This document summarizes a presentation given by Jason M Sherman on API Management Providers. It introduces Jason and the NYC API Group organization. It then discusses key API management providers like Apigee, Mashery, and 3scale. It outlines the common components of API management platforms including the API proxy, API lifecycle management, and developer portals. Finally, it provides resources for further information and concludes by thanking attendees.

1. NYC API Group
Type: Meetup
Version: 1.0
Topic: API Management Providers
Presenter : Jason M Sherman
Date: 7/10/2013
nycapigroup.com

2. NYCAPIGroup: Who am I?
• Name: Jason M Sherman
• Title: Sr. Development Manager
• Employer: XO Group Inc.
• Experience: 15 years
• Website: about.me/jasonmsherman
• HairType: Bald
nycapigroup.com

3. NYCAPIGroup: Who are we?
: NYCAPIgroup.com
: @NYCAPIGroup
: /groups/NYC-API-Group-5047709
nycapigroup.com

4. API Management Providers:
who are they? (some key players)
nycapigroup.com
layer7tech.com apify.co apigee.com
mashery.com 3scale.net wso2.com

5. API Management Providers: User Roles
nycapigroup.com

6. API Management Providers: Components
nycapigroup.com

7. API Management Providers:
How do they integrate with your APIs?
Gateway Cloud-based Plug-in
• A hardware appliance
or software that would
sit on premise on top of
your infrastructure.
• Examples: Layer 7, Intel,
Mashery-local
component
• A cloud service that
intercepts all traffic and
forwards to your APIs
via routes.
• Examples: 3scale, IBM,
Mashery, WS02, APIfy
• A software solution that
you integrate into your
code and deploy to your
existing servers.
• Examples: 3scale
nycapigroup.com
Let me count the ways….1, 2, 3!

8. API Management Providers: what do they do?
1. API Proxy : initial implementation & config setup
2. API Lifecycle : managing your api after they are live
3. Developer Portal : engaging your users and brand
nycapigroup.com

9. API Management Providers:
API Proxy
• Transformation : SOAP to REST, XML to JSON,
vice versa
• Rate Limiting : traffic prioritization, response
caching, limit based on user, ip, region
• Access Control : SSO, Oauth, LDAP, etc
• Threat Protection : DOS, SQL injection, etc
• Alerts & Monitoring: via email, push
notifications
nycapigroup.com

10. API Management Providers:
API Lifecycle
• Management : centralize all APIs, real-time
dashboard, versioning, rollback
• Policies : Who gets access to what apis
• Reporting : Performance by developer,
application, IP; throughput, response time,
latency reports
nycapigroup.com

11. API Management Providers:
Developer Portal
• Account Management :
Registration, groups, authorization
• Key Management : API key
distribution, suspend/revoke keys, associate keys
to apps
• API Plans : Paid vs Free, access by user/key, per
API method, integrate with billing
• CMS : Build you brand presence, links to
docs, forums, interactive calls
• Reports: Usage per application, key
nycapigroup.com

12. API Management Providers: Resources
(Provider Dev Portals are a wealth of good info)
• http://apigee.com/about/api-best-practices
• http://www.layer7tech.com/library/385
• http://www.apiacademy.co (Layer7/Apify)
• http://www.mashery.com/resources
• http://www.3scale.net/resources
• http://wso2.com/library
• Forrester Report on API Providers
(forms.layer7tech.com/FW-API13, via Layer7 but free!)
nycapigroup.com

13. API Management Providers:
Questions?
• Can I get those slides? Sure!
http://www.slideshare.net/JasonMSherman/api-
managment-providersnycapigroup
Also posted on nycapigroup.com in Files section
nycapigroup.com

14. API Management Providers:
Conclusion
Thank you for joining!
Hang out, Ping-Pong anyone?
nycapigroup.com