alpine/apim-universal-gw/Dockerfile,
https://github.com/wso2/docker-apim/blob/v4.7.0.1/dockerfiles/rocky/apim-universal-gw/Dockerfile
4.6.0
https://github.com/wso2/docker-apim/blob/v4.6.0.5/dockerfiles/ubuntu/apim-universal-gw/Dockerfile,
https://github.com/wso2/docker-apim/blob/v4.6.0.5/dockerfiles/alpine/apim-universal-gw/Dockerfile,
https://github.com/wso2/docker-apim/blob/v4.6.0.5/dockerfiles/rocky/apim-universal-gw/Dockerfile
4.5.0
https://github.com/wso2/docker-apim/blob/v4.5.0.1/dockerfiles/ubuntu/apim-universal-gw/Dockerfile,
https://github.com/wso2/docker-apim/blob/v4.5.0.1/dockerfiles/alpine/apim-universal-gw/Dockerfile,
https://github.com/wso2/docker-apim/blob/v4.5.0.1/dockerfiles/rocky/apim-universal-gw/Dockerfile
bashdocker run -it -p 8243:8243 \ --name api-universal-gw wso2/wso2am-universal-gw:4.7.0
By default, port 8243 is exposed. You can map additional ports as needed.
View logs:
bashdocker logs api-universal-gw
Access container shell:
bashdocker exec -it api-universal-gw bash
Run the container with remote debugging enabled (port 5005):
bashdocker run -it -p 8243:8243 -p 5005:5005 \ --name api-universal-gw-debug \ wso2/wso2am-universal-gw:4.7.0 -debug *:5005
You can override Universal Gateway configurations by mounting files from the host.
deployment.tomlCopy the config file from the product:
{DISTRIBUTION_HOME}/repository/conf/deployment.toml
Update required values (e.g., set port offset):
toml[server] offset = 1
Grant read permission:
bashchmod o+r {SOURCE_CONFIGS}/deployment.toml
Run the container with the mounted config:
bashdocker run -p 8244:8244 \ --volume {SOURCE_CONFIGS}/deployment.toml:{TARGET_CONFIGS}/deployment.toml \ wso2/wso2am-universal-gw:4.7.0
{TARGET_CONFIGS} refers to:
/home/wso2carbon/wso2am-universal-gw-4.7.0/repository/conf
WSO2 Universal Gateway Docker images are available with different base operating systems.
| Image Tag | Base OS | JDK |
|---|---|---|
wso2am-universal-gw:4.7.0 | Ubuntu 24.04 LTS | Temurin OpenJDK 25 |
wso2am-universal-gw:4.7.0-alpine | Alpine 3.23 | Temurin OpenJDK 25 |
wso2am-universal-gw:4.7.0-rocky | Rocky Linux 9 | Temurin OpenJDK 25 |
Each image includes a pre-installed WSO2 Universal Gateway distribution on top of the respective base OS.
Where to get help: Docker Community Forums, Docker Community Slack, Stack Overflow or mail to WSO2 Developer mailing list
Where to file issues: Product specific issues at WSO2 API Manager product https://github.com/wso2/api-manager/issues and Docker resource usage issues at WSO2 API Manager product Docker resource https://github.com/wso2/docker-apim/issues
Maintained by: WSO2 LLC.
Supported Docker versions: Docker v17.09.0 or above
View https://github.com/wso2/product-apim/blob/master/gateway/LICENSE.txt for the software contained in this image.
As with all Docker images, these are likely to contain other software which may be under other licenses (such as Bash, etc. from the base distribution, along with any direct or indirect dependencies of the primary software being contained).
As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。
探索更多轩辕镜像的使用方法,找到最适合您系统的配置方式
通过 Docker 登录认证访问私有仓库
无需登录使用专属域名
Kubernetes 集群配置 Containerd
K3s 轻量级 Kubernetes 镜像加速
VS Code Dev Containers 配置
Podman 容器引擎配置
HPC 科学计算容器配置
ghcr、Quay、nvcr 等镜像仓库
Harbor Proxy Repository 对接专属域名
Portainer Registries 加速拉取
Nexus3 Docker Proxy 内网缓存
需要其他帮助?请查看我们的 常见问题Docker 镜像访问常见问题解答 或 提交工单
docker search 限制
站内搜不到镜像
离线 save/load
插件要用 plugin install
WSL 拉取慢
安全与 digest
新手拉取配置
镜像合规机制
不支持 push
manifest unknown
no matching manifest(架构)
invalid tar header(解压)
TLS 证书失败
DNS 超时
域名连通性排查
410 Gone 排查
402 与流量用尽
401 认证失败
429 限流
D-Bus 凭证提示
413 与超大单层
来自真实用户的反馈,见证轩辕镜像的优质服务