We have many REST services within our infrastructure and these are built using different technologies(Java, Go, Ruby, NodeJS) but all of them have certain common requirement like Authentication, Authorization, Rate limiting, Analytics etc so we are thinking to have a API gateway in front of these APIs so that all the communication happens through it only. I came to know about some open source products in market like Strongloop/Loopback, WSO2, TYK, APIAXLE & 3scale but most of these doesn't look like time tested and ready for production usage. Few things which are coming to my mind now:
If I mention about WSO2 API Manager,
As I know lot of people using it in production and provide good feedback about it.
Yes. you can use API Manager for rate limiting. API Manager has feature called throttle tiers. you can use that feature for rate limiting. For other features like authentication and authorization you have to use API Manager with WSO2 identity server. For analytics feature you have to use API Manager WSO2 Business Activity Monitor. Integrating all these products you can achieve the features you have mentioned.