WSO2 Consulting & Support

WSO2 Consulting & Services for Enterprises

AceMQ engineers deploy and operate WSO2 API Manager, Identity Server, and Micro Integrator in production — including the version upgrades and Enterprise Integrator migrations that get postponed until something forces the issue.

A senior engineer, not an SDR. No sales sequence attached.

Senior SMEs
11+
Emergency SLA
<15min
Customers
160+
Countries Served
26+

Without replacing the whole API platform or committing to an unplanned Enterprise Integrator rewriteFor production incident cover, see AceMQ WSO2 24/7 support.

Customers

  • Microsoft
  • Henry Schein
  • Enbridge
  • Gojek

Partners

  • Broadcom
  • Redis
  • VMware Tanzu
  • OSSeva

The Problem

Why teams call us about WSO2

Eight WSO2 problems that teams bring to AceMQ, from Enterprise Integrator estates waiting on a move to Micro Integrator and releases past WSO2's support dates to gateways that exhaust threads and nodes that disagree about throttling. If one describes your week, that is where the review starts.

  1. 01

    The estate is still on Enterprise Integrator and the move to Micro Integrator has been deferred for years

  2. 02

    API Manager and Identity Server sit on versions that no longer receive updates

  3. 03

    The gateway holds connections until worker threads are exhausted, and a restart is the only fix anyone knows

  4. 04

    Key manager token validation adds latency to every request on the critical path

  5. 05

    Mediation sequences were written by contractors and nobody left can explain what they do

  6. 06

    APIs are published through the portal, so nothing about the running configuration is reproducible from source control

  7. 07

    The registry and the database drift apart between environments and promotions fail unpredictably

  8. 08

    Clustered nodes disagree about throttling because the traffic manager was never configured correctly

A good fit if API Manager, Identity Server or the integrators carry business-critical traffic and you want senior engineers who know WSO2's clustering, database and upgrade failure modes, whether you hold a subscription or run the open-source software.

Not a fit for small teams with non-critical workloads. AceMQ is not a budget consultancy: we work with enterprises running business-critical and compliance-heavy WSO2.

Running WSO2 in production? Get a quote from a senior engineer, answered within one hour.

Contact Us

How it breaks, and the fix

What happens when every WSO2 request calls the key manager?

If the WSO2 gateway token cache is off or expires too soon, each request becomes a synchronous token check against the key manager and its database. A burst on one API then slows token validation for every API behind the gateway.

Every request checks the key manager

API clients, one WSO2 gateway, three APIs

Illustrative
  1. The gateway serves repeat tokens from its cache. The key manager sees a trickle of checks, and all three APIs answer quickly.

  2. With caching off or too short, every request is a live token check. A burst on search-api saturates the key manager and its database, and orders-api and payments-api time out waiting for validation.

  3. The gateway token cache is on, with an expiry aligned to token lifetime, and the key manager datasource is sized for real concurrency. Validation load drops and the burst no longer reaches the other APIs.

Token validation latency that climbs with concurrency is a caching and database problem, not a gateway-capacity problem. The gateway token cache, the key manager round trip and the Identity Server database pool decide it together. The fix is a cache with an expiry matched to token lifetime, a datasource that is not shared with the registry, and pools sized against measured concurrency. AceMQ checks all three before adding nodes.

Our Services

WSO2 Consulting & Services

AceMQ runs five WSO2 service lines: API Manager architecture, performance tuning and scaling, migration and upgrade planning, managed operations, and a health check. A senior engineer leads each one, and any of them can roll into 24/7 support with a 15-minute emergency SLA.

  • 01

    WSO2 API Manager Architecture & Implementation

    WSO2 API Manager splits into gateway, control plane, traffic manager, and key manager components. How you distribute and cluster those decides your failure behavior and your upgrade path.

    • Component topology design across gateway, control plane, traffic manager, and key manager profiles
    • Key manager integration with WSO2 Identity Server, Keycloak, Okta, or Entra ID for OAuth and OIDC
    • API product, subscription tier, and throttling policy modeling for internal and partner consumers
    • Multi-environment and multi-tenant setup with promotion pipelines and API-CTL driven configuration
  • 02

    Performance Tuning & Scaling

    WSO2 products are JVM services with database dependencies and a message broker underneath. Most latency and instability trace back to those three layers rather than to the gateway logic.

    • JVM heap and GC tuning across gateway and control plane nodes for predictable pause behavior
    • Registry and user store database connection pool sizing plus LDAP and JDBC user store query tuning
    • Traffic manager and throttling configuration, including eventual-consistency behavior across gateway nodes
    • Mediation sequence profiling in Micro Integrator to isolate slow endpoints and expensive transformations
  • 03

    WSO2 Migration & Upgrade Planning

    WSO2 major versions change configuration models and component layouts, so upgrades are migrations. We plan them with a rollback path rather than an in-place attempt and a long weekend.

    • Enterprise Integrator to Micro Integrator migration with sequence, proxy, and connector rework
    • API Manager major version upgrades including database migration scripts and API artifact re-import
    • Migration between WSO2 and Kong, Apigee, or MuleSoft in either direction, with policy parity mapping
    • Parallel-run cutover with consumer credential migration so clients are not forced to re-onboard
  • 04

    Managed WSO2 Operations

    Ongoing operational coverage for WSO2 deployments on VMs and Kubernetes — with a named engineer who already knows your topology when the gateway stops issuing tokens.

    • Kubernetes deployment via Helm with pod sizing, persistence, and artifact synchronization across gateway replicas
    • Certificate, keystore, and truststore lifecycle management before expiry turns into an outage
    • 24/7 monitoring of gateway latency, token issuance rates, throttling events, and database health
    • Named engineer on your account with a 15-minute emergency response SLA
  • 05

    WSO2 Health Check & Assessment

    A structured review of deployment topology, security configuration, and version position — including how far behind supported releases you have drifted and what that will cost to fix.

    • Deployment topology review against availability requirements and single points of failure
    • Security review: keystore and certificate hygiene, admin service exposure, and OAuth grant type scope
    • Version and update-level assessment with a realistic upgrade path and effort estimate
    • Written report with prioritized remediation steps ranked by production and compliance risk
  • 15 MIN SLA

    24/7 WSO2 Support

    Named senior engineers on your account — 15-minute emergency response, no ticket routing, no junior triage.

    • 15-minute emergency response SLA
    • Named engineer, zero cold-start
    • Proactive CVE & health monitoring
    • Quarterly deployment reviews

Want AceMQ to take this off your team's plate? Tell us about your WSO2 estate.

Contact Us

24/7 Support

WSO2 Support When It Matters Most

AceMQ WSO2 support gives you named senior engineers and a 15-minute first response when the gateway or identity layer fails in production, 24/7. Lower severities get 1-hour, 4-hour and next-day responses. The same response times apply to API Manager, Identity Server and the integrators.

  1. 15 minfirst responseEmergencyProduction down, messages not flowing, queue manager failure
  2. 1 hourfirst responseCriticalSevere degradation, high error rates, approaching capacity
  3. 4 hoursfirst responseHighPerformance issues, configuration problems, non-critical failures
  4. Next Dayfirst responseStandardQuestions, guidance, best practices, non-urgent improvements

P1 escalation path

A replay of one P1, from the first page to the written root-cause analysis

SLA 15:00
T+Elapsed15:00
Engineer on your bridge

15-minute P1 response, 24/7.
A response time, not a resolution time.

  1. T+00:00

    P1 opened, on-call engineer paged

    Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.

    Paged
  2. T+15:00

    Senior engineer on your bridge

    A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.

    Live
  3. T+30:00

    Specialists across the stack join

    When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.

    If needed
  4. After

    Written root-cause analysis

    Root cause, the fix applied and the prevention steps, delivered after every P1.

    Every P1

How Our Support Actually Works

Beyond SLAs — the model behind senior-only, zero-cold-start expert access.

  • Named Engineers on Your Account

    Every ticket is handled by a senior SME assigned to your account — not a pool of anonymous agents. Zero cold-start. No re-explaining your environment.

  • Live Escalation on Any Ticket

    Any ticket can be escalated to a live session with your named engineer via calendar booking. No gatekeeping, no approval required — direct access, always.

  • Proactive Risk Mitigation

    Quarterly health checks on your deployment plus shared intelligence from 50+ support customers — we surface risks before they reach production.

  • Critical Bug & CVE Intelligence

    Proactive alerts on critical bugs and CVEs affecting your exact version, with version compliance monitoring so you're never caught off guard.

  • Commercial EOL Versions

    Commercial support for end-of-life WSO2 versions, with security fixes backported through OSSeva, so the upgrade happens on your schedule rather than the community's.

How It Works

What actually happens next

An AceMQ WSO2 engagement runs in four stages: a platform assessment of 1 to 2 weeks, written findings within a week, changes made with your engineers environment by environment, then a handover with runbooks. Each stage ends in writing, so your team sees what changes before anything does.

1–2 weeks

Platform assessment

We review API Manager, Identity Server and Micro Integrator versions and topology, gateway and key manager configuration, mediation sequences, registry state, and how deployments actually move between environments.

Within a week

Written findings and plan

Prioritised findings covering the upgrade path, your Enterprise Integrator position and the runtime problems worth fixing first, with the reasoning attached so the sequencing is not arbitrary.

Scoped per engagement

Implementation alongside your team

We carry out version upgrades, mediation rework and Micro Integrator migration with your engineers rather than around them, environment by environment with a tested rollback at each stage.

Ongoing

Handover and optional cover

Runbooks for gateway thread exhaustion, key manager failure and environment promotion written against your deployment, plus 24/7 support with a 15-minute emergency SLA if you want it.

  • Written findings before any change
  • Every change staged environment by environment and reversible
  • Your engineers in the room
  • You keep the runbooks
  • Ad hoc engagements or an annual partnership

A senior engineer, not an SDR. No sales sequence attached.

Customer Success

Real WSO2 Results

WSO2 work from AceMQ, each card linking to the full write-up: the platform, what AceMQ assessed or changed, and the result. They cover gateway throttling, registry deadlocks, an API Manager upgrade and a platform architecture assessment.

1 / 5 case studies

All use cases

Solutions

Every way AceMQ works with WSO2.

AceMQ covers WSO2 end to end: platform consulting and upgrades, 24/7 support and incident management, proactive monitoring, managed WSO2 on your infrastructure or on AceMQ's, support for versions past WSO2's support dates, and a fixed-price health check.

Projects

Build, fix or move WSO2

Fixed-scope work led by a senior engineer: architecture and new builds, a health check of what you run today, or a migration with a reversible cutover.

Side by side

WSO2 Enterprise Integrator or Micro Integrator: what changes if you move?

Micro Integrator is WSO2's lighter, container-first integration runtime, and it replaces Enterprise Integrator, which is not a drop-in swap. Sequences and proxy services largely carry over, but registry use, tooling and the analytics and business process components need rework. AceMQ supports both, and each row below answers one question.

WSO2 Enterprise Integrator compared with Micro Integrator on runtime, configuration, what carries over, support status, how to move and AceMQ cover
QuestionEnterprise Integrator (6.x and 7.x)Micro Integrator (4.x)
What kind of runtime is it?A full Carbon-based product with profiles, including integration, analytics and business process.A lighter runtime built for containers, focused on mediation.
How is it configured and deployed?Through the product, its registry and Developer Studio tooling.Through file-based artifacts packaged for containers and Kubernetes.
What carries over?Not applicable; this is the starting point.Sequences and proxy services largely carry over. Registry use, tooling and any analytics or business process dependence need rework.
What does WSO2's support matrix say?Every listed release, including 7.1 and the 6.6 integration profile, is past its support EOL date. Extended Life Support is for subscribers.4.3 to 4.6 are available. 4.2 is deprecated, with support EOL on 22 March 2027.
How does a move work?Inventory the artifacts first, then plan by batch.Migrate in batches with tests against existing behaviour, and run both in parallel until outputs reconcile.
What does AceMQ cover?Estates on any release, including those past WSO2's support dates.Mediation sequences, Kubernetes deployment, tuning, and the move itself.

For WSO2's three sources of support and where AceMQ fits, read WSO2 support options compared. To see how WSO2's windows sit beside 20 other technologies, see open source and vendor support windows compared.

Not sure which option fits? A senior WSO2 engineer will scope it with you.

Contact Us

One partner, not five

We Support Your Entire Tech Stack

WSO2 rarely fails in isolation. AceMQ covers the full surrounding infrastructure — so one team owns the whole path instead of pointing at each other.

See all 51 technologies we supportShow fewer

FAQs

WSO2 Questions Answered

Eight answers on WSO2 from AceMQ: supported API Manager versions, who answers when the gateway fails, how an engagement starts, Enterprise Integrator to Micro Integrator, upgrade risk, inconsistent throttling, token latency, and working beside a WSO2 subscription.

Still have questions about WSO2? Email an Expert

Which WSO2 API Manager versions are supported?

WSO2 supports each product version for at least three years from release, and release lines introduced from March 2024 for at least seven. Its matrix lists API Manager 4.3 to 4.7 and 4.1 as available, 4.2 as deprecated to 22 March 2027, and 4.0 and 3.2 as extended life only. AceMQ supports any version WSO2 has released.

Who answers when WSO2 fails in production, and how fast?

A named AceMQ senior engineer answers within 15 minutes, 24/7, when the WSO2 gateway or identity layer fails in production. Lower severities get a first response within 1 hour, 4 hours or the next business day. The engineer who takes the first call stays on the case, and every P1 ends with a written root-cause analysis.

How does a WSO2 consulting engagement with AceMQ start?

A WSO2 engagement starts with a free consultation with a senior engineer, booked in our reply within 1 hour. A platform assessment of 1 to 2 weeks follows, covering topology, gateway and key manager settings, mediation sequences, registry state and how deployments move between environments. Written findings and a plan arrive within a week.

What does moving from Enterprise Integrator to Micro Integrator involve?

Micro Integrator is a lighter, container-first runtime with its own deployment and configuration model, so it is not a drop-in replacement. Sequences and proxy services largely carry over, but registry use, tooling and older analytics or business process components need rework. AceMQ inventories artifacts, migrates in batches and runs both in parallel.

How risky are WSO2 major version upgrades?

Riskier than most teams expect, because configuration models and component layouts change between major versions and databases need migration scripts. AceMQ treats an upgrade as a migration: new version alongside the old, database migration against a copy, API artifacts re-imported, validation on real traffic, then cutover with a rollback path.

Why is throttling inconsistent across our WSO2 gateway nodes?

The nodes are deciding independently. WSO2 distributes throttle decisions through the traffic manager, and if its event topic does not reach every gateway, each one falls back to what it sees locally, so the total scales with node count. AceMQ checks traffic manager connectivity from every node first, as the fastest test.

Why does token validation get slower as load rises?

Usually the gateway token cache is disabled or expiring too fast, so each request becomes a synchronous check against the key manager. Identity Server's database then becomes the bottleneck, not the gateway. A cache expiry matched to token lifetime and a datasource sized for real concurrency normally restore latency.

We have a WSO2 subscription. Why add AceMQ?

A WSO2 subscription is the source of product fixes and WSO2 Updates, and you keep it for those. It does not give you an engineer who runs your deployment: the gateway cluster, key manager database, custom mediators and Kubernetes platform. AceMQ covers that layer and hands WSO2 a diagnosed case when a fault is a product defect.

Can we work with AceMQ on WSO2 without a long contract?

Yes. AceMQ works on WSO2 in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.

How much does AceMQ WSO2 support or consulting cost?

Every AceMQ proposal is tailored to your requirements: your WSO2 environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how WSO2 is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.

Let's talk

Ready to Stabilize Your WSO2 Deployment?

Whether you need architecture review, an upgrade or migration partner, identity integration, or ongoing managed operations — AceMQ staffs every engagement with a named senior engineer. Quote requests answered within 1 hour.

A senior WSO2 engineer, not a sales queueAbout your platform, not a pitch deckQuote requests answered within 1 hour

Production incident right now?Email a WSO2 Architect

Get in Touch

Talk to a WSO2 Expert

Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.

305-204-2607
info@acemq.com
66 W. Flagler St. 9th Floor
Miami, FL 33130

Prefer to talk now? Call us directly or use the consultation tab to find a time that works.

We respond within 1 hour.

Pick a time that works — no pressure, no pitch. Just 30 minutes with an expert.

We respond within 1 hour.