MuleSoft Surat Meetup#41 - Universal API Management, Anypoint Flex Gateway and Anypoint API Governance With MuleSoft

1. Universal API Management, Flex
Gateway and API Governance
Surat MuleSoft Meetup Group
May 21, 2022

2. Safe Harbour Statement
● Both the speaker and the host are organizing this meet-up in individual capacity only. We are
not representing our companies here.
● This presentation is strictly for learning purposes only. Organizer/Presenter do not hold any
responsibility that same solution will work for your business requirements.
● This presentation is not meant for any promotional activities.
2

3. A recording of this meetup will be uploaded to events page within 24 hours.
Questions can be submitted/asked at any time in the Chat/Questions & AnswersTab.
Make it more Interactive!!!
Give us feedback! Rate this meetup session by filling feedback form at the end of theday.
We Love Feedbacks!!! Its Bread & Butter for Meetup.
Housekeeping
3

4. Organizers
4
Jitendra Bafna
Senior Solution Architect
EPAM Systems
Nitish Jain
Application Developer
Accenture

5. 5
○ MuleSoft Ambassador
○ Go To Market Champion/Industry Champion/Delivery Champion.
○ 14 Years of Experience and working as a Senior Solution
Architect III at EPAM Systems.
○ Surat/Nashik/Engineering Student Meetup Group Leader.
Speaker
Jitendra Bafna
Senior Solution Architect
EPAM Systems

6. Agenda
● Introduction
● Universal API Management
● Flex Gateway
● API Governance
● Demonstration
● Trivia Quiz

7. Universal API Management and
Flex Gateway

8. 8
Universal API Management
Universal API Management allows you to manage, govern or secure
the APIs within single control plane, it doesn’t matter whether they are
MuleSoft or Non-MuleSoft APIs or it located anywhere (on-premise,
cloud or anywhere).
It will allow the
organizations or
enterprises to
control, manage,
secure the APIs
under single
umbrella.
Adapt any
architecture with
lightweight and
flexible API
Gateway to
manage and
secure the APIs.
Govern the all
APIs under
single platform.

9. 9
Flex Gateway
Flex Gateway is ultrafast, designed and manage the APIs
running Anywhere.
• Secure and
Manage APIs
located Anywhere.
Secure and
Manage
• Extend Anypoint
Platform
Capabilities to
MuleSoft as well as
Non-MuleSoft APIs.
Extension and
Capabilities
• Achieve consistent
security and
governance across
every API operating
in any environment
Security and
Governance
• Flex Gateway Can
be used in Local or
Connected Mode
Flex Gateway
Mode
• Anypoint Username
and Password
• Auth Token
• Connected App
Authentication
Mode

10. 10
Docker Engine
Mule Runtime
Mule API (9002)
Spring (Java
Runtime)
Spring API (9003)
Flex Gateway
Anypoint Platform (Control Plane)
NodeJS
Node JS API (9004)
.Net
Replica 1 Replica 2 Replica n
Mule API
Instance
Spring API
Instance
NodeJS API
Instance
.Net API
Instance
Flex Gateway (Runtime Manager)
.Net API (9005)
Container (8084) Container (8085) Container (8086) Container (8087)
API Policies API Security API Metrics API Alerts
API Manager
Flex Gateway in Connected Mode Behind Firewall
Single Flex Gateway – Multiple APIs

11. 11
Docker Engine
Mule Runtime
Mule API (9002)
Spring (Java
Runtime)
Spring API (9003)
Anypoint Platform (Control Plane)
NodeJS
Node JS API (9004)
.Net
.Net API (9005)
Container (8084) Container (8085) Container (8086) Container (8087)
API Policies API Security API Metrics API Alerts
API Manager
Multiple Flex Gateway in Connected Mode Behind Firewall
Replica 1
Replica 2
Replica 1
Replica 2
Replica 1
Replica 2
Replica 1
Replica 2
Flex Gateway Flex Gateway Flex Gateway Flex Gateway
Flex Gateway Flex Gateway Flex Gateway Flex Gateway
Multiple Flex Gateway Architecture – Flex Gateway as a Micro Gateway

12. 12
Docker Engine
Mule Runtime
Mule API (9002)
Spring (Java
Runtime)
Spring API (9003)
Anypoint Platform (Control Plane)
NodeJS
Node JS API (9004)
.Net
.Net API (9005)
Container (8084) Container (8085) Container (8086) Container (8087)
API Policies API Security API Metrics API Alerts
API Manager
Multiple Flex Gateway in Connected Mode Behind Firewall
Replica 1
Replica 2
Replica 1
Replica 2
Replica 1
Replica 2
Replica 1
Replica 2
Flex Gateway Flex Gateway Flex Gateway Flex Gateway
Flex Gateway Flex Gateway Flex Gateway Flex Gateway
Multiple Flex Gateway Architecture – Flex Gateway as a Micro Gateway

13. Demonstration – Flex Gateway
Setup Flex Gateway in Connected Mode
Publish APIs to Flex Gateway in Connected Mode
Apply Policies to Flex Gateway
Setup Flex gateway in Local Mode
Publish APIs to Flex Gateway in Local Mode
Apply Policies to Flex gateway

14. Mule Runtime
Mule Employee API (9001)
Container (9000)
Replica 1
Replica 2
Flex Gateway (Local Mode - 8081)
http://ip_address_docker:8081
http://ip_address_docker:9000
Flex Gateway – Single
Application

15. Mule Runtime
Mule Employee API (9001)
Container (9000)
Docker Engine
Replica 1
Replica 2
Flex Gateway (Local Mode - 8081)
http://ip_address_docker:8081
Mule Runtime
Container (9001)
Mule Orders API (9001)
Flex Gateway –
Multiple
Application
(MuleSoft)

16. Mule Runtime
Mule Employee API (9001)
Container (9000)
Docker Engine
Replica 1
Replica 2
Flex Gateway (Local Mode - 8081)
http://ip_address_docker:8081
Mule Runtime
Mule Orders API (9001)
Container (9002)
NodeJS
Health API (8080)
Container (9003)
Flex Gateway –
Multiple
Application
(MuleSoft and
Non- MuleSoft)

17. API Governance

18. 18
API Governance
MuleSoft has recently introduced the API
Governance as a part of the Anypoint
Platform that enables you to apply
governance ruleset to your APIs that
ensures API Consistency and provides
default several ruleset such as a Top 10
OWASP API Security, Anypoint API Best
Practices, OpenAPI Best Practices
governance rulesets etc.
API Governance will ensure the APIs
design across the enterprises is consistent
and it is designed with API Best Practices
and Guidelines and ensure the API
Security and improve the quality of APIs.

19. API Governance – Default Rulesets

20. API Governance – Default Rulesets
● Anypoint Best Practices - https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-
practices/minor/1.0/
● Authentication Security Best Practices - https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-
620025690913/authentication-security-best-practices/minor/1.0/
● HTTPS Enforcement - https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/https-
enforcement/minor/1.0/
● OpenAPI Best Practices - https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/openapi-best-
practices/minor/1.0/
● OWASP API Security Top 10 2019 Checklist - https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-
620025690913/owasp-api-security/minor/1.0/
● Required Examples - https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/required-
examples/minor/1.0/

21. API Governance Conformance Report

22. API Governance - Benefits
Enable developer to apply governance rulesets at design time.
Produce consistent API specs across the enterprises.
Improved API Quality and Security.
API design with Anypoint Best Practices and OpenAPI Best Practices.
Reduce Top 10 OWASP security risks.
Ensure Design-Time conformance.

23. Q & A

24. Take a stand !
18
●Nominate yourself for the next meetup speaker and suggest a topic as well.

25. 20
● Share:
○ Tweet using the hashtag #MuleSoftMeetups
○ Invite your network to join: https://meetups.mulesoft.com/engineering-student-
group/
● Feedback:
○ Fill out the survey feedback and suggest topics for upcoming events
○ Contact MuleSoft at meetups@mulesoft.com for ways to improve the program
What’s next?

26. 20
● 21st May 2022 - Understanding the Anypoint Flex Gateway
● 11th June 2022 - Implementing and Understanding SAGA (Orchestration and
Choreography) Patterns With MuleSoft
● 24th June 2022 - Combine Service Mesh With Anypoint API Management to
power Microservices
● 30th June 2022 - Understanding EKS/RTF Architecture and Components
● 9th July 2022 - Driving Digital Transformation in Banking Industries With
MuleSoft
Upcoming Meetups

27. Quiz Time
Get ready to WIN a Special Gift from MuleSoft Community

28. Thank you