Your API Strategy: Why Boring is Best

•Download as PPTX, PDF•

0 likes•381 views

The document discusses Martin Buhr's views on API strategies and technologies. It contains three rants about serverless, GraphQL, and microservices. In the rants, Martin argues that these technologies are often overused when simpler solutions would suffice. He believes serverless is best for prototypes and simple tasks, GraphQL introduces complexity by coupling services, and microservices should only be used when strict requirements for scale and availability demand it. Martin advocates for solid, boring design practices and stripping domains into microservices only when needed rather than taking a microservices-first approach.

Software

June 2015 Tyk
Your API Strategy
Why Boring is Best
Martin Buhr
CEO @Tyk Technologies
https://tyk.io
@martinbuhr
lonelycode@fosstodon.org

June 2015 Tyk
Tyk API Management
APIs for the Modern Enterprise

3 /
Boring is dependable…
• Large talent pool
• Well distributed seniority
• Increased supply = affordable
• Widespread best practice
• Boring is good for team churn

Tyk
6 /
Deploy your functions to a third-party
cloud and have them run only when needed,
then build you entire application this way…
What is it?

Tyk
6 /
“Write once deploy anywhere”
A common phrase:
- Unnamed framework developer, 2009

Tyk
6 /
… yes, yes they did.
Did someone say lock-in?

Tyk
6 /
More like: buy more servers!
Serverless?

3 /
So what does the grumpy one say?
Serverless is great for:
• Throwaway prototypes
• Repeated reporting tasks
• Nano-services

3 /
And what is the boring way?
A server-less, can be a server more
As Lambda and cloud FN do not bore
But solid design
Yes, SOLID design, will be forever!
Generic abstractions to the dark side lead
And there the sharks of lock-in feed
So take the step, but choose wisely
For to shrink your bill is mighty unlikely…

Tyk
6 /
Add a SQL layer in front of your decoupled services
to recouple the decoupled layer into a single
interface to make interface developers happy…

Tyk
DB 1
Svc 1 Scv 1 Svc 2
DB 2
Svc 3
GW GW GW GW
A simple microservice setup…

Tyk
DB 1
Svc 1 Scv 1 Svc 2
DB 2
Svc 3
GW GW GW GW
Now with GraphQL
GraphQL Query Proxy

1 /
You gone messed up now!
• GraphQL Proxy introduces a single point of failure
• You now have duplicate data schemas!
• If a service fails, the whole query will fail
• Why are you treating your services like a database?
• You can’t predict all code paths!

3 /
So what does the grumpy one say?
GraphQL is great for:
• Interface developers
… no… no that’s all. Please stop.

3 /
What is the boring way?
API Design is not application design
But!
Good application design can yield good API
design

Tyk
6 /
Increase the complexity of your application
and runtime environment by an order of
magnitude with this one simple trick!

1 /
Ok… so… what?
This is a shopping cart, that requires:
• Two database types
• Two programming languages
• A distributed schema
• Hopefully consistent?
WTF are you using Microservices for this??

3 /
So what does the grumpy one say?
• Do you have insane scale?
• Is your availability really that bad?
• Do you have the resource to dedicate a
*team* per service?
• Have you hired a microservice expert to help
you?

3 /
What is the boring way?
There is nothing new here:
• Build a monolith, but build it well
• Strip away domains into Microservices
when you *really* need it
• Don’t run microservice-first, because you
will triple your GTM time

Tyk
Thank you!
END /
Martin Buhr
CEO @Tyk Technologies
https://tyk.io
@martinbuhr
lonelycode@fosstodon.org

There’s an inherent tension for organizations doing API development: how to keep both your API developers as well as your infrastructure happy, at the same time. Decoupling front-end and back-end development allows parallel development, and helps keep your front-end, middle-end, and back-end efforts working asynchronously. This speeds progress, but requires far more – and far better – collaboration to be successful. Even an independent developer working with APIs requires good collaboration tools. In this talk, Abhinav Asthana will provide tips on how to improve in API development using collaboration tools like executable API descriptions, API mock servers, and documentation. He will include specific examples of how companies (such as VMware, Coursera, and AMC Theatres) have used collaboration to attain more agile development, to onboard developers, and to ensure input from all participants/stakeholders.

Life After Microservices – Shifting the Boundaries

Nordic APIs

So, here we are: Microservices, and everything they bring with them, like Spring Cloud, Kubernetes, Docker, ELK, you name it. We learnt and worked hard to master all of it. And now, finally, we feel prepared for the next years to come. Hmm, but what about Digitization? So what! Dissolving market boundaries? You couldn’t care less! Changing user expectations? Not your turf! And yet those and other non-IT topics may question your laboriously acquired skills very soon. In this session we will first examine, how those non-IT topics create new forces on software engineering. Based on that we will try to understand the drivers of future IT solutions and how that is going to affect your work – including unraveling the mysteries behind hypes like cloud-native, serverless, APIs, platforms and more. Finally, we will derive what you as a software engineer can do to sustain or even increase your market value in a shifting market, based on a well-balanced combination of new and timeless skills. After the session, besides getting an idea how looking outside-the-box can help you making better decisions inside-the-box you will have a much better idea how to stay ahead of the curve.

Evolution of API Management in the BBC

Nordic APIs

The API Management journey of the British Broadcasting Corporation (BBC), a public service organisation that serves audiences around the world. From no API intelligence to a distributed solution supporting dozens of autonomous teams. Our engineers will talk about how they have delivered our custom proxy software at scale, how they work towards not being a single point of failure and how being at the centre of the API traffic enables them to provide extra value services like SLA Monitoring for our engineering teams. We’ll explore how new authentication mechanisms are emerging and how we as a team facilitate the expanding API management landscape, considering the independent nature of our products.

Java 8 - Gateway Drug or End of Line?

Garth Gilmour

apidays LIVE Hong Kong 2021 - GraphQL : Beyond APIs, graph your enterprise by...

apidays

YAGNI, YMMV and APIs: building a hybrid strategy for your API platform.

Diogo Lucas

How do you reconcile the need for a stable public API that will not constantly disrupt your carefully tended ecosystem with you team’s ability to move fast and (eventually) break stuff? How do you cater for different requirements regarding security and SLAs or to radically different client natures? Join us for a conversation about how to leverage different API strategies ranging from fast moving intra-pod microservice comms to well maintained public services.

API Design Collaboration

Uchit Vyas ☁

INTERFACE, by apidays - API Design is where culture and tech meet each other...

apidays

APIs are the fundamental tenets of the Internet. They enable integrations between different services, and they power the servers that bring our applications to life. API integrations lay at the core of our API-driven world, and delivering successful API integrations is fundamental to sustain it. However, more often than not, API integrations tend to fail due to ineffective development workflows. In this presentation, I want to present various API development workflows that have helped me and my clients deliver successful API integrations. I’ll show how documentation-driven development, using mock servers, robust API testing frameworks, and API visibility tools can help to significantly reduce the chances of API integration failure and to keep errors under control.

apidays Paris 2019 - How Do Async APIs Survive in a Rest World? by Luca Ferra...

apidays

Continuous Integration and Delivery at Shapeways (Matt Boyle)

Nordic APIs

This is a session given by Matt Boyle at Nordic APIs 2016 Platform Summit on October 25th, in Stockholm Sweden. Description: We’ve spent a lot of time over the years at Shapeways building, honing, and improving our deployment and test process for our web properties and API. We started with straight-to-prod commits (which caused quite a bit of downtime!), graduated to working in two- and then one-week release cycles (which caused a lot of anxiety!), to where we are today: releasing 5-15 times a day, with automated testing, using continuous improvement and delivery best practices and tools. We’ve taken the complexity and anxiety out of our deployment process by implementing ChatOps, or using a bot to handle the sorts of tasks computers are great at, namely performing complex tasks repeatedly without error. This enables humans to focus on tasks that we’re uniquely suited for, namely solving complex problems and architecting reliable, resilient, and scalable solutions for our users. We’d love to share some of what we’ve learned along the way, from building automated testing tools, to selecting and implementing open-source solutions, to how we took our global deployment process from one hour to 4 minutes. We’d also like to share our vision of the future: what inspires us, what we hope to achieve in the coming weeks, months, and years, and how we’re going about doing it.

Scaling API Design

Jason Harmon

apidays LIVE Paris 2021 - Automating API Documentation by Ajinkya Marudwar, G...

apidays

INTERFACE, by apidays - Low code APIs that don't break by Zdenek Nemec, Supe...

apidays

Security Is a Concern, Let’s Make It an Enabler

Nordic APIs

Lessons Learned from Building Enterprise APIs (Gustaf Nyman)

Nordic APIs

This is a session given by Gustaf Nyman at Nordic APIs 2016 Platform Summit on October 25th, in Stockholm Sweden. Description: In enterprises the majority of APIs are internal and may count in hundreds. APIs are often implemented in and used from a variety of languages and platforms, and legacy system and protocols are ever-present. As APIs are increasingly part of business strategies, API management becomes an important concern of the whole organisation. Gustaf has spent more than 15 years building API infrastructure for enterprises. In this talk, he shares his thoughts on designing and implementing a long-lasting API management strategy.

Scaling API Design

Jason Harmon

Scaling API Design - Nordic APIs 2014

Jason Harmon

Api clarity webinar

LibbySchulze

I Love APIs 2015: End to End Testing: Bug Squashing for Developers

Apigee | Google Cloud

I Love APIs 2015: Create Design-driven APIs with Node.js and Swagger

Apigee | Google Cloud

Rest api best practices – comprehensive handbook

Katy Slemon

APIdays Paris 2019 - API Gateway & Identity Providers, a Match Made in Micros...

apidays

Introduction to GraphQL (or How I Learned to Stop Worrying about REST APIs)

Hafiz Ismail

Talk for FOSSASIA 2016 (http://2016.fossasia.org) ---- This talk will give a brief and enlightening look into how GraphQL can help you address common weaknesses that you, as a web / mobile developer, would normally face with using / building typical REST API systems. Let's stop fighting about whether we should implement the strictest interpretation of REST or how pragmatic REST-ful design is the only way to go, or debate about what REST is or what it should be. A couple of demos (In Golang! Yay!) will be shown that are guaranteed to open up your eyes and see that the dawn of liberation for product developers is finally here. Background: GraphQL is a data query language and runtime designed and used at Facebook to request and deliver data to mobile and web apps since 2012. Hafiz Ismail (@sogko) is a contributor to Go / Golang implementation of GraphQL server library (https://github.com/graphql-go/graphql) and is looking to encourage fellow developers to join in the collaborative effort.

DevOps Pipelines and Metrics Driven Feedback Loops

Andreas Grabner

What's hot

Auckland API & Microservices Meetup 1: API led design

Damian Harvey

I Love APIs 2015: Apigee and Node.js Building Mock Backends Fast

Apigee | Google Cloud

Lessons Learned from Revamping Our Doc Site

Pronovix

The impact of IoT on APIs

HaufeLexwareRomania

API Design Workflows

Jakub Nesetril

Pure APIs: Development workflows for successful API integrations

José Haro Peralta

apidays Paris 2019 - How Do Async APIs Survive in a Rest World? by Luca Ferra...

apidays

Continuous Integration and Delivery at Shapeways (Matt Boyle)

Nordic APIs

Scaling API Design

Jason Harmon

apidays LIVE Paris 2021 - Automating API Documentation by Ajinkya Marudwar, G...

apidays

INTERFACE, by apidays - Low code APIs that don't break by Zdenek Nemec, Supe...

apidays

Security Is a Concern, Let’s Make It an Enabler

Nordic APIs

Lessons Learned from Building Enterprise APIs (Gustaf Nyman)

Nordic APIs

Scaling API Design

Jason Harmon

Scaling API Design - Nordic APIs 2014

Jason Harmon

Api clarity webinar

LibbySchulze

I Love APIs 2015: End to End Testing: Bug Squashing for Developers

Apigee | Google Cloud

I Love APIs 2015: Create Design-driven APIs with Node.js and Swagger

Apigee | Google Cloud

Rest api best practices – comprehensive handbook

Katy Slemon

APIdays Paris 2019 - API Gateway & Identity Providers, a Match Made in Micros...

apidays

What's hot (20)

Auckland API & Microservices Meetup 1: API led design

I Love APIs 2015: Apigee and Node.js Building Mock Backends Fast

Lessons Learned from Revamping Our Doc Site

The impact of IoT on APIs

API Design Workflows

Pure APIs: Development workflows for successful API integrations

apidays Paris 2019 - How Do Async APIs Survive in a Rest World? by Luca Ferra...

Continuous Integration and Delivery at Shapeways (Matt Boyle)

Scaling API Design

apidays LIVE Paris 2021 - Automating API Documentation by Ajinkya Marudwar, G...

INTERFACE, by apidays - Low code APIs that don't break by Zdenek Nemec, Supe...

Security Is a Concern, Let’s Make It an Enabler

Lessons Learned from Building Enterprise APIs (Gustaf Nyman)

Scaling API Design

Scaling API Design - Nordic APIs 2014

Api clarity webinar

I Love APIs 2015: End to End Testing: Bug Squashing for Developers

I Love APIs 2015: Create Design-driven APIs with Node.js and Swagger

Rest api best practices – comprehensive handbook

APIdays Paris 2019 - API Gateway & Identity Providers, a Match Made in Micros...

Similar to Your API Strategy: Why Boring is Best

Introduction to GraphQL (or How I Learned to Stop Worrying about REST APIs)

Hafiz Ismail

DevOps Pipelines and Metrics Driven Feedback Loops

Andreas Grabner

Orchestrating microservices like a ninja

Apigee | Google Cloud

Presentation from the developer track at I Love APIs London 2016 featuring Stuart Leeks, Microsoft. Does orchestration feel like something you want to leave to someone else? Are your APIs and Microservices living in isolation and feeling lonely? This presentation dispenses the buzzwords, dives into the Azure Logic Apps Preview, and will help you begin your journey to being an Orchestration Ninja!

Cross Platform Angular 2 and TypeScript Development

Jeremy Likness

Continuous Deployment To The Cloud

Marcin Grzejszczak

How adding a further tool can be a good thing

Belsoft

Maintainable Machine Learning Products

Andrew Musselman

Machine learning applications are typically stitched together from hopes and dreams, shell scripts, cron jobs, home-grown schedulers, snippets of configuration clipped from multiple blog posts, thousands of hard-coded business rules, a.k.a. "our SQL corpus," and a few lines of training and testing code. Organizing all the moving parts into something maintainable and supportive of ongoing development is a challenge most teams have on their TODO list, roadmap, or tech debt pile. Getting ahead of the day-to-day demands and settling into a sane architecture often seems like an unattainable goal. The past several years have seen an explosion of tool-building in the data engineering and analytics area, including in Apache projects spanning the areas of search and information retrieval, job orchestration, file and stream formats, and machine learning libraries. In this talk we will cover our product and development teams' choices of architecture and tools, from data ingestion and storage, through transformations and processing, to presentation of results and publishing to web services, reports, and applications.

DevOps Days Toronto: From 6 Months Waterfall to 1 hour Code Deploys

Andreas Grabner

Slides used for https://www.devopsdays.org/events/2017-toronto/program/andreas-grabner/ In 2011 we delivered 2 major releases of our on premise enterprise software. Market, technology and customer requirements forced us to change that in order to remain competitive. Now – in 2017 - we are deploying and providing feature releases every 2 weeks for both our on premise and SaaS-based offering. We deploy 170 SaaS production changes per day and have a DevOps pipeline that allows us to deploy a code change within 1h if necessary. To increase quality, we built and provide a DevOps pipeline that currently executes 31000 Unit & Integration Tests per Hour as well as 60h UI Tests per Build. Our application teams are responsible end-to-end for their features and use production monitoring to validate their deployments which allows them to find 93% of bugs in production before it impacts our end users. In this session I explain how this transformation worked from both “Top Down” as well as “Bottom Up” in our organization. A key component was the 4 people strong DevOps Team who developed and “sell” their DevOps Pipeline to the globally distributed application teams. I will give insights into how our pipeline enables application teams to design, code, test and run a new feature for our user base. I will also talk about the “dark moments” as change is never without friction. Both internally as well as with our customers who also had to get used to more rapid changes.

Chasing the RESTful Trinity - Client CLI and Documentation

Roberto Cortez

The learning curve for REST API security is severe and unforgiving. Specifications promise infinite flexibility, habitually give old concepts new names, and almost seem designed to deliberately confuse. With an aggressive distaste for fancy terminology, this session delves into OAuth 2.0 with and without JWT for user identity; AWS-style security for B2B with API keys; and OAuth 2.0 Proof of Possession, which merges both into two-factor bliss. Using a baseline microservice architecture, the presentation compares them, with a heavy focus on the wire, showing actual HTTP messages and analyzing their impact on load and security. Starting with basic authentication and a brief intro to hashing and signing, this is the perfect session to align the whole team.

Resful Trinity Code One - San Francisco

Ivan Junckes Filho

Writing a truly consumable REST API is hard. Once exposed, documentation must be perfect before it can be consumed. Consumers often face days or weeks of work creating the client code. Many just need a command-line API. For a large API, writing these by hand and keeping them in sync is mission impossible. This session shows how to combine tooling around JAX-RS, OpenAPI, and MicroProfile REST Client to bootstrap microservice APIs that have Amazon-style Java client library, command-line API, and AsciiDoc/HTML documentation. The presentation explores generation of clients in other languages such as JavaScript and Git-inspired command-line techniques that enable REST calls to be secured via SSH keys. All perfectly documented in AsciiDoc, HTML, and man pages.

Stackato v6

Jonas Brømsø

Microservices - Scaling Development and Service

Paulo Gaspar

MarkLogic User Group - Best of MLW and Search + Semantics

Matt Turner

How TDD helps me design - A case study

Software Craftsmanship Alicante

In this talk we are going to show how TDD can help us in our daily work. Through a simple set of steps, we will see how it's possible to write a library without working before on any design. In this way, we will try to explain how are the tests who "suggests" us what to do in each state of development, how they make us focus to take baby steps in order to avoid drawbacks like paralysis by analysis. Maybe you have done some programming katas (or maybe not) but you do not achieve to see what really TDD brings you. Or it is difficult to you see how to apply it in your daily basis. Whatever your level is, the goal of this talk is trying to show how it is possible to get a software emergent design by only applying some basic TDD rules with tiny unit tests. -- En este evento vamos a mostrar cómo TDD puede ayudarnos en nuestro trabajo diario. Mediante una sencilla serie de pasos, veremos cómo se puede desarrollar una librería sin tener siquiera un prediseño pensado. De igual forma, intentaremos explicar cómo los tests nos van "sugiriendo" qué hacer en cada estado del desarrollo, cómo nos hacen enfocarnos para tomar pequeños pasos y evitar así, por ejemplo, la parálisis por análisis. Tal vez hayas hecho algunas katas (o no) y no llegas a ver qué te aporta TDD, o no ves cómo aplicarlo a tu trabajo real, o te parece un poco pérdida de tiempo. Sea cual sea tu nivel, el objetivo es intentar demostrarte cómo practicando una técnica de TDD básica a base sólo de tests unitarios es posible conseguir un diseño emergente.

Continuous Deployment To The Cloud With Spring Cloud Pipelines @WarsawCloudNa...

Marcin Grzejszczak

“I have stopped counting how many times I’ve done this from scratch” - was one of the responses to the tweet about starting the project called Spring Cloud Pipelines. Every company sets up a pipeline to take code from your source control, through unit testing and integration testing, to production from scratch. Every company creates some sort of automation to deploy its applications to servers. Enough is enough - time to automate that and focus on delivering business value. In this presentation, we’ll go through the contents of the Spring Cloud Pipelines project. We’ll start a new project for which we’ll have a deployment pipeline set up in no time. We’ll deploy to Cloud Foundry and check if our application is backward compatible so that we can roll it back on production.

The Future of ETL Isn't What It Used to Be

confluent

Speaker: Gwen Shapira, Principal Data Architect, Confluent Join Gwen Shapira, Apache Kafka® committer and co-author of ""Kafka: The Definitive Guide,"" as she presents core patterns of modern data engineering and explains how you can use microservices, event streams and a streaming platform like Apache Kafka to build scalable and reliable data pipelines designed to evolve over time. This is part 1 of 3 in Streaming ETL - The New Data Integration series. Watch the recording: https://videos.confluent.io/watch/q7roRtNZBnjiT9C3ii88fo?.

Quarterly Technology Briefing, Manchester, UK September 2013Thoughtworks

GraphQL Munich Meetup #1 - How We Use GraphQL At Commercetools

Nicola Molinari

APIdays Paris 2019 - Maintain & Evolve a Public GraphQL API by Aurélien Davi...

apidays

SpringOne 2016 in a nutshell

Jeroen Resoort

Similar to Your API Strategy: Why Boring is Best (20)

Introduction to GraphQL (or How I Learned to Stop Worrying about REST APIs)

DevOps Pipelines and Metrics Driven Feedback Loops

Orchestrating microservices like a ninja

Cross Platform Angular 2 and TypeScript Development

Continuous Deployment To The Cloud

How adding a further tool can be a good thing

Maintainable Machine Learning Products

DevOps Days Toronto: From 6 Months Waterfall to 1 hour Code Deploys

Chasing the RESTful Trinity - Client CLI and Documentation

Resful Trinity Code One - San Francisco

Stackato v6

Microservices - Scaling Development and Service

MarkLogic User Group - Best of MLW and Search + Semantics

How TDD helps me design - A case study

Continuous Deployment To The Cloud With Spring Cloud Pipelines @WarsawCloudNa...

The Future of ETL Isn't What It Used to Be

Quarterly Technology Briefing, Manchester, UK September 2013

GraphQL Munich Meetup #1 - How We Use GraphQL At Commercetools

APIdays Paris 2019 - Maintain & Evolve a Public GraphQL API by Aurélien Davi...

SpringOne 2016 in a nutshell

More from Nordic APIs

How I Built Bill, the AI-Powered Chatbot That Reads Our Docs for Fun , by Tod...

Nordic APIs

A presentation given by Todd Kerpelman, Developer Advocate at Plaid, at our 2024 Austin API Summit, March 12-13. Session Description: Have you ever thought about building your own chatbot to help developers be more successful using your APIs? Well, we made one for Plaid’s documentation site, and in this talk, I’ll cover some of the things we learned! This presentation will cover topics like: – How does it work? What does it mean to “train” a bot on your docs? – Setting appropriate expectations: Do you still need to write documentation? Do you still need a support team? – The trade-offs around building your own vs. buying a 3rd party solution – Some decisions around the underlying tech – How to build a decent “conversational mode” so you can ask follow-up questions – How you evaluate the quality of a chatbot, and some surprises we ecountered along the way – What do you do when things go wrong? – Security considerations And much more! Actually, probably not that much more. That already sounds like a lot.

The Art of API Design, by David Biesack at Apiture

Nordic APIs

A presentation given by David Biesack, Chief API Officer at Apiture, at our 2024 Austin API Summit, March 12-13. Session Description: API Design is truly an art. While ChatGPT can spit out seemingly detailed APIs, there is still much to be said for well-crafted, consistent APIs designed by organic intelligence, in a broader context, with the consumer and Developer Experience in mind. A good (or dare we dream, great) Developer Experience (DX) is an important aspect of API design and the success of your API program. Attendees will grok the interplay of API design, patterns, and language constraints and limitations. See how and why artful API Design Matters to DX and "good" API outcomes, and why fluency in the myriad languages of APIs matters. Learn how choosing guiding principles can shape all your APIs for success. Learn how to stay relevant as an API designer when the API generating robots are breathing down your neck.

ABAC, ReBAC, Zanzibar, ALFA… How Should I Implement AuthZ in My APIs? by Dav...

Nordic APIs

A presentation given by David Brossard, CTO at Axiomatics, at our 2024 Austin API Summit, March 12-13. Session Description: So you've just built your cool new API and figured out the authentication part. You're even using OAuth for access delegation, scopes, and claims. So, you're good, right? Well what about fine-grained authorization? What about OWASP's #1 security threat, broken access control? How do you handle that? Maybe you need an authorization framework to help with that. But which one? Is ABAC the way to go? Policies? Graphs? In this presentation, we'll give you the tools to understand what authorization for APIs entails, what options you have, and how to successfully implement a secure authorization strategy for your APIs. We will cover approaches such as ALFA, ReBAC, and Zanzibar and illustrate with a live demo.

Crafting a Cloud Native API Platform to Accelerate Your Platform Maturity - B...

Nordic APIs

A presentation given by Budhaditya Bhattacharya, Developer Advocate at Tyk, at our 2024 Austin API Summit, March 12-13. Session Description: APIs and microservices are powering domain-driven design architectures and have become the fabric of modern cloud-native applications. However, focusing on technology isn't enough - there is a need for a synergy between people, processes, and tools. Based on the CNCF platform maturity model, we will look to bridge the gap between an org's current and desired platform maturity level when creating cloud-native API platforms. We'll discuss: 1. The platform team model - team topologies and key roles for developing internal API platforms 2. Processes like platform discovery, jobs-to-be-done analysis, and continuous feedback loops to understand and meet developer needs 3. Applying a "platform as a product" mindset to measure and communicate platform success 4. Architecting for discoverability, security, observability and integration capabilities 5. The role of technologies like service meshes, API gateway, identity management, internal developer portals and OpenAPI specifications

The Federated Future: Pioneering Next-Gen Solutions in API Management - Marku...

Nordic APIs

A presentation given by Markus Müller, CTO at APIIDA, at our 2024 Austin API Summit, March 12-13. Session Description: In an era where digital transformation is pivotal, the management and governance of APIs have emerged as critical components in the technological infrastructure of businesses. "The Federated Future: Pioneering Next-Gen Solutions in API Management" is a forward-looking talk that delves into the evolving landscape of API governance, with a particular focus on Federated API Management as a groundbreaking approach. Over the course of this presentation, we will explore the paradigm shift from traditional, centralized API management towards a more dynamic, federated model. This approach not only offers scalability and flexibility but also fosters innovation by enabling diverse teams to collaboratively manage APIs while adhering to consistent governance policies. Key topics include: - The current challenges in API governance and how federated management addresses these. - The principles and architecture of Federated API Management, distinguishing it from traditional models. - Real-world implications of adopting a federated approach, including case studies that illustrate its transformative impact on businesses. - Strategies for implementing Federated API Management, focusing on best practices for seamless integration. - The future outlook of API governance, anticipating emerging trends and technologies.

API Authorization Using an Identity Server and Gateway - Aldo Pietropaolo, SGNL

Nordic APIs

A presentation given by Aldo Pietropaolo, Director of Solutions Engineering at SGNL, at our 2024 Austin API Summit, March 12-13. Session Description: Securing APIs and ensuring you are protected from threats by implementing authentication and authorization while keeping the request context intact can be challenging. This session will show us how to leverage SGNL, Curity, and the Kong API Gateway to protect fictitious patient records. The session will be a technical session focused on the architecture and integration points for implementing continuous access management.

API Discovery from Crawl to Run - Rob Dickinson, Graylog

Nordic APIs

A presentation given by Rob Dickinson, VP of Engineering at Graylog, at our 2024 Austin API Summit, March 12-13. Session Description: Discovering the attack surface presented by your APIs is the first step to improving API security. But APIs are fundamentally dark and constantly changing, which presents serious challenges for security teams trying to assess and manage new risks. There are several reasonable ways to perform API discovery, but each has its own tradeoffs and implications about what is actually being counted. This talk covers taking an API discovery program from start to best-of-breed, and strategies for measuring and monitoring your API attack surface.

Productizing and Monetizing APIs - Derric Gilling, Moseif

Nordic APIs

A presentation given by Derric Gilling, CEO of Moseif, at our 2024 Austin API Summit, March 12-13. Session Description: The talk would target product owners looking to turn APIs into revenue centers. Specifically, how to price and package APIs, different strategies around prepaid, postpaid, and PAYG billing, and how to choose the right metric to charge, etc. Then, we’ll chat on the go-to-market to drive developer adoption.

Securely Boosting Any Product with Generative AI APIs - Ruben Sitbon, Sipios

Nordic APIs

A presentation given by Ruben Sitbon, Lead Solutions Architect at Sipios, at our 2024 Austin API Summit, March 12-13. Session Description: ChatGPT has been a tidal wave, changing forever the way people and companies perceive the value of Artificial Intelligence. Many startups have launched products with ChatGPTI at its core, innovative SaaS players have all integrated Generative AI extensions or plugins, but it is now clear that users will be expecting more and more Generative AI to boost the features of products they use on a daily basis. In this talk, I will describe how a framework relying on Generative AI in-house APIs that allows: - Easily « boosting » any product feature with Generative AI - Improving the answers through a « trainer API » that allows experts to improve the accuracy and tone of the model - Bundling security and continuous compliance in the APIs to enjoy the benefits even within risk averse large corporates.

Security of LLM APIs by Ankita Gupta, Akto.io

Nordic APIs

A presentation given by Ankita Gupta, Co-Founder and CEO, Akto.io, at our 2024 Austin API Summit, March 12-13. Session Description: In this session, I will talk about API security of LLM APIs, addressing key vulnerabilities and attack vectors. The purpose is to educate developers, API designers, architects and organizations about the potential security risks when deploying and managing LLM APIs. 1. Overview of Large Language Models (LLMs) APIs 2. Understanding LLM Vulnerabilities: - Prompt Injections - Sensitive Data Leakage - Inadequate Sandboxing - Insecure Plugin Design - Model Denial of Service - Unauthorized Code Execution - Input attacks - Poisoning attacks 3. Best practices to secure LLM APIs from data breaches I will explain all the above using real life examples.

I'm an API Hacker, Here's How to Go from Making APIs to Breaking Them - Katie...

Nordic APIs

A presentation given by Katie Paxton-Fear, API Security Educator, Traceable AI, at our 2024 Austin API Summit, March 12-13. Session Description: Have you ever wanted to be the villain or anti-hero? In this talk, we'll cover how to hack APIs, with permission, of course. First, we'll look at the tools of the trade for API hackers, some of the most common security vulnerabilities and how we test for them, and finally, I'll tell some of my API hacking stories. The aim of the session will be to learn a little API hacking and encourage people to have a go at API hacking themselves. Participants will also join me as I hack live, giving suggestions for the next steps, for an interactive and engaging session.

Unleashing the Potential of GraphQL with Streaming Data - Kishore Banala, Net...

Nordic APIs

A presentation given by Kishore Banala, Senior Software Engineer, Netflix, at our 2024 Austin API Summit, March 12-13. Session Description: Extend the advantages of GraphQL beyond the UI layer by creating data streams that seamlessly transfer data from Federated GraphQL to your preferred destination. This presentation explores the myriad use cases that can be unleashed, such as Search, Analytics etc., sparing you from the complexity of extensive ETL jobs. Join us for an in-depth exploration of the advantages that arise from seamlessly connecting GraphQL with data streams, opening new dimensions of efficiency and capability.

Reigniting the API Description Wars with TypeSpec and the Next Generation of...

Nordic APIs

A presentation given by Gareth Jones, API Architect at Microsoft, at our 2024 Austin API Summit, March 12-13. Session Description: Didn't the API description wars end in 2017 when we all agreed that OAS was the way forward? Yes, and yet how satisfied with your API descriptions are you? Are they thousands of lines of hard to read yaml or JSON? When someone makes a change, is it easy to review for correctness and completeness? Do visual tools make this easier? Do they support change management? I'll make the case that the next generation of more abstract DSLs for defining APIs such as Smithy from Amazon and TypeSpec, open sourced by Microsoft, move us back to a more intentional approach to design and give us the opportunity to highlight the business characteristics that matter most at design-time.

Establish, Grow, and Mature Your API Platform - James Higginbotham, LaunchAny

Nordic APIs

A presentation given by James Higginbotham, Executive API Consultant, LaunchAny, at our 2024 Austin API Summit, March 12-13. Session Description: Building and growing an API platform takes more than building and organizing your APIs. It requires understanding the needs of your ecosystem, establishing lightweight processes that drive discoverability, providing the resources for self-service enablement, and delivering a federated API coach program to scale your efforts. This talk will explore the practices and patterns implemented by global organizations that will help your API ecosystem shift from a functional program to a transformational API platform.

Inclusive, Accessible Tech: Bias-Free Language in Code and Configurations - A...

Nordic APIs

A presentation given by Adrienne Moherek, Developer Experience Technical Leader, Cisco, at our 2024 Austin API Summit, March 12-13. Session Description: Heard of suss? You can suss out more information or you can find someone’s information to be suss. “Suss” shows the flexibility of language. It’s an ongoing process to change how we use certain words. It’s important to choose words carefully to convey the correct meaning and avoid harmful subtext or exclusion. Let’s explore some of the tools and triage methods that it takes from an engineering viewpoint to make bias-free choices. How can you ensure that biased words do not sneak into code, UI, docs, configurations, or our everyday language? First, let’s walk through how to take an inventory of assets from code to config files to API specifications to standards. Next, by placing those findings into categories, prioritize the work to substitute with inclusive alternatives. Let’s examine some examples using both API and code assets. Next is a demonstration of how to automate analyzing your source code or documentation with a linter, looking for patterns based on rules that are fed into the tool. What’s in the future for these efforts? Inclusive language should expand beyond English and North America efforts. To do so, let’s organize the work with automation tooling, as engineers do.

Going Platinum: How to Make a Hit API by Bill Doerrfeld, Nordic APIs

Nordic APIs

A presentation given by Bill Doerrfeld, Editor in Chief of Nordic APIs, at our 2024 Austin API Summit, March 12-13. Session Description: As it turns out, making a hit API is a lot like making a hit music album. You have to find a niche, you need good naming, and you need quality content. Also, on the production side, design, style, experience, and collaboration all matter a lot. At the end of the day, both are products, requiring the right management tools, marketing know-how, and infrastructure to scale. In this SXSW-inspired opening keynote, I'll look into the parallels between the two endeavors, providing a fun and informative look into specific things API providers should be considering on their journey toward becoming API platform rockstars.

Getting Better at Risk Management Using Event Driven Mesh Architecture - Ragh...

Nordic APIs

A presentation given by Raghavan Sadagopan, Sr. Director from CapitalOne & Lakshmi Narayana, Sr. Lead Software Engineer from CapitalOne, at our 2024 Austin API Summit, March 12-13. Session Description: Managing Risk is critical to the success of an organization. Managing Risks starts with identifying potential Risks which in the digital world are signals emanating from varying source systems. Identifying potential risks real-time enables organizations to mitigate / better prepare for potential exposures. The session will share our point of view on implementing an API centric event mesh architecture that routes events in real-time through a scalable and resilient cloud-native service on AWS.

GenAI: Producing and Consuming APIs by Paul Dumas, Gartner

Nordic APIs

A presentation given by Paul Dumas, Senior Director Analyst at Gartner, at our 2024 Austin API Summit, March 12-13. Session Description: GenAI will be, well, generating APIs. We are entering the era where software creates software. It will develop APIs faster than humans are capable of. Humans cannot compete with this compute power. How do we marshal this power, govern what it produces, and leverage it to support our business objectives and strategies? We will become more dependent on the capabilities we have as humans that elude machines. This talk provides insight to software leaders about the challenges of leading and managing this new software development power. The key lies in skills that are unique to humans: foresight, intuition, and agility.

The SAS developer portal –developer.sas.com 2.0: How we built it by Joe Furb...

Nordic APIs

A presentation given by Joe Furbee, Developer Advocate and Developers Communities Manager at SAS Institute, at our 2024 Austin API Summit, March 12-13. Session Description: Sure, we could have hired someone to (re)create our developer portal, developer.sas.com. However, we wanted the freedom to build our portal from the ground up. But, it takes more than an API architect and a developer advocate to create a modern, interactive developer experience. This session provides an overview of the steps we took to relaunch the SAS AI and analytics platform developer portal. Who was involved? How did we accomplish what we wanted to build? We’ll explore the stakeholders involved, the importance of open-source technologies, and why focusing on the developer’s perspective matters. This is not a marketing pitch to promote SAS services. Instead, it’s a detailed look at the process we followed to deploy our new developer portal.

How Netflix Uses Data Abstraction to Operate Services at Scale - Vidhya Arvin...

Nordic APIs

A presentation given by Vidhya Arvind, Staff Software Engineer, Netflix, at our 2024 Austin API Summit, March 12-13. Session Description: At Netflix, Data abstraction plays a pivotal role in hosting 100s of use cases that scale, they are widely adopted and depended on by mission-critical systems. In this talk, I show how to design reliable APIs and layout data for Key-Value services for petabyte-scale datasets. Key-value service uses a control plane and data plane to abstract the data, uses some novel techniques to reliably store and safely scale the service to 100s of instances.

More from Nordic APIs (20)

How I Built Bill, the AI-Powered Chatbot That Reads Our Docs for Fun , by Tod...

The Art of API Design, by David Biesack at Apiture

ABAC, ReBAC, Zanzibar, ALFA… How Should I Implement AuthZ in My APIs? by Dav...

Crafting a Cloud Native API Platform to Accelerate Your Platform Maturity - B...

The Federated Future: Pioneering Next-Gen Solutions in API Management - Marku...

API Authorization Using an Identity Server and Gateway - Aldo Pietropaolo, SGNL

API Discovery from Crawl to Run - Rob Dickinson, Graylog

Productizing and Monetizing APIs - Derric Gilling, Moseif

Securely Boosting Any Product with Generative AI APIs - Ruben Sitbon, Sipios

Security of LLM APIs by Ankita Gupta, Akto.io

I'm an API Hacker, Here's How to Go from Making APIs to Breaking Them - Katie...

Unleashing the Potential of GraphQL with Streaming Data - Kishore Banala, Net...

Reigniting the API Description Wars with TypeSpec and the Next Generation of...

Establish, Grow, and Mature Your API Platform - James Higginbotham, LaunchAny

Inclusive, Accessible Tech: Bias-Free Language in Code and Configurations - A...

Going Platinum: How to Make a Hit API by Bill Doerrfeld, Nordic APIs

Getting Better at Risk Management Using Event Driven Mesh Architecture - Ragh...

GenAI: Producing and Consuming APIs by Paul Dumas, Gartner

The SAS developer portal –developer.sas.com 2.0: How we built it by Joe Furb...

How Netflix Uses Data Abstraction to Operate Services at Scale - Vidhya Arvin...

Recently uploaded

Cracking the code review at SpringIO 2024

Paco van Beckhoven

Code reviews are vital for ensuring good code quality. They serve as one of our last lines of defense against bugs and subpar code reaching production. Yet, they often turn into annoying tasks riddled with frustration, hostility, unclear feedback and lack of standards. How can we improve this crucial process? In this session we will cover: - The Art of Effective Code Reviews - Streamlining the Review Process - Elevating Reviews with Automated Tools By the end of this presentation, you'll have the knowledge on how to organize and improve your code review proces

Software Testing Exam imp Ques Notes.pdf

MayankTawar1

WSO2Con2024 - WSO2's IAM Vision: Identity-Led Digital Transformation

WSO2

Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...

Globus

The Earth System Grid Federation (ESGF) is a global network of data servers that archives and distributes the planet’s largest collection of Earth system model output for thousands of climate and environmental scientists worldwide. Many of these petabyte-scale data archives are located in proximity to large high-performance computing (HPC) or cloud computing resources, but the primary workflow for data users consists of transferring data, and applying computations on a different system. As a part of the ESGF 2.0 US project (funded by the United States Department of Energy Office of Science), we developed pre-defined data workflows, which can be run on-demand, capable of applying many data reduction and data analysis to the large ESGF data archives, transferring only the resultant analysis (ex. visualizations, smaller data files). In this talk, we will showcase a few of these workflows, highlighting how Globus Flows can be used for petabyte-scale climate analysis.

Enhancing Research Orchestration Capabilities at ORNL.pdf

Globus

Cross-facility research orchestration comes with ever-changing constraints regarding the availability and suitability of various compute and data resources. In short, a flexible data and processing fabric is needed to enable the dynamic redirection of data and compute tasks throughout the lifecycle of an experiment. In this talk, we illustrate how we easily leveraged Globus services to instrument the ACE research testbed at the Oak Ridge Leadership Computing Facility with flexible data and task orchestration capabilities.

How Recreation Management Software Can Streamline Your Operations.pptx

wottaspaceseo

Recreation management software streamlines operations by automating key tasks such as scheduling, registration, and payment processing, reducing manual workload and errors. It provides centralized management of facilities, classes, and events, ensuring efficient resource allocation and facility usage. The software offers user-friendly online portals for easy access to bookings and program information, enhancing customer experience. Real-time reporting and data analytics deliver insights into attendance and preferences, aiding in strategic decision-making. Additionally, effective communication tools keep participants and staff informed with timely updates. Overall, recreation management software enhances efficiency, improves service delivery, and boosts customer satisfaction.

Explore Modern SharePoint Templates for 2024

Sharepoint Designs

Strategies for Successful Data Migration Tools.pptx

varshanayak241

Data migration is a complex but essential task for organizations aiming to modernize their IT infrastructure and leverage new technologies. By understanding common challenges and implementing these strategies, businesses can achieve a successful migration with minimal disruption. Data Migration Tool like Ask On Data play a pivotal role in this journey, offering features that streamline the process, ensure data integrity, and maintain security. With the right approach and tools, organizations can turn the challenge of data migration into an opportunity for growth and innovation.

OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam

takuyayamamoto1800

Globus Connect Server Deep Dive - GlobusWorld 2024

Globus

Designing for Privacy in Amazon Web Services

KrzysztofKkol1

Data privacy is one of the most critical issues that businesses face. This presentation shares insights on the principles and best practices for ensuring the resilience and security of your workload. Drawing on a real-life project from the HR industry, the various challenges will be demonstrated: data protection, self-healing, business continuity, security, and transparency of data processing. This systematized approach allowed to create a secure AWS cloud infrastructure that not only met strict compliance rules but also exceeded the client's expectations.

SOCRadar Research Team: Latest Activities of IntelBroker

SOCRadar

The European Union Agency for Law Enforcement Cooperation (Europol) has suffered an alleged data breach after a notorious threat actor claimed to have exfiltrated data from its systems. Infamous data leaker IntelBroker posted on the even more infamous BreachForums hacking forum, saying that Europol suffered a data breach this month. The alleged breach affected Europol agencies CCSE, EC3, Europol Platform for Experts, Law Enforcement Forum, and SIRIUS. Infiltration of these entities can disrupt ongoing investigations and compromise sensitive intelligence shared among international law enforcement agencies. However, this is neither the first nor the last activity of IntekBroker. We have compiled for you what happened in the last few days. To track such hacker activities on dark web sources like hacker forums, private Telegram channels, and other hidden platforms where cyber threats often originate, you can check SOCRadar’s Dark Web News. Stay Informed on Threat Actors’ Activity on the Dark Web with SOCRadar!

In 2015, I used to write extensions for Joomla, WordPress, phpBB3, etc and I ...

Juraj Vysvader

Large Language Models and the End of Programming

Matt Welsh

Visitor Management System in India- Vizman.app

NaapbooksPrivateLimi

Your Digital Assistant. Making complex approach simple. Straightforward process saves time. No more waiting to connect with people that matter to you. Safety first is not a cliché - Securely protect information in cloud storage to prevent any third party from accessing data. Would you rather make your visitors feel burdened by making them wait? Or choose VizMan for a stress-free experience? VizMan is an automated visitor management system that works for any industries not limited to factories, societies, government institutes, and warehouses. A new age contactless way of logging information of visitors, employees, packages, and vehicles. VizMan is a digital logbook so it deters unnecessary use of paper or space since there is no requirement of bundles of registers that is left to collect dust in a corner of a room. Visitor’s essential details, helps in scheduling meetings for visitors and employees, and assists in supervising the attendance of the employees. With VizMan, visitors don’t need to wait for hours in long queues. VizMan handles visitors with the value they deserve because we know time is important to you. Feasible Features One Subscription, Four Modules – Admin, Employee, Receptionist, and Gatekeeper ensures confidentiality and prevents data from being manipulated User Friendly – can be easily used on Android, iOS, and Web Interface Multiple Accessibility – Log in through any device from any place at any time One app for all industries – a Visitor Management System that works for any organisation. Stress-free Sign-up Visitor is registered and checked-in by the Receptionist Host gets a notification, where they opt to Approve the meeting Host notifies the Receptionist of the end of the meeting Visitor is checked-out by the Receptionist Host enters notes and remarks of the meeting Customizable Components Scheduling Meetings – Host can invite visitors for meetings and also approve, reject and reschedule meetings Single/Bulk invites – Invitations can be sent individually to a visitor or collectively to many visitors VIP Visitors – Additional security of data for VIP visitors to avoid misuse of information Courier Management – Keeps a check on deliveries like commodities being delivered in and out of establishments Alerts & Notifications – Get notified on SMS, email, and application Parking Management – Manage availability of parking space Individual log-in – Every user has their own log-in id Visitor/Meeting Analytics – Evaluate notes and remarks of the meeting stored in the system Visitor Management System is a secure and user friendly database manager that records, filters, tracks the visitors to your organization. "Secure Your Premises with VizMan (VMS) – Get It Now"

Globus Compute Introduction - GlobusWorld 2024

Globus

Vitthal Shirke Microservices Resume Montevideo

Vitthal Shirke

top nidhi software solution freedownload

vrstrong314

This presentation emphasizes the importance of data security and legal compliance for Nidhi companies in India. It highlights how online Nidhi software solutions, like Vector Nidhi Software, offer advanced features tailored to these needs. Key aspects include encryption, access controls, and audit trails to ensure data security. The software complies with regulatory guidelines from the MCA and RBI and adheres to Nidhi Rules, 2014. With customizable, user-friendly interfaces and real-time features, these Nidhi software solutions enhance efficiency, support growth, and provide exceptional member services. The presentation concludes with contact information for further inquiries.

Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...

Globus

The U.S. Geological Survey (USGS) has made substantial investments in meeting evolving scientific, technical, and policy driven demands on storing, managing, and delivering data. As these demands continue to grow in complexity and scale, the USGS must continue to explore innovative solutions to improve its management, curation, sharing, delivering, and preservation approaches for large-scale research data. Supporting these needs, the USGS has partnered with the University of Chicago-Globus to research and develop advanced repository components and workflows leveraging its current investment in Globus. The primary outcome of this partnership includes the development of a prototype enterprise repository, driven by USGS Data Release requirements, through exploration and implementation of the entire suite of the Globus platform offerings, including Globus Flow, Globus Auth, Globus Transfer, and Globus Search. This presentation will provide insights into this research partnership, introduce the unique requirements and challenges being addressed and provide relevant project progress.

First Steps with Globus Compute Multi-User Endpoints

Globus

In this presentation we will share our experiences around getting started with the Globus Compute multi-user endpoint. Working with the Pharmacology group at the University of Auckland, we have previously written an application using Globus Compute that can offload computationally expensive steps in the researcher's workflows, which they wish to manage from their familiar Windows environments, onto the NeSI (New Zealand eScience Infrastructure) cluster. Some of the challenges we have encountered were that each researcher had to set up and manage their own single-user globus compute endpoint and that the workloads had varying resource requirements (CPUs, memory and wall time) between different runs. We hope that the multi-user endpoint will help to address these challenges and share an update on our progress here.

Recently uploaded (20)

Cracking the code review at SpringIO 2024

Software Testing Exam imp Ques Notes.pdf

WSO2Con2024 - WSO2's IAM Vision: Identity-Led Digital Transformation

Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...

Enhancing Research Orchestration Capabilities at ORNL.pdf

How Recreation Management Software Can Streamline Your Operations.pptx

Explore Modern SharePoint Templates for 2024

Strategies for Successful Data Migration Tools.pptx

OpenFOAM solver for Helmholtz equation, helmholtzFoam / helmholtzBubbleFoam

Globus Connect Server Deep Dive - GlobusWorld 2024

Designing for Privacy in Amazon Web Services

SOCRadar Research Team: Latest Activities of IntelBroker

In 2015, I used to write extensions for Joomla, WordPress, phpBB3, etc and I ...

Large Language Models and the End of Programming

Visitor Management System in India- Vizman.app

Globus Compute Introduction - GlobusWorld 2024

Vitthal Shirke Microservices Resume Montevideo

top nidhi software solution freedownload

Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...

First Steps with Globus Compute Multi-User Endpoints

Your API Strategy: Why Boring is Best

1. June 2015 Tyk Your API Strategy Why Boring is Best Martin Buhr CEO @Tyk Technologies https://tyk.io @martinbuhr lonelycode@fosstodon.org

2. Tyk 4 / Introduce yourself, Martin…

3. Tyk

4. June 2015 Tyk Tyk API Management APIs for the Modern Enterprise

5. Tyk 4 / Do the thing!

6. Tyk

7. Tyk

8. Tyk

9. Tyk 4 / Varick says: Boring is good!

10. 3 / Boring is dependable… • Large talent pool • Well distributed seniority • Increased supply = affordable • Widespread best practice • Boring is good for team churn

11. Tyk

12. Tyk 6 / Every team has one of these…

13. Tyk

14. Tyk

15. Tyk

16. Tyk

17. Tyk 4 / Rant #1: Serverless

18. Tyk 6 / Deploy your functions to a third-party cloud and have them run only when needed, then build you entire application this way… What is it?

19. Tyk 6 / “Write once deploy anywhere” A common phrase: - Unnamed framework developer, 2009

20. Tyk Lock in?

21. Tyk Where have we heard that before?

22. Tyk Where have we heard that before?

23. Tyk Where have we heard that before?

24. Tyk 6 / … yes, yes they did. Did someone say lock-in?

25. Tyk

26. Tyk 6 / More like: buy more servers! Serverless?

27. 3 / So what does the grumpy one say? Serverless is great for: • Throwaway prototypes • Repeated reporting tasks • Nano-services

28. 3 / And what is the boring way? A server-less, can be a server more As Lambda and cloud FN do not bore But solid design Yes, SOLID design, will be forever! Generic abstractions to the dark side lead And there the sharks of lock-in feed So take the step, but choose wisely For to shrink your bill is mighty unlikely…

29. Tyk So when it comes to serverless…

30. Tyk 4 / Rant #2: GraphQL

31. Tyk 6 / Add a SQL layer in front of your decoupled services to recouple the decoupled layer into a single interface to make interface developers happy…

32. Tyk 6 / Add a SQL layer in front of your decoupled services to recouple the decoupled layer into a single interface to make interface developers happy…

33. Tyk

34. Tyk

35. Tyk

36. Tyk

37. Tyk

38. Tyk

39. Tyk DB 1 Svc 1 Scv 1 Svc 2 DB 2 Svc 3 GW GW GW GW A simple microservice setup…

40. Tyk DB 1 Svc 1 Scv 1 Svc 2 DB 2 Svc 3 GW GW GW GW A simple microservice setup…

41. Tyk DB 1 Svc 1 Scv 1 Svc 2 DB 2 Svc 3 GW GW GW GW Now with GraphQL GraphQL Query Proxy

42. Tyk DB 1 Svc 1 Scv 1 Svc 2 DB 2 Svc 3 GW GW GW GW Now with GraphQL! GraphQL Query Proxy

43. 1 / You gone messed up now! • GraphQL Proxy introduces a single point of failure • You now have duplicate data schemas! • If a service fails, the whole query will fail • Why are you treating your services like a database? • You can’t predict all code paths!

44. Tyk

45. 3 / So what does the grumpy one say? GraphQL is great for: • Interface developers … no… no that’s all. Please stop.

46. 3 / What is the boring way? API Design is not application design But! Good application design can yield good API design

47. Tyk 4 / Rant #3: Microservices

48. Tyk 6 / Increase the complexity of your application and runtime environment by an order of magnitude with this one simple trick!

49. Tyk An “ideal” microservice setup…

50. 1 / Ok… so… what? This is a shopping cart, that requires: • Two database types • Two programming languages • A distributed schema • Hopefully consistent? WTF are you using Microservices for this??

51. 3 / So what does the grumpy one say? • Do you have insane scale? • Is your availability really that bad? • Do you have the resource to dedicate a *team* per service? • Have you hired a microservice expert to help you?

52. 3 / What is the boring way? There is nothing new here: • Build a monolith, but build it well • Strip away domains into Microservices when you *really* need it • Don’t run microservice-first, because you will triple your GTM time

53. Tyk Thank you! END / Martin Buhr CEO @Tyk Technologies https://tyk.io @martinbuhr lonelycode@fosstodon.org

Your API Strategy: Why Boring is Best

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Your API Strategy: Why Boring is Best

Similar to Your API Strategy: Why Boring is Best (20)

More from Nordic APIs

More from Nordic APIs (20)

Recently uploaded

Recently uploaded (20)

Your API Strategy: Why Boring is Best