The document discusses the evolution of API management and its importance in a hyperconnected enterprise, outlining the transition from traditional APIs to microservices. It highlights challenges in security and governance for both APIs and microservices, emphasizing the need for a multi-cloud and hybrid architecture. Solutions include self-service portals, centralized control planes, and mesh governance to manage complexity effectively.

1. APIs at Scale
The Hyperconnected Enterprise
Christoph Wiechmann
© 2020 Axway 1

2. axway.comaxway.com
A bit of history
2

3. axway.comaxway.com
API-
Gateway
Securing a handful of APIs
Strict zones or API firewall-based security
Make data / services available externally
• Mobile Apps
• Partners
• Government
Manageable number of APIs / services
• The driver is the business department
• IT-Security is then doing it
2014 – Companies open up
3
Service-
Provider
Service-
Consumer

4. axway.comaxway.com
Using Cloud
- Public Cloud / SaaS-Applications
- Private Cloud Environments
- Cloud-First for new applications
- Requested by Business-Department
- Realized by IT-Security
2016 – Cloud-Adoption
4
API-
Gateway
Provider &
Consumer
Service
Consumer
Cloud
Ground to Cloud & Cloud to Ground

5. POINT - TO - POINTVIRTUALIZED DATA HUB

6. axway.comaxway.com
API as a Product – Self-Service & Reusability
Abstraction between service providers & service consumers
API-Management Solution
• API-Developer Portal
• API-Catalog for Service-Discovery
• On-Premise & Cloud-Services – It doesn‘t matter
• For Internal & External consumers
• Documentation, Try-It, SDKs, Code-Samples
• Self-Service Subscription, Approvals, etc.
• Metrics for Monitoring & Statistics
2018 – API-Centric architecture
6

7. A few more questions
© 2019 Axway | CONFIDENTIAL 7

8. axway.comaxway.com
But is one hub enough?
8
On-Premise
Cloud

9. axway.comaxway.com
9
Service-Consumer close to the Service-Provider

10. axway.comaxway.com
Hybride architecture
10
On-Premise
Cloud

11. axway.comaxway.com
Multi-Cloud - Hybride architecture
11
On-Premise
Cloud
EuropaUS …

12. axway.comaxway.com
Multi Cloud- & Multi API-Gateway-Technology
12
On-Premise
Cloud
EuropaUS …

13. axway.comaxway.com
API management requirements & Benefits
Protection of all APIs
• Regardless of the environment
• API Security as a Service – as part of the platform
API-Management
• Consumer-Management
• API-Discovery
• API-Catalog, Documentation, Try-It
• Self-service for service providers and service consumers
Also in a multi-cloud & multi-gateway architecture
13

15. axway.comaxway.com
And all this was only about „traditional“ APIs
15

16. 16
The next episode is on the Way! Have you said Microservices?

17. axway.comaxway.com
- How is a microservice defined? -
“Microservices are independently deployable modules”*
Typically deployed as a Docker container in a Docker orchestration
framework such as Kubernetes, OpenShift, etc.
Orchestration frameworks take over monitoring, scaling, restart, etc.
2019/2020 – Microservices
17
*Das Microservices-Praxisbuch Eberhard Wolff

18. Millions of
Private APIs
Tens of Millions
of Microservices
100,000 of Public APIs
APIs Are Growing faster than ever

19. axway.com
19
DevOps Ready – Self-Service
Monitoring and governance
Distributed, resilient infrastructure
for autonomous microservices
Microservices Security

20. axway.comaxway.com
Microservice security with Mesh governance
20
East West
Traffic
NorthSouth
Traffic
Docker-
Container
East West
Traffic
NorthSouth
Traffic
Side-Car
(e.g. Envoy)
Mesh-GovernanceControl-
Plane
e.g. Istio

21. axway.comaxway.com
Standard Technology
The challenge is to manage it globally.
21

22. axway.comaxway.com
Microservice Data-Planes
22
…..

23. axway.comaxway.com
API-Data-Planes around the world
23

24. axway.comaxway.com
Challenges
Security
• Classical APIs – North-South-Traffic
• Microservices - East-West-Traffic
• Security Policy – Internally vs. Externally
Governance & Monitoring
• Drill down to microservice
Reusability / Integration
• API catalog across all data plans
• Self-Service Discovery, Try-It, Documentation of Services
Multi-Cloud Hybride architecture
24

25. How to manage this complexity?

26. axway.comaxway.com
Central – Multi-Cloud control plane
26
Control plane
Connected Data planes / Environments
Mesh-Governance Axway API-Mgt.
API-Gateway
API-Manager
API-Portal
AWS API-Gateway
Amazon
API-Gateway
Azure API-Gateway
Azure
API-Gateway
SDK
To enable
customers to add
additional API
Gateway Integration
Into Control Plane
Service-Discovery / Policy-Enforcement / Metrics
Policy-Library • Unified Catalog • Observer

27. axway.comaxway.com
27
Mesh-Governance
Demo

28. axway.comaxway.com
Mesh Governance - Demo
28
Control plane
Policy-Library • Unified Catalog • Observer
Node-AppGitHubDocker Hub
Data plane

29. axway.com
Thank you!
Christoph Wiechmann
© 2019 Axway 29