Publish, Secure, and Monitor APIs with Cloud Foundry Route Services
•Als PPTX, PDF herunterladen•
2 gefällt mir•968 views
SpringOne Platform 2016 Speakers: Ed Anuff; SVP Product Strategy, Apigee & Carlos Eberhardt, Presales Apigeek, Apigee Route Services make it possible for developers to transform or process network level requests before they reach an application. Operators gain the ability to offer their developers a curated, self-service menu of route services, deflecting one-off requests. Route Services are also designed with APIs in mind, making it easy to add security, authentication, and caching to requests. Learn from Apigee's experience building one of the first Service Brokers to leverage route services! You’ll walk away with some powerful insights about how to build and deploy a full-featured API management platform as a route service and learn how to use Apigee features including quota enforcement, spike arrests, and content caching.
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Andere mochten auch
Andere mochten auch (20)
Mehr von VMware Tanzu
Mehr von VMware Tanzu (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Publish, Secure, and Monitor APIs with Cloud Foundry Route Services
- 1. ©2015 Apigee Corp. All Rights Reserved. Using CF Route Service to Publish, Secure, Monitor APIs Ed Anuff @anuff Carlos Eberhardt @carloseberhardt
- 2. ©2015 Apigee Corp. All Rights Reserved. 2 What is an API A Contract
- 3. ©2015 Apigee Corp. All Rights Reserved. What is API 3 • HTTP • TLS • OAuth • JSON • Nothing else HTTP://HTTPS://
- 4. ©2015 Apigee Corp. All Rights Reserved. Why APIs 4 • Simple • Universal • Every developer understands them
- 5. ©2015 Apigee Corp. All Rights Reserved. The Gap : Scaling Adoption of software is HARD 5 Partners Internal Businesses Total Cost = (Cost of Onboarding + Cost of Management) * # of consumers of your software * Churn APP APP APP
- 6. ©2015 Apigee Corp. All Rights Reserved. Scale Adoption of Apps with APIs 6 Partners Open EcosystemInternal Businesses APIs are the key enabler to building your digital platform APP APP APP
- 7. What are CF Route Services? A new kind of marketplace service that can be injected in the application request path
- 8. Why Route Services Compliance, Security, Audit • Enable developers to automatically insert services into the request path for their applications and configure them for their specific needs • A new class of marketplace service (User-provided also supported). • Increasing developer velocity through automated, self- service integrations
- 9. How are PCF Route Services used? Ensure Performance, Reliability Compliance, Security, Audit Real Time Analytics, Metering Compliance, Security, Audit
- 11. Operators 1. Given a compatible service, simply register the service broker cf create-service-broker NAME USERNAME PASSWORD URL 2. Grant or revoke access to service plans per CF organization cf enable-service-access SERVICE -p PLAN -o ORG 3. Log and audit use of services cf curl /v2/events?q=type:audit.se rvice_instance.create
- 12. Developers 1.) Discover service in marketplace cf marketplace 2.) Create a CUPS or a Marketplace service cf create-user-provided- service SERVICE_INSTANCE - r ROUTE_SERVICE_URL or cf create-service SERVICE PLAN SERVICE_INSTANCE 3.) Bind Routing Service to the Route cf bind-route-service DOMAIN --hostname HOST SERVICE_INSTANCE
- 13. Simple Route Services Gorouter App Service Broker Client Gorouter App Servic e Broker Route Services Dynamic Client How Route Services work
- 14. ©2015 Apigee Corp. All Rights Reserved. What is API Management ? 14
- 15. ©2015 Apigee Corp. All Rights Reserved. Scalable Adoption needs API Management 15 APP APP APP Partner Apps Developers Visibility / Analytics Security Developer Portal
- 16. ©2015 Apigee Corp. All Rights Reserved. Apigee enables hundred of companies 16
- 17. ©2015 Apigee Corp. All Rights Reserved. Route Services with Apigee Service Broker 17 App Clients or Partner Apps CF Router YOUR APP Apigee Service Broker Apigee Management API API Proxy (Route Service) 1 Install Apigee Tile from CF marketplace & create Apigee Edge service 2 Bind route service for your app to Apigee 3 Apigee automatically creates API proxy, policies are applied and APIs can be published to Developer portal 4 All requests automatically routed to Apigee for security, analytics and traffic management
- 18. ©2015 Apigee Corp. All Rights Reserved. Route Services with Apigee Microgateway 18 YOUR APP Apigee Service Broker Apigee Management API Authentication Service YOUR APP YOUR APP YOUR APP Analytics Services Async Communication Legacy App
- 19. ©2015 Apigee Corp. All Rights Reserved. Demo
- 20. ©2015 Apigee Corp. All Rights Reserved. Microgateway Buildpack Decorator 20 YOUR APP Apigee Management API Authentication Service YOUR APP YOUR APP YOUR APP Analytics Services Async Communication
- 21. ©2015 Apigee Corp. All Rights Reserved. 21 2:00 PM Session: Are Your Microservices Visit the Apigee Booth OR
Hinweis der Redaktion
- What business needs does route services address for our customers? Time to market for differentiated capabilities in the realms of… Real Time Analytics: Report on and analyze real time behavior, events based on network – level information Compliance, Security Performance, Reliability How can customers get various route services, now and in the future? From Pivotal From Partners From customers making their own
- What business needs does route services address for our customers? Time to market for differentiated capabilities in the realms of… Real Time Analytics: Report on and analyze real time behavior, events based on network – level information Compliance, Security Performance, Reliability How can customers get various route services, now and in the future? From Pivotal From Partners From customers making their own
- Operators Responding to individual developer needs is time consuming Responding promptly is difficult, and requests may not be aligned with policies We want to provide operators with solution they can put in place once, configured with policy, and enable developers to pick and choose, self-service Developers Features like authorization and rate limiting are common requirements in application development and operation Currently developers must either build these features into their applications or coordinate with IT to provide them Eliminate unnecessary development and support ticket wait-time Automated, self-service, on-demand, integrated services
- Operators Responding to individual developer needs is time consuming Responding promptly is difficult, and requests may not be aligned with policies We want to provide operators with solution they can put in place once, configured with policy, and enable developers to pick and choose, self-service Developers Features like authorization and rate limiting are common requirements in application development and operation Currently developers must either build these features into their applications or coordinate with IT to provide them Eliminate unnecessary development and support ticket wait-time Automated, self-service, on-demand, integrated services
- Operators Responding to individual developer needs is time consuming Responding promptly is difficult, and requests may not be aligned with policies We want to provide operators with solution they can put in place once, configured with policy, and enable developers to pick and choose, self-service Developers Features like authorization and rate limiting are common requirements in application development and operation Currently developers must either build these features into their applications or coordinate with IT to provide them Eliminate unnecessary development and support ticket wait-time Automated, self-service, on-demand, integrated services
- (LEFT) Simplest model for RS integration in which all HTTP requests to CF are intercepted. RS does some transformation on the Request and forwards it to the Gorouter. Broker enables developer configuration. (RIGHT) More dynamic integration enables only requests for a particular route to be proxied to the RS, before being returned to Gorouter. Enables dynamic integration of services operated by 3rd parties. Broker enables developer configuration (and/or provisioning). When Gorouter receives the request from the route service, it uses an encrypted header to determine the request has already been sent to the RS, and forwards the request to the app.