{
 "slug": "wso2mi",
 "name": "WSO2 Integrator MI",
 "tagline": "ESB and integration runtime with a web control plane",
 "category": "api-app-server",
 "use_cases": [
  "esb",
  "integration",
  "message-mediation"
 ],
 "aliases": [
  "wso2 micro integrator"
 ],
 "status": "live",
 "upstream": {
  "vendor": "WSO2 LLC",
  "url": "https://wso2.com/integrator/",
  "license": "Apache-2.0",
  "license_url": "https://github.com/wso2/micro-integrator/blob/master/LICENSE.txt"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   8253,
   9164,
   9446
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "restricted",
   "restricted_on": "2026-08-24"
  },
  "azure": {
   "status": "live",
   "version": "4.6.0",
   "last_build": "2026-08-10",
   "offer_id": "wso2mi",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:wso2mi:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.wso2mi?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/wso2mi/",
  "json": "https://lynxroute.com/products/wso2mi/product.json"
 },
 "release_notes": [
  {
   "version": "4.6.0",
   "title": "WSO2 Integrator MI 4.6.0 - Initial release (August 2026)",
   "notes": "* WSO2 Integrator: MI 4.6.0 with Integration Control Plane 2.0.0 on Ubuntu 24.04 LTS\n* Eclipse Temurin 21 JDK - the runtime requires JDK 21 or later\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Separate admin passwords generated per instance for the console and the management API\n* TLS keystores regenerated at first launch, trust stores re-secured\n* Web console signing keys replaced with per-instance random secrets\n* Management API restricted to HTTPS; plaintext management port disabled\n* TLS 1.2 and 1.3 only on every listener\n* The runtime registers itself with the control plane console automatically\n* No external database required - artifacts and configuration persist on the instance\n* UFW firewall pre-configured (ports 22, 8253, 9164, 9446 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "azure": "2026-08-10"
   }
  }
 ],
 "release_history": [
  {
   "version": "4.6.0",
   "azure": "2026-08-10"
  }
 ],
 "deploy": {
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer wso2mi --plan payg-gen2\naz vm create -g my-rg -n wso2mi --size Standard_D2s_v3 \\\n  --image lynxroute:wso2mi:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "WSO2 Integrator: MI (formerly WSO2 Micro Integrator) is an open-source enterprise service bus and integration runtime that connects APIs, services, databases, SaaS platforms and legacy systems. It runs on the JVM (Eclipse Temurin 21) and mediates messages between protocols and formats: REST and SOAP services, JMS and RabbitMQ queues, file and FTP transfers, scheduled tasks, and database-backed data services. Integrations are declared as Synapse artifacts - REST APIs, proxy services, sequences, endpoints, message stores and message processors - and are deployed either as composite applications built with the WSO2 Integrator extension for Visual Studio Code or by dropping a Synapse XML file into the runtime's hot-deploy directory. Configuration and artifacts persist on the instance filesystem; no external database is required. This image also bundles the WSO2 Integration Control Plane, a web console for monitoring the runtime, browsing its deployed artifacts and reading its logs. Apache-2.0 license, no vendor lock-in, no separate enterprise edition and no feature gating.",
  "image_adds": "Security hardening:\n* Per-instance admin passwords generated at first launch - one for the control plane console, a separate one for the runtime management API; the upstream default administrator account is replaced and verified to no longer authenticate\n* TLS keystores regenerated at first launch - upstream ships keystores containing a publicly known private key behind a published password; this image generates a fresh 2048-bit key pair and re-secures both trust stores\n* All web console signing keys replaced with per-instance random secrets, so console sessions cannot be forged\n* Administration is HTTPS-only - the plaintext management port is disabled outright, and TLS is restricted to 1.2 and 1.3 on every listener\n* Control plane internal listeners are reachable only from the instance itself, never from the network\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n* fail2ban and AppArmor pre-configured\n* UFW firewall pre-configured - only TCP 22, 8253, 9164 and 9446 are open\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}