CON7967 - Oracle's API Management Roadmap.pptx

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |

CON7967 Oracle’s API Management Roadmap

Peter Belknap Director, Product Management Cloud and SOA IntegraLon, Oracle Pete Osborne IT Technical Lead IT Business InformaLon PlaQorms, LG&E and KU Luis Weir Principal Architect & Global Lead for OFM SoluLons HCL Technologies

Oracle ConfidenLal – Internal/Restricted/Highly Restricted

Presented with


Safe Harbor Statement The following is intended to outline our general product direcLon. It is intended for informaLon purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or funcLonality, and should not be relied upon in making purchasing decisions. The development, release, and Lming of any features or funcLonality described for Oracle’s products remains at the sole discreLon of Oracle.

Oracle ConfidenLal – Internal/Restricted/Highly Restricted 3


Program Agenda

Oracle API Management Overview

Oracle API Catalog at LG&E KU

HCL’s Oracle API Management 12c ImplementaLon

Summary and Q&A

1

2

3

4



Program Agenda




Summary and Q&A

1

2

3

4



APIs are the doors of the digital world.


Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenLal – Internal/Restricted/Highly Restricted 7

B2B

AutomoLve

Public Sector

Finance

Hospitality LogisLcs

Manufacturing SaaS IntegraLon

Mobile

Web

Media

ULliLes

Science

Comm.

Healthcare

Retail

Telco

Energy

Data IntegraLon

ApplicaLon IntegraLon

Things

Data Access

SaaS Apps

eCommerce

API management is essenEal

Billions of endpoints


SECURE CATALOG MANAGE

•  Secure APIs in the DMZ • API Key generaLon/validaLon • Client Throcling •  Security token & protocol mediaLon

• API aggregaLon & mash-‐up

•  Catalog for APIs •  Lightweight governance •  AutomaLon to populate APIs •  Rate & Review APIs

•  Curate, publish and manage APIs •  Find and test APIs •  Register applicaLons to use them •  Monitor usage at run-‐Lme •  Run on-‐premises or in the cloud

Oracle API Management Collect, Publish, Manage and Secure Access to Key Data and Processes


Oracle Cloud PlaQorm

9

DATA MANAGEMENT

IT OPERATIONS MANAGEMENT

IDENTITY MANAGEMENT

CONTENT & PROCESS

APPLICATION DEVELOPMENT

INTEGRATION

MOBILE

BUSINESS ANALYTICS


Oracle Cloud PlaQorm: IntegraLon Services

10

•  IntegraLon •  SOA •  API Manager

•  Internet of Things •  GoldenGate

INTEGRATION


Key Features §  API visibility in the cloud: API Manager provides visibility to APIs through a cloud-‐based portal

§  Protects backend services : API Manager protects backend services by providing a security layer in the cloud

§  Supports on-‐premise and cloud-‐based services : APIs can virtualize both cloud and on-‐premise services

§  Scalability: Easily provision addiLonal resources to scale as needed §  Low maintenance: Automated backup and recovery, single click patching

Benefits §  Easily expose APIs to internal and external consumers §  Provides security to protect backend systems §  Rapid and fully automated provisioning §  Secure, Highly Available with Clustering

Oracle API Manager Cloud Service The Front Door to Your Digital Business -‐ The PlaPorm for InnovaEon and Speed

NEW!


Oracle API Manager Cloud Service The Front Door to Your Digital Business -‐ The PlaPorm for InnovaEon and Speed

NEW!


Focus on the API consumer (applicaEon developer) •  Easily build and customize APIs, usage plans, moneLzaLon approaches

for different consumer types •  Monitor and control API usage by consumer •  ProacLvely engage consumers about new features, usage issues

Security •  Ensure that only the right consumers have access to the right resources •  Defend against potenLal acacks against your infrastructure

Service OpEmizaEon •  Dynamically improve capacity, response Lme and upLme of services •  Route requests to the opLmal service

Analysis •  Understand how your API is discovered, used and by whom •  Keep aware of important happenings in your API ecosystem

API PlaQorm Cloud Service Fully integrated plaPorm for comprehensive API Management

COMING SOON!


Oracle API Management Roadmap

2013-‐14

Oracle API Gateway Oracle Service Bus 12c

•  Enterprise-‐grade service virtualizaLon and DMZ-‐level security

2014 Oracle API Catalog

•  Collect, and publish APIs for easy discovery by developers

2015

Oracle API Manager Oracle API Manager Cloud

Service •  Create and publish APIs

on-‐premise or in the cloud

•  Speed developer API discovery, registraLon and usage tracking

2016

Oracle API PlaPorm Cloud Service

•  Integrated API management plaQorm

•  Drive digital business •  Streamline, control and

accelerate the API development lifecycle

•  One-‐stop shopping for API access to SaaS and on-‐premise services and data


Program Agenda




Summary and Q&A

1

2

3

4


Oracle API Catalog (OAC) In Production

Pete Osborne IT Technical Leader


When implementing the Oracle API Catalog (OAC), there are several business decisions to be made prior to harvesting and publishing APIs. These decisions will set the stage for a well organized/usable catalog for the end-user.


What are you trying to accomplish with OAC? — A simple library of the API’s available? — A integrated tool in a governance strategy?

What is the intended end user audience? — Development Staff? —  Integration Partners?

What API’s will you manage in your catalog? —  All services in the environment? —  Enterprise level API’s intended as the integration gateways for your

applications?


What information do you want/need to capture? — Harvested information and a description for the API? — Use HTML Formatting to enhance Description field to capture additional

details for the API? Where will you harvest API’s from (Dev, QA, Stage, Prod)? —  If the API is being consumed for development purposes, doesn’t it make

sense to harvest from the development environment? — For integration partners, should APIs from a staging or production

environment be harvested?


At what stage in the API lifecycle will you publish it in OAC? — Do you want developers to be able to leverage service in development

process even before going to testing? — Should the API be stable enough for acceptance testing or production

before publishing it to the catalog? After the usage criteria and processes are defined, API’s can be pulled into OAC …

OAC – Step 1: Harvest the API

•  Leverage the Harvester command utility to introspect the API, gather details and create the initial catalog entry for the API:

Helpful Hint – the Harvester utility can be wrapped in a Hudson/Jenkins job to provide an easier to use interface.

OAC – Step 2: Complete the Draft Entry

•  The Harvester will capture API information including the endpoint URL, service type, and methods/operations.


•  Once harvested, the curator can update the catalog entry to update some information and provide additional content pertinent to the API: — Update the Name and Version fields. — Add searchable keywords to help Catalog users find the API more easily

in their searches. — Provide a Documentation URL. — Change the Icon Image – used to visually associate similar API’s

together when the displayed in the list. — Update the Description field to include information about the API’s

functionality.


•  The Description field recognizes HTML formatting tags, which expands its capability.

•  Rather than just free form text, the curator can use a HTML template to create additional label/value pairs in the Description field.

•  These HTML tags provide a mechanism to capture the information in a consistent manner for all API’s, lending to OAC’s usability as part of a governance solution.


•  Description Examples: Free Form Text: Formatted Details:

OAC – Step 3: Publish the API Entry

•  After adding all of the information for an API, the Curator will change the API Status to ‘Published’ and keep the Active Status as ‘Active’. This will make the catalog entry visible to the developer:

OAC – Step 4: View/Consume API Entry

•  Once published, the API will appear in the catalog list:

OAC – Step 4: View/Consume API Entry

•  … and see the API Details:

OAC – LG&E and KU’s Implementation

•  OAC is used a design time catalog for developers to determine what API’s are available for integration.

•  The catalog is not meant to be viewed by integration partners. It is for internal integration development.

•  APIs are harvested from the development environment •  Harvesting occurs as part of a migration from the Development

Environment to the QA environment as part of a set of governance tasks.

•  The API is published after harvested. Endpoints and any additional details regarding QA and Production are updated when the API is migrated to those environments.


Program Agenda




Summary and Q&A

1

2

3

4


Copyright © 2014 HCL Technologies Limited | www.hcltech.com

HCL API ManagementLuis Weir Oracle ACE DirectorPrincipal Architect / Global Lead OFM Solutions [email protected] hcp://uk.linkedin.com/in/lweir @luisw19 hcp://www.soa4u.co.uk/

Copyright © 2014 HCL Technologies Limited | www.hcltech.com 32

Cloud

Firewall

EDI, RosettaNet, Custom/SOAP, etc REST / JSON REST / JSON & SOAP /XML REST / JSON

Threads

ERP MDM BI LEGACY

Social MediaSaaS ApplicationsMobile AppsBusiness /

Trading Partners

The need for API’s

Want to save costs with SaaS but don’t know how? Business is worry about data

migration and integration

Don’t have a cloud or mobile integration strategy…

Departments are building point-to-point integrations to the cloud

on their own….

Business expect us to deliver solutions to

market quickly…

All vendors talk about API’s. Do I throw away my SOA Investment? Do I need new technologies? What

do I need?Urgent need for Mobile Solution

mean that departments are building ad-hoc Mobile Apps and APIs


API Management

CloudSocial Media &

other Cloud Platforms

SaaS ApplicationsMobile Apps

DMZ

Marketing & Offer Management

Financial & Asset Management

Supplier/Partner Relationship Management

Customer Relationship Management

Supply Chain Management

SOA Domains

EnterpriseBusinessServices

EDI, RosettaNet, Custom/SOAP, Files. etc REST / JSON REST / JSON & SOAP /XMLREST / JSON

IntegraLon-‐pacerns: Request/Reply, Pub/Sub, Pull/Push, Change Data Capture, Batch IntegraLon Adapters: SOAP, Database, JMS, AQ, Legacy, etc

Threads

Developer Communities

Business / Trading Partners

ERP MDM BI LEGACY

X Enroll Discovery Subscribe AuthenticatePromote Operate Monitor Analyze Authorize Secure Prevent

SOA

Gov

erna

nce

Application Services

Governance

SOA + API Management: Ready for Digital


• APIM readiness assessment

• APIM strategy elaboration

APIMStrategy

• Elaborate APIM governance framework

•  Install and configure design-time and runtime governance tools

•  Implement DevOps

Foundation• Solution architecture(s)

design for Pilot:• Detail planning• Pilot

Pilot

• Establish the factory with processes and tools

API Factory

HCL’s API Management Implementation Approach

Week 1 to 4 Week 5 to 12 Week 13 to 18 Week 18 to 22(optional)


0.0#

0.5#

1.0#

1.5#

2.0#

2.5#

3.0#

API$Gateway$

API$Manager$

API$Catalog$

DevOps$

APIM$Product$Evalua;on$Results$Summary$

MuleSo.#

Mashery#

Oracle#APIM#Suite#

APIM Product Selection

2

DMZ$2%$

Policy$enforcement$and$defini6on$point$

3%$

AuthN$&$AuthZ$(Oauth$2.0,$WSE*,$etc)$2%$

Confiden6ality$and$integrity$2%$

Audi6ng$2%$

OWASP$thread$protec6on$3%$

Service$externaliza6on$2%$

ThroNling$2%$

Streaming$$2%$

Protocol$conversions$2%$

Hybrid$deployment$models$(cloud,$onprem,$both)$

2%$

Extensibility$and$APIs$1%$Responsive$API$portal$

3%$

Community$management$(onboarding,$selfEservice,$RBAC,$etc)$

3%$

API$lifecycle$management$(create,$test,$promote,$deprecate,$re6re)$

3%$API$documenta6on$$

2%$

CDLs$support(i.e.$RAML,$WADL,$Swagger,$etc)$2%$

API$run6me$opera6ons$2%$

API$Metering$and$charge$

back$(billing)$2%$

Governor$limits$(total$calls$per$day,$concurrent$sessions,$etc)$

2%$API$keys$

genera6on$2%$


2%$Extensibility$and$APIs$

2%$Responsive$online$catalog$

3%$

API$and$service$harves6ng$

3%$

Discovery$features$(based$on$metadata,$wildcards,$etc)$

3%$

Cataloguing$and$categoriza6on$capabili6es$

3%$

API$interdependency$management$2%$

Comprehensive$repor6ng$3%$

Integra6on$with$run6me$engines$$3%$


3%$

Extensibility$and$APIs$2%$

Agile$methodologies$alignment$2%$

Project$/$team$online$management$tools$2%$

Online$collabora6on$tools$&$$knowledge$Base$3%$

Con6nuous$integra6on$2%$

Regression$tes6ng$2%$

Deployment$automa6on$2%$

Centralized$administra6on$2%$

End$to$end$transac6on$monitoring$2%$

Opera6onal$monitoring$2%$ SLA$management$

2%$ADP$

management$2%$

Infrastructure$provisioning$and$config$management$$automa6on$

2%$APIM%Evaluta,on%Criteria%Summary%

1Create Evaluation Criteria Compare all capabilities based on 4 key pillars


DMZ Firewall

Internet

Oracle SOA/BPM Suite

WLS Domain 1

Oracle API Catalog (OAC)

WSM: WS-Policy

Mobile Devices

Harves

t

REST / JSON

Green-Zone Firewall

Oracle API Gateway (OAG)

Oracle API Manager (OAPIM)

REST / JSON

XML / SOAP

Oracle SOA/BPM Suite

WSM: WS-Policy

WLS Domain N…

EM

Fusion Middlew

are C

ontrol

XML / SOAP

Web Proxy

App Developers

Discovery, Use, Collaborate

Service/APIs Architects & Developers

EM

Fus

ion

Mid

dlew

are

Con

trol

Oracle Enterprise Manager Cloud Control

Discover/rate public and private services and APIs

Publish & discover, manage, monitor public

APIs

Harvest

Secure & Expose

SaaS Applications

Others….

REST / JSON, XML / SOAP, others…

Har

ves

t

HCL Reference Platform for Oracle API Management


Program Agenda




Summary and Q&A

1

2

3

4



Quiz QuesLons



Quiz QuesLons


Which Oracle API Management product was just released as a Cloud Service?


Quiz QuesLons



§  Oracle API Manager Cloud Service


Quiz QuesLons




What is Pete’s recommended API lifecycle stage for harvesLng into the catalog?


Quiz QuesLons





§  Development -‐> QA


Quiz QuesLons






What are the four key pillars of API Management in Luis’ evaluLon graph?


Quiz QuesLons






What are the four key pillars of API Management in Luis’ evaluLon graph?

§  API Manager, API Gateway, API Catalog, DevOps


Oracle API Management Roadmap

2013-‐14

Oracle API Gateway Oracle Service Bus 12c

•  Enterprise-‐grade service virtualizaLon and DMZ-‐level security

2014 Oracle API Catalog

•  Collect, and publish APIs for easy discovery by developers

2015

Oracle API Manager Oracle API Manager Cloud

Service •  Create and publish APIs

on-‐premise or in the cloud

•  Speed developer API discovery, registraLon and usage tracking

2016

Oracle API PlaPorm Cloud Service

•  Integrated API management plaQorm

•  Drive digital business •  Streamline, control and

accelerate the API development lifecycle

•  One-‐stop shopping for API access to SaaS and on-‐premise services and data


#SOA12c #oracleAPI

Copyright © 2014, Oracle and/or its affiliates. All rights reserved– ConfidenLal Oracle Restricted .

46

Join the Community Visit us on Oracle Technology Network

Oracle SOA blog blogs.oracle.com/SOA

Oracle SOA Website h`p://bit.ly/soaotn

Connect with Oracle on Social Media

OR connect via the web

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenLal – Internal 47

Classroom Training

Learning SubscripLon

Live Virtual Class

Training On Demand

Keep Learning with Oracle University

educaEon.oracle.com

Cloud

Technology

ApplicaLons

Industries


Session Surveys

Help us help you!! •  The [Program Commicee J1] [organizing commicee OW] would like to invite you to take a moment to give us your session feedback. Your feedback will help us to improve your conference.

• Please be sure to add your feedback for your acended sessions by using the Mobile Survey or in Schedule Builder.

Oracle Confidential – Internal/Restricted/Highly Restricted 48

CON7967 - Oracle's API Management Roadmap.pptx

Documents

Transcript of CON7967 - Oracle's API Management Roadmap.pptx