Francisco Nieto mostrará las principales características del producto y cómo explotarlo de una forma sencilla utilizando microservicios y APIs de distintos orígenes y tipologías.

1. 2017 - Madrid
API Management
Francisco Nieto
Senior Integration Consultant, Kabel
#GIBMad2017

2. Who I am?
Francisco Nieto
Senior Integration Consultant, Kabel
MCPD. MCTS en Visual Studio, SQL, SharePoint, Dynamics CRM
fnieto@kabel.es
https://twitter.com/fnietoga
+34 682 836 331
https://www.linkedin.com/in/francisco-nieto-garcia
#GIBMad2017

3. #GIBMad2017

4. The rise of APIs
“Application programming interfaces (APIs) have
been elevated from a development technique to
a business model driver and boardroom
consideration.
An organization’s core assets can be reused,
shared, and monetized through APIs that can
extend the reach of existing services or provide
new revenue streams.
APIs should be managed like a product - one
built on top of a potentially complex technical
footprint that includes legacy and third-party
systems and data.”
“API Economy”
CloudHybrid IT
Mobile
Analytics
IoT
Microservices

5. • Scales by cloning the app on multiple
servers/VMs/Containers
Monolithic application approach Microservices application approach
• A microservice application
separates functionality into
separate smaller services.
• Scales out by deploying each service independently
creating instances of these services across
servers/VMs/containers
• A monolith app contains domain
specific functionality and is
normally divided by functional
layers such as web, business and
data
App 1 App 2App 1
#GIBMad2017

6. #GIBMad2017

7. Common scenarios
What is?
API Management
#GIBMad2017

8. High Level Architecture

9. Publisher Portal
#GIBMad2017

10. Entities
#GIBMad2017

11. Security
programmatically
any operation
analytics data, APIs,
products
SECURITY MANAGEMENT
#GIBMad2017

12. https://docs.microsoft.com/en-us/azure/api-management/api-
management-access-restriction-policies
Access & Auth
• Check header
• Limit call rate
• Restrict by IP
• Set usage quota
• Validate JWT
• Authenticate with
basic / client
certificate
Caching
• Get from cache
• Store to cache
• Get value from
cache
• Store value in
cache
• Remove value
from cache
Cross domain Advanced
• Control flow
• Forward request
• Log to Event Hub
• Retry, Wait
• Return response
• Send request
• Set status
• Set variable
Transformation
• JSON to XML
• XML to JSON
• Find and replace
• Set backend
service
• Set body
• Set query string
parameter
• Rewrite URL
Policies

13. Policy Expressions
<rate-limit-by-key calls="10"
renewal-period="60"
counter-key="@(context.Request.IpAddress)" />
<quota-by-key calls="1000000"
bandwidth="10000"
renewal-period="2629800"
counter-key="@(context.Request.IpAddress)" />
<policies>
<inbound>
<log-to-eventhub logger-id ='contoso-logger'>
@( string.Join(",", DateTime.UtcNow, context.Deployment.ServiceName, context.RequestId,
context.Request.IpAddress, context.Operation.Name) )
</log-to-eventhub>
</inbound>
<outbound>
</outbound>
</policies>

14. Policy Expressions (II)
<policies>
<inbound>
<!-- statements to be applied to the request go here -->
</inbound>
<backend>
<!-- statements to be applied before the request is
forwarded to the backend service go here -->
</backend>
<outbound>
<!-- statements to be applied to the response go here -->
</outbound>
<on-error>
<!-- statements to be applied if there is an error
condition go here -->
</on-error>
</policies>
• System.Collections.Generic
• System.Security.Cryptography
• System.Text.RegularExpressions
• System.Xml.Linq
• Newtonsoft.Json.Linq
…
• Api
• Deployment
• LastError
• Operation
• Product
• Request
• Response
• Subscription
• User
…
https://docs.microsoft.com/en-us/azure/api-management/api-
management-policy-expressions#CLRTypes

15. Policy Expressions (III)

16. Developer Portal
• Sign up / Sign in
• Request subscriptionbasics
• Documentation, Definiton (swagger, WADL)
• Test, Code samplesAPIs
• View Products, APIs by Product
• Report Issuemanage
• Styles & Templates
• Blogand more
#GIBMad2017

17. • Easily import API Apps as APIs
• mock-response policy
• Users & Products can be managed from Azure Portal
• SOAP to REST
• PowerShell and .NET SDK support for the backend entity.
• Diagnostics logs (batched hourly)
• Integration with Azure Monitor
• SSL3 is disabled, all versions of TLS are enabled by default
• Role-Based Access Control
• OMS Integration
• Version APIs
• work natively with Service Fabric
• ARM templates
• Manage API lifecycle
• Import API from a Function App
• Backlog
• Visual studio Integration
• Improved Policy Editor UI
• Deploy gateway on-premises
https://trello.com/b/FAA147vS/azure-api-management-product-roadmap

18. #GIBMad2017

19. Environment
API Management
Logic App
Backend
Internet
Microsoft Azure
GB.CustomerAPI
GB.OrdersAPI
gibmad17kb01
ordersapi
gibmad17-sbus-
kb01
Service
Fabric
GIB.ProductsAPI
SQL Database
GB.CurrencyConverter
SOAP WSDL
Dynamics
365
#GIBMad2017

20. Thanks…
#GIBMAD2017