Date post: | 25-Dec-2015 |
Category: |
Documents |
Upload: | vincent-emil-townsend |
View: | 220 times |
Download: | 1 times |
tSponsors
Kent WeareIntegration MVP, Author
API Management Part 1 – An Introduction to Azure API Management
BizTalk Summit 2015 – LondonExCeL London | April 13th & 14th
Introduction to Azure API Management
Kent Weare
About Me• 10+ years of BizTalk experience• Author • Microsoft BizTalk/Integration MVP since 2008• Senior Architect – Calgary, Canada
What is an API?
•“In the simplest terms, an application programming interface, or API, is a set of requirements that enables one application to talk to another application.” *
* http://readwrite.com/2013/04/24/api-gold-rush
What is a Web API?
•Similar in nature but have a prescribed implementation:•HTTP(s)• RESTful• JSON (preferred), XML (supported)• Spec Driven (Swagger, RAML, WADL, API Blueprint)
(ish)
Business of APIs
API Econom
y
ISVs
New Channel
s
Marketing & Customer Relationshi
ps
API Security
Internal Agility
The Rise of APIs
2006 2007 2008 2009 2010 2011 2012 20130
5000
10000
15000
20000
25000
Number of Public APIs
Managed Total APIs
Continued robust growth in APIs
Fueled by mobile, cloud, open & big data, IoT
Public APIs are just the “tip of the iceberg”
APIs are a core component for many startups
APIs are drivers of innovation in the enterprises
The Power of APIsThe power of APIs - In 2015 • Uber, the world's largest taxi company owns no
vehicles• Facebook, the world's most popular media
owner creates no content• Alibaba, the most valuable retailer has no
inventory • Airbnb, the world's largest accommodation
provider owns no real estate
Source: LinkedIn
Who uses APIs in their Business?
What is API Management?
What is API Management?
API Mgmt Platforms provide similar services
Authentication and Authorization
Analytics
Policy Enforcement
Development Engagement
Agility
Microsoft Azure API Management
Azure API
MGMT
Project existing or
new services as APIs
Publish APIs to developers, partners and
citizens
View Operational
and Business insights through
Analytics
Developer Engagement
October 23, 2013
WINDOWS AZURE API
DEVELOPER PORTAL
PUBLISHERPORTAL
PROXY
WINDOWS AZURE
API MANAGEMENT
PUBLISHER / ADMIN
DEVELOPERS
APPS
BACKEND
Can be hosted anywhere: public
cloud or on-premises
Microsoft Azure API Management – High Level Architecture
WEB USERS
WEB SITE
YOUR ORGANIZATION
APP DEVELOPERS
USERS
MOBILE APPS
SOCIAL APPS
PARTNERS ANDAFFILIATES
API
AZURE API MANAGEMENT
DEVELOPER PORTALREGISTRATIONDOCUMENTATIONINTERACTIVE API CONSOLEDEVELOPER ANALYTICSAPP GALLERYFORUMSNEWSISSUESWIKI
API PROXYSCALINGCACHINGMONITORINGTRAFFIC MANAGEMENT
ADMIN PORTALAPI PUBLISHINGSUBSCRIPTION MANAGEMENTSECURITYMEDIATIONCONTENT PUBLISHINGSITE CUSTOMIZATIONISSUE MANAGEMENTANALYTICSREPORTS
I have BizTalk/Web Services/Middleware – why do I need an API Management Platform?
A Story….with help from Vince Vaughn
Intern IT Manager
I need to ‘mobilize’
our existing systems
We need more
channels!
6 weeks? Try 6
months.
When we go live with this in 6 weeks. We will leapfrog the competition and I will get a huge bonus!!!
Security?Enrollment?Governanc
e?Visibility?
• #$%&#^% IT is too slow!!!• Amateurs• I should just outsource everything
I have no idea how we are going to do
this. It takes 6 weeks just for
change management.
What is API Management?
This might actually work since I don’t
need to get the whole IT Department
involved.
…and we didn’t
need to re-write backend services
No Firewall Ports need to be openedOut of Box Authentication
Throttling and Rate Limiting
Caching
Self Service Enrollment
Leverage existing investments
…and we now have analytics so
we can track where requests are coming from and drive future
investment
I knew we could do it!
Drinks on me.
BizTalk Server2013 R2
Policy System
Salesforce
DMV
Rating Engine
Existing Architecture
SOAPcc
Customers Agents
XML
cc
Mobile Devices
Azure API Management
BizTalk Server2013 R2
Policy System
Salesforce
DMV
Rating Engine
Modern Architecture
JSON
SOAPcc
Partners
Customers
XML
DEMO
Microsoft Azure
Microsoft Azure
DEMO Summary• Legacy Modernization• API Management Provisioning• Dashboard and Analytics• Products• APIs• Operations• Testing APIs• Custom Policies• JSON – XML• XML – JSON• String Manipulation• Caching• Rate Limiting• Security
Microsoft Azure 36
How do I secure my backend services?
IP Whitelisting
Basic Authentication
Mutual Authentication (certificates)
Network Layer Security(Express Route or Site to Site VPN)
Microsoft Azure 38
API MGMT Premium GAStatic IPOAuth 2.0 supportBackup / RestoreCertificate authRoot APIsHTTP supportSubscription per appPerformance improvements (DevX and Proxy)
Recent News/UpdatesNow in all Azure regions, including Australia!DelegationImproved CachingCustom Subscription KeysCompression SupportGoogle Analytics SupportFaster API setupCheck Header PolicyAnd more
Azure | API Management Premium
Azure | API Management Premium
> 1B API calls / month / unit> 5x throughput of Standard unit> 5GB cache> Multi-geography deployment> Virtual Private Network support> Azure Active Directory Integration> SLA 99.95% (with multi-geo)*> Up to 10 units per region (or call for more)
Microsoft Azure
Expressions<inbound>
<set-header name="inbound-ip" exists-action="override">
<value>@(context.Request.IpAddress)</value>
</set-header>
<set-header name="developer-email" exists-action="override">
<value>@(context.User.Email)</value>
</set-header>
</inbound>
Microsoft Azure
Conditionals and Routing<choose>
<when condition=“
@(context.Request.Headers.GetValueOrDefault("client", "") == "v2";)">
<set-backend-service base-url="http://requestb.in/x08ki5x0" />
</when>
</choose>
Thanks!!!Resources
Blog: http://kentweare.blogspot.comTwitter: @wearsy
Azure API Management: http://tinyurl.com/klk7lzbTwitter: @AzureApiMgmtChannel 9 Videos: http://tinyurl.com/nxsggob
Don’t forget to check out#IntegrationMonday