tSponsors

Kent WeareIntegration MVP, Author

API Management Part 1 – An Introduction to Azure API Management

BizTalk Summit 2015 – LondonExCeL London | April 13th & 14th

Introduction to Azure API Management

Kent Weare

About Me• 10+ years of BizTalk experience• Author • Microsoft BizTalk/Integration MVP since 2008• Senior Architect – Calgary, Canada

What is an API?

•“In the simplest terms, an application programming interface, or API, is a set of requirements that enables one application to talk to another application.” *

* http://readwrite.com/2013/04/24/api-gold-rush

What is a Web API?

•Similar in nature but have a prescribed implementation:•HTTP(s)• RESTful• JSON (preferred), XML (supported)• Spec Driven (Swagger, RAML, WADL, API Blueprint)

(ish)

Business of APIs

API Econom

y

ISVs

New Channel

s

Marketing & Customer Relationshi

ps

API Security

Internal Agility

The Rise of APIs

2006 2007 2008 2009 2010 2011 2012 20130

5000

10000

15000

20000

25000

Number of Public APIs

Managed Total APIs

Continued robust growth in APIs

Fueled by mobile, cloud, open & big data, IoT

Public APIs are just the “tip of the iceberg”

APIs are a core component for many startups

APIs are drivers of innovation in the enterprises

The Power of APIsThe power of APIs - In 2015 • Uber, the world's largest taxi company owns no

vehicles• Facebook, the world's most popular media

owner creates no content• Alibaba, the most valuable retailer has no

inventory • Airbnb, the world's largest accommodation

provider owns no real estate

Source: LinkedIn

Who uses APIs in their Business?

What is API Management?

What is API Management?

API Mgmt Platforms provide similar services

Authentication and Authorization

Analytics

Policy Enforcement

Development Engagement

Agility

Microsoft Azure API Management

Azure API

MGMT

Project existing or

new services as APIs

Publish APIs to developers, partners and

citizens

View Operational

and Business insights through

Analytics

Developer Engagement

October 23, 2013

WINDOWS AZURE API

DEVELOPER PORTAL

PUBLISHERPORTAL

PROXY

WINDOWS AZURE

API MANAGEMENT

PUBLISHER / ADMIN

DEVELOPERS

APPS

BACKEND

Can be hosted anywhere: public

cloud or on-premises

Microsoft Azure API Management – High Level Architecture

WEB USERS

WEB SITE

YOUR ORGANIZATION

APP DEVELOPERS

USERS

MOBILE APPS

SOCIAL APPS

PARTNERS ANDAFFILIATES

API

AZURE API MANAGEMENT

DEVELOPER PORTALREGISTRATIONDOCUMENTATIONINTERACTIVE API CONSOLEDEVELOPER ANALYTICSAPP GALLERYFORUMSNEWSISSUESWIKI

API PROXYSCALINGCACHINGMONITORINGTRAFFIC MANAGEMENT

ADMIN PORTALAPI PUBLISHINGSUBSCRIPTION MANAGEMENTSECURITYMEDIATIONCONTENT PUBLISHINGSITE CUSTOMIZATIONISSUE MANAGEMENTANALYTICSREPORTS

I have BizTalk/Web Services/Middleware – why do I need an API Management Platform?

A Story….with help from Vince Vaughn

Intern IT Manager

I need to ‘mobilize’

our existing systems

We need more

channels!

6 weeks? Try 6

months.

When we go live with this in 6 weeks. We will leapfrog the competition and I will get a huge bonus!!!

Security?Enrollment?Governanc

e?Visibility?

• #$%&#^% IT is too slow!!!• Amateurs• I should just outsource everything

I have no idea how we are going to do

this. It takes 6 weeks just for

change management.

What is API Management?

This might actually work since I don’t

need to get the whole IT Department

involved.

…and we didn’t

need to re-write backend services

No Firewall Ports need to be openedOut of Box Authentication

Throttling and Rate Limiting

Caching

Self Service Enrollment

Leverage existing investments

…and we now have analytics so

we can track where requests are coming from and drive future

investment

I knew we could do it!

Drinks on me.

BizTalk Server2013 R2

Policy System

Salesforce

DMV

Rating Engine

Existing Architecture

SOAPcc

Customers Agents

XML

cc

Mobile Devices

Azure API Management

BizTalk Server2013 R2

Policy System

Salesforce

DMV

Rating Engine

Modern Architecture

JSON

SOAPcc

Partners

Customers

XML

DEMO

Microsoft Azure

Microsoft Azure

DEMO Summary• Legacy Modernization• API Management Provisioning• Dashboard and Analytics• Products• APIs• Operations• Testing APIs• Custom Policies• JSON – XML• XML – JSON• String Manipulation• Caching• Rate Limiting• Security

Microsoft Azure 36

How do I secure my backend services?

IP Whitelisting

Basic Authentication

Mutual Authentication (certificates)

Network Layer Security(Express Route or Site to Site VPN)

Microsoft Azure 38

API MGMT Premium GAStatic IPOAuth 2.0 supportBackup / RestoreCertificate authRoot APIsHTTP supportSubscription per appPerformance improvements (DevX and Proxy)

Recent News/UpdatesNow in all Azure regions, including Australia!DelegationImproved CachingCustom Subscription KeysCompression SupportGoogle Analytics SupportFaster API setupCheck Header PolicyAnd more

Azure | API Management Premium

Azure | API Management Premium

> 1B API calls / month / unit> 5x throughput of Standard unit> 5GB cache> Multi-geography deployment> Virtual Private Network support> Azure Active Directory Integration> SLA 99.95% (with multi-geo)*> Up to 10 units per region (or call for more)

Microsoft Azure

Expressions<inbound>

<set-header name="inbound-ip" exists-action="override">

<value>@(context.Request.IpAddress)</value>

</set-header>

<set-header name="developer-email" exists-action="override">

<value>@(context.User.Email)</value>

</set-header>

</inbound>

Microsoft Azure

Conditionals and Routing<choose>

<when condition=“

@(context.Request.Headers.GetValueOrDefault("client", "") == "v2";)">

<set-backend-service base-url="http://requestb.in/x08ki5x0" />

</when>

</choose>

Thanks!!!Resources

Blog: http://kentweare.blogspot.comTwitter: @wearsy

Azure API Management: http://tinyurl.com/klk7lzbTwitter: @AzureApiMgmtChannel 9 Videos: http://tinyurl.com/nxsggob

Don’t forget to check out#IntegrationMonday