APIs und Microservices zu verwalten und erreichbar zu machen, ist hart. “Alles als Code” ist hierbei ein innovativer Ansatz, um API-Management zu betreiben.In einer Zeit, die von GitOps geprägt ist, stellt "Everything as Code" ein entscheidendes Konzept dar, um die Entwicklung und Bereitstellung von Software effizienter zu gestalten. Dieser Talk widmet sich der Integration von "Alles als Code" mit modernen API-Gateways, Developer Portals und GraphQL und zeigt auf, wie dieser Ansatz die Art und Weise, wie wir APIs verwalten und bereitstellen, revolutionieren kann. Ein innovatives, Code-getriebenes Developer Portal fördert die Zusammenarbeit und erlaubt die nahtlose Nutzung von APIs. Teams profitieren von der Versionskontrolle ihrer Konfiguration, die in automatisierten Tests hilfreich sein kann sowie müheloser Synchronisierung ermöglicht, was letztendlich den Entwicklungszyklus beschleunigt.Dieser Talk befasst sich mit der praktischen Umsetzung von "Everything as Code" in Kombination mit API-Gateways, Developer Portals und GraphQL. Wie diese Kombination zu einer höheren Effizienz und Skalierbarkeit aller Komponenten beitragen kann.

1. The Future of API Management
Everything as Code : API-Gateway,
Developer Portal und GraphQL
Manuel Zapf— manuel.zapf@solo.io

2. 2 | Copyright © 2022
Product Manager
Solo.io
https://twitter.com/manuel_zapf
Who am I
Manuel Zapf

3. 3 | Copyright © 2023
01
02
03
04
05
06
Introduction
API Gateway & API Management
Developer Portal
Everything-as-code philosophy
The seamless integration of
GraphQL
Q&A
Agenda

4. 4 | Copyright © 2023
API Management requirements changed over the years
Monolith Exposure
Developer experience
focus on Monolith
exposure
Cloud 1.0
Rise of cloud
and containers:
lightweight,
more scalable
Cloud 2.0
Cloud and
Kubernetes native
application
networking platform
Monolith Integration
SOA, BPM, stateful,
application integration

5. 5 | Copyright © 2023
Development Modernized
Primordial Days 2023
2005 2011 2017 2020
2014
2008
Github
Circle Ci
Web Services
AWS
(Infrastructure
as API)
AI
AWS Lambda
gRPC
Github Actions
Docker Desktop
(EE)
GitOps

6. 6 | Copyright © 2022
Modular &
Plugable
Modern Dev
Practices
Modern APIs Monetization
Portals
API Security
Github
Actions
API Design
Billing

7. 7 | Copyright © 2023
Versioning
Rate Limiting
Developer Portal
Developer Self-Service GraphQL
Automated Service and API Discovery
Composition API Security
Istio Ingress /
Envoy
API GATEWAY
Transformation
API Gateway Use Cases

8. 8 | Copyright © 2023
Full Lifecycle API
Management
Evolving Landscape

9. 9 | Copyright © 2023
API
Gateway
API
Developer
Portal
API
Catalog
API
Docs
API
Explorer
OOTB and
BYO Frontend
API Key
Management
OIDC
API
Composition
AuthN/AuthZ
API Key,
OAuth, OPA
API
Versioning
Rate Limiting
Multitenancy
Multi-API
REST,
GraphQL,
gRPC, SOAP
Observability
& Analytics
UI + GitOps
Evolving Landscape
Internal Developers
External Developers

10. 10 | Copyright © 2023

11. 11 | Copyright © 2022
API-Driven Developer Portal
Developer Portal API
API Analytics
CNCF Backstage
OSS Portal from Solo

12. 12 | Copyright © 2023
Developer Portal: REST API

13. 13 | Copyright © 2023
Developer Portal: Landing Page
13 | Copyright © 2023

14. 14 | Copyright © 2023
Developer Portal: API Catalogue

15. 15 | Copyright © 2023
Developer Portal: API Documentation
15 | Copyright © 2023

16. 16 | Copyright © 2023
Developer Portal: API Keys and Usage Plans
16 | Copyright © 2023

17. 17 | Copyright © 2023
Developer Portal: Backstage Plugin

18. 18 | Copyright © 2023
Developer Portal: Backstage Plugin

19. 19 | Copyright © 2023
GitOps: Everything as Code

20. 20 | Copyright © 2023
Application Delivery: Held Back by Networking
Not Cloud Native
Made in age of monoliths
VS
Progressive Delivery
Networking built for applications

21. 21 | Copyright © 2023
How GitOps Can Help
“Immutability
Firewall”
Kubernetes
GitOps
Continuous
Integration
Test
IDE
Management
(operations)
Observability
(Monitoring,
logging)
GIT
Deployment
(clusters, API
gateway, service
mesh, apps)
Build

22. 22 | Copyright © 2023
GitOps
Create
App
GitOps
App
Cluster
App
Pull Request Management Repo
Policy
Policy
Create
Policy
Ops
Devs

23. 23 | Copyright © 2023
Portal REST API
Portal in Gloo Platform
API
Products
Usage
Plans
APIs
Portals
API Docs
discovered
composed
presented
exposed
define
Gateways

24. 24 | Copyright © 2023

25. 25 | Copyright © 2023
In the Before Times
“Show me product reviews from other users that have purchased this item”
Problems
● I have to find all these REST APIs
● Cost of understanding the APIs is high
● Each API gives me way more data than I need
● No API gives me the all the data I need
Result
● Poor efficiency for devs and applications

26. 26 | Copyright © 2023
Enter GraphQL
query
product (id: 5)
review
user
Benefits
● Single API call
● API is always fully described via schema
● API only returns the data I need
● Scales to multiple client use cases
Result
● Substantial reduction in developer toil
● Optimised performance

27. 27 | Copyright © 2023
Considerations when using GraphQL APIs
Application Network
Authentication / Authorisation
Rate Limiting
Observability
Web Application Firewall
Data Loss Prevention
Application Interface
Client-specific data views
Single entry point to entire graph
Overfetching data
Underfetching data (N+1)
Client compatibility with schema
evolution

28. 28 | Copyright © 2023
Application Network
Authentication / Authorisation
Rate Limiting
Observability
Web Application Firewall
Data Loss Prevention
Application Interface
Client-specific data views
Single entry point to entire graph
Overfetching data
Underfetching data (N+1)
Client compatibility with schema
evolution
Proxy + GraphQL Server Architecture
GraphQL Server
Proxy

29. 29 | Copyright © 2021
Proxy is a GraphQL Server Architecture
Proxy
Declarative Configuration

30. Thank You!