beyond the cloud · ‑application security apis (beta) ‑bulk config updates (beta) ‑cache tags...

Beyond the Cloud

Agenda

Welcome + Akamai OverviewIntroduction

1Part Akamai for DevOps Update

Design Your ApplicationPart 2

Build and Deploy Your Application

Monitor Your Application

Optimize Your Application

3Part

4Part

5Part

October Update

Akamai for DevOps

Akamai for DevOps Update

‑ Akamai Pipeline (GA)

‑ Application Security APIs (Beta)

‑ Bulk Config Updates (Beta)

‑ Cache Tags (Limited Beta)

‑ API Improvements (Ongoing)

‑ 4+ Akamai CLI Packages

‑ Network Lists v2 (Beta, v1 Deprecated)

‑ Real-Time Web Security Analytics (Beta)

Now Available

Learn more: developer.akamai.com/devops

Now Available, Cont’d

‑ Akamai Control Center (Tech Preview)

‑ DataStream (Beta)

‑ Akamai Developer Toolkit for Chrome (GA)

‑ Akamai Sandbox (Tech Preview)

Coming Soon

‑ Akamai EdgeWorkers (2019)

‑ DNS Config Management API v2 (2019)

‑ Terraform (0.12)

NEW!

Akamai CLI Update

‐ Akamai CLI for CPS (Certificate Provisioning Service)

‐ Akamai CLI for Fast DNS

‐ Akamai CLI for Firewall and Site Shield

‐ Akamai CLI for API Gateway

‐ Akamai CLI for Image Manager

‐ Akamai CLI for mPulse

‐ Akamai CLI for Application Security

New PackagesUpdated Packages

‐ Akamai CLI for Purge

‐ Akamai CLI for Visitor Prioritization

‐ Akamai Pipeline

‐ Akamai CLI for Property Manager

Coming Soon

‐ Akamai CLI for Akamai Test Center (ATC)

‐ Akamai CLI for Request Control Cloudlet

‐ Akamai CLI for Global Traffic Management (GTM)

‐ Akamai Sandbox

Learn more: developer.akamai.com/cli

NEW!

Urban Crawl

Urban Crawl App

Urban Crawl Origin Architecture

Urban Crawl Edge Architecture

Application Lifecycle

Designing Your Application

Designing Your Application

‑ API-first backend

‑ Mobile-first frontend

‑ Cloud

‑ Security

‑ User experience

‑ Intelligent

‑ Performant

‑ Edge business logic

‑ Caching

‑ DevOps-enabled

Architecture at the Edge

Leveraging the edge for better architectures

API-First Design at the Edge

Securing APIsUse Case:

Exposing Multiple APIsUse Case:

Akamai API Gateway

‐ Global quota enforcement

‐ API key authorization

‐ JWT authentication

‐ CORS Pre-flight at edge

‐ Granular cache control

‐ Message validation

Governance of enterprise APIs at scale:

‐ OAuth 2.0 authentication

‐ GraphQL caching

‐ Real-time reporting

‐ Open API 3.0 support

‐ Endpoint-specific origin

‐ Version-specific origin

October Release updates (beta):

NEW UPDATES!

WORKS WITH KONA SITE DEFENDER

Learn More: developer.akamai.com/api-gateway

Securing APIsSolution:

Coalescing Multiple APIsSolution:

Start the API Gateway free trial, onboard your first API, then get a Google Home Mini.

Visit us at bit.ly/api-gateway-free-trial, follow the instructions, and you’re on your way to a brand-new Google Home Mini.

*Google Home Mini not to scale

Akamai API Gateway Free Trial

Designing for Site Reliability

CloudletsSite reliability at the edge

‐ Get intelligent, scalable traffic management between multiple origins.

Application Load Balancer

‐ Prioritize web traffic based on custom conditions.

‐ Ensure a consistent web experience even when origin is unable to meet demand.

Visitor Prioritization‐ Prioritize API traffic based

on custom conditions.

‐ Ensure a valid API response even when origin is unable to meet demand.

API Prioritization

‐ Segment traffic intelligently to allow gradual rollout of new features or infrastructure.

Phased Release

Learn more: developer.akamai.com/cloudlets

Application Logic at the Edge

Geo TargetingTarget users based on geography without requiring the user to grant location access (or prior to requesting it)

Use Case:

Live UpdatesUse Case:

Live Updates with Fast PurgeSolution:

Build and Deploy Your Application

Deployment Environments

‐ Development

‐ CI environment

‐ Isolated QA

‐ Integrated QA

‐ Staging

‐ Production

Federated DevelopmentUse Case:

Akamai CLI for Property Manager 2.0

‐ Property CRUD

‐ Breaks down a property into smaller snippets at the top rule level

‐ Validates against Akamai schemas

‐ Ability to easily plug in an external code template

Tracking Development at the EdgeUse Case:

Edge Configuration PipelineSolution:

Akamai Pipeline

‐ Seamlessly promote changes between environments, from development to QA to production

‐ Automate the entire pipeline with templated variables for different environments

Learn more: bit.ly/announcing-akamai-pipeline

Debugging & Testing

• Deploy property changes in a sandbox environment

• Functionality testing

• Debug with the edge

• Test with the edge

• Real-time request logs

Use Case:

Akamai Sandbox

‐ Design code within a local dev environment

‐ Easily pull in existing property config

‐ Allow easy co-workers to clone sandboxes

‐ Test property changes in a sandboxed environment

‐ <1 min propagation time to enable rapid iterative development

‐ API-first product (CLI coming soon)

Enable rapid CDN testing

Interested in our early access program?Register here: bit.ly/sandbox-early-access

Monitoring Your Application

Bot TrafficBots generate one-fifth of all Internet traffic. For retailers, it’s often >70% of all traffic.

Use Case:

• Bots directly impact your business (poor user experience, price scrapping, credential and gift card abuse, etc.)

• Bot detection is difficult and time-consuming

• Bot creators are very active, constantly updating bot logic

Bot Manager

‐ Behavioral bot detections identify bots interacting with website and app infrastructure

‐ Mobile SDK integrates behavioral signal collection into your mobile app

Protect your websites and native mobile apps from brute-force login and other bot attacks

Mitigating Common AttacksUse Case:

• Denial of service (DDoS) attacks

• SQL Injections

• Cross-site scripting (XSS)

• XML external entities (XXE)

• Zero-day exploits

Kona Site Defender

‐ Protection for websites and APIs

‐ Mitigation of distributed denial of service (DDoS) attacks at the network and application layers

‐ Full-featured web application firewall

‐ Origin cloaking

Comprehensive security solution package

SIEM Integration

‐ Supports on-prem or cloud based SIEMs

‐ Connector for Splunk and CEF Syslog

‐ API for other SIEM tools

Centralized view for security information

Monitoring the Status of Your Site in Real TimeQuickly identify changes in site behavior

Use Case:

• Detect frontend and backend application behavior changes in real time

• Identify effectiveness of the CDN (i.e. offload ratios)

DataStream

‐ Real-time aggregated stats

‐ Real-time raw logs

‐ Plug-and-play monitoring

‐ Data governance and retention

Real-time edge stats API

Adhering to Performance BudgetsUse Case:

• Monitor performance across new deployments

• Compare performance across releases and time

• Isolate issues within a population group (e.g. Safari on iOS)

mPulse

‐ Use the mPulse Annotation API with new releases and other important events

‐ Touchless integration (beacon injected at the edge)

‐ REST APIs, Jenkins, and Google AMP integrations

‐ Performance Alerts (email, Slack, PagerDuty, etc.)

Advanced performance monitoring made easy

‐ Aggregate Waterfall

‐ Mobile Waterfall

‐ Resource Impact Score

October Release updates

NEW!

Learn more: developer.akamai.com/akamai-mpulse

Optimize Your Application

at the Edge

Optimize Your Application

Median Weightby Content Type

Optimize Your Application

Median Weight by Content Type

(Excluding Video)

Responsive Design

• Automatic breakpoint variants

• Automatic device detection and format negotiation

• Variants for multiple usages of the same image (e.g. banner + thumbnail, or mobile layout vs. desktop)

Use Case:

Large Image Compression

• Responsibly deliver assets uploaded by non-technical users

• Exclusive perceptual-quality algorithm to ensure the highest fidelity images at the smallest possible sizes

• Targeted fidelity thresholds, e.g. allow lower quality on slower or mobile networks, or to specific geo-locales

Use Case:

Image Manager

‐ Automatically optimize images and short videos (<5 min.) for end-user device and browser

‐ Policy-driven workflow (UI, API, or CLI)

‐ Artistic transformations

‐ Media viewer for zoom and 360° spin

‐ Next-gen format support: WebP, JPEG2000, and JPEGXR

Intelligently optimize and deliver the best image every time

Learn more: developer.akamai.com/imager-manager

Managing Third-Party Scripts

‐ More than one-quarter of sites have >90% third-party requests; scripts are a large portion of that content

‐ Need for third-party performance monitoring by type of network

‐ Scripts can be a single point of failure (SPOF)

Ensure that scripts don’t block rendering

Google DoubleClick OutageUse Case:

• March 2018

• Ensure that third-party scripts aren’t blocking when there is an outage

• Avoid single point of failure (SPOF)

Script Management

‐ Single point of failure protection

‐ Ability to block or defer problematic third parties from a single console

‐ Easily test how page behaves locally before applying policy changes

Easily monitor and control first- and third-party scripts

Learn more: bit.ly/ion-adaptive-acceleration

Thank you

Akamai Developer @akamaidev

developer.akamai.com Akamai SandboxRegister at bit.ly/sandbox-early-access for our early access program.

URL reminders:

Akamai API Gateway free trialRegister at bit.ly/api-gateway-free-trial and follow the instructions to get your brand-new Google Home Mini.