View
362
Download
0
Category
Preview:
Citation preview
Apigee Overview05/05/2015
Apigee Edge: Overview
How many API calls do you make in a single day?
4
APIs Power Our Daily Lives
Music Streaming
Television Programming
Online Shopping
Navigation
Banking
Stock Quotes
Telecom ServicesMobile PhoneProvisioning
Photo Printing
Social Networking
Video ConferencingWeb Meetings
Online Gaming
Customer Support
Payments
In-Store Kiosks
Wifi Services
Prescriptions
Photo Sharing
Fitness Tracking
Events Ticketing
Grocery Shopping
Auctions
News
Books & Magazines
5
Each era delivers new innovation-based benefits
1960’s, 70’s 1970’s, 80’s 1990’s 2010’s
Web, SOAClient Server IoT, APIsMainframe
6
Device expectations
Greater user
choice
7
Two Speed IT rationalizes two IT realities
Intelligent API Platform Insights
Consumer Apps
Employee AppsPartner AppsSystems of Engagement
Pace of change
App Server
ESB / Integration / MOM
BI
CRM ERP Database Data Warehouse Data
Lake
Systems of Record
Digital Value ChainExposureConsumption
8
9
Edge across the value chain
analytics servicesAPI services
developer services
ExposureConsumption
Apigee Edge: Focus on the Complete API Lifecycle
10
Threat Protection
Test
Monetize
Scale Traffic
Maintain Availability
Update / Iterate
Publish APIs
Analyze
Develop
Deploy
Model
Access Control
Data Access
Real Time Monitoring
Document
Use
Run
BuildApigee Edge
Swagger
Node.js
Design
PackageIntegration
Configuration
Coding
TransformationQuota
Monitoring
Versions
Logging
Alerts
Debugging
Auditing
Load TestingStaging
DDoS
IdentityRoles
Portal
Developers
App Registration
Rate Plans
Documentation
Mobile Data
Activity Metrics
Push Notification
Zero Downtime
Low Latency
Geo-Distribution
Traffic Spikes
API Services
Edge API Services
12
BackendAppsAPI
Management
BaaSSecurity API Programmabilit
y
API Services
The best of Internet and enterprise technologies with rock-solid reliability, Internet scalability, and enterprise-grade flexibility
Manage APIs through Configuration & Programming
>30 out of the box policies
Policies can be attached at different points and levels
Delivering where developers are
Manage interactions with API consumers and optimize performance
Secure APIs and protect back-end systems from attack
Transform, translate and reformat data for easy consumption
Extend with programming when you need it
13
The power of policiesManage interactions with API consumers and optimize performance
Secure APIs and protect back-end systems from attack
Transform, translate and reformat data for easy consumption
Extend with programming when you need it
14
15
Programming flexibility to adapt
The “processing pipeline” is powerful and flexible
16
App Backend
API Services
• Enforce security• Validate request• Transform parameters and
payload• Translate between developer-
friendly APIs and back-end systems
• Build orchestration and optimization via node.js
16
API Proxies and Flows
http://apigee.com/docs/gateway-services/content/flow-configurations
17
Policies get attached to flows
18
19
End-to-end API Trace with replay simplifies debugging
20
Governance – Hierarchy of Resources
EnvironmentEnvironment
Management Server
Organization
Environment
• Users, Developers, Roles• API products• Applications and API keys• Analytics• Granular RBAC for Governance and development life cycle
• Resources (cache, …)• Client endpoint configurations• Target endpoints configurations
• Centralized control• Each API team (based on
their role) can login to Management server and perform variety of tasks:
• Create APIs• Create API Products
with different access levels
• Collect and use the Analytics for their KPIs and SLAs
• Manage local governance
• Manage the development life cycle
Developer Services
Apigee Instance
Demo: API Services – Creating an API Proxy
1. Look up weather using city name - http://weather.yahooapis.com/forecastrss?q=hong kong
2. XML to JSON3. Response Caching4. Trace – debug API calls5. Throttle API Traffic using Spike Arrest policy
What shall we build?
22
23
StartFinish
Shopper gets online store ad in email
Browses at shoe rack on the website
Adds it to his wish list on the website
Later he’s close to one of
their stores
Gets a push notification
that the shoe rack is in
stock
And if he places his
order now, he gets a
discount
He places the order. Chooses
in store pickup.
Picks up the item in store
bypassing checkout.
He receives a survey about
the item.He fills out the survey. His feedback is
posted.
A digital use case
Build Powerful, Modern Applications!
{API S
ervi
ces
A/B testing
Errors & Crashes
API Performance
Device Analytics
Custom Events
Session Analytics
Datastore
Location queries
Configuration Management
Push Notifications
Connections/Social
User Management
Partner Services
BaaS
API
MRP CRM
ERP HR
24
25
Scalable Persistence
26
Full-text Indexing
27
Graph Data Persistence: Entities & Connections
28
API Driven Data Access with Query
29
Users, Roles & Security made easy!
30
Location Queries
Demo: API BaaS – Location Query
32
Push Notifications
33
Flexible Notification Targets
34
Application Performance Management
35
Remote Application & SDK Configuration
36
Beta & A/B Testing
Demo: API BaaS - Building Social Mobile Apps
Developer Services
Edge Developer Services
39
API TeamDeveloperDeveloper
PortalModeling &
ManagementSmartDocs & API Sandbox
Monetization
Developer Services
BackendAPI
Management
BaaSSecurity API Programmabilit
y
API Services
Apps
Enable a great developer experience that accelerates API adoption, simplifies learning, and increases business value
API TeamApp Developer
Business User
Goals and Challenges
• How to create a developer portal that is useful and informative ?
• What steps to take to make it easy for developers to take the APIs for a spin ?
• How to easily publish fresh content for developers and promote events ?
• What tools are available to developers to engage with the API team efficiently ?
Build, enable and engage your developer community
• How to enable new or extend existing revenue streams with APIs ?
• What kind of revenue models can I implement ?
• How can I make it easy for developers to understand the models & consume them
• Is it easy to integrate the data back to my existing financial systems ?
Deploy business models for API Products
Goa
ls
Chal
leng
es
• Is it easy to learn and use the APIs ?
• How to understand better about the app performance on the device?
• Can I view data to easily on my API performance ?
• Can I contribute and engage with other developers easily ?
Build apps easily, analyze data and engage with other
developers
40
Digital Products out of APIs
41
Self-service On-boarding
42
Developer signs up and requests key
Key approval designation
Managekey requests
Add App
Developer ready to go
42
Equip developers better
API ModelingDescribe an API
structure
SmartDocsGenerate interactive
documentation
API-basedIntegrate with any
portal / CMS
Apigee Edge Developer Services
gh-pages
Other CMS
43
Build great developer experiences!44
Easy to UnderstandTraditional Documentation Interactive Documentation
Easy to Try Things OutExplanation of How things work Rapid Experimentation
East to ConsumeTraditional Web Services “REST” API
Analytics Services
Edge Analytics Services
53
API TeamDeveloperDeveloper
PortalModeling &
ManagementAPI Console Monetization
Developer Services
BackendAPI
Management
BaaSSecurity API Programmabilit
y
API Services
Apps
Ops Metrics
App Performance
Developer Metrics
Business Metrics
Analytics ServicesBusiness
User
Visibility across the digital value chain necessary to monitor, measure, and manage success
Relevant, Actionable and ExtensibleDashboards, Tools & Custom Reports
API AnalyticsDeveloper Analytics
App AnalyticsUser Backend
• API Traffic Patterns• API Performance• Geo location• Anomalies• Multiple metrics – traffic,
response times, errors, data exchange, etc.
• Top Developers • Developer
Engagement• Top API Users• Top Products• Top Apps
• App Performance• App Usage• API Performance• Filter by app
version, device, platform, OS, etc.
End-to-end visibility
54
Measuring progress and results
55
Product ManagerHow is API adoption?How can we improve?What is the business impact?
Business ownerWhat is the bottom line impact?How do we invest for best return?
OpsWhat is the response time per request?Do I need to allocate more resources at peak times?
App DeveloperHow are the APIs my app uses performing?How is my app adhering to API terms of use?
Custom example:
Request data used for analysis
Rich, flexible analytics services
56
API Program Proxy Performance
Latency Analysis
Partner Enablement
Business Transactions
Custom Reports
Top Performance
Cache Performance Error
AnalysisTraffic
Composition Geo Map Devices
Dashboards:
Request payload
data
Developer and App
dataCustom metrics
Reports and
Dashboards
Get started with built-in reports57
Custom reports can show a number of different measures and provide details based on a variety of different drilldown criteria
Define custom metrics and dimensions using virtually any attribute that defines traffic
Unmatched Customization & Flexibility
58
Access from anywhere
59
Summary & Closing
Apigee Edge
BackendApps
API Services
API TeamDeveloper
Developer Services
Monitor, manage, and measure successAnalytics Services
BusinessUser
Increase adoption and value of APIs
Build, manage, scale, and secure APIs and Apps
Enables digital business acceleration with a unified and complete platform built from the ground up for the digital economy
API Manageme
ntBaaSSecurity API
Programmability
API Services
Developer Portal
Modeling & Manageme
ntAPI
ConsoleMonetization
Developer Services
Developer Metrics
Ops Metrics
App Performan
ce
Business Metrics
Analytics Services
61
Thank you
Appendix: Security
64
Infrastructure and Compliance
Security Framework for EdgeAuthentication and
Authorization• Client-side security
features such as OAuth• Integration with custom
identity providers• Target-side security
Traffic Management
• Spike Arrest• Threat Protection• IP address based access
control
User Management
• Roles and Permissions• Request audit log• Pluggable authentication
• Cloud or on-premise implementation• Customizable SSL support• PCI / HIPAA / SOC 2• 24 x 7 x 365 Enterprise Support • Fault Isolation
64
65
Apigee Edge API Platform Security Checklist
Identity
User provisioning RBAC management Groups Identity provider
API SecurityAPI to Backend (Exposure) Secure communication (TLS – 1 way or 2 way) Authentication (TLS, OAuth, SAML) API Products with permissions Versioning Integration with Enterprise identity providers Logging and auditing
App to API (Consumption) Secure communication (TLS – 1 way or 2 way) – Mobile Vs
Partner Authentication (OAuth) API key with Product Scope Roles with Developer Keys (permission management) Quota Enforcement Logging policies and auditing
Threat Protection
XML/JSON Poisoning/Injection SQL Injection DDoS/App-DoS Attacks Quota/Spike Arrest IP based access restrictions
Infrastructure Security and Compliance
Cloud or on-premise Cloud-based security (AWS/other) SOC 2, PCI-DSS, HIPAA 24 x 7 x enterprise support
Analytics Run time detection reports (Volume based, Traffic properties)
Recommended