Proprietary + Confidential
Managing the Complexity of Microservices
Deployments
May 9, 2017
Kenny Bastani (Principal Technologist)
Prithpal Bhogill (Product Management)
Proprietary + Confidential
Reminder: “This webinar may include mention of some future features.
Please make any purchasing decisions based on currently GA features.
This information is Google confidential information, covered by the terms
of Apigee and Google Cloud Platform License Agreement.”
Speaking Today
Prithpal Bhogill
Product Management
Kenny Bastani
Principal Technologist
Proprietary + Confidential
Agenda
Monolith to Microservices
Why API Management?
Apigee and Pivotal Cloud Foundry
Customer Benefits
Call to Action
Proprietary + Confidential
From Monoliths to
Microservices
Proprietary + Confidential
We started with the monolith
Proprietary + Confidential
● Slows our velocity getting into production
● It takes too long to ramp up new engineers
● The code base is just too large for any one
person to fully comprehend
● Centralized authority and change
management slows progress (DBA, Ops)
Cultural problems with monoliths
Proprietary + Confidential
● Coordinated releases batch many changes
together from different teams
● Operations drives the runtime environment
of applications
● Operators take on all operational
responsibility (including VM upgrades)
● Deploy everything at once or nothing at all
Operational problems with monoliths
Proprietary + Confidential
We then moved towards SOA
Proprietary + Confidential
We have now arrived at microservices
Proprietary + Confidential
● Small teams organized around business
capabilities
● Independently deployable
● Teams produce and consume APIs
● Teams can choose the best tools for the job
Microservices
Proprietary + Confidential
Online Store Microservices
Proprietary + Confidential
Online Store Microservices
Proprietary + Confidential
Proprietary + Confidential
Splitting the monolith
Proprietary + Confidential
Proprietary + Confidential
Proprietary + Confidential
Pivotal Cloud Foundry
Proprietary + Confidential
Proprietary + Confidential
Why API Management?
Proprietary + Confidential
APIs and Microservices are complementary
CATALOG
CUSTOMER
REVIEWS
FAVORITES
RECOMMEND
ORDERS
SHOPPING
CART
Microservices
eCommerce
System
Monolithic
eCommerce
System
APIAPI
Proprietary + Confidential
APIs shield consumers from Microservices Complexity
Ordering API Customer APIBilling API
Consumers Shouldn’t
Care About What’s
Behind the API
Proprietary + Confidential
REST APIs - Enable easy consumption
REST APIs
enable easy consumption
CONTAINERS
enable independent deployment
CLOUD
enable independent scaling
Proprietary + Confidential
Microservices will fail without API Management
API SPRAWL
Difficult to discover & reuse
CYBER THREATS
Limited built-in security
FLYING BLIND
Limited use & performance visibility
Proprietary + Confidential
API Gateway
Developers
Developer Portal
Apigee API Platform
Analytics
Management
Management
Runtime
Backend
App
API Team
Scalable
Services
Microgateway
Technology powering the Apigee API Platform
Available as
Apigee managed
+
Customer managed
A family of federated
gateways
Available native
integration capability
with respective cloud
Comprehensive API Management
OAuth2, OpenID,
SAML, TLS
OWASP Threat
Protection
RBAC, 3rd party
IDM Support
Bot
Detection
Mediation, Caching &
Traffic Management
node.js
run-time Engine
Data Persistence /
BaaS
Hybrid Deployment
/ Microgateway
Secure API
RuntimeApps Backend
Business &
Developer Metrics
Fine-grained
Performance Analytics
End User Analytics
Custom Data Capture &
Reports
Trace & Diagnostics
Analytics
Customizable
Developer Portal
SmartDocs
Self-service
Developer On-boarding
API Products
API Monetization
Developer
Management
Partners /
Developers
API-driven
Platform Automation
Multi-tenancy &
Scaling with Traffic Isolation
Zero Downtime
Upgrades
Cross-region Automated
Routing & Failover
Global Policy Enforcement
Operations
Automation
Flow-based Proxy Editor
& Pre-built Policies
API Studio with
Open API / Swagger
Test & Monitoring
Extensibility with
node.js / Java
Version Management
API
Development
API
Team
For the Full API Lifecycle
Design
Develop
Secure
PublishMonitor
Analyze
Monetize
Scale
Proprietary + Confidential
Apigee provides the API layer for Microservices
CATALOG
CUSTOMER
REVIEWS
FAVORITES
RECOMMEND
ORDERS
SHOPPING
CART
Microservices
eCommerce
System
Apigee’s centralized
gateway provides
comprehensive API
management and an
API layer for your
microservices
CATALOG
Apigee’s microgateway
provides security,
throttling and analytics for
individual microservices
as well.
Proprietary + Confidential
CommonSecurityModel-OAuth
ThreatProtection
Caching
Monetiza
tion/Rate
Plans
External
API
Façade &
Proxy
Mediation/Aggregation
Developer Portal
Use API management as you transition to microservices
CATALO
G
CUSTOM
ER
REVIEW
S
SHOPPPI
NG
CART
RECOM
MEND
Mobile & Web apps
Microservices
Apigee authenticates, applies security policies
and routes request to microservices. Also
orchestrates to your legacy services/monolith
apps
On-Premises or Private Cloud
Monolith Apps
Proprietary + Confidential
What we are doing together?
added support for Edge
Microgateway...
We’ve integrated our products… released BOSH Installers for
Apigee Edge
Proprietary + Confidential
Integration Options - Flexibility & Choice
Route Services CF Buildpack*
* Edge Microgateway Buildpack available today as OSS on https://github.com/swilliams11/edgemicro-decorator.
Apigee Edge MicrogatewayApigee Edge Enterprise
App App App
Apigee Edge Microgateway
Proprietary + Confidential
Benefits for Developers & Operators
Developers
• Apply pre-built traffic management
and security features to their app
• Apply pre-built pricing models to
monetize their app
• Automatically expose their app (as
services) to other developers
• Discover, test, and obtain access to
other services (as APIs)
Accelerate Application Modernization
Operators
• Apply a set of security and traffic
management features across projects
• Scale these features through PCF
• Obtain visibility into the usage and
performance of APIs
• Install and manage Apigee Edge
through BOSH
Ease Operational Concerns
Proprietary + Confidential
Use Cases
Use Case
Apigee protects and enables
authorized access to microservices
Microservices Development Application Modernization Enabling Ecosystems
Apigee Edge Microgateway
3 policies OOTB, specifically spike
arrest, API key validation / OAuth,
and quota limits
Operational analytics
Centralized API management
Apigee mitigates risk in app
modernization/migration
Apigee Edge
35+ policies OOTB, including
transformation, mediation, & security
Developer portal
Operational analytics
Centralized API management
Apigee enables APIs to be discovered
and managed by app developers
Apigee Edge
35 policies OOTB, including
transformation, mediation, & security
Developer portal
Operational analytics
Centralized API management
Description
Product
Features
Powering the “Digital Value Chain”
Consuming digital products and digital experiences
“Outside-in” – digital consumer view
User App Developer API API team Backend
Reduce time to develop connected experiences
Enable consumption of APIs
Reduce time to build better software
Reduce operational complexity
Proprietary + Confidential
Call to Action
Visit www.apigee.com and sign up for a trial account
Learn about Apigee’s integrations with Pivotal here
If you are new to Apigee
Learn more about Apigee’s Service Broker with Edge Microgateway here
Ask your PCF rep about Apigee’s free Microservices Starter Kit offer
Ask you PCF rep for an introduction to Apigee Sales
If you are PCF Developer or
Operator
Visit www.pivotal.io to learn how to develop and deploy software with
cloud native techniques
Ask your Apigee rep for an introduction to Pivotal Sales.
If you are new to Pivotal
Proprietary + Confidential
Thank You

Managing the Complexity of Microservices Deployments

  • 1.
    Proprietary + Confidential Managingthe Complexity of Microservices Deployments May 9, 2017 Kenny Bastani (Principal Technologist) Prithpal Bhogill (Product Management)
  • 2.
    Proprietary + Confidential Reminder:“This webinar may include mention of some future features. Please make any purchasing decisions based on currently GA features. This information is Google confidential information, covered by the terms of Apigee and Google Cloud Platform License Agreement.”
  • 3.
    Speaking Today Prithpal Bhogill ProductManagement Kenny Bastani Principal Technologist
  • 4.
    Proprietary + Confidential Agenda Monolithto Microservices Why API Management? Apigee and Pivotal Cloud Foundry Customer Benefits Call to Action
  • 5.
    Proprietary + Confidential FromMonoliths to Microservices
  • 6.
    Proprietary + Confidential Westarted with the monolith
  • 7.
    Proprietary + Confidential ●Slows our velocity getting into production ● It takes too long to ramp up new engineers ● The code base is just too large for any one person to fully comprehend ● Centralized authority and change management slows progress (DBA, Ops) Cultural problems with monoliths
  • 8.
    Proprietary + Confidential ●Coordinated releases batch many changes together from different teams ● Operations drives the runtime environment of applications ● Operators take on all operational responsibility (including VM upgrades) ● Deploy everything at once or nothing at all Operational problems with monoliths
  • 9.
    Proprietary + Confidential Wethen moved towards SOA
  • 10.
    Proprietary + Confidential Wehave now arrived at microservices
  • 11.
    Proprietary + Confidential ●Small teams organized around business capabilities ● Independently deployable ● Teams produce and consume APIs ● Teams can choose the best tools for the job Microservices
  • 12.
  • 13.
  • 14.
  • 15.
  • 16.
  • 17.
  • 18.
  • 19.
  • 20.
  • 21.
    Proprietary + Confidential APIsand Microservices are complementary CATALOG CUSTOMER REVIEWS FAVORITES RECOMMEND ORDERS SHOPPING CART Microservices eCommerce System Monolithic eCommerce System APIAPI
  • 22.
    Proprietary + Confidential APIsshield consumers from Microservices Complexity Ordering API Customer APIBilling API Consumers Shouldn’t Care About What’s Behind the API
  • 23.
    Proprietary + Confidential RESTAPIs - Enable easy consumption REST APIs enable easy consumption CONTAINERS enable independent deployment CLOUD enable independent scaling
  • 24.
    Proprietary + Confidential Microserviceswill fail without API Management API SPRAWL Difficult to discover & reuse CYBER THREATS Limited built-in security FLYING BLIND Limited use & performance visibility
  • 25.
    Proprietary + Confidential APIGateway Developers Developer Portal Apigee API Platform Analytics Management Management Runtime Backend App API Team Scalable Services Microgateway Technology powering the Apigee API Platform Available as Apigee managed + Customer managed A family of federated gateways Available native integration capability with respective cloud
  • 26.
    Comprehensive API Management OAuth2,OpenID, SAML, TLS OWASP Threat Protection RBAC, 3rd party IDM Support Bot Detection Mediation, Caching & Traffic Management node.js run-time Engine Data Persistence / BaaS Hybrid Deployment / Microgateway Secure API RuntimeApps Backend Business & Developer Metrics Fine-grained Performance Analytics End User Analytics Custom Data Capture & Reports Trace & Diagnostics Analytics Customizable Developer Portal SmartDocs Self-service Developer On-boarding API Products API Monetization Developer Management Partners / Developers API-driven Platform Automation Multi-tenancy & Scaling with Traffic Isolation Zero Downtime Upgrades Cross-region Automated Routing & Failover Global Policy Enforcement Operations Automation Flow-based Proxy Editor & Pre-built Policies API Studio with Open API / Swagger Test & Monitoring Extensibility with node.js / Java Version Management API Development API Team
  • 27.
    For the FullAPI Lifecycle Design Develop Secure PublishMonitor Analyze Monetize Scale
  • 28.
    Proprietary + Confidential Apigeeprovides the API layer for Microservices CATALOG CUSTOMER REVIEWS FAVORITES RECOMMEND ORDERS SHOPPING CART Microservices eCommerce System Apigee’s centralized gateway provides comprehensive API management and an API layer for your microservices CATALOG Apigee’s microgateway provides security, throttling and analytics for individual microservices as well.
  • 29.
    Proprietary + Confidential CommonSecurityModel-OAuth ThreatProtection Caching Monetiza tion/Rate Plans External API Façade& Proxy Mediation/Aggregation Developer Portal Use API management as you transition to microservices CATALO G CUSTOM ER REVIEW S SHOPPPI NG CART RECOM MEND Mobile & Web apps Microservices Apigee authenticates, applies security policies and routes request to microservices. Also orchestrates to your legacy services/monolith apps On-Premises or Private Cloud Monolith Apps
  • 30.
    Proprietary + Confidential Whatwe are doing together? added support for Edge Microgateway... We’ve integrated our products… released BOSH Installers for Apigee Edge
  • 31.
    Proprietary + Confidential IntegrationOptions - Flexibility & Choice Route Services CF Buildpack* * Edge Microgateway Buildpack available today as OSS on https://github.com/swilliams11/edgemicro-decorator. Apigee Edge MicrogatewayApigee Edge Enterprise App App App Apigee Edge Microgateway
  • 32.
    Proprietary + Confidential Benefitsfor Developers & Operators Developers • Apply pre-built traffic management and security features to their app • Apply pre-built pricing models to monetize their app • Automatically expose their app (as services) to other developers • Discover, test, and obtain access to other services (as APIs) Accelerate Application Modernization Operators • Apply a set of security and traffic management features across projects • Scale these features through PCF • Obtain visibility into the usage and performance of APIs • Install and manage Apigee Edge through BOSH Ease Operational Concerns
  • 33.
    Proprietary + Confidential UseCases Use Case Apigee protects and enables authorized access to microservices Microservices Development Application Modernization Enabling Ecosystems Apigee Edge Microgateway 3 policies OOTB, specifically spike arrest, API key validation / OAuth, and quota limits Operational analytics Centralized API management Apigee mitigates risk in app modernization/migration Apigee Edge 35+ policies OOTB, including transformation, mediation, & security Developer portal Operational analytics Centralized API management Apigee enables APIs to be discovered and managed by app developers Apigee Edge 35 policies OOTB, including transformation, mediation, & security Developer portal Operational analytics Centralized API management Description Product Features
  • 34.
    Powering the “DigitalValue Chain” Consuming digital products and digital experiences “Outside-in” – digital consumer view User App Developer API API team Backend Reduce time to develop connected experiences Enable consumption of APIs Reduce time to build better software Reduce operational complexity
  • 35.
    Proprietary + Confidential Callto Action Visit www.apigee.com and sign up for a trial account Learn about Apigee’s integrations with Pivotal here If you are new to Apigee Learn more about Apigee’s Service Broker with Edge Microgateway here Ask your PCF rep about Apigee’s free Microservices Starter Kit offer Ask you PCF rep for an introduction to Apigee Sales If you are PCF Developer or Operator Visit www.pivotal.io to learn how to develop and deploy software with cloud native techniques Ask your Apigee rep for an introduction to Pivotal Sales. If you are new to Pivotal
  • 36.