Carsten Mai, zHybridCloud, [email protected]
API Management for z mit IBM API Connect und AppConnect
Mobile
Partners
Cloud Apps
API Economy
IoT
Systems of Engagement
ChannelApplications
IntegrationLayer
Consumers Systems of Record
XaaS On-Premise
z Systems
Sec
urity
+ A
PI G
atew
ay
AP
I Gat
eway
Enterprise Application
Enterprise Application
Cloud Affinity
Enterprise Application
Acc
ess
Laye
r
Enterprise Data
Ada
pter
Ada
pter
MicroservicesApplications
Integration Reference Architecture for System z
Integrations-Funktionen oder -Geräte
REST-Funktion und Datentransformation in der Integrationsschicht, andere Protokolle (MQ, IPIC, SOAP/HTTP, JCA, JMS, JDBC) zur Kommunikation mit Backend
RESTFunctionRESTFunction
Clients
CICSIMSMQDB2
Beispiele: DataPower Gateway IBM Integration Bus API Connect Other
Direkt zum z/OS BackendREST-Funktion und Datentransformation direkt in jedem Backend System (z.B. CICS oder IMS).
Beispiel: CICS JSON web
servicesClients
Backend
"Gateway" zur LPARREST-Funktion und Datentransformation in einer Funktion auf der LPAR, keine Änderung der Backends notwendig
Beispiel: z/OS Connect EE
Backend
Clients "Gateway"
CICSIMSMQDB2
Mid-TierMid-Tier
Lösungen enthalten oft auch Integrations-Funktionen
Mid-TierMid-Tier
Lösung kann ebenfalls eine Integrations-Funktion enthalten
Mid-tier functions
REST APIViele Wege führen nach Rom (und zum Mainframe)
Integration user community
Developer
APIDeveloper
Full StackDeveloper
Front End Developer
API driven coding and orchestration
Automator
LoB Professional
Data Scientist
Biz/SystemAnalyst
Event-driven and Data-prep tooling
Integrator
ShadowIntegrator
IntegrationSpecialist
Graphical flow editors & configuration
Hybrid Integration Platform
Hybrid Integration Personas
11
Automator DeveloperIntegrator
LoB Professional
Data Scientist
SaaS PowerUser
Biz/SystemAnalyst
ShadowIntegrator
IntegrationSpecialist
APIDeveloper
Full StackDeveloper
Front End Developer
API ConnectAppConnect Integration BusApp Connect Professional
IBM Application Integration Suite
IBM Hybrid Integration
Tech acumen
Biz acumen
Automator Integrator Developer
Personas
Frictionless Integration across two axis of Hybrid
12
On-premise Connectivity
On-premise Deployment
Cloud Deployment
Cloud Connectivity
On-PremCustomer managed
CloudXaaS
Clo
ud
ines
s
App Connect
Virtual appliance
Secure connector
Live
App Connect Professional
Secure connector
IIB
IIBoC
PuyreApplication and docker
Secure connector
API Connect
BluemixSaaS
Secure gateway
Tech acumen
Biz acumen
Automator Integrator Developer
Personas
Frictionless Integration across two axis of Hybrid
13
On-premise Connectivity
On-premise Deployment
Cloud Deployment
Cloud Connectivity
On-PremCustomer managed
CloudXaaS
Clo
ud
ines
s
App Connect
Virtual appliance
Secure connector
Live
App Connect Professional
Secure connector
IIB
IIBoC
PuyreApplication and docker
Secure connector
API Connect
BluemixSaaS
Secure gateway
16
– Easy graphical map creation from JSON Schema– Select JSON types from Swagger for source or target– When creating maps in a REST API Operation subflow, offer to populate the
source and target from JSON types– Automatic update and validate the Query Path parameters editted within a
REST API and used in a map– Add new Path Parameters section to LocalEnvironment
JSON Schema in the Graphical Mapper
Push to API Management
• IIB supports pushing REST APIs into IBM API Management
• Enables centralized management of APIs exposed by IIB integrations– Alongside other APIs available to the enterprise
• Supports versioning of APIs
• Create ‘plans’ to manage:– Grouping of resources
– Different access rights to parts of an API
– Rate limits
• Authentication– User: Basic Auth, etc
– Application: Secret key
• Monitor usage and performance
• Developer portal enables discovery, testing & registration of apps
18
Tech acumen
Biz acumen
Automator Integrator Developer
Personas
Frictionless Integration across two axis of Hybrid
24
On-premise Connectivity
On-premise Deployment
Cloud Deployment
Cloud Connectivity
On-PremCustomer managed
CloudXaaS
Clo
ud
ines
s
App Connect
Virtual appliance
Secure connector
Live
App Connect Professional
Secure connector
IIB
IIBoC
PuyreApplication and docker
Secure connector
API Connect
BluemixSaaS
Secure gateway
IBM API Connect: Simplified & Comprehensive API foundation
What is API Connect?An integrated creation, runtime, management, and security foundation for enterprise grade API’s and Microservices to power modern digital applications
What does API Connect provide?• Automated, visual and coding options for creating APIs• Lifecycle and governance for APIs, Products and Plans• Node.js and Java support for creating Microservices• Integrated enterprise grade clustering, management and
security for Node.js and Java• Access control over API’s, API Plans and API Products• Advanced API usage analytics • Customizable, self service developer portal for publishing
APIs • Policy enforcement, security and control
Create Run
ManageSecure
System & Interaction APIs
System APIs:APIs that pass through data from a system of record unchanged
Interaction APIs:Invoke one or more System API’s or data sources, and manipulate the returned data with new logic
Promote reuse across new applications
App
ESB
System API
WebService
System API
TH GSINwww
Interaction API
EnterpriseFor cross-organization projects
EnterpriseFor cross-organization projects
ProfessionalFor single API projects
ProfessionalFor single API projects
EssentialsFree for developers
EssentialsFree for developers
API Connect: Grows with your Business Needs
Deploy where it’s most convenient for you• Deploy on IBM Bluemix• Deploy to 3rd party clouds• Deploy on-premises
API Connect: Component View
Developer Portal
API Manager
API Gateway
For developers (API consumers)For API owners,
developers, business users (API providers)
Developer Toolkit
Collective Controller
Enforce runtime policies to secure & control API trafficFor developers to
create, test APIs locally & DevOps to automate API tasks
Execute API & Microservices business logic in Node & Java
For operations, unified ops & mgmt for Node & Java runtimes
Microservices Compute Runtime
API Developer • How do I assemble APIs?• How do I manage security?• Will the infrastructure scale?• How do I measure performance?
App Developer
• Where do I access APIs?• How do I understand the
APIs?• How do I measure success?
API Product Manager
• How can I rapidly release & update my APIs?• How do I publicize my API?• How do I measure success?
Operations Lead
• How do I manage all the API Environments that are being requested?
• How can I scale each environment?
• How can I easily find and fix issues?
API Success Requires Addressing Needs of Multiple Stakeholders
Tech acumen
Biz acumen
Automator Integrator Developer
Personas
Frictionless Integration across two axis of Hybrid
75
On-premise Connectivity
On-premise Deployment
Cloud Deployment
Cloud Connectivity
On-PremCustomer managed
CloudXaaS
Clo
ud
ines
s
App Connect
Virtual appliance
Secure connector
Live
App Connect Professional
Secure connector
IIB
IIBoC
PuyreApplication and docker
Secure connector
API Connect
BluemixSaaS
Secure gateway
App Connect Personal
76
A simple, cloud-based integration platform, running in a Bluemix environment, built on SDK for Node.js Utilises common architectural building blocks: Connector service, Message Hub, Bluemix Secure Gateway A “flow” listens to a single application and does something to another single application Two usage tiers:
• Free (Free, up to 10 flows, 1000 actions per month, all cloud apps)• Paid Personal plan ($25 per month, unlimited flows, 5000 actions / month, all cloud apps & on-prem)
App Connect can also connect apps if they are on a private network using the Bluemix Secure Gateway component (35MB client component runs on-premise – OS X, Windows or Linux)
Triggers Actions
Business Teams ITTeams
Demo
https://console.eu-gb.bluemix.net/dashboard/services
https://eu6.salesforce.com/
https://docs.google.com/spreadsheets
Tech acumen
Biz acumen
Automator Integrator Developer
Personas
Frictionless Integration across two axis of Hybrid
87
On-premise Connectivity
On-premise Deployment
Cloud Deployment
Cloud Connectivity
On-PremCustomer managed
CloudXaaS
Clo
ud
ines
s
App Connect
Virtual appliance
Secure connector
Live
App Connect Professional
Secure connector
IIB
IIBoC
PuyreApplication and docker
Secure connector
API Connect
BluemixSaaS
Secure gateway
Lead-to-Order
CollaborationE-Mail, IM
Video, etc.…
Expense-to-Payment
Hire-to-Retire
SystemsOf Record
On-Premise
Configure-to-Deliver
Order-to-Cash
Cloud applications are growing by the day…
Install-to-Upgrade
MKT
SFA
FIN
SCMCSS
HCM
Desktop
5
Seamless integration across these applications is key to successful cloud adoption
Private Cloud Applications
Home-grownApplications Packaged
Applications
Public Cloud Applications
Core Platform Capabilities
Connect Transform Design Manage11 22 33 44
Rapid: Configuration-Not Coding
• A configuration, no-coding-based approach for developing integrations• A rich library of prebuilt connectors to a large number of SaaS and on-premise applications • A repository of prepackaged integration patterns to simplify and accelerate most common integration
challenges• Built-in support for exposing integrations as oData • Support for creating “integration built APIs”and easy integration with IBM API Connect for exposing
managed APIs• Ease of monitoring and management
Flexible: deployment models
• Flexible deployment choice ranging from managed SaaS to on-premise install• Supports Docker based deployment for rapid portability across different cloud and on-premise environments• Flexible licensing* facilitating cloud transformation at customized pace
Public Cloud/ SaaS
A fully managed, multitenant iPaaS Auto scale to handle variable workloads Enterprise grade support and quality of service Flexible pricing models Option of a dedicated runtime environment on
SaaS
Private Cloud/ on-premise
Buy your own license and deploy on-premise or on a private cloud environment
Available as docker image which offers complete deployment portability
Manage and control your own environment Suitable for sensitive workloads
Hybrid Deployment
Combine the efficiencies of public cloud with the control of private deployment
A unique Hybrid Licence* model which provides flexibility of choosing between SaaS and on-premise deployments
Suitable for mixed workloads and for gradual transitioning to cloud
*Coming Soon
App Connect Professional User Experience
94
• The simplicity of the App Connect citizen integrator experience expanded to address the more traditional integration workloads
• Built into the same interface as our API Connect offering so that APIM and Integration are fully modularized add-ons to each other
IBM Confidential
Hybrid Integration Redpaper
• akualisierte Ausgabe Februar 2017
• Einführung in die Hybrid Reference Architecture
• Leitfaden für Auswahl der geeigneten Lösung für Einführung eines REST API
• Beispiele aus der Praxis
Summary
Multiple components are needed for a successful API architecture API Gateways, Integration Layers and Access layers are not mutually exclusive
There are multiple ways to API-enable z/OS subsystems There is no single ‘right’ option; it depends on a number of factors
IBM z Systems has an integral role to play in a Digital Architecture