Palestra DevCamp 2018 - João Emilio Santos Bento da Silva: Estratégia de APIs

1. Senior Lead Solutions Engineering
Estratégia de APIs
João Emilio
@joaoemilio

2. Colombo - London - Mountain View
São Paulo - Jaffna - New York - Sydney
5 Trilhões de
Transações/ano
40 Milhões de
Identidades
20.000 API's

3. 337%
2016 408%
2017 110%
2018

4. O software de código aberto da WSO2
oferece agilidade e flexibilidade.
Acreditamos que o código aberto seja o
futuro do setor.
Open Source
A WSO2 oferece uma variedade de serviços
para melhorar o desempenho e aumentar
as práticas de inovação do cliente que
podem estar associadas a essa mudança.
Innovation Practice
A nossa plataforma de inovação
permite-lhe executar a sua visão e
adaptar-se rapidamente a novas
oportunidades à medida que surgem.
Innovation Platform
Cada produto WSO2 suporta modelos de
arquitetura de microsserviços, bem como
flexibilidade de implantação.
Deployment Flexibility

5. API MANAGEMENT
Projete, crie, publique e gerencie APIs para liberar o verdadeiro valor
de seus ativos digitais
Crie um ecossistema
digital flexível e
dinâmico
Aproveite o valor dos
sistemas legados
pré-existentes
Ganhe agilidade criando
rapidamente novos
ativos digitais
Crie uma
experiência de
usuário perfeita
Proteja sua marca
contra ameaças
de segurança
Tome decisões baseadas
em dados e insights de
negócios

6. INTEGRATION
Nosso Integrator traz transformação digital em um único pacote para
conectar sistemas corporativos e dados
Entre na inovação
permitindo a criação de
novos ativos digitais
Aproveite a nuvem sem
abrir mão de seus
sistemas legados
Otimize processos de
negócios, reduza
custos e gargalos
Tome decisões melhores
com uma visão mais
detalhada do todo
Construa um negócio
que possa se adaptar
rapidamente
Integre sistemas
legados em vez de
substituir tudo

7. IDENTITY & ACCESS MANAGEMENT
Proteja seu negócio digital conectando e gerenciando
múltiplas identidades
Aumente a
produtividade do
time
Proteja todos os
aspectos da sua
empresa
Ganhe agilidade nos
negócios
Facilite o acesso
para seus clientes
Melhore a experiência
do usuárioConecte tudo e
todos

8. ANALYTICS
Nosso Analytics de código aberto cria insights acionáveis, inteligentes e em
tempo real para seu negócio digital ganhar agilidade.
Receba insights de
todos os seus
sistemas
Investigue o passado,
enxergue o futuro
Acelere o Go To Market
diminuindo o tempo de
desenvolvimento
Processe milhões de
eventos por segundo
em tempo real
Gerencie suas regras
de negócios e
visualize a saída
Deixe os dispositivos mais
inteligentes com análises
poderosas

15. Alta demanda de clientes vem gerando desagregação de aplicações

16. Everything is
An Endpoint
Functions
APIs
Data
SaaS apps
Legacy apps
Devices
Disaggregation leads to more endpoints
Todo desenvolvedor agora é um Integrador

17. Microservice Architecture (MSA)
Analytics
Continuous-*
Security &
Access Management
API / Service discovery
Dev toolsDevops tools
Service router
API Gateway
Core
Microservices
Data
Container(s)
Delivery channels Digital Products
Messaging Channels
Integration
MicroservicesExisting Services

18. Analytics
Continuous-*
Security &
Access Management
API / Service discovery
Dev toolsDevops tools
Service router
API Gateway
Core
Microservices
Data
Container(s)
Delivery channels Digital Products
Messaging Channels
Integration
MicroservicesExisting Services
Microservice Architecture (MSA) for Digital Products

19. Metodologia Ágil

20. APIs?

21. 21
“The API economy is an enabler for turning a
business or organization into a platform.”
Kristin R. Moyer,
VP and distinguished analyst at Gartner.
Fonte: http://www.gartner.com/analyst/15859
API Economy

22. ● Mobile Applications
○ Crescimento extraordinário do uso de smartphones e
tablets
● Comportamento de consumidores mudou
drásticamente
● CIOs, CTOs e seus departamentos de TI estão lutando
para atender às demandas de negócio
Por que APIs?

23. ● APIs influenciam diretamente em:
○ Agilidade para desenvolvedores
○ Escalabilidade
○ Rich Client Applications (SPA, Mobile apps, ...)
○ Exposição de assets corporativos
○ Integração
Por que APIs?

24. 24
WSO2 Methodology for Agility

25. API always comes first

26. Building an
enterprise
API marketplace
driven business
platform
Define
API
Strategy
Define
Technology
Strategy
Facilitate
Consumers
Engage and
Empower
Producers
Evangelize
Incentives
Monetize
and
Analyze
Govern
and
Manage

27. A reference implementation
External Developers (Partners)
Other BU Developers
(Inter BU Access)
Internal BU Developers
(Intra BU Access)
BU 1 API Marketplace BU 2 API Marketplace BU 3 API Marketplace BU n API Marketplace
BU 1 API Management
(Dedicated On-prem
Deployment)
BU 2 API Management
(Private Cloud Tenant)
BU 3 API Management
(WSO2 API Cloud
Tenant)
BU n API Management
(Other APIM Platform
Tenant)
Private Cloud Public Cloud
Enterprise
Enterprise API Marketplace
BU 1 BU 2 BU 3 BU n

28. Defining Your API Strategy
• What?
• Who?
• Where?

29. Components of Building a
Marketplace

30. Identifying Your API Technology
Strategy
• Which components are most important?
– Developer portal, security
• What type of security is needed based on accessibility?
– Ability to federate into multiple security providers
• What type of extensibility is needed?
– Is there any complex pre-processing needed?
• Who is the best technology provider?

31. Producers - Publisher: Creating APIs
● Start with an existing endpoint/contract or design and prototype a new API
● Exposing SOAP services (convert to REST or as a passthrough)
● Exposing streaming APIs (websocket endpoints)

32. Producers - Publisher: Creating APIs
● API design - Over the wizard and with swagger

33. Producers - Publisher: Creating APIs
● Point to a production backend or prototype at the gateway

34. Producers - Publisher: Governance
● Ensure that the correct lifecycle
stages exist and proper audit
prevails
● Manage API visibility
● Versioning of APIs based on
need
● Support for custom lifecycles
● Ability to modify governance
aspects based on analytics

35. Consumers - Developer Portal
● Searchable (with context): by name, tag,
description, author, etc.
● Social features: tagging, commenting, rating
● Minimalistic forum
● Themeable: change color, logo, view
● Configure alerts for application developers
● Application based API analytics
● OAuth2 application management
● API monetization

36. Security: API Protection
● Protecting for applications and users
● Controlling access and entitlement with scope
● Multi-tier subscription model

37. Consumers: Client Tips and Testing
● Encapsulate the client application
● Associates OAuth2 keys
● Support different integration
patterns for application security
through OAuth grant types
● Pre-generated access tokens for
testing

38. Access Control: Traffic Management
● Tier based simple model
○ Application developer selects the tier at
app registration which has a policy to
specify quota
○ Tiers can be applied at the application, API
or at the API resource level
● Advance rule-based models
○ Policies containing IP conditions, message
attribute based conditions, transport
header based conditions
○ Complex real-time pattern based
conditions

39. • Ensure application developers consume more APIs
– Organize hackathons, workshops and tutorials
– Provide code snippets for consumption
– Lunch n’ Learn sessions, webinars
Facilitate Consumers

40. Evangelize
• Stakeholders are the key
• Ensure API developers publish more APIs
– Enable producers to create APIs and group them as
needed
– Provide social ratings and tools for documenting usage
• Ensure application developers consume more APIs
– Organize hackathons, workshops and tutorials
– Provide code snippets for consumption
– Lunch n’ Learn sessions, webinars

41. Incentives
• Financial incentives and gamifications
• Leaderboards showcasing top consumers, most
consumed APIs, highest throughput APIs,
highlighted developer and more
• Identify KPIs for incentives

42. Monetize and Analyze
• External APIs can be sold to third party application
developers
• Partner APIs will encourage new business users
from a wider base
• Internal APIs used across business units
encourages enterprise contribution
• Analytics collected can in turn be used for new
revenue models provided as APIs

43. Monetize and Analyze
● Analytics dashboard on API stats
○ API usage / response times
/ backend latency /
geo-location, etc.
● Stats on applications for
application owners (subscribers)
● Stats on subscriptions
● Alerts on emergencies or
doubtful situations
● Pattern detection

44. Govern and Manage
• Make use of analytics information to detect
patterns
• Identify improvements on overall
governance patterns
• Identify security improvements
• Evolve

46. Real world implementations

49. http://ballerina.io

50. The
Integration
Gap
- XPath for content access
- No data typing
- No compile time checks
- Complex dev/test lifecycle
- Decouples integration and runtime
- Code + config across many files
- Syntax is not integration-centric
- 3rd party build and packaging

52. Ballerina is the glue between microservices
Transactions
Circuit Breaking
Protocols
Payloads
Events
Security
Workflow
Streams
Compensation

53. How to get involved
Learn more
Open source
Get support
http://ballerina.io
http://github.com/ballerina-platform/
Stack Overflow #ballerina tag

55. THANK YOU
wso2.com