IBM API Management Overview - mqug.org.uk - CMA02 - IBM API... · IBM API Management Overview. Please Note IBM’s statements regarding its plans, directions, and intent are subject

© 2014 IBM Corporation

IBM API Management

Overview

Please Note

IBM’s statements regarding its plans, directions, and intent are subject to change

or withdrawal without notice at IBM’s sole discretion.

Information regarding potential future products is intended to outline our general

product direction and it should not be relied on in making a purchasing decision.

The information mentioned regarding potential future products is not a

commitment, promise, or legal obligation to deliver any material, code or

functionality. Information about potential future products may not be incorporated

into any contract. The development, release, and timing of any future features or

functionality described for our products remains at our sole discretion.

Performance is based on measurements and projections using standard IBM

benchmarks in a controlled environment. The actual throughput or performance

that any user will experience will vary depending upon many factors, including

considerations such as the amount of multiprogramming in the user’s job stream,

the I/O configuration, the storage configuration, and the workload processed.

Therefore, no assurance can be given that an individual user will achieve results

similar to those stated here.


Public versus Partner versus Internal?

Public, Open-

To-All APIs

Protected,

Open-To-

Partner APIs

Private, Internal

APIs

• APIs are open to any

developer who wants to

sign up

• Apps are more targeted

towards end consumers

• The business driver is

fostering external

innovation, and quickly

enter new customer facing

ecosystems (Gaming,

connected cars, Google

glasses,…) or tools (IFTTT,

wordpress,…)

• APIs are open to select

business partners

• Apps could be targeted at

end consumers or business

users

• The business driver is often

linked to the ability to

automate processes,

exchange data, and

accelerate partner on-

boarding

• APIs are exposed only to

existing developers within

the enterprise

• Apps are usually targeted

at employees of the

enterprise

• The business driver can be

channel consistency,

productivity through re-use,

and internal innovation


API externalization

Multi-tenant infrastructure

Rate limiting and throttling

Runtime policy enforcement

API gateway deployment

OAuth security management

Data transformation/redaction

Backend service discovery

Version management

Analytics support

Role-based access control

Environment management

Monitoring and notification

API exploration

Self-service sign up

App key provisioning

API usage analytics

Real API Success = API externalization + realization

API realization

What is IBM API Management?


IBM API ManagementFully on-premise, multi-tenant solution,

for API providers

IBM DataPowerAPI Gateway for security, control, integration &

optimized access to a full range of Mobile, Web, API, SOA, B2B & Cloud workloads

Over a decade of innovation, 10,000+ units sold, 2000+ customer installations worldwide

A single, comprehensive solution to design, secure,

control, publish, monitor & manage APIs


IBM API Management

Manage and Share with developer

communities

3

Create, assemble and version an API

1

Analyze & Monitor

API usage

4

Secure, control & scale the API

2


Easily manage your APIsdesign, secure, control, publish, monitor & manage

Explore API documentation

Provision application keys

Developer Portal API Manager Management Console

Define and manage APIs

Explore API usage with

analytics

Manage API user communities

Provision system resources

Monitor runtime health

Scale the environment


API Management v3 platform solution

Management layer Gateway layer

The management layer enables

organizations to define,

manage, expose and control

APIs.

Provides API Manager,

Developer Portal and

Management Console

API configurations are

deployed to the gateway,

which provides the

enforcement point for runtime

policies to control API traffic.

Gateway is DataPower

physical or virtual


API Management v3 platform solution

Management layerGateway layer

API ConfigurationAPI call

Analytics data

Data storeIntegration appliance for data retrieval


API Developer

• How do I assemble APIs?

• How do I manage security?

• Will the infrastructure scale?

• How do I measure performance?

App Developer

• Where do I access APIs?

• How do I understand the

APIs?

• How do I measure

success?

API Product Manager

• How can I rapidly release & update my APIs?

• How do I publicize my API?

• How do I measure success?

Operations Lead

• How do I manage all the API

Environments that are being

requested?

• How can I scale each

environment?

• How can I easily find and fix

issues?

API Success Requires Addressing Needs of

Multiple Stakeholders


API Developer





App Developer



APIs?


success?

API Product Manager




Operations Lead



requested?


environment?


issues?




Support many organizations with one solution

Multi-tenant

support for

multi-provider

organizations

Provider and

Consumer

organization

Visibility

Alerts &

notifications

Send email

directly through

tool


Single Dashboard health monitoring

Consolidated

super admin

view

View system

health

DataPower

load balancing

SSL certificate

Management

Server scaling


Setup in minutes

Easy out of the

box setup

LDAP or

internal

identity

provider

support


API Developer





App Developer



APIs?


success?

API Product Manager




Operations Lead



requested?


environment?


issues?




Developer portal for API consumers

Self service

developer portal to

explore APIs

Browse API

documentation

Role-based

access for viewing

APIs

Browse available

plans with limits

and choose from

available plans


Monitor API consumption

Monitor most

active

applications

and APIs


API Developer







API Product Manager




Operations Lead



requested?


environment?


issues?

App Developer



APIs?


success?


Intuitively and iteratively define APIs

and associated policies

Rapidly assemble APIs via

configuration, not coding

Minimize risk with industry leading

security & scalability

Define

API Developer

Assemble

Meter

SecureDeploy,

Test & Debug

Monitor

Scale

Version

20

Create, Secure & Version APIsSimple interface accelerates iterative API development & deployment


Easily create, find REST and SOAP APIs

Define the REST or

SOAP API you wish to

expose

Import from a registry

Search for, add custom

tags to, and mark

favorite APIs for easier

discovery


Assemble New APIs Through Configuration

Assemble a new API

by combining multiple

REST or SOAP

services into a

composite API

Provide examples of

the request and

response messages,

headers and

parameters

Drag and connect

linking the request

and response

messages

Transform the

message elements

with a click


Secure the API

Identify application

with Client ID &

Secret

Authenticate using

LDAP or

Authentication URL

Authorize using

OAuth 2.0 support

with implicit grant

type, authorization

code, resource

owner


Version the API for iterative development

Version the API

configuration in just

one click

Revert prior version


API Developer





App Developer



APIs?


success?

API Product Manager




Operations Lead



requested?


environment?


issues?




“Productize” APIs using Plans

Include multiple APIs

and Resources per

Plan

Version your Plans

Apply Entitlement by

Plan or Resource

Fine grained control

over plan deployment

Enforce Hard or Soft

limits


Gain Business Insights

Pinpoint key market fluctuations and

find correlations related to your

business

• Business Analytics for both API

provider and application developer:

• Top traffic producing API ,

• Top application producing

traffic

• Structured Filtered Search across

analytics for example

• country:USA, color:red

• Saved Searches and Filters for easy

and consistent retrieval

• Enables chargeback/billing for API

consumption by developers through

export of activity as .cvs file


Thank You

Documents

IBM API Management Overview - mqug.org.uk - CMA02 - IBM API... · IBM API Management Overview. Please Note IBM’s statements regarding its plans, directions, and intent are subject