This document discusses an open source API management platform built using Apache modules. It allows users to find and subscribe to APIs through an API store. It manages, secures, and protects APIs using an API gateway. It also monitors APIs and provides analytics to help monetize APIs.
Whether you are starting from a green field or brown, in this webinar we'll share common patterns of facades that will help you get your API initiative off the ground.
- Data format mediation
- URL design
- Authorization and versioning
The Business Value for Internal APIs in the EnterpriseAkana
- The value of internal API programs
- How APIs and SOA fit together
- Deployment patterns for Internal APIs
- Architecture concerns about API Gateways and ESBs
This was presented by me in AWS Meetup in Riyadh. I spoke about core dimensions of API management and Amazon API Gateway. It covers API fundamentals as well as security and architecture principles using AWS services.
The API Economy is exploding, and this presentation explains how to extend your brand, accelerate new channel adoption and operate with API best practices.
Whether you are starting from a green field or brown, in this webinar we'll share common patterns of facades that will help you get your API initiative off the ground.
- Data format mediation
- URL design
- Authorization and versioning
The Business Value for Internal APIs in the EnterpriseAkana
- The value of internal API programs
- How APIs and SOA fit together
- Deployment patterns for Internal APIs
- Architecture concerns about API Gateways and ESBs
This was presented by me in AWS Meetup in Riyadh. I spoke about core dimensions of API management and Amazon API Gateway. It covers API fundamentals as well as security and architecture principles using AWS services.
The API Economy is exploding, and this presentation explains how to extend your brand, accelerate new channel adoption and operate with API best practices.
IT architects and developers have long recognized APIs as an evolution and continuation of integration-based architectures used within enterprise IT. But this is a limited view. APIs have become the foundational framework for development of scalable enterprise applications that connect user experiences to back-end data and services.
How will this API-centric architecture play a role in your application systems and in your business? Join Ed Anuff and Brian Pagano as they discuss the many important implications of API-centric architecture.
Learn:
- the characteristics of an API-centric architecture
- how APIs are influencing front-end, back-end, and app-to-app systems
- how APIs change the way data is leveraged
- why traditional architecture cannot address new business challenges
Security enforcement of Microservices with API ManagementCharles Moulliard
This talk explains how microservices (Restfull Endpoint) could be secured using a Policy based approach to intercept the HTTP request. A less intrusive pattern is proposed at the level of the Web Container using Contrants mapping the Web Resources with JAAS API & Roles. Finally we will investigate how such Security design can be developed using an external API Management platform which reenforce the Security and Governance aspect.
Layer 7's Chief Architect Francois Lascelles will be speaking at The Chicago Mobile Meetup Group's meeting on August 14. He will be discussing mobile apps and API Management. This is an informal professional group focused on developing relationships and fostering mobile technology innovation.
Mashery API Management Solution is complete SaaS-based product that can be deployed in the cloud, on-premise or hybrid.
Some of the key features include traffic management, reporting and analytics.
Mashery gives the power to negotiate custom access of API endpoints in a granular manner and can be integrated with OAuth authorization platforms.
Filtering of the response content and automatic API documentation generation are some of the nice to have features of any public API, together with rate limiting and versioning and Mashery has all of it at your fingertip.
Cross Platform Mobile Apps with APIs from Qcon San FranciscoCA API Management
Building cloud and API driven mobile apps introduces numerous complexities around syncing, caching, and securing data. In this presentation Alex Gaber explored numerous tools and frameworks including best practices around building HTML5 cross-platform hybrid native applications.
Apiman - Open Source API Management @ JBCNConf 2016Marc Savy
My API Management talk's slides at JBCNConf 2016:
Exploring API management and apiman; with an open source twist, and a hint of microservices.
Interacting with, developing, and deploying RESTful APIs forms a key part of many modern applications; this is especially true of microservices architectures. However, there are also an increasing number of ancillary requirements that need fulfilling, amongst which are:
- Security; such as authentication and authorisation
- Request tracking; for metrics, logging, and billing
- Access limits; such as rate limiting and quotas
- Service registry, discovery, user management, custom logic, ...
As developers it's clearly preferable to focus on perfecting the business logic of our applications rather than spending time focussing on the common and prone-to-change requirements found in every of our applications. Centralising these functions enables us not only to reduce time spent in development and maintenance, but also reduces the surface area for bugs and inconsistencies.
API Management endeavours to solve these problems.In this talk, we'll explore API management broadly, then dive into the specifics of apiman: a free and open source API management solution.
Examining both design time and runtime aspects, we'll examine benefits, detractions and technical approaches taken to achieve a flexible, scalable and high-performance solution.
The enterprise has learned from the consumer API movement and recognized the value of creating developer communities to drive the adoption and productive use of APIs. Building an API community internally, however, requires a different approach from what has worked in the consumer space. Business objectives for APIs and measurements of success tend to be different for internal APIs. Security and access controls are not the same, of course, and back-end systems tend to be quite a lot more complex in the enterprise than they are in public-facing API situations. This webinar explores the challenges and best practices inherent in building an internal API community that serves an enterprise’s business and technological goals.
Transition from SOA to APIs for the App Economy - Bending the SpoonApigee | Google Cloud
Does your business need to deploy functionality to mobile devices? To multiple channels simultaneously? At a faster pace than ever before? You have a solid SOA but it's just not flexible enough to fulfill the requirements of today's projects. You need a path to evolve your SOA.
Join Brian Pagano and David Andrzejek to discuss the imperative for APIs. Walk away an approach to extend SOA with APIs to meet the demands of business in the growing app economy.
We'll Cover:
- Complex, stateful transactions and other things SOA is good at
- Agility, scalability, transformations, and other things APIs are good at
- Expose functionality not services & use APIs to be relevant and successful in the app economy
IT architects and developers have long recognized APIs as an evolution and continuation of integration-based architectures used within enterprise IT. But this is a limited view. APIs have become the foundational framework for development of scalable enterprise applications that connect user experiences to back-end data and services.
How will this API-centric architecture play a role in your application systems and in your business? Join Ed Anuff and Brian Pagano as they discuss the many important implications of API-centric architecture.
Learn:
- the characteristics of an API-centric architecture
- how APIs are influencing front-end, back-end, and app-to-app systems
- how APIs change the way data is leveraged
- why traditional architecture cannot address new business challenges
Security enforcement of Microservices with API ManagementCharles Moulliard
This talk explains how microservices (Restfull Endpoint) could be secured using a Policy based approach to intercept the HTTP request. A less intrusive pattern is proposed at the level of the Web Container using Contrants mapping the Web Resources with JAAS API & Roles. Finally we will investigate how such Security design can be developed using an external API Management platform which reenforce the Security and Governance aspect.
Layer 7's Chief Architect Francois Lascelles will be speaking at The Chicago Mobile Meetup Group's meeting on August 14. He will be discussing mobile apps and API Management. This is an informal professional group focused on developing relationships and fostering mobile technology innovation.
Mashery API Management Solution is complete SaaS-based product that can be deployed in the cloud, on-premise or hybrid.
Some of the key features include traffic management, reporting and analytics.
Mashery gives the power to negotiate custom access of API endpoints in a granular manner and can be integrated with OAuth authorization platforms.
Filtering of the response content and automatic API documentation generation are some of the nice to have features of any public API, together with rate limiting and versioning and Mashery has all of it at your fingertip.
Cross Platform Mobile Apps with APIs from Qcon San FranciscoCA API Management
Building cloud and API driven mobile apps introduces numerous complexities around syncing, caching, and securing data. In this presentation Alex Gaber explored numerous tools and frameworks including best practices around building HTML5 cross-platform hybrid native applications.
Apiman - Open Source API Management @ JBCNConf 2016Marc Savy
My API Management talk's slides at JBCNConf 2016:
Exploring API management and apiman; with an open source twist, and a hint of microservices.
Interacting with, developing, and deploying RESTful APIs forms a key part of many modern applications; this is especially true of microservices architectures. However, there are also an increasing number of ancillary requirements that need fulfilling, amongst which are:
- Security; such as authentication and authorisation
- Request tracking; for metrics, logging, and billing
- Access limits; such as rate limiting and quotas
- Service registry, discovery, user management, custom logic, ...
As developers it's clearly preferable to focus on perfecting the business logic of our applications rather than spending time focussing on the common and prone-to-change requirements found in every of our applications. Centralising these functions enables us not only to reduce time spent in development and maintenance, but also reduces the surface area for bugs and inconsistencies.
API Management endeavours to solve these problems.In this talk, we'll explore API management broadly, then dive into the specifics of apiman: a free and open source API management solution.
Examining both design time and runtime aspects, we'll examine benefits, detractions and technical approaches taken to achieve a flexible, scalable and high-performance solution.
The enterprise has learned from the consumer API movement and recognized the value of creating developer communities to drive the adoption and productive use of APIs. Building an API community internally, however, requires a different approach from what has worked in the consumer space. Business objectives for APIs and measurements of success tend to be different for internal APIs. Security and access controls are not the same, of course, and back-end systems tend to be quite a lot more complex in the enterprise than they are in public-facing API situations. This webinar explores the challenges and best practices inherent in building an internal API community that serves an enterprise’s business and technological goals.
Transition from SOA to APIs for the App Economy - Bending the SpoonApigee | Google Cloud
Does your business need to deploy functionality to mobile devices? To multiple channels simultaneously? At a faster pace than ever before? You have a solid SOA but it's just not flexible enough to fulfill the requirements of today's projects. You need a path to evolve your SOA.
Join Brian Pagano and David Andrzejek to discuss the imperative for APIs. Walk away an approach to extend SOA with APIs to meet the demands of business in the growing app economy.
We'll Cover:
- Complex, stateful transactions and other things SOA is good at
- Agility, scalability, transformations, and other things APIs are good at
- Expose functionality not services & use APIs to be relevant and successful in the app economy
Java 8 came out early last year and Java 7 is now, at the end of life, making Java 8 the only Oracle supported option. However, since developers value stability over trendiness, many of us are still working with Java 7, or even 6. Let’s look at some features of Java 8, and provide some arguments to persuade your code to upgrade with best practices.
Detecção de Fraudes em Licitações Usando Batch Analytics com WSO2WSO2
O WSO2 Data Analytics Server é a plataforma de Big Data ideal para criar Data Lakes (lagos de dados) públicos que suportam grandes volumes de dados em variados formatos para realizar processamento e análises em alta velocidade, veracidade e valor para o negócio.
Nesta apresentação veremos um caso real onde milhares de documentos textuais de licitações que somam 1 milhão de páginas foram capturados, processados com OCR, indexados textualmente e armazenados na implementação de Hadoop do WSO2 DAS para criar análises ricas de indícios de direcionamento ou de não conformidade de processos licitatórios utilizando consultas com Lucene e Apache Spark a partir de trilhas de auditoria e regras de negócio bem definidas, em um ambiente onde todas estas ferramentas operam integradas na suite analítica da WSO2.
Tópicos:
Rápida introdução da Arquitetura do WSO2 DAS
Rápida introdução da Arquitetura do Caso Real
Apresentação do Caso Real
Outras aplicações do WSO2 DAS para a Gestão Pública
Solution Architecture Patterns for Digital TransformationWSO2
Digital transformation is a key enabler for both existing enterprises transforming themselves to compete in the modern marketplace and for newer startups trying to break into the business domain. Being able to involve internal and external stakeholders by exposing existing internal services as managed APIs whilst carefully governing your data is a core step in this process. Being able to adapt a lean devops process is a bonus.
This webinar serves as a primer to your digital transformation journey. It will discuss
API management as a coexisting solution within an enterprise
How that API management ties into the management and governance of data
Concepts of lean devops and containerization
Dealing with Common Data Requirements in Your EnterpriseWSO2
To view recording of this webinar please use below URL:
http://wso2.com/library/webinars/2016/11/dealing-with-common-data-requirements-in-your-enterprise/
Today’s enterprises are challenged with fast growing data requirements. Unlike in the past, where organizations relied on a single database or isolated data silos, today’s enterprises need to cope with multiple data sources and complex access control requirements. They also need to analyze large amounts of data in order to gain insights into their business functions.
This webinar will discuss how the WSO2 platform can help deal with common enterprise data requirements such as data as service transactions, aggregation of corporate entities and management of fragmented data sources to build an efficient enterprise data management strategy.
2016 Year End Webinar - Are You Ready for Digital Transformation?WSO2
Over the past year, we have seen the surge towards digital transformation reshaping many aspects of an enterprise. A key driver is lifting engagement levels; both externally and within the enterprise. While you need to attract and satisfy customers who are increasingly digital-native, you also need an environment and culture that can rapidly innovate and adapt to new opportunities.
In this webinar, WSO2 Founder, CEO and Chief Architect Dr. Sanjiva Weerawarana, will discuss what you need to do to start your digital transformation journey. Beyond the technology an enterprise needs to support a digital business, he will talk about:
Adopting an iterative approach to everything
Providing the freedom to innovate
Redefining control
Thinking big in micro ways
Architecting an Enterprise API Management StrategyWSO2
A good internal and external API management strategy and architecture is key to building ecosystem platforms that lead to successful API economies in the enterprise. This workshop will look at best practices in API management using the WSO2 API Manager and Integration Platform products, which are used to rapidly implement RESTful design, enforce governance policies, safely scale solutions, orchestrate complex interaction sequences, and re-use assets. The session will also look at reference architectures and architectural recommendations of building large scale API ecosystems.
Director - Solutions Architecture at WSO2, Mifan Careem presented this session at APIdays Sydney 2015.
[WSO2Con Asia 2018] Managing API Integrations with WSO2 API ManagerWSO2
Do you have difficulty when connecting with APIs, providing API integration, managing your APIs or dealing with protocols provided by APIs? If yes, this is the perfect session for you. In this session Piseth will provide a full understanding on:
- Managing API integrations, API security, and API requests (TPS)
- Allowing a single protocol for API requests
- Troubleshooting quickly
In this presentation, Mike Amundsen, Francois Lascelles and Devon Winkworth of Layer 7 Technologies provide information on:
The latest trends in the API economy and best practices and tips for securely exposing enterprise APIs
Key issues around API Management, including access control, data security/privacy, developer management and API performance management
My TechDays 2015 in the Netherlands session about API management. Every company has services or API's to share public or private. There are many tools to solve this. But one thing is for sure, API's without management is not good.
What’s behind a high quality web API? Ensure your APIs are more than just a ...Kim Clark
Web APIs have now become as important as websites for some enterprises. Dreaming up an attractive set of data resources to expose to your consumers is a critical step, but it's just the beginning. In the world of APIs, standards are rare, so common conventions are everything. Which should you choose, and how do you apply them to your data model? What architecture will ensure your APIs are robust, scalable, and secure? How do you ensure data integrity in an environment without transactionality? How will you prepare for huge changes in scale? How do you join your API world with your existing enterprise integration and SOA? Attendees will learn design practices to ensure their APIs are both attractive and consumable.
apidays LIVE Hong Kong - Orchestrating APIs at Scale by Hieu Nguyen Nhuapidays
apidays LIVE Hong Kong - The Open API Economy: Finance-as-a-Service & API Ecosystems
Orchestrating APIs at Scale
Hieu Nguyen Nhu , Senior Cloud Native Technical Specialist at Microsoft
L’API Economy ha permesso ad aziende e startup di fornire i propri servizi attraverso nuovi canali. La nascita di ecosistemi digitali interaziendali ha spinto ulteriormente molte aziende ad inserire nel loro piano di Digital Transformation programmi di sviluppo ed esposizione di API interne ed esterne per aumentare l'integrazione aziendale e abilitare nuovi modelli di business con terze parti. Ma esporre delle API non è sufficiente. Nell'API Economy diventa fondamentale sviluppare una strategia di commercializzazione delle API e un'architettura in grado di abilitare transazioni commerciali.
Oracle API Platform Cloud Service Best Practices & Lessons Learntluisw19
I did this presentation in Split/Croatia on March 2017 where I shared our experiences and insights when implementing the Oracle API Platform Cloud Service.
WSO2Con USA 2017: Brokerage as a Service (BaaS), Transforming Fidelity Broker...WSO2
Fidelity Brokerage Technologies (FBT) operates a high volume 24X7 brokerage delivery platform, noted in the industry for its availability and uptime during extremely turbulent times in the market. FBT has integrated its delivery channels over a multi-tier SOA delivery model via SOAP and legacy mainframe interfaces using proprietary and open architectures.
This session will discuss FBT’s objectives to evolve is proprietary delivery system to a Brokerage as a Service (BaaS) platform by leveraging the WSO2 integration platform and other products in the middleware stack.
APIs are key to making every business a digital business. Businesses need APIs to connect with partners and customers, at any time, on any device, and to participate in the digital ecosystems. To be digital, a scalable flexible API infrastructure is required.
Join the Live Demo of Apigee Edge to learn how to:
• Easily configure and manage new APIs and enforce security with minimal impact to backend services
• Create, manage and monetize API products
• Extend API Services to increase flexibility and tailor to business requirements with JavaScript, Java, Python, and Node.js
• Provide developers easy, yet secure access to explore, test, and deploy APIs
• Use end-to-end visibility across the digital value chain to monitor, measure, and manage success. with unified operational, developer, app performance, and business metrics
Apigee Edge enables digital business acceleration with a unified and complete platform, purpose-built for the digital economy. Edge simplifies managing the entire digital value chain with API Services, Developer Services, and Analytics Services.
Watch Video: http://youtu.be/7gut1JrOzOM
Download Podcast: http://bit.ly/1Cy6p6W
Webinar - Creating an app ecosystem for your APIs
As the API Economy grows, every Enterprise is asking itself – how do we leverage our APIs to extend the reach of our business? What do we need to go from having an API to creating a viable app ecosystem around our APIs? We will explore how Enterprises can create both internal as well as external ecosystems around their APIs. We will look into the lifecycle of Create, Publish, Manage, Consume, Monitor and Monetize on your APIs.
Will the Real Public API Please Stand Up? Amir ZukerCodeValue
API's are at the heart of the modern software development world, we do it everywhere! It's not only a matter of distributed systems, it's in every code that we write, and more often than not - it matters.
The focus of this talk is about authoring Public API's between systems, be that different parts within the same distributed system or a fully blown real-world public API and everything in between.
Facing such a challenge, one may meet all sorts of dilemmas and consider different strategies and several practices. For instance, how to author specifications, how to approach stability, how to authenticate calls, what practices to consider, and more.
Join me in this session as we tackle such questions head-on and see cool demos of code and tools as we build a public API in the process.
Similar to 2013 02-apache conna-api-manager-asanka (20)
Accelerate Enterprise Software Engineering with PlatformlessWSO2
Key takeaways:
Challenges of building platforms and the benefits of platformless.
Key principles of platformless, including API-first, cloud-native middleware, platform engineering, and developer experience.
How Choreo enables the platformless experience.
How key concepts like application architecture, domain-driven design, zero trust, and cell-based architecture are inherently a part of Choreo.
Demo of an end-to-end app built and deployed on Choreo.
Less Is More: Utilizing Ballerina to Architect a Cloud Data PlatformWSO2
At its core, the challenge of managing Human Resources data is an integration challenge: estimates range from 2-3 HR systems in use at a typical SMB, up to a few dozen systems implemented amongst enterprise HR departments, and these systems seldom integrate seamlessly between themselves. Providing a multi-tenant, cloud-native solution to integrate these hundreds of HR-related systems, normalize their disparate data models and then render that consolidated information for stakeholder decision making has been a substantial undertaking, but one significantly eased by leveraging Ballerina. In this session, we’ll cover:
The overall software architecture for VHR’s Cloud Data Platform
Critical decision points leading to adoption of Ballerina for the CDP
Ballerina’s role in multiple evolutionary steps to the current architecture
Roadmap for the CDP architecture and plans for Ballerina
WSO2’s partnership in bringing continual success for the CD
The integration landscape is changing rapidly with the introduction of technologies like GraphQL, gRPC, stream processing, iPaaS, and platformless. However, not all existing applications and industries can keep up with these new technologies. Certain industries, like manufacturing, logistics, and finance, still rely on well-established EDI-based message formats. Some applications use XML or CSV with file-based communications, while others have strict on premises deployment requirements. This talk focuses on how Ballerina's built-in integration capabilities can bridge the gap between "old" and "new" technologies, modernizing enterprise applications without disrupting business operations.
Platformless Horizons for Digital AdaptabilityWSO2
In this keynote, Asanka Abeysinghe, CTO,WSO2 will explore the shift towards platformless technology ecosystems and their importance in driving digital adaptability and innovation. We will discuss strategies for leveraging decentralized architectures and integrating diverse technologies, with a focus on building resilient, flexible, and future-ready IT infrastructures. We will also highlight WSO2's roadmap, emphasizing our commitment to supporting this transformative journey with our evolving product suite.
Quantum computers are rapidly evolving and are promising significant advantages in domains like machine learning or optimization, to name but a few areas. In this keynote we sketch the underpinnings of quantum computing, show some of the inherent advantages, highlight some application areas, and show how quantum applications are built.
4. Business APIs
An API is a business capability delivered over the
Internet to internal or external consumers
Network accessible function
Available using standard web protocols
With well-defined interfaces
Designed for access by third-parties
A Managed API is:
Actively advertised and subscribe-able
Available with SLAs
Secured, authenticated, authorized and protected
Monitored and monetized with analytics
6. The API billionaires
More than 15 billion calls per day, 75% through APIs
More than 1 billion calls per day
More than 5 billion calls per day
More than 260 billion objects stored in S3
More than 3.1 billion transactions per day
12. Business Services
- Heterogeneous
- Styles
- SOAP
- RESTful
- Bindings
- SOAP/HTTP/s
- POX/HTTP/s
- POX/JMS
- JSON/HTTP/s
- File {CSV, EDA, COBOL}
- Development languages {Java, WCF, PHP, C/C++, JavaScript}
- Functionality {Focused on internal service consumers/ applications}
- Silos, owned by various BUs, no control
13. API Façade Pattern
External Format (Demand)
Façade
Mediation
Backend Services
14. API Ecosystem Model
From SOA lessons learned, best practices roles
•API Creator
• Builds, manages, and versions API
• Understand business and technical requirements
• Cares about usage and scaling
• Seeks feedback, ratings, usage
•API Publisher
• Publishes, Promotes and encourages consumers to adopt APIs
• Determines usage patterns and how to best monetize asset
• Monitors and secures
•API Consumer
• Understands the interface definition
• Subscribes and connects application to API
• Monitors own usage and cost basis
• Provides feedback and ratings
16. Component Architecture
API Gateway API Store API Publisher
API Ext Auth
Auth Server Ext Analytics2.0
API Analytics ELB
Ext LB
Platform
Event Receiver
RDBMS
2.0
Event Analyzer + Dashboard
Event Store
17. Apache Family
API Gateway ELB
API Auth Server Apache Thrift ™
Event Receiver
API Store
Event Analyzer
API Publisher
Event Store
19. APIs in Action
API Publisher
Create API Publisher
Order-API(created)
Order-API(published)
Publish
API Subscriber
API Store Order Service
Subscribe
Order-API(listed)
Get API Key
Application
API Gateway
Order-API(published)
27. Data to Scale : API Statistics
Picture Credit : http://www.mta.info/
28. The Feedback Cycle
Gather API
data
Adjust Slice and
parameters Dice
Decide
29. Gathering API data
- What if you want custom data off of API
requests?
- Plug-in a monitoring extension – mediator
- Net total of each order – total=259
API
Analytics
Manager
30. Slice and Dice
• Customers who have placed orders above
2 mil USD
• Select
customer_name, sum(order_amount) from
Orders groupby customer_name
Customer_name Sum(order_amount)
Coyote 2,332,223
Acme 10,654,333
31. Decide
- Check for trends
- Compare past results
- Get help with Reporting & Dashboards
32. Adjust Parameters
- Increase server capacity
- Increase redundancy
- Retire APIs
- Introduce new versions
37. Summary
Open Source Enterprise API Management
Platform, utilizing Apache Modules
- Find and subscribe/buy APIs
- API Store and Governance
- Manage, secure and protect APIs
- API Management and Gateway
- Monitor and Monetize APIs
- API Monitoring and Analytics