The document discusses API management and DevOps practices. It describes challenges with a customer's existing release process, including slow development due to VPN use, lack of dependency and version control, and manual steps leading to high downtime costs. The proposed solution implements a CI/CD pipeline for automated testing, approval, and deployment across development, test, QA and production environments, integrated with API management tools for monitoring and operations. This allows local development, centralized version control, and decreases release cycle time and errors.

1. with automation of release process
Waldemar Rosenfeld, Senior Services Consultant
ZERO DOWNTIME IN API MANAGEMENT

2. FULL LIFECYCLE API MANAGEMENT
© APIIDA AG 20192
Plan
Business to technical
strategy and iteration
Create
Build APIs and microservices
with fast, automated tools
Test | Publish
Continuously test and
publish services
Secure
Protect data from threats
and vulnerabilities
Manage
Orchestrate and manage
operations at scale
Monitor
Optimize API and app
performance with analytics
Discover
Help developers find and
integrate APIs easily
APIProviders APIConsumers
Develop
Enable developers and
accelerate development
Consume
Enable secure, scalable
use of APIs in apps

3. EXPERIENCE IS EVERYTHING
© APIIDA AG 20193
Fact:
83% of U.S. consumers
say having a positive
customer experience
with a brand is more
important than the
product itself1
53% of large
companies want to be
customer experience
leaders within three
years2
53% of mobile site
visits are abandoned
if pages take longer
than three seconds to
load3
Fact:
Fact:

4. FULL LIFECYCLE API MANAGEMENT – ZERO DOWNTIME
© APIIDA AG 20194
Plan
Business to technical
strategy and iteration
Create
Build APIs and microservices
with fast, automated tools
Test | Publish
Continuously test and
publish services
Secure
Protect data from threats
and vulnerabilities
Manage
Orchestrate and manage
operations at scale
Monitor
Optimize API and app
performance with analytics
Discover
Help developers find and
integrate APIs easily
APIProviders APIConsumers
Develop
Enable developers and
accelerate development
Consume
Enable secure, scalable
use of APIs in apps

5. API & SERVICE CREATION
© APIIDA AG 20195
Development only in
dev environment
Central version
controlling
Enable local
development to
increase speed
Redundant
backend systems

6. TESTING | PUBLISHING
© APIIDA AG 20196
Test with real
test data in all
environments
Missing test data with
Service Virtualization
Redundacy also in
hardware and sites
Check dependencies and
their versions

7. SECURITY
© APIIDA AG 20197
Secure against
OWASP
vulnerabilities
OAuth and OIDC for
better security
Use SSO und IAM Use standards like
FIPS 140-2 or
Common Criteria

8. MANAGEMENT
© APIIDA AG 20198
Use release pipelines Automate to decrease
manual steps
Approval process /
4-eyes principle in
operations
Central versions
controlling
und backup
Dev Test QA Prod

9. DEVELOP & CONSUME
© APIIDA AG 20199
Use API-keys Provide example
code
Edge API Gateway to
intercept attacks
Provide sandbox
environment for
external developers

10. MONITORING
© APIIDA AG 201910
Evaluate API
performance metrics
Optimize
development for
higher trougput
Early identification of
future trends
Tracing if attack is
occurs

11. DEVOPS AND
RELEASE PIPELINE IN
API MANAGEMENT

12. CUSTOMER AND ENVIRONMENT
▪Customer from UK
▪Sandbox for external developer
▪Dev environment for development
▪Systest and UAT for testing
▪Four separate production cluster
▪Several sites
▪More then 70 API gateways
© APIIDA AG 201912

13. CHALLENGES
▪Development with VPN very slow
▪No clear dependencies between services
▪Missing central version control
▪Release process with manual steps
▪Release process needs to be repeated
▪High costs in case of a downtime
© APIIDA AG 201913

14. DEVOPS - DEVELOPMENT
© APIIDA AG 201914
Developer
APIIDA
API Gateway
Manager
Local API Gateway
Deploy locale copy
3
1
2
1 3

15. DEVOPS – OPERATIONS: CI/CD PIPELINE
© APIIDA AG 201915
Operator
APIIDA API Gateway Manager
Static Code analysing
Perform migration to
several targets
Start test process of
Service
Rollback to old
version
Save for future reuse
Enable Cluster after
migration
Enable cluster again
and inform operator
successful unsuccessful
Disable Cluster
before migration

16. WEBCAST

17. UPCOMMING WEBCAST
© APIIDA AG 201917
More information: https://apiida.com/webcasts

18. APIIDA AG
Sitz der Gesellschaft: Gross-Bieberau, AG Darmstadt HRB 96368, UstID DE282210791
Vorstand: Stefan Schaffner (Vorsitzender), Sebastian Rohr, Markus Müller
Vorsitzender des Aufsichtsrats: Dr. Gunter Küchler
T:
M:
E:
W:
linkedin.com/company/apiida
xing.com/companies/apiidaag
@APIIDA_AG
www.apiida.com
+49 6162 8004 50
Senior Services Consultant
Waldemar Rosenfeld
Waldemar.Rosenfeld@apiida.com
+49 151 4074 4187