Api centric enterprises

1,129 views
968 views

Published on

Published in: Technology, Business
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
1,129
On SlideShare
0
From Embeds
0
Number of Embeds
220
Actions
Shares
0
Downloads
67
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Api centric enterprises

  1. 1. API Centric Enterprises Sumedha Rubasinghe, WSO2 July, 2013
  2. 2. ● Providing the only complete open source componentized cloud platform ● Dedicated to removing all the stumbling blocks to enterprise agility ● Enabling you to focus on business logic and business value ● Recognized by leading analyst firms as visionaries and leaders ● Gartner cites WSO2 as visionaries in all 3 categories of application infrastructure ● Forrester places WSO2 in top 2 for API Management ● Global corporation with offices in USA, UK & Sri Lanka ● 200+ employees and growing ● Business model of selling comprehensive support & maintenance for our products About WSO2
  3. 3. 150 globally positioned customers
  4. 4. API Centric Enterprises..
  5. 5. Information Systems in Enterprises..
  6. 6. Internal Integration
  7. 7. Internal Upgrades
  8. 8. Partner Integration
  9. 9. Business Expansions
  10. 10. You're not the only one ...
  11. 11. Business APIs - why? Source : http://www.slideshare.net/jmusser/j-musser-apibizmodels2013
  12. 12. You're not alone.. Source : http://blog.programmableweb.com/2011/05/25/who-belongs-to-the-api-billionaires-club/
  13. 13. You're not alone.. Source : http://blog.programmableweb.com/2011/05/25/who-belongs-to-the-api-billionaires-club/
  14. 14. Challenges ● How to create API centric business? ○ Why? ○ For whom? ● Authentication & Authorization ○ Subscription Management ○ Access Provisioning ● How to control access? ○ Throttling ● Monitoring & SLA
  15. 15. Challenges ● Revenue Generation ○ Stat collection ○ Billing Model ● Selling your APIs ○ Advertising ○ Store ○ Subscription Tiers ● Deployment ○ Fail safe ○ Scalable ● many more..
  16. 16. An API Management Solution will help to overcome/manage these challenges.
  17. 17. API Management using WSO2 Platform
  18. 18. WSO2 Platform
  19. 19. WSO2 API Manager ● Part of award winning WSO2 Carbon Platform ● API Publishing, API Store, Gateway, Statistics collection ● Apache2 Licensed ● Only Open Source API Management Platform ● Utilizes proven WSO2 Components ○ WSO2 Enterprise Service Bus ○ WSO2 Identity Server ○ WSO2 Governance Registry
  20. 20. Key ComponentsKey Components
  21. 21. API lifecycle begins .. ● Production ready backend implementation ● Create API ○ API Design ○ Life cycle (created,published, blocked,...) ● Documentation, Samples ● Publish APIs
  22. 22. API Publisher ● Starting point of API creation ● Control API Lifecycle ● Manage API meta data ● Documentation ○ Supporting documents ○ API documentation (Swagger support) ● Versioning ● Subscription Management ● API Visibility Management
  23. 23. API Publisher ● Configuring Throttle settings ● Resource level authorization ● Extensions ○ Custom API definition
  24. 24. API Store ● Store of published APIs ● Enterprise API Store ○ Visibility : internal, partner, external ● Password controlled access ● Self-sign up ○ Authorization flow (coming up) ● Support for multiple user stores ● Theming Support ● Powered by data APIs ○ write your own store ○ Ability to integrate with existing portal
  25. 25. API Store ● Single Sign On (SSO) - existing enterprise portals ● http://store.apicultur.com
  26. 26. API Gateway ● API calls go through API Gateway ● Runtime actions(via handlers): ○ Token validation ○ Statistics collection ○ Throttling checks ● API traffic routing ● Extensions ○ Custom runtime actions ○ Custom routing logic ○ Mediation, enrichment ○ API gateway = WSO2 ESB Core + handlers
  27. 27. API Centric Enterprises - How WSO2 API Manager can help?
  28. 28. Building API Centric Enterprises ● Identify the need ○ Answer the why question ○ Figure out ■ Audience ■ Business Model
  29. 29. Building API Centric Enterprises ● Protocol Style ○ REST ■ Per resource path authorization scheme ● eg: ○ GET /books/1.0.0/list - application token ○ POST /books/1.0.0/purchase - user token ● Same API (books), different token types
  30. 30. Building API Centric Enterprises ● Data Formats ○ JSON, XML ○ Message Relaying ■ Virtual any data format in message body ■ Not reading message body content ■ Faster message delivery
  31. 31. Building API Centric Enterprises ● Supported backends ○ OOB functionality for SOAP & REST ○ Through extensions: ■ eg: ● Sending to a JMS endpoint ● Write to a file (VFS transport) ● Custom connectors
  32. 32. Building API Centric Enterprises ● API Traffic Routing ○ OOB Support ■ Two endpoints : Production & Sandbox ○ Through extensions: ■ Message header based routing ■ Body based routing ■ User Profile based routing ■ Load balanced routing (default: round robin) ■ Failover endpoint routing ■ many more..
  33. 33. Building API Centric Enterprises ● Mediation Flow ○ OOB Support ■ Request Flow ● Accept the incoming message ● Perform token validation, throttling checks, statistics collection ● Dispatch to endpoint (Production | Sandbox) ■ Response Flow ● Receive response from backend ● Statistics collection ● Dispatch to API invoker ■ Faulty Message Flow ● If an error occurred while communicating with backend
  34. 34. Building API Centric Enterprises ● Mediation Flow ○ Through extensions: ■ Supports any mediation flow supported by WSO2 Enterprise Service Bus
  35. 35. Building API Centric Enterprises ● Connecting to existing User Stores ○ OOB Support ■ LDAP ■ Active Directory ■ Built-in RDBMS schema ■ Connecting to multiple user stores simultaneously ● Internal User Store ● External User Store
  36. 36. Building API Centric Enterprises ● Access Controlling the APIs ○ OOB Support ■ OAuth2 based token support ■ Standard endpoints for token ● obtaining/refreshing/revoking ■ Token Management capabilities ■ Per API invocation statistics collection ■ Token linked to user profile ○ Through extensions: ■ Ability to plugin custom authentication, authorizations through handlers
  37. 37. Building API Centric Enterprises ● Information passing to backend systems ○ Backend systems tend to have their own AnA logic ○ OOB Support ■ Token is linked to a user profile ■ Obtain details of the user ■ Send to backend using a JWT (JSON Web Token)
  38. 38. Building API Centric Enterprises ● API Statistics ○ OOB support ■ Statistics collection per invocation ■ Request/Response/Faulty flows ■ Default support for storing in WSO2 BAM ● WSO2 BAM features an embedded Cassandra storage ● Analyze/store using Apache Hive ● Reporting on top of analyzed data ○ Through extensions ■ Pump data into different storage ■ Collect data @ different pointcuts
  39. 39. API Statistics
  40. 40. API Statistics ● Data Collection (Agents) ● Data Transfer ● Data Storage ○ scalable ● Post Processing ○ Data Summarization ○ Change of storage ○ Analytics
  41. 41. Building API Centric Enterprises ● App Developer Support ○ Documentation on how Application Developers should use API Store ○ http://docs.wso2.org/wiki/dashboard.action ○ http://docs.wso2. org/wiki/display/AM140/WSO2+API+Manager+Documen tation
  42. 42. Building API Centric Enterprises ● API Versioning Support ○ Version - part of endpoint URI ■ eg: GET books/1.0.1/list
  43. 43. Building API Centric Enterprises ● Throttling Support ○ OOB support ■ Built-in throttling policies ■ Stored in Registry done using XML ○ Through extensions ■ define your own throttling policies
  44. 44. Building API Centric Enterprises ● API Store - Custom Theming ○ Different enterprises have their own themes ○ Existing portals ○ OOB Support ■ 3 built-in sample themes ■ Ability to override ○ Through extensions ■ Powered by backend data APIs (JSON, UT) ■ Write your custom API Store
  45. 45. https://store.apicultur.com
  46. 46. Building API Centric Enterprises ● Deployment Models ○ API Characteristics ■ Access Patterns ■ API domain ○ Volatile access load ■ Sudden spikes ■ Periodic spikes ○ Scalable deployment ■ Hosting Cost vs Benefit ■ Cost of scaling ■ IaaS
  47. 47. Summary ● Having a Business API is considered a strategic advantage ● Enterprises are moving toward API centric ● WSO2 API Manager is part of WSO2’s Carbon Middleware Platform ● WSO2 API Manager consists of many enterprise ready features to convert your enterprise into an API Centric one.
  48. 48. Engage with WSO2 •Helping you get the most out of your deployments •From project evaluation and inception to development and going into production, WSO2 is your partner in ensuring 100% project success
  49. 49. Response Caching ● Time sensitivity / value of data ● Frequency of access ● Geographical distribution

×