©2016 Apigee Corp. All Rights Reserved.

Cloud Deployments Done Right:Why APIs Are KeyEd Anuff & Anant Jhingran

©2016 Apigee Corp. All Rights Reserved.

Slideshareslideshare.com/apigee

Apigee Communityhttps://community.apigee.com

YouTubeyoutube.com/apigee

©2016 Apigee Corp. All Rights Reserved.

@edanuffEd Anuff

@jhingranAnant Jhingran

©2016 Apigee Corp. All Rights Reserved.

Enterprises are aggressively adopting cloud

4

Multi-Cloud; 82%

Single Pub-lic; 9%

Single Pri-

vate; 6%

No Plans; 3%

Hybrid Cloud; 55%

Multiple Public; 16%

Multiple Private;

11%

Percentage of Enterprises Adopting Cloud

Source: Rightscale 2016 State of Cloud ReportNote: Adopting - Experimenting or Already have production apps in Cloud (Private or Public)

©2016 Apigee Corp. All Rights Reserved. 5

Cloud is datacenter with an API

©2016 Apigee Corp. All Rights Reserved. 6

But today we will talk about cloud applications and APIs

©2016 Apigee Corp. All Rights Reserved. 7

APIs are used to access applications

Application

Both “Lift & Shift” and “Lift, Modernize, & Shift”

©2016 Apigee Corp. All Rights Reserved. 8

APIs are used to build applications

CATALOG

CUSTOMER

SHOPP-INGCART

RECOMMEN

D

©2016 Apigee Corp. All Rights Reserved. 9

APIs are used to connect applications

CATALOG

CUSTOMER

SHOPPPING

CART

RECOMMEND

©2016 Apigee Corp. All Rights Reserved.

You cannot separate cloud apps and APIs

03

02

01 Modern apps are accessed through APIs

Modern apps are built using APIs

Modern apps connect using APIs

©2016 Apigee Corp. All Rights Reserved. 11

Building Applications and APIs for the Cloud

©2016 Apigee Corp. All Rights Reserved.

Integration-Centric

Data Services Architecture

Data AccessLogic

Connectors

Existing NoSQL

ExistingContent

Store

ExistingDB

ExistingData

Service

API

Consumers

Service Integration Architecture

Composition & Integration

Logic

COTSApplication

ExistingApp

Services

SaaS

Connectors

API

Consumers

Application-Centric

MSA Outer Architecture

Microservices

Microservice Architecture

API

Consumers

Monolithic Service

Architecture

ServiceData Persistence

Application Container

Service Service

Service Service

API

Consumers

Source: Gartner

©2016 Apigee Corp. All Rights Reserved.

Cloud-Native Microservice Architecture With PaaS

Service Discovery Config. Store

zLoadBalancing

ServiceRouter

MOMService

Identity Provider

Persistence Services

Microservice A

Instance 1

Instance n

Instance 1

Instance n

Microservice B

API Gateway

PolicyManagement

Logging and Diagnostics

Telemetry

DeploymentAutomation

BuildAutomation

PlatformAutomation

Automation

DevOps

Monitoring and Alerting

Deploy

Environment Metaservices

Lookup

Log

Platform as a Service

Backing Services

Gateway

ConsumerIdentityProvider

Client Access Protocols

(e.g., HTTPS, MQTT, AMQP)

Mobile App

Browser App

IoT Device

PaaS Add-Ons

Platform API

8

7

6

54

2

31

Lookup AuthN/Z

Source: Gartner

©2016 Apigee Corp. All Rights Reserved. 14

API Challenges

OnboardingDifficult to onboard and manage app developers and API keys

Scale Traditional integration technologies not built for web scale – billions of interactions

AgilityInability of IT to meet the business demands of delivering volume of LOB apps faster

SecurityUnable to secure critical assets exposed beyond trust boundaries

VisibilityLack of insight into usage, performance, users, products, patterns, devices, anomalies

©2016 Apigee Corp. All Rights Reserved. 15

What about Multi-Cloud?

©2016 Apigee Corp. All Rights Reserved.

APP

APP

APP

APP

APP

Multi-Cloud introduces more problems

ON PREMISES/ PRIVATE CLOUD

APP

APP

APP

APP

APP

APP

APP

APP

REST APIs

©2016 Apigee Corp. All Rights Reserved.

APP

APP

APP

APP

APP

Multi-Cloud Has New Challenges

ON PREMISES/ PRIVATE CLOUD

APP

APP

APP

APP

APP

APP

APP

APP

Inconsistent PoliciesInability to ensure all custom cloud apps are adhering to common security policies

Cyber ThreatsAPIs are exposed to external threats, given outside trust boundaries

Flying BlindLack of visibility into APIs, API usage and performance of APIs connecting your apps

©2016 Apigee Corp. All Rights Reserved.

Multi-Cloud Needs New Approaches

ON PREMISES/ PRIVATE CLOUD

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

Legacy ESBsExisting ESBs are not built for distributed, Cloud environments

PaaS GatewaysPaaS Gateways have limited capabilities and can track only APIs in that PaaS

©2016 Apigee Corp. All Rights Reserved.

Need API Centric Architecture For Your Future

19©2016 Apigee. All Rights Reserved.

CONNECTORS

PROCESS FLOWS

ENDPOINT MANAGEMENT

END-TO-END VISIBIILITY

DISTRIBUTED, CLOUD NATIVE

DEVELOPER MANAGEMENT

API PROXY MANAGEMENT

ESBsIntegration/ Exposure

CentricFocus on StabilitySystems of Record

IntegrationCost Reduction Enabler

API MANAGEMENTConsumption Centric

Focus on AgilityBuilt for distributed, Cloud

Top-line growth enabler

Process orchestration is moving to code / microservices, eliminating fat

buses

Value of connectors reduced as new services and resources are REST API

enabled

©2016 Apigee Corp. All Rights Reserved.

Multi-Cloud Monitoring & Analytics

ON PREMISES

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

Distributed API Runtime, Centralized Visibility &

Control

Federated Gateway

API SERVICES

ANALYTICS DEV PORTAL

MANAGEMENT SERVICES

20

©2016 Apigee Corp. All Rights Reserved.

Multi-Cloud Consistent Security Model

ON PREMISES

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

APP

Federated Gateway

API SERVICES

ANALYTICS DEV PORTAL

MANAGEMENT SERVICES

- Traffic Management Policies- Spike Arrest- Rate Limiting

- Security Policies- JSON Threat Protection- SQL Injection Protection- OAuth2- TLS

©2016 Apigee Corp. All Rights Reserved.

Takeaways

03

02

01 APIs are integral to your cloud success

Proactively manage API sprawl, API security & visibility

API platform with a distributed model is critical to manage a multi-cloud world

©2015 Apigee. All Rights Reserved.

To be continued…

23