Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Webcast: Deep-Dive Apigee Edge Microgateway

9,051 views

Published on

Apigee Edge Microgateway is a lightweight solution which enables enterprises to manage their APIs in a hybrid cloud deployment setup, where API traffic flows through a gateway running close to the application while being managed centrally through the Edge Public or Private Cloud.

In this deep-dive technical webcast, Apigee’s Prabhat Jha will:

- discuss the features of the Edge Microgateway
- explore use cases for hybrid cloud API management
- conduct a Microgateway demo

Published in: Technology

Webcast: Deep-Dive Apigee Edge Microgateway

  1. 1. ©2015 Apigee Corp. All Rights Reserved.
  2. 2. ©2015 Apigee Corp. All Rights Reserved. Today’s speaker Prabhat Jha @prabhtajha
  3. 3. ©2015 Apigee Corp. All Rights Reserved. Apigee social channels 3 YouTube http://youtube.com/apigee Slideshare http://slideshare.com/apigee
  4. 4. ©2015 Apigee Corp. All Rights Reserved. Apigee Community Get your API questions answered quickly https://community.apigee.com
  5. 5. ©2015 Apigee Corp. All Rights Reserved. Agenda •  API Management •  Edge cloud vs. Edge private cloud (on-prem) vs. Edge Microgateway •  Use cases for hybrid cloud API management •  Demo •  Edge Microgateway features •  Edge Microgateway internals
  6. 6. ©2015 Apigee Corp. All Rights Reserved. API management using Edge 6
  7. 7. ©2015 Apigee Corp. All Rights Reserved. Comprehensive API management capabilities 7 Zero downtime
 Upgrades Traffic Isolation/ 
 Scaling Multi-region/ Distributed Traffic Management Scale Threat
 Protection RBAC, AD/LDAP
 support OAuth2, OpenID, 
 SAML, TLS Secure SmartDocs Developer 
 Portal Partner Self-service
 App Registration Core Key 
 Management API Gateway
 (Mediation/ Traffic mgmt) Versions
 Management Node JS support/ 
 Policy Extensibility API Studio/ 
 Swagger 2.0 support Build Visual Proxy Editor / OOTB Config Policies Performance/ Monitoring Logging &
 Auditing Developer/
 Business Metrics
 Usage
 Analytics API Testing/ 
 Diagnostics Platform APIs Microgateway/
 Hybrid Bot
 Detection API Products Monetization Caching & 
 Quota Policies Transformation/ Aggregation API BaaS PCI / HIPAA
 Compliance IoT Intelligent Platform Analyze
  8. 8. ©2015 Apigee Corp. All Rights Reserved. API Management: hybrid deployment 8
  9. 9. ©2015 Apigee Corp. All Rights Reserved. Edge Microgateway 9 Deploy lean API runtime infrastructure in your application environment, while deriving all the benefits of Apigee API management in the Cloud ➢  Reduce latency of API traffic for close proximity services ➢  Keep API traffic within the enterprise approved boundaries for security or compliance purposes where required ➢  Can be used for internal and external API traffic Objective Use Cases Enterprise Private Cloud Apigee Edge Analytics Developer Services Management UI API Build Services Edge MG Core Services Built for Growth
  10. 10. ©2015 Apigee Corp. All Rights Reserved. Edge Microgateway deployment 10 Enterprise Private Cloud Apigee Edge Analytics Developer Services Management UI API Build Services Edge MG 1 Define your proxies, OAuth and quota policies on the Edge Cloud 2 Configure your Edge MG to communicate with Edge Cloud 3 Edge MG downloads list of proxies and configurations 4 All runtime traffic hits the Edge MG; authentication, traffic management and policy enforcement is implemented 5 Analytics data is pushed to the Apigee Cloud in batch Built for Growth
  11. 11. ©2015 Apigee Corp. All Rights Reserved. Microgateway: alternative or extension •  Microgateway is an extension to Edge {Public | Private} Cloud •  Microgateway requires Edge {Public | Private} Cloud 11
  12. 12. ©2015 Apigee Corp. All Rights Reserved. Microgateway: Where can it run? Anywhere Node.js runs! 12
  13. 13. ©2015 Apigee Corp. All Rights Reserved. Microgateway: Features •  Analytics •  Spike Arrest •  Quota •  Security –  OAuth 2 –  API Key –  JWT –  Custom •  Custom Plugins –  Write your own plugin to hook into both request and response flow in Node.js –  Good examples out of box –  Very powerful : With great power comes great responsibility 13
  14. 14. ©2015 Apigee Corp. All Rights Reserved. Microgateway Demo 14
  15. 15. ©2015 Apigee Corp. All Rights Reserved. Microgateway: bootstrap process •  Verifies – Can download public key for JWT – Can download list of edgemicro_ enabled proxies – Can download list of API Products and their attributes 15
  16. 16. ©2015 Apigee Corp. All Rights Reserved. Microgateway analytics •  AX data gets sent to Edge asynchronously in batch •  If for whatever reason AX data is not sent and batch size is already reached, data is dropped to favor smooth running of runtime traffic. •  AX data gets sent regardless of target API availability. 16
  17. 17. ©2015 Apigee Corp. All Rights Reserved. Microgateway spike arrest •  Not configured on Edge •  Enforced 100% and in memory •  Has no dependency on Edge 17
  18. 18. ©2015 Apigee Corp. All Rights Reserved. Microgateway quota •  Asynchronous update with Edge to update Quota •  It’s an approximate quota 18
  19. 19. ©2015 Apigee Corp. All Rights Reserved. Microgateway: OAuth •  Special Auth app deployed to your org transforms an OAuth 2.0 token to JWT. •  JWT is signed and self validating •  When API call is made using a JWT, Edge Microgateway has enough information to authenticate the API call without communicating to Edge. 19
  20. 20. ©2015 Apigee Corp. All Rights Reserved. Microgateway API key •  When API call is made using an API Key, Edge Microgateway gets the key validity and attributes from Edge, caches it for configurable amount of time. 20
  21. 21. ©2015 Apigee Corp. All Rights Reserved. Microgateway custom code Sample Plugin 21
  22. 22. ©2015 Apigee Corp. All Rights Reserved. Microgateway: the life of an API call •  Get a JWT token or API Key to make API call to Edge Micro. •  If using JWT, it is self validating so check its validity. If using API Key, it’s not already in cache, get attributes from Edge, validate it and cache it. •  Given basePath, find which edgemicro proxy, P, it relates to •  Verify that token has P approved with one of products •  If quota is enabled, check for quota •  If authorized and under quota, get target API details and forward request to target •  If not authorized, return 403 •  In background, send AX and update quota data to Edge 22
  23. 23. ©2015 Apigee Corp. All Rights Reserved. So what’s next? Get sofware and docs from: http://apigee.com/docs/microgateway/content/edge-microgateway-home
  24. 24. ©2015 Apigee Corp. All Rights Reserved. Questions? Apigee @apigee •  https://community.apigee.com/spaces/71/index.html Prabhat Jha @prabhatjha #apigee
  25. 25. Thank you

×