La adopción de una arquitectura basada en servicios y microservicios mejora la integración entre los distintos sistemas, ya sean internos o externos. La incorporación en la arquitectura de un API Manager mejora el control, la auditoría y la seguridad en el acceso a estos servicios y microservicios.
En este meetup online, Jorge Ceballos, Arquitecto SOA en avanttic y Joaquín Esturillo, Consultor SOA en avanttic, muestran las capacidades con API Manager del nuevo Oracle Cloud API Gateway, así como su roadmap, cuyo objetivo es ser el API Manager más potente y completo del mercado.
4. API’s
Definición (Application Programming Interface)
• Punto de entrada bien definido a un sistema
• Interfaz que expone una aplicación de software para que otra interactúe con ella.
Traditional APIs (SDKs) Web APIs (RESTful, etc)
4
Oracle Technology - Compartiendo experiencias
5. API´s
Componentes
6
Oracle Technology - Compartiendo experiencias
Description
Policies
Implementation
API Gateway
OKE
Functions
SaaS
Helidon
Integration
ORDS/APEX
Etc.
Compute
Apiary
• Contrato entre consumidor y proveedor
• Documenta la funcionalidad
• Utilizado por usuarios y sistemas
• Autenticación, SLA´s
• Mediación, transformación
• Monitorización, alarmas, logging.
• Provee los requerimientos funcionales
• Libre elección de tecnología subyacente
7. • Apiary
o API Blueprint – Swagger
o Server Mock
o GitHub Sync
o Command Line Tools
o Traffic Inspector
o Test
API Management
Componentes de API Management
8
Oracle Technology - Compartiendo experiencias
8. • API Gateway
o HTTP(s), Oracle Functions
backends
o Stock Responses
o Routing
o Rate-limiting
o Cross-origin Resource
Sharing (CORS)
o JWT Validation
o Custom Authentication
o Metrics/Logging and Log
Analytics
o Fully Oracle Managed
o SDK, CLI, API, Terraform
and Ansible supported for
control-plane
o Regional OCI Service
o Y muchas más
características
API Management
Componentes de API Management
9
Oracle Technology - Compartiendo experiencias
API Gateway
9. • API Platform
o API: Gestión del tráfico,
seguridad, enrutado.
Asociado a un gateway y
servicio determinado.
o Planes: Monitorización,
monetización.
o Aplicaciones: Gestión de
usuarios y subscripciones.
o Gateways: Posibilidad de
despliegue on-premise y en
OCI.
o Servicios: Fomenta la
reutilización y desacopla la
definición de la URL
subyacente.
o Cuentas de servicio
API Management
Componentes de API Management
10
Oracle Technology - Compartiendo experiencias
11. API Management Lifecycle
12
Oracle Technology - Compartiendo experiencias
API
Managem
ent
API
Management
Lifecycle
Designers
Developers
Gateway
Managers
Product
Managers
API
Consumers
API
Teams,
Consumers
, Line of
Business
12. API Management Lifecycle
API Designer
13
Oracle Technology - Compartiendo experiencias
Designers
and
Developers
Everybody
Else
Works with
Github Semantic
Validation
Lifecycle
Design
13. API Management Lifecycle
API Developer
14
Oracle Technology - Compartiendo experiencias
Lifecycle
Design
Implement
1. Independently invest and evolve features according to
business needs.
2. Break Monolithic applications into resilient, manageable,
observable systems.
3. Improve developer productivity, make high impact
changes frequently.
4. Open Source technologies make solutions portable
across clouds and avoids lock-in.
14. API Management Lifecycle
API Gateway Manager (Ops)
15
Oracle Technology - Compartiendo experiencias
Lifecycle
Design
Implement
• Fully Oracle Managed, regional OCI Service
• Appears as a network device on customer VCN
• Authorization, rate-limiting and routing
• Supports Oracle and 3rd party OAuth Servers
• Header/Query Transformation
• Private and Public
• Custom Domains
• Access and Execution Logging
• Unified with Oracle Integration
• Supports OpenAPI 2 and 3
• Built-in Mock-Testing
• Integrated with Logging Analytics
Operate
15. API Management Lifecycle
API Gateway Manager (Ops)
Manage via OCI console, CLI & SDK
16
Oracle Technology - Compartiendo experiencias
Lifecycle
Design
Implement
Operate
31. Roadmap
32
Oracle Technology - Compartiendo experiencias
• Network Security
Groups
• Streaming
Backends
• Object Storage
Backends
• OpenID Connect
• Satellite Gateways
• AsyncAPI
• GraphQL
• WebSocket APIs
Backlog
• API Catalog
• Client SDK
Generation
• Result Caching
• API Request
Validation
Building
• Developer Portal
• Autoscaling
• API Usage Plans
• API Catalog
Designing
• Multi-tenant JWT
Validation
• Custom Error
Responses
• API Specification
Editor
Prioritized
Desarrollos
32. Desde API Platform a API Management
33
Oracle Technology - Compartiendo experiencias
33. Desde API Platform a API Management
34
Oracle Technology - Compartiendo experiencias
Convergencia hacia API Management
Apiary
API Platform
OCI API Management
Validate
Transform
Native JWT
DNS/Cert
Developer
Portal
Usage
Plans
Satellite
Gateways
Migration
API Spec API Docs
Team
Management
Editor
Experience
Semantic
Validation
34. Desde API Platform a API Management
35
Oracle Technology - Compartiendo experiencias
Elementos que componen API Management
Clients Policy
Enforcement
Alerts
Design
Analytics
Documentation
Onboarding
Monetization
Servers
Implementation
KEY
Apiary
API Platform
OCI API Gateway
35. Desde API Platform a API Management
36
Oracle Technology - Compartiendo experiencias
Responsabilidades sobre el producto
Task OCI API Gateway API Platform
Management Service/Control Plane Oracle Oracle
Procure VM/Server for Gateway Oracle Customer
Install Gateway Oracle Customer
Monitor Gateway Health Oracle Customer
Patching the Gateway Oracle Customer
36. Desde API Platform a API Management
37
Oracle Technology - Compartiendo experiencias
Comparativa de costes
Task OCI API Gateway API Platform
Pricing Metric Per 1,000,000 API Calls
Month
Per Gateway Hour
Pricing Level Tenancy Gateway
Price $3.00 $1.0753
Cost per API Call* .000003 .000031
Difference in Cost per API Call API Gateway saves 90%
Minimum Monthly Cost $0.00 $800
37. Desde API Platform a API Management
38
Oracle Technology - Compartiendo experiencias
Ejemplo comparativo de costes
Scenario (monthly cost except where noted) API Platform OCI API Gateway Savings
Constant volume of 35k per hour $800 $78.12 90%
Constant volume of 40k per hour $1,600 $89.28 94%
100k volume for 8 hrs, 0 volume for 16hrs daily $1279 $72.00 94%
3 gateways, each processing 10k hr $2,400 $66.96 97%
Sample Day Below (cost is for the one day) $43.12 $2.97 93%
38. Desde API Platform a API Management
39
Oracle Technology - Compartiendo experiencias
Resumen
• Apiary
• API Design and Documentation, will evolve into OCI API Management
• API Platform
• Enterprise Developers
• Future upgrade path to OCI API Management
• OCI API Gateway
• First step to OCI API Management
• Best features from Apiary and API Platform and more