Any recommendations for/against an API manger?

I’m looking for something that’s 1) self-hosted, 2) works (well) on RedHat/CentOS, 3) supports tiered rate-limiting/quotas, an API portal, API mocking, and (of course) analytics, 4) can talk to a CAS SSO server (probably OAuth 2) fo authentication, 5) works well with REST and SOAP, and 6) free as in freedom because I value freedom so much and not because I just want it free as in beer because I’m cheap, but really it should be free as in beer.

I’ve tried WSO2 but it’s very REST-centric and a PITA to set up. Tyk looks good but seems a bit on the Ubuntu/Debian side.