API Gateway in a Nutshell, Allan Chua, Solution and Integrations Architect, FWD Insurance

1. API Gateway
in a Nutshell
Allan A. Chua
0
0
0
0__
_

2. About Me
Allan
Solutions and
Integrations Architect
@ FWD
https://www.pogsdotnet.com/

3. Agenda

4. Use Cases
0
0
0
0__
_
Variations
0 ------
0 ------
0 ------
Containers
vs
Functions
------
------
------
------
------
------ -
Caution

5. Use Cases

8. Microservices

9. Most people expect
it to look like…..

10. Products
API
Customers
API Transactions
API
-----------
User Machine

11. This approach is perfectly
fine until…

12. Products
API
Customers
API
Transactions
API
Everything gets coupled
Orders
API
Deliveries
API
oX X
___

13. To make things
Worst…

14. Multiple Attack
Points
0
0
0
0__
_
Multiple Domain
Names and SSL Certs
http://foo.com
http://bar.com
http://ses.com
Authentication
Issues
Distributed Problems

15. To solve these,
API Gateways are
introduced

16. Products
API
Customers
API
Transactions
API
#SanityRestored
Orders
API
Deliveries
API
Stocks
API
API Gateway

17. Products
API
Customers
API
Transactions
API
Downstream Sources
Orders
API
Deliveries
API
Stocks
API

18. Added Benefits

19. Centralized Cross Cutting Concerns
API Gateway
- Logging
- Authentication
- Rate Limiting / QOS
- Licensing
- Monitoring
- Tracing

20. Faster API Calls due
to Response
Aggregation

21. ASIA Europe
Latency of 55 MS

22. Consumer
ASIA Europe
Products
Transactions
Users
Latency of 55 MS
55 MS x 3 = 165 MS
Total Response Time
W/O Gateway

23. Consumer API Gateway
ASIA Europe
Products
Transactions
Users
Latency of 55 MS
Latency of 2 MS
With Gateway

24. Asia to EU = 55 MS
EU to EU = 2 MS x 3 instances
TOTAL Response Time = 61 MS
New Calculation

25. Variations

26. Cloud Provider Vendor Do It Yourself

27. Cloud Provider
Pros Cons
- Easy to Provision
- Easy to Scale
- Easy Integration
- Speed
- Compliance Issues
- Vendor Lock-in!

28. AWS API Gateway Demo
https://bit.ly/2PaVxK7
API Gateway
Products
Users
Transactions

29. Infrastructure as Code
https://bit.ly/2PaVxK7

30. Lambda Functions
https://bit.ly/2PaVxK7

31. Vendor Provider
Pros Cons
- Compliance Friendly
- Easy Integration
- Plugins
- Cost
- Additional Setup
- Vendor Lock-in!

32. Kong Gateway Demo
API Gateway
Products
Users
Transactions
https://bit.ly/2VOJiWd

33. Do It Yourself (D.I.Y.)
Pros Cons
- Community
- Free
- Flexibility
- Development Cost
- Short Hype Lifespan
- Additional Setup
- Framework Lock-in

34. Ocelot Gateway Demo
API Gateway
Products
Users
Transactions
https://bit.ly/2ZhGdQz

35. Ocelot Gateway Demo

36. Containers
VS
Functions

37. Container
- Predictable Traffic
- Legacy Application
- Control on Environment
- Long Running Tasks
Serverless
- Unlimited Traffic
- New Projects
- DGAF about Environment
- Short Quick Processing
Containers vs Functions
as Downstream Sources

38. The bad sides

39. - Single Point Failure
- Configuration Monolith
- Development Bottleneck
- Common point of check-in conflict
- Additional Development Cost
- Added Latency
CONS

40. FAQS

41. Is it ok to
aggregate
Gateways?

42. Equivalent to
defending
Your pants
From bullies

43. #Its Perfect for Public / Private APIs
API Gateway
Orders API Stocks API Products API
A CB A B A B
PUBLIC
PRIVATE

44. Q&A