In this session, Souvik discusses: - An overview of Qantas - The digital transformation journey for Qantas - The role of APIs in enabling Qantas' digital transformation journey - API Management and ways of working with it

1. Qantas API Takes Flight
WSO2Con Asia 2018
09 Aug 2018

2. About Me
• Domain Owner – Integration, Qantas IT
• Vice Chairman, Open APIs – PADIS Board, IATA
• Background in Software Engineering, Solution
Architecture, Enterprise Architecture, Management
Consulting
• Portfolio includes: APIs/Microservices, API Management
Platform, Event Platform, SOA Platform, Managed File
Transfer, Messaging
• Product Owner of Qantas’ APIs & API Management
Platform https://www.linkedin.com/in/mukherjeesouvik/
souvik.mukherjee@qantas.com.au
Souvik Mukherjee

3. About Qantas – The Spirit of Australia
• Founded in the Queensland in 1920 – Queensland and Northern Territory Aerial Services
• Australia's largest domestic and international airline
• ~30,000 employees
• ~300 aircraft
• ~85 destinations
• 2017 Results
➢ Revenue: $16.05B
➢ U-PBT: $1.4B
➢ Passengers carried: 53.66M

4. Integration at Qantas – Connecting the dots
customer profiles
passenger bookings
flight schedules
flight movements
crew rostering
flight paths
environmental data
and more…

5. Challenges in technology
Slow in response
to change
Fixed capacity Costly Manual

6. Aspirations in business – It’s all about the customers
Customer experience starts with empathy & customer understanding throughout the journey
……underpinned by technology and enabled by APIs

7. We need to meet customer expectations
Speed Multi-Channel Scalability Innovation

8. We need to meet customer expectations – through Digital
Transformation
Speed Multi-Channel Scalability Innovation
Agile RESTful API Cloud Microservices

9. Why API gateway and management for Qantas
To protect our assets
• API authentication
• API throttling
• API analytics and monitoring
• API security testing
To operate our assets
• Resilience and scaling using
AWS cloud
• Zero downtime deployment
• Frictionless developer
experience
• Future-proof costing model to
enable:
✓ Growth in volume of APIs
✓ Growth in volume of API calls
✓ Multiple and on-demand
environments
✓ Multiple API domains
To exploit our assets
• Developer Portal for registration
• API Catalogue for discovery
• Expose existing and upcoming
APIs
• Unlock legacy services
• REST first, SOAP second

10. Solution selected based on evaluation & PoCs
• WSO2 API Gateway/Manager as runtime
• WSO2 Identity Server as Federated Identity Provider
• Akamai for WAF
• NodeJS, Java Springboot, Stash – developer tools
• Cloud-native with auto-healing and auto-scaling
• Fully automated throughout lifecycle
• Cost effective licensing model for future growth
• Build features as we need them – product extension
• Solution complexity with multiple components
Technical Architecture: API Management Platform
Desktop Mobile Emerging
Channels
Partners
Web Application Firewall (WAF) - Akamai
API Gateway
(External)
API Store
API Publisher
API
Analytics
Identity Server
API Gateway
(Internal)
API Manager
(Internal)
API Manager
(External)
Business Process
Server
Azure AD Facebook Google
Active
Directory
NGINX
(Reverse Proxy)
Squid Proxy
(Forward Proxy)
AWS Lambda
Manager
API Registration
Manager
API Admin Portal
AWS - SYD

11. Unconventional choices for an enterprise
bespoke
build

12. Unconventional choices for an enterprise – Gasp!
bespoke
build
Risks
Operational
Responsibility
Resource
Costs
Capability
Gap

13. The practical choice for an enterprise
Enterprise-grade Open Source
Open Source without the headache
• Secure
• Supported
• Regular updates
• Open standards
• No lock-in
• Open Source Assurance Program
• Transparent roadmap

14. Qantas ready for the unconventional choices
Agile RESTful API Cloud Microservices
+
Internal
Developers
……to take back technology leadership and ownership

15. Enhancing
Developers’
Experience
through
automation

16. Where we are at and what’s next
Delivered
• Production release in Apr 2018
✓ Internal developer portal with API catalogue
✓ API authentication
✓ API versioning and routing
✓ API throttling
✓ API analytics and monitoring
✓ Native Lambda Integration
• RESTful APIs registered
✓ Customer Profile APIs
✓ Flight APIs
✓ Business Profile APIs
✓ Payment APIs
Coming Next

17. Thank you
souvik.mukherjee@qantas.com.au
Souvik Mukherjee
https://www.linkedin.com/in/mukherjeesouvik/