All contents © MuleSoft, LLC
The future of API Management
in a hybrid, multi-cloud world
Shaun Clowes, SVP of Product
June 2021
All contents © MuleSoft, LLC
Forward-Looking Statements
"Safe harbor" statement under the Private Securities Litigation Reform Act of 1995: This presentation contains forward-looking statements about the company's financial and operating results, which
may include expected GAAP and non-GAAP financial and other operating and non-operating results, including revenue, net income, diluted earnings
per share, operating cash flow growth, operating margin improvement, expected revenue growth, expected current remaining performance obligation growth, expected tax rates, stock-based
compensation expenses, amortization of purchased intangibles, shares outstanding, market growth, environmental, social and governance goals and expected capital allocation, including mergers
and acquisitions, capital expenditures and other investments. The achievement or success of the matters covered by such forward-looking statements involves risks, uncertainties and assumptions. If
any such risks or uncertainties materialize or if any of the assumptions prove incorrect, the company’s results could differ materially from the results expressed or implied by the forward-looking
statements it makes.
The risks and uncertainties referred to above include -- but are not limited to -- risks associated with the effect of general economic and market conditions; the impact of geopolitical events, natural
disasters and actual or threatened public health emergencies, such as the ongoing Coronavirus pandemic; the impact of foreign currency exchange rate and interest rate fluctuations on our results;
our business strategy and our plan to build our business, including our strategy to be the leading provider of enterprise cloud computing applications and platforms; the pace of change and
innovation in enterprise cloud computing services; the seasonal nature of our sales cycles; the competitive nature of the market in which we participate; our international expansion strategy; the
demands on our personnel and infrastructure resulting from significant growth in our customer base and operations, including as a result of acquisitions; our service performance and security,
including the resources and costs required to avoid unanticipated downtime and prevent, detect and remediate potential security breaches; the expenses associated with our data centers and
third-party infrastructure providers; additional data center capacity; real estate and office facilities space; our operating results and cash flows; new services and product features, including any efforts
to expand our services beyond the CRM market; our strategy of acquiring or making investments in complementary businesses, joint ventures, services, technologies and intellectual property rights;
the performance and fair value of our investments in complementary businesses through our strategic investment portfolio; our ability to realize the benefits from strategic partnerships, joint
ventures and investments; the impact of future gains or losses from our strategic investment portfolio, including gains or losses from overall market conditions that may affect the publicly traded
companies within our strategic investment portfolio; our ability to execute our business plans; our ability to successfully integrate acquired businesses and technologies; our ability to continue to
grow unearned revenue and remaining performance obligation; our ability to protect our intellectual property rights; our ability to develop our brands; our reliance on third-party hardware, software
and platform providers; our dependency on the development and maintenance of the infrastructure of the Internet; the effect of evolving domestic and foreign government regulations, including
those related to the provision of services on the Internet, those related to accessing the Internet, and those addressing data privacy, cross-border data transfers and import and export controls; the
valuation of our deferred tax assets and the release of related valuation allowances; the potential availability of additional tax assets in the future; the impact of new accounting pronouncements and
tax laws; uncertainties affecting our ability to estimate our tax rate; uncertainties regarding our tax obligations in connection with potential jurisdictional transfers of intellectual property, including
the tax rate, the timing of the transfer and the value of such transferred intellectual property; the impact of expensing stock options and other equity awards; the sufficiency of our capital resources;
factors related to our outstanding debt, revolving credit facility and loan associated with 50 Fremont; compliance with our debt covenants and lease obligations; current and potential litigation
involving us; and the impact of climate change.
Further information on these and other factors that could affect the company’s financial results is included in the reports on Forms 10-K, 10-Q and 8-K and in other filings it makes with the Securities
and Exchange Commission from time to time. These documents are available on the SEC Filings section of the Investor Information section of the company’s website at.
Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements, except as required by law.
Third party trademarks are the property of their owners.
All contents © MuleSoft, LLC
1. How has the API management landscape changed
2. What should you do to adapt?
a. Build and catalog any API type
b. Govern APIs at scale
c. Secure with a light, fast gateway
d. Control and observe across environments
3. How can MuleSoft help?
4. Key takeaways and next steps
Agenda
All contents © MuleSoft, LLC
APIs were eating the world
… then COVID accelerated it
McKinsey & Co, 2021
JUL 20
JUN 18
25%
MAY 18
25%
DEC 19
41% 64%
of customer
interactions become
digital post-Covid
All contents © MuleSoft, LLC
Typical enterprises have many APIs and gateways
5
All contents © MuleSoft, LLC
Typical enterprises have many APIs and gateways
6
Challenges
Limited reuse
↳ Slowed innovation
Many management consoles
↳ Limited visibility
Siloed governance
↳ Inconsistent security
All contents © MuleSoft, LLC
How can we adapt to this
environment?
All contents © MuleSoft, LLC 8
Support any API, across any environment
THE NORTH STAR
Govern, manage and secure
consistently
Build and deploy
with flexibility
IT Admins /
Architects
Developers /
Innovation teams
All contents © MuleSoft, LLC 9
Support any API, across any environment
THE NORTH STAR
Govern, manage and secure
consistently
Build and deploy
with flexibility
IT Admins /
Architects
Developers /
Innovation teams
Design and
catalog any
API
Secure with a
light, fast
gateway
Govern APIs
at scale
Control and
observe
across
environments
All contents © MuleSoft, LLC
Why is it important?
● API standards and spec
types are constantly
evolving
● Different API types have
their own advantages and
address different use cases
● Developers in your
organization want flexibility
to build according to their
strengths
Design and
catalog any
API
Your organization should take advantage of these technologies
There is an explosion of API types
All contents © MuleSoft, LLC
Why is it important?
Data types within APIs needs
to stay compliant with
government regulations and
industry standards
● GDPR compliance cost
$150B/yr just in the US*
● Banks spend ~$300B/yr on
compliance (10% OPEX)*
● 20-30% in revenue loss/yr
attributed to inefficiencies*
Governance should be “shifted left” to design time as well as runtime
Design-time governance has high significance
*Source: IDC compliance study, 2019
Govern APIs
at scale
All contents © MuleSoft, LLC
Protect your APIs with light, fast gateways
Extend full lifecycle APIM on your gateways from a single control plane
API Gateways are a commodity today...
Why is it important?
● Users desire the lightest,
fastest gateway for their use
cases
● Containerized gateways are
strongly preferred for their
ease of use and portability
● Open source offerings lack
the enterprise management
capabilities needed to run at
scale
Secure with a
light, fast
gateway
All contents © MuleSoft, LLC
Why is it important?
● Each cloud vendor or API
console has different
monitoring views
● These solutions provide only
limited context and require
substantial effort
● Correlating data across
different views and
solutions to get the right
context is time consuming
Adopt API monitoring across the enterprise
Monitoring or API Management solutions help apply unified visibility
Control and
observe
across
environments
All contents © MuleSoft, LLC
How can MuleSoft help?
All contents © MuleSoft, LLC
Full lifecycle API Management with Mule
15
Runtime
Manager
Anypoint
Platform
API Manager
Anypoint
Monitoring &
Analytics
Anypoint
Visualizer
Anypoint
Service Mesh
TODAY:
Anypoint
Platform
Anypoint
Exchange
API
Community
Manager
Mocking
Service
API Console
API
Designer
Anypoint
Studio
All contents © MuleSoft, LLC Expected in H2 2021
Productize, govern and publish internal and external APIs
Explore all APIs from a single place
Catalog Mule/Non-Mule
APIs from any environment
● Automatically discover APIs
in any environment using
CI/CD pipelines
Productize all APIs to a
standard quality
● Establish and enforce quality
and governance standards
across all APIs
Improve consumption
experience for your API
communities
● Expose APIs in fully branded
experiences in minutes with
out of the box templates
● Optimize API programs with
adoption and engagement
dashboards
Autocatalog using CI/CD pipelines Drive API adoption
THIS YEAR:
All contents © MuleSoft, LLC
Automatically enforce within your
CI/CD pipeline
Apply to API specs in API designer
Catalog rules centrally in Anypoint Exchange
Expected in H2 2021
Governance is enforced within the API lifecycle across clouds
Govern any API at scale Share governance best
practices
● Catalog governance rules
within Anypoint Exchange to
share with other developers
Apply consistent rules at
design time
● Enable devs to apply
governance at design time
in API designer
Enforce governance within
your DevOps pipeline
● Automatically apply
standards on your API
contract and spec within
your CI/CD pipeline and in
the future, gateway
Enforce
standards for
‘data in-flight’
Enforce
API-spec
standards
Catalog
and report
API
contract
issues
Write governance rules in AML
THIS YEAR:
All contents © MuleSoft, LLC Expected in H2 2021
Extending our lightweight presence
Full lifecycle API management with an ultrafast gateway
Containerized, fast proxy
built on Envoy
● High performance, small
footprint, easily deployed in
any environment
Enterprise grade API
management support
● Extend full lifecycle API
management to any service --
no matter the size, language
or cloud
Secure and manage API with
an enhanced policy portfolio
● Apply OOTB or custom
policies directly on Anypoint
Platform
Service A
Envoy sidecar
proxy
Anypoint Platform Manage Secure Monitor
Mule Adapter
Istio
Kubernetes cluster
Discover
Service B
Envoy sidecar
proxy
Service A
Kubernetes cluster
Service B
Service C
Microservices in a service mesh
New: Microservices proxied with
a lightweight gateway
Gateway
Gateway
Gateway
THIS YEAR:
All contents © MuleSoft, LLC Available Now
Kubernetes-as-a-Service
Customer’s network
Control pane
Runtime plane
Runtime Fabric services
Mule
App
Mule
App
Mule
App
Mule
App
Mule
App
Mule
App
Mule
App
Mule
App
Mule
App
Extend control plane
benefits to runtime on your
AKS, EKS and GKE
● Get the latest platform
management and
monitoring features
Decouple Mule runtime
services from your own
infrastructure
● Give ops teams the power
to use their infrastructure
how they want
Available
Now
AKS
2022
OpenShift
2022
Any K8s
EKS
Available
Now
GKE
Available
Now
Anypoint Runtime Fabric on self-managed K8s
Deploy Mule runtimes on managed K8s
AVAILABLE NOW:
All contents © MuleSoft, LLC
Our vision: Extend monitoring to any API
Comprehensively observe the health of all of your APIs Unified monitoring for APIs
across the enterprise
● Monitor APIs across Anypoint
Platform, on-premise
deployments and major cloud
providers
Diagnose issues precisely
and instantly
● Gain the right context faster
with simplified and consistent
visibility across performance,
user and policy metrics
● Act on issues instantly with
improved API alerts, metrics
and notifications
Expected in H2 2021
THIS YEAR:
All contents © MuleSoft, LLC
Recap and key takeaways
All contents © MuleSoft, LLC 22
Many APIs across
environments - with
minimal reuse, limited
visibility, and
inconsistent security
Full lifecycle API
Management for any
API, across any
environment
Govern APIs
at scale
Apply and enforce
governance rules within
the development
lifecycle
Control and observe
across environments
Deploy APIs and gateways
anywhere, and monitor them
from one place
2
Secure with a light, fast
gateway
APIs are managed and secured
with light, fast gateways and API
policies
3 4
Finish
Start
Design and catalog
any API
Build or catalog APIs in any
language, across any
developer tool or stack
1
Support any API, across any environment
THE NORTH STAR:
All contents © MuleSoft, LLC
Key takeaways
1.
With the explosion in
API types and
deployment
environments, teams
want flexibility to take
advantage of the
different technologies
2.
With many APIs across
deployments,
organizations struggle
with reuse, visibility, and
security
3.
MuleSoft is looking to
address these
challenges by providing
full-lifecycle API
management as an
open platform, to any
API
All contents © MuleSoft, LLC
Go deeper with MuleSoft at API Days
24
Workshop: Managing multiple APIs
across any environment
July 1 @ 1:15 PDT
Jordan Schuetz, Developer Advocate, MuleSoft
Kevin Balaji, Senior Product Marketing
Manager, MuleSoft
All contents © MuleSoft, LLC
Thank you!
Questions?

INTERFACE, by apidays - The future of API Management in a hybrid, multi-cloud world by Shaun Clowes, Mulesoft

  • 1.
    All contents ©MuleSoft, LLC The future of API Management in a hybrid, multi-cloud world Shaun Clowes, SVP of Product June 2021
  • 2.
    All contents ©MuleSoft, LLC Forward-Looking Statements "Safe harbor" statement under the Private Securities Litigation Reform Act of 1995: This presentation contains forward-looking statements about the company's financial and operating results, which may include expected GAAP and non-GAAP financial and other operating and non-operating results, including revenue, net income, diluted earnings per share, operating cash flow growth, operating margin improvement, expected revenue growth, expected current remaining performance obligation growth, expected tax rates, stock-based compensation expenses, amortization of purchased intangibles, shares outstanding, market growth, environmental, social and governance goals and expected capital allocation, including mergers and acquisitions, capital expenditures and other investments. The achievement or success of the matters covered by such forward-looking statements involves risks, uncertainties and assumptions. If any such risks or uncertainties materialize or if any of the assumptions prove incorrect, the company’s results could differ materially from the results expressed or implied by the forward-looking statements it makes. The risks and uncertainties referred to above include -- but are not limited to -- risks associated with the effect of general economic and market conditions; the impact of geopolitical events, natural disasters and actual or threatened public health emergencies, such as the ongoing Coronavirus pandemic; the impact of foreign currency exchange rate and interest rate fluctuations on our results; our business strategy and our plan to build our business, including our strategy to be the leading provider of enterprise cloud computing applications and platforms; the pace of change and innovation in enterprise cloud computing services; the seasonal nature of our sales cycles; the competitive nature of the market in which we participate; our international expansion strategy; the demands on our personnel and infrastructure resulting from significant growth in our customer base and operations, including as a result of acquisitions; our service performance and security, including the resources and costs required to avoid unanticipated downtime and prevent, detect and remediate potential security breaches; the expenses associated with our data centers and third-party infrastructure providers; additional data center capacity; real estate and office facilities space; our operating results and cash flows; new services and product features, including any efforts to expand our services beyond the CRM market; our strategy of acquiring or making investments in complementary businesses, joint ventures, services, technologies and intellectual property rights; the performance and fair value of our investments in complementary businesses through our strategic investment portfolio; our ability to realize the benefits from strategic partnerships, joint ventures and investments; the impact of future gains or losses from our strategic investment portfolio, including gains or losses from overall market conditions that may affect the publicly traded companies within our strategic investment portfolio; our ability to execute our business plans; our ability to successfully integrate acquired businesses and technologies; our ability to continue to grow unearned revenue and remaining performance obligation; our ability to protect our intellectual property rights; our ability to develop our brands; our reliance on third-party hardware, software and platform providers; our dependency on the development and maintenance of the infrastructure of the Internet; the effect of evolving domestic and foreign government regulations, including those related to the provision of services on the Internet, those related to accessing the Internet, and those addressing data privacy, cross-border data transfers and import and export controls; the valuation of our deferred tax assets and the release of related valuation allowances; the potential availability of additional tax assets in the future; the impact of new accounting pronouncements and tax laws; uncertainties affecting our ability to estimate our tax rate; uncertainties regarding our tax obligations in connection with potential jurisdictional transfers of intellectual property, including the tax rate, the timing of the transfer and the value of such transferred intellectual property; the impact of expensing stock options and other equity awards; the sufficiency of our capital resources; factors related to our outstanding debt, revolving credit facility and loan associated with 50 Fremont; compliance with our debt covenants and lease obligations; current and potential litigation involving us; and the impact of climate change. Further information on these and other factors that could affect the company’s financial results is included in the reports on Forms 10-K, 10-Q and 8-K and in other filings it makes with the Securities and Exchange Commission from time to time. These documents are available on the SEC Filings section of the Investor Information section of the company’s website at. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements, except as required by law. Third party trademarks are the property of their owners.
  • 3.
    All contents ©MuleSoft, LLC 1. How has the API management landscape changed 2. What should you do to adapt? a. Build and catalog any API type b. Govern APIs at scale c. Secure with a light, fast gateway d. Control and observe across environments 3. How can MuleSoft help? 4. Key takeaways and next steps Agenda
  • 4.
    All contents ©MuleSoft, LLC APIs were eating the world … then COVID accelerated it McKinsey & Co, 2021 JUL 20 JUN 18 25% MAY 18 25% DEC 19 41% 64% of customer interactions become digital post-Covid
  • 5.
    All contents ©MuleSoft, LLC Typical enterprises have many APIs and gateways 5
  • 6.
    All contents ©MuleSoft, LLC Typical enterprises have many APIs and gateways 6 Challenges Limited reuse ↳ Slowed innovation Many management consoles ↳ Limited visibility Siloed governance ↳ Inconsistent security
  • 7.
    All contents ©MuleSoft, LLC How can we adapt to this environment?
  • 8.
    All contents ©MuleSoft, LLC 8 Support any API, across any environment THE NORTH STAR Govern, manage and secure consistently Build and deploy with flexibility IT Admins / Architects Developers / Innovation teams
  • 9.
    All contents ©MuleSoft, LLC 9 Support any API, across any environment THE NORTH STAR Govern, manage and secure consistently Build and deploy with flexibility IT Admins / Architects Developers / Innovation teams Design and catalog any API Secure with a light, fast gateway Govern APIs at scale Control and observe across environments
  • 10.
    All contents ©MuleSoft, LLC Why is it important? ● API standards and spec types are constantly evolving ● Different API types have their own advantages and address different use cases ● Developers in your organization want flexibility to build according to their strengths Design and catalog any API Your organization should take advantage of these technologies There is an explosion of API types
  • 11.
    All contents ©MuleSoft, LLC Why is it important? Data types within APIs needs to stay compliant with government regulations and industry standards ● GDPR compliance cost $150B/yr just in the US* ● Banks spend ~$300B/yr on compliance (10% OPEX)* ● 20-30% in revenue loss/yr attributed to inefficiencies* Governance should be “shifted left” to design time as well as runtime Design-time governance has high significance *Source: IDC compliance study, 2019 Govern APIs at scale
  • 12.
    All contents ©MuleSoft, LLC Protect your APIs with light, fast gateways Extend full lifecycle APIM on your gateways from a single control plane API Gateways are a commodity today... Why is it important? ● Users desire the lightest, fastest gateway for their use cases ● Containerized gateways are strongly preferred for their ease of use and portability ● Open source offerings lack the enterprise management capabilities needed to run at scale Secure with a light, fast gateway
  • 13.
    All contents ©MuleSoft, LLC Why is it important? ● Each cloud vendor or API console has different monitoring views ● These solutions provide only limited context and require substantial effort ● Correlating data across different views and solutions to get the right context is time consuming Adopt API monitoring across the enterprise Monitoring or API Management solutions help apply unified visibility Control and observe across environments
  • 14.
    All contents ©MuleSoft, LLC How can MuleSoft help?
  • 15.
    All contents ©MuleSoft, LLC Full lifecycle API Management with Mule 15 Runtime Manager Anypoint Platform API Manager Anypoint Monitoring & Analytics Anypoint Visualizer Anypoint Service Mesh TODAY: Anypoint Platform Anypoint Exchange API Community Manager Mocking Service API Console API Designer Anypoint Studio
  • 16.
    All contents ©MuleSoft, LLC Expected in H2 2021 Productize, govern and publish internal and external APIs Explore all APIs from a single place Catalog Mule/Non-Mule APIs from any environment ● Automatically discover APIs in any environment using CI/CD pipelines Productize all APIs to a standard quality ● Establish and enforce quality and governance standards across all APIs Improve consumption experience for your API communities ● Expose APIs in fully branded experiences in minutes with out of the box templates ● Optimize API programs with adoption and engagement dashboards Autocatalog using CI/CD pipelines Drive API adoption THIS YEAR:
  • 17.
    All contents ©MuleSoft, LLC Automatically enforce within your CI/CD pipeline Apply to API specs in API designer Catalog rules centrally in Anypoint Exchange Expected in H2 2021 Governance is enforced within the API lifecycle across clouds Govern any API at scale Share governance best practices ● Catalog governance rules within Anypoint Exchange to share with other developers Apply consistent rules at design time ● Enable devs to apply governance at design time in API designer Enforce governance within your DevOps pipeline ● Automatically apply standards on your API contract and spec within your CI/CD pipeline and in the future, gateway Enforce standards for ‘data in-flight’ Enforce API-spec standards Catalog and report API contract issues Write governance rules in AML THIS YEAR:
  • 18.
    All contents ©MuleSoft, LLC Expected in H2 2021 Extending our lightweight presence Full lifecycle API management with an ultrafast gateway Containerized, fast proxy built on Envoy ● High performance, small footprint, easily deployed in any environment Enterprise grade API management support ● Extend full lifecycle API management to any service -- no matter the size, language or cloud Secure and manage API with an enhanced policy portfolio ● Apply OOTB or custom policies directly on Anypoint Platform Service A Envoy sidecar proxy Anypoint Platform Manage Secure Monitor Mule Adapter Istio Kubernetes cluster Discover Service B Envoy sidecar proxy Service A Kubernetes cluster Service B Service C Microservices in a service mesh New: Microservices proxied with a lightweight gateway Gateway Gateway Gateway THIS YEAR:
  • 19.
    All contents ©MuleSoft, LLC Available Now Kubernetes-as-a-Service Customer’s network Control pane Runtime plane Runtime Fabric services Mule App Mule App Mule App Mule App Mule App Mule App Mule App Mule App Mule App Extend control plane benefits to runtime on your AKS, EKS and GKE ● Get the latest platform management and monitoring features Decouple Mule runtime services from your own infrastructure ● Give ops teams the power to use their infrastructure how they want Available Now AKS 2022 OpenShift 2022 Any K8s EKS Available Now GKE Available Now Anypoint Runtime Fabric on self-managed K8s Deploy Mule runtimes on managed K8s AVAILABLE NOW:
  • 20.
    All contents ©MuleSoft, LLC Our vision: Extend monitoring to any API Comprehensively observe the health of all of your APIs Unified monitoring for APIs across the enterprise ● Monitor APIs across Anypoint Platform, on-premise deployments and major cloud providers Diagnose issues precisely and instantly ● Gain the right context faster with simplified and consistent visibility across performance, user and policy metrics ● Act on issues instantly with improved API alerts, metrics and notifications Expected in H2 2021 THIS YEAR:
  • 21.
    All contents ©MuleSoft, LLC Recap and key takeaways
  • 22.
    All contents ©MuleSoft, LLC 22 Many APIs across environments - with minimal reuse, limited visibility, and inconsistent security Full lifecycle API Management for any API, across any environment Govern APIs at scale Apply and enforce governance rules within the development lifecycle Control and observe across environments Deploy APIs and gateways anywhere, and monitor them from one place 2 Secure with a light, fast gateway APIs are managed and secured with light, fast gateways and API policies 3 4 Finish Start Design and catalog any API Build or catalog APIs in any language, across any developer tool or stack 1 Support any API, across any environment THE NORTH STAR:
  • 23.
    All contents ©MuleSoft, LLC Key takeaways 1. With the explosion in API types and deployment environments, teams want flexibility to take advantage of the different technologies 2. With many APIs across deployments, organizations struggle with reuse, visibility, and security 3. MuleSoft is looking to address these challenges by providing full-lifecycle API management as an open platform, to any API
  • 24.
    All contents ©MuleSoft, LLC Go deeper with MuleSoft at API Days 24 Workshop: Managing multiple APIs across any environment July 1 @ 1:15 PDT Jordan Schuetz, Developer Advocate, MuleSoft Kevin Balaji, Senior Product Marketing Manager, MuleSoft
  • 25.
    All contents ©MuleSoft, LLC Thank you! Questions?