azure api management gateway - v3.pdfazure ad azure ad b2c http basic mutual certificate shared...

42
Azure API Management Gateway

Upload: others

Post on 07-Sep-2020

27 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Azure API Management Gateway

Page 2: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

APIs

Page 3: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Azure API Management Features:

Page 4: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 5: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

APIs

Developers(use APIs)

Discover

Learn

Get access

Try

SDKs and samples

Get help

Publishers(provide APIs)

Abstract

Secure and protect

Manage lifecycle

Monitor and measure

Onboard developers

Monetize

Consume PublishMediate

Azure portalGatewayDeveloper portal

Page 6: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Pricing and features per tier:

CONSUMPTION DEVELOPER BASIC STANDARD PREMIUM

Purpose

Gateway component

of API Management

offered on a pay-per-

use basis

Non-production use

cases and evaluations

Entry-level

production use cases

Medium-volume

production use cases

High-volume or

Enterprise production

use cases

Price (per unit)$3.50 per million calls

(1M calls free)$0.07/hour $0.21/hour $0.95/hour $3.83/hour

Cache (per unit) External only 10 MB 50 MB 1 GB 5 GB

Scale-out (units)N/A (automatic

scaling)1 2 4

10 per region

SLA 99.9% No 99.9% 99.9% 99.95%

Azure Active Directory

integrationNo Yes No Yes Yes

Virtual Network support No Yes No No Yes

Multi-region deployment No No No No Yes

Estimated Maximum

Throughput

(per unit)

N/A (automatic

scaling)500 requests/sec 1,000 requests/sec 2,500 requests/sec 4,000 requests/sec

API Management pricing

Page 7: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

What APIs can I import into API Management?

Page 9: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

global

product

api

operation

to backend

from backend

from caller

to caller

GET /foo/bar HTTP/1.1

Host: api.constoso.com

Key: 01234567890123456789

/foo

/bar

Page 10: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 11: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 12: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

“I found this approach refreshing, as it provides a more pragmatic approach to API

versioning while steering clear of semantic versioning that doesn’t necessarily map

directly to HTTP-based APIs.”

A guide for when (and how) to version your API

https://tyk.io/blog/guide-version-api/

Page 13: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

/v1

/v2

;rev=1

;rev=2

;rev=3

;rev=4

;rev=1

;rev=2

https://example.org/ foo

/events

/speakers

/sessions

/venues

Page 14: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 15: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 16: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 17: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 18: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Username/Password

Internet IPs

Microsoft account

Google account

Facebook account

Twitter account

Delegated (custom)

Azure AD

Azure AD B2C

HTTP Basic

Mutual certificate

Shared secret

IP filter

VNET/NSG

Azure account

RBAC

Key

OAuth 2 & OpenID Connect

Client certificate

Custom external authorizer

IP filter

Rate limits and quotas1st and 3rd party apps

Developer portal

Azure portal

Gateway

Publish

Mediate

ConsumeApp developers

API publishers

Page 19: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Developer portal

Azure portal

Gateway

Publish

Mediate

Consume

VNET

Page 20: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Gateway

Mediate

VPN

VNET

Page 21: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 22: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 23: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 24: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 25: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 26: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 27: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 28: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Key JWT

Credential type Bearer Bearer

Token type Reference Self-contained

Sensitivity Is a secret Doesn’t contain secrets

Expiration External, ad hoc Built in, pre-defined

Subject Developer and an app End user or an app

Page 29: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 30: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 31: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 32: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 33: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 34: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 35: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 36: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate
Page 37: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

SOAP and SOAP2REST

Page 38: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

NEW

Page 40: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

App Insights – Application Map with self-hosted gateway

Page 41: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate

Questions and discussions http://aka.ms/apimso

Service updates, among other things http://aka.ms/apimblog

GitHub repo with sample policies http://aka.ms/apimpolicyexamples

Tutorial, documentation, and references http://aka.ms/apidocs

Feedback and feature requests http://aka.ms/apimwish

Roadmap http://aka.ms/apimroadmap

Customer stories http://aka.ms/apimcustomers

Page 42: Azure API Management Gateway - v3.pdfAzure AD Azure AD B2C HTTP Basic Mutual certificate Shared secret IP filter VNET/NSG Azure account RBAC Key OAuth 2 & OpenID Connect Client certificate