Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

12
Enterprise and consumer worlds colliding: Policy and Governance Impacts of consumer access on Enterprise IT

description

Scott Metzger of TrueCredit's presentation at Burton Group Catalyst 09 show. On policy patterns for API management when opening Web services to external partners, such as versioning, caching, transformations, translations, etc

Transcript of Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Page 1: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Enterprise and consumer worlds colliding:

Policy and Governance Impacts of consumer access on Enterprise IT

Page 2: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Introduction

How is cloud computing related to SOA?

What we have learned about SOA over the last 8 years.

How we applied what we learned.

Page 3: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

How is SOA related to the cloud?CloudLittle

controlShared

with manyUn-trusted

Page 4: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

How is SOA related to the cloud?ServicesCore

capabilitiesCriticalMany uses

(clients)

Page 5: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

PatternsWhat policies should be implemented

independent of the service being provided? Value of being application agnostic.Internal vs. external consumption of Services.What 3rd party solutions are avialible to

manage these policies?

Page 6: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

5 areas of policy focusAccessRoutingCachingTransformationOperations

Page 7: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Access3 tiers for servicesUse of a

ServiceMethodOperational tool

Credentials

Page 8: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

RoutingVersioningLoad balancingClient originLogic based on:

Message contentURLRequesting address

Page 9: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

CachingImplicit Caching

PerformanceCost management

Explicit CachingData retention Data management

Page 10: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Translation Back-porting Switching

costs –going from one service provider to another

Bridging protocols

HTML rendering

Page 11: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Operations

How you are going to manage your services in production?

Is the trend your friend?

How to mitigate the root cause committee syndrome?

Page 12: Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

A summary of what we have learned.Implementing and managing an SOA has

much in common with cloud services.Discrete patterns emerge out of this

experience that are independent of the type of business you are in.

Five examples of these patterns in the form of policies.

Evaluation of API management tools and selection of ServiceNet from Sonoa for policy management.