SpringOne Platform 2018 How to Manage Microservices and APIs with Apigee and Istio Chris Page & Srinandan Sridhar, Apigee/Google

1. Maximizing Microservices - Manage
complexity and extend value with Apigee and Istio
Chris Page
Solution Architect, Apigee/Google
@phriscage

2. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
● Why Service Mesh?
● What is Istio?
● Why API Management?
● Demo time!
2

3. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
1Why Service
Mesh?

4. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Microservices
are awesome!

5. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Business Logic DatabaseUsers
Why Microservices?

6. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Load
Balancer
Users
SQL Database
Cluster
NoSQL Database
Cluster
ETL Pipeline
Front End
Business Logic
Back End
Business Logic
Data Warehouse
Invoicing
Transcoding
Illustration: Sandeep Dinesh, Google, Developer Advocate

7. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Load Balancer
Users
SQL Database Cluster
NoSQL Database Cluster
ETL Pipeline
Front End Business Logic
Back End Business Logic
Data Warehouse
Back End Business Logic
Back End Business Logic
Load Balancer
Users
SQL Database Cluster
ETL Pipeline
Front End Business Logic
Back End Business Logic
Data Warehouse
Back End Business Logic
Back End Business Logic
Load Balancer
Users
SQL Database Cluster
NoSQL Database Cluster
ETL Pipeline
Front End Business Logic
Back End Business Logic
Data Warehouse
Back End Business Logic
Back End Business Logic
Load Balancer
Users
SQL Database Cluster
NoSQL Database Cluster
ETL Pipeline
Front End Business Logic
Back End Business Logic
Data Warehouse
Back End Business Logic
Back End Business Logic
Illustration: Sandeep Dinesh, Google, Developer Advocate

8. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Microservices are
terrible?

9. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
1What is Istio?

10. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Istio is an open framework for
connecting, securing, managing
and monitoring services

11. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Istio Value Proposition - What does it do?
Policy driven
Security
Uniform
observability
Operational
agility

12. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Istio Architectural Components
Pilot: Control plane to configure
and push service communication
policies.
Mixer: Policy enforcement with a
flexible plugin model for providers
for a policy.
Citadel: Service-to-service auth[n,z]
using mutual TLS, with built-in
identity and credential
management.
CitadelPilot Mixer
Control Plane API
Service A Service B
proxy proxy
HTTP/1.1, HTTP/2,
gRPC or TCP -- with
or without mTLS
Config data to
Envoys
TLS certs to
Envoys
Policy checks,
telemetry

13. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
pictures
How does Istio help?
version: 2.0-alpha env:
staging
version: 1.5
env: prod
90
%
10
%
Proxy
Frontend
Pictures
Proxy
Pictures
Proxy
With Istio, you can control
traffic by routing, A/B
deployments, canary
rollouts, etc...
@abc.com

14. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
1Why API
Management?

15. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
API Management
Productization/
Monetization
Documentation
API
Catalog &
Discovery
Self-Service
Onboarding
Usage
Reporting

16. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
MachineLearning
ArtificialIntelligence
Connected Experiences
API Runtime
Mediation
Engine
Monitoring
Analytics
Developer
Ecosystem
Enterprise Gateway
Security
Developer
Engagement Metrics
API Catalog
Operational
Metrics
API Products
Connectors
API SLA
Management
API Marketplace
API Abuse Prevention
Business
Metrics
Client/SDK
Transformation
Istio
API Program
Metrics
Orchestration
API Monetization
Multiple Services | Multiple Clouds | Hybrid

17. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
1Why Apigee with
Istio?

18. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Apigee API Management
Mixer
Ingress
proxy
HTTP/1.1,
HTTP/2, gRPC
or TCP
Backend
proxy
Pilot
Config data
to Envoys
Policy checks,
telemetry
Analytics
Pipeline
Mediation/
transformation
HTTP/1.1,
HTTP/2, gRPC
or TCP with or
without mTLS
Quota
enforcement
APIKey/OAuth/
JWTvalidation
API Services
API Catalog
API Analytics
API products,
credentials
API analytics

19. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Kubernetes/VMsModern Apps
Internal Apps
Kubernetes/VMs
Legacy Apps
Internal Apps
Cloud
Apps
Consumer Apps & Partners
Public Cloud (Provider managed) Private Cloud/On-Prem (Customer managed)
Apigee Edge : API management Platform
Centralized administration Interfaces
API Gateways
Analytics
Developer Portal and other core services
Istio : manage & secure microservices
Hybrid
Integration

20. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
1Demo time!

21. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
• Service Mesh Authorization and
Quota enforcement
• Developer Enablement and
external consumption
• Federated Identity Authentication
• Provide API Visibility
Beer App - Service Mesh

22. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Data Services
Proxy
Details DB
Proxy
Reviews DB
App services
Proxy
Details API
Proxy
Reviews API
Proxy
Beers API
version: v1
version: v1
version: v1
Consumers
Beer App - Istio Integration
Authorization & Quota
GCP

23. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Consumers
Data Services
Proxy
Details DB
Proxy
Reviews DB
App services
Proxy
Details API
Proxy
Reviews API
Proxy
Beers API
version: v1
version: v1
version: v1
Proxy
Likes API
version: v1
Proxy
Beers API
version: v2
user@abc.com
Beer App - Istio Integration
Request Routing & A/B Deployment
GCP

24. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Thank you

25. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
apigee.com
https://github.com/apigee