Post on 21-Jan-2018
Proprietary + Confidential
Managing the Complexity of Microservices Deployments
May 9, 2017
Kenny Bastani (Principal Technologist)Prithpal Bhogill (Product Management)
Proprietary + Confidential
Reminder: “This webinar may include mention of some future features. Please make any purchasing decisions based on currently GA features.
This information is Google confidential information, covered by the terms of Apigee and Google Cloud Platform License Agreement.”
Speaking Today
Prithpal BhogillProduct Management
Kenny BastaniPrincipal Technologist
Proprietary + Confidential
Agenda
Monolith to MicroservicesWhy API Management?Apigee and Pivotal Cloud FoundryCustomer BenefitsCall to Action
Proprietary + Confidential
From Monoliths to Microservices
Proprietary + Confidential
We started with the monolith
Proprietary + Confidential
● Slows our velocity getting into production
● It takes too long to ramp up new engineers
● The code base is just too large for any one person to fully comprehend
● Centralized authority and change management slows progress (DBA, Ops)
Cultural problems with monoliths
Proprietary + Confidential
● Coordinated releases batch many changes together from different teams
● Operations drives the runtime environment of applications
● Operators take on all operational responsibility (including VM upgrades)
● Deploy everything at once or nothing at all
Operational problems with monoliths
Proprietary + Confidential
We then moved towards SOA
Proprietary + Confidential
We have now arrived at microservices
Proprietary + Confidential
● Small teams organized around business capabilities
● Independently deployable
● Teams produce and consume APIs
● Teams can choose the best tools for the job
Microservices
Proprietary + Confidential
Online Store Microservices
Proprietary + Confidential
Online Store Microservices
Proprietary + Confidential
Proprietary + Confidential
Splitting the monolith
Proprietary + Confidential
Proprietary + Confidential
Proprietary + Confidential
Pivotal Cloud Foundry
Proprietary + Confidential
Proprietary + Confidential
Why API Management?
Proprietary + Confidential
APIs and Microservices are complementary
CATALOG
CUSTOMER
REVIEWS
FAVORITES
RECOMMEND
ORDERS
SHOPPING CART
MicroserviceseCommerce
System
MonolithiceCommerce
System
APIAPI
Proprietary + Confidential
APIs shield consumers from Microservices Complexity
Ordering API Customer APIBilling API
Consumers Shouldn’tCare About What’s
Behind the API
Proprietary + Confidential
REST APIs - Enable easy consumption
REST APIsenable easy consumption
CONTAINERSenable independent deployment
CLOUDenable independent scaling
Proprietary + Confidential
Microservices will fail without API Management
API SPRAWLDifficult to discover & reuse
CYBER THREATSLimited built-in security
FLYING BLINDLimited use & performance visibility
Proprietary + Confidential
API Gateway
DevelopersDeveloper Portal
Apigee API Platform
Analytics
Management
Management
Runtime
Backend
App
API Team
Scalable Services
Microgateway
Technology powering the Apigee API Platform
Available as Apigee managed
+Customer managed
A family of federated gateways
Available native integration capability with respective cloud
Comprehensive API Management
OAuth2, OpenID, SAML, TLS
OWASP Threat Protection
RBAC, 3rd party IDM Support
Bot Detection
Mediation, Caching & Traffic Management
node.jsrun-time Engine
Data Persistence / BaaS
Hybrid Deployment / Microgateway
Secure API RuntimeApps Backend
Business &Developer Metrics
Fine-grainedPerformance Analytics
End User Analytics
Custom Data Capture & Reports
Trace & Diagnostics
Analytics
CustomizableDeveloper Portal
SmartDocs
Self-service Developer On-boarding
API Products
API Monetization
DeveloperManagement
Partners / Developers
API-driven Platform Automation
Multi-tenancy & Scaling with Traffic Isolation
Zero Downtime Upgrades
Cross-region AutomatedRouting & Failover
Global Policy Enforcement
Operations Automation
Flow-based Proxy Editor & Pre-built Policies
API Studio with Open API / Swagger
Test & Monitoring
Extensibility with node.js / Java
Version Management
API Development
API Team
For the Full API Lifecycle
Design
Develop
Secure
PublishMonitor
Analyze
Monetize
Scale
Proprietary + Confidential
Apigee provides the API layer for Microservices
CATALOG
CUSTOMER
REVIEWS
FAVORITES
RECOMMEND
ORDERS
SHOPPING CART
MicroserviceseCommerce
System
Apigee’s centralized gateway provides comprehensive API management and an API layer for yourmicroservices
CATALOG
Apigee’s microgateway provides security, throttling and analytics for individual microservices as well.
Proprietary + Confidential
Com
mon
Sec
urity
Mod
el -
OAu
th
Thre
at P
rote
ctio
n
Cach
ing
Monetization/Rate
Plans
External API
Façade & Proxy
Med
iatio
n /
Aggr
egat
ion
Developer Portal
Use API management as you transition to microservices
CATALOG
CUSTOMER
REVIEWS
SHOPPPING
CART
RECOMMEND
Mobile & Web apps
Microservices
Apigee authenticates, applies security policies and routes request to microservices. Also orchestrates to your legacy services/monolith apps
On-Premises or Private Cloud
Monolith Apps
Proprietary + Confidential
What we are doing together?
added support for Edge Microgateway...
We’ve integrated our products… released BOSH Installers for Apigee Edge
Proprietary + Confidential
Integration Options - Flexibility & Choice Route Services CF Buildpack*
* Edge Microgateway Buildpack available today as OSS on https://github.com/swilliams11/edgemicro-decorator.
Apigee Edge MicrogatewayApigee Edge Enterprise
App App App
Apigee Edge Microgateway
Proprietary + Confidential
Benefits for Developers & Operators
Developers• Apply pre-built traffic management
and security features to their app
• Apply pre-built pricing models to
monetize their app
• Automatically expose their app (as
services) to other developers
• Discover, test, and obtain access to
other services (as APIs)
Accelerate Application Modernization
Operators• Apply a set of security and traffic
management features across projects
• Scale these features through PCF
• Obtain visibility into the usage and
performance of APIs
• Install and manage Apigee Edge
through BOSH
Ease Operational Concerns
Proprietary + Confidential
Use Cases
Use Case
Apigee protects and enables authorized access to microservices
Microservices Development Application Modernization Enabling Ecosystems
Apigee Edge Microgateway
3 policies OOTB, specifically spike arrest, API key validation / OAuth, and quota limitsOperational analyticsCentralized API management
Apigee mitigates risk in app modernization/migration
Apigee Edge
35+ policies OOTB, including transformation, mediation, & securityDeveloper portalOperational analyticsCentralized API management
Apigee enables APIs to be discovered and managed by app developers
Apigee Edge
35 policies OOTB, including transformation, mediation, & securityDeveloper portalOperational analyticsCentralized API management
Description
Product
Features
Powering the “Digital Value Chain”
Consuming digital products and digital experiences
“Outside-in” – digital consumer view
User App Developer API API team Backend
Reduce time to develop connected experiencesEnable consumption of APIs
Reduce time to build better softwareReduce operational complexity
Proprietary + Confidential
Call to Action
Visit www.apigee.com and sign up for a trial accountLearn about Apigee’s integrations with Pivotal hereIf you are new to Apigee
Learn more about Apigee’s Service Broker with Edge Microgateway hereAsk your PCF rep about Apigee’s free Microservices Starter Kit offerAsk you PCF rep for an introduction to Apigee Sales
If you are PCF Developer or Operator
Visit www.pivotal.io to learn how to develop and deploy software with cloud native techniquesAsk your Apigee rep for an introduction to Pivotal Sales.
If you are new to Pivotal
Proprietary + Confidential
Thank You