This slide deck explores the impact of MSA on API strategies and designs and the possible changes in API design and deployment, API security, control and monitoring, and CI/CD. Watch recording: https://wso2.com/library/webinars/2018/09/apis-in-a-microservice-architecture

1. APIs in a Microservice Architecture
Nuwan Dias
@nuwandias
Director, API Architecture - WSO2

2. Why Microservices?

3. A Monolithic Application
Products
Orders
Inventory
Shipping
Client Application
Load Balancer

4. ● Componentization
● Organization around business capability
● Single responsibility
● Smart Endpoints Dumb Pipes
● Mandatory CI/CD
Characteristics of Microservices

5. A Microservice Architecture
Client Application
Products
Orders
Inventory
Shipping

6. The Role of APIs in a
Microservice Architecture

7. Exposure
Client Application
APIGateway
Products
Inventory
Orders
Shipping

8. ● Uniformity in exposing heterogeneous services
● Discovery of endpoints
● Organizing security perimeters/boundaries
● Policy definition and enforcement
● Business value reporting
Exposure

9. Load Balancing and Discovery
Client Application
APIGateway
Products
Productsetcd/consul

10. Transitioning a Monolith into Microservices
Client Application
APIGateway
Orders
Inventory
Shipping
Monolith
Microservice
Products

11. ● Symphony
Orchestration

12. SOA Architecture
Client Application
APIGateway
Products
Inventory
Orders
Shipping
APIGateway
ESB

13. Microservice Architecture
Client Application
Products
Inventory
Orders
Shipping
Integration
MS 1
µµµµµµµµµ
µµµµµµµµµ
µµµµµµµµµ
Integration
MS 2
µµµµµµµµµµµµ
µµµµµµµµµµµµ
µµµDecentralized API
Gateways

14. ● Freedom of scaling API Gateways
Decentralizing API Gateways
API Gateways
MicroservicesProductsProductsProducts Orders

15. ● Optimizing per client type
Optimization
Products
Orders
MobileWebPublic
The same API
(REST Interface)
defined on the
API Manager is
exposed via 3
types of
Gateways. Each
optimized for the
client type it
serves.

16. .
Microgateways

17. ● Designed to scale
○ Self validating tokens
○ Localized rate limiting
○ Offline analytics
○ Immutable
● Native support for Docker/K8S
● Private Jet Gateway for microservices
● First class support for lifecycle management across
environments
Introducing the WSO2 API Microgateway 2.5

18. Microgateway Overview
Microgateway Toolkit
Microgateway
Runtime
Request
API
Definitions
Download API
Definitions
(JSON)
Generate Microgateway
Runtime

19. Microgateway Disaggregated Runtimes
Microgateway 1 Microgateway 2 Microgateway n
Products Orders Invoices

20. Microgateway Security - Standard OAuth2.0
Request
Access
Token (with
scopes)
Provide
Opaque
Token
1
2
3
Microgateway
4
Client Application sends
Token to Microgateway
Validate
Token

21. Microgateway Security - Signed JWT
(Recommended)
Microgateway Products
Orders
Request
Access
Token (with
scopes)
Provide
Signed
JWT
1
2
3
3
Microgateway
4
4
Client Application
sends Signed JWT
to Microgateways

22. Rate limiting policies are burnt into the microgateway runtime
Microgateway - Localized Rate Limiting
Microgateway
Products Orders
Apply 1000
req/min on
Products
microservice
Apply 500
req/min on
Orders
microservice

23. Microgateway - Offline Analytics
Microgateway
Microgateway
Accumulate data in files
and upload offline

24. Microgateway - Native Support for Docker/K8S
Microgateway Toolkit
Request
API
Definitions
Download
API
Definitions
(JSON)
Microgateway VM
Microgateway
Docker
Microgateway K8S
Provide relevant arguments in
build phase for desired output

25. Microgateway VM
Microgateway - Cross Environment Lifecycle
Management
Microgateway
Microgateway
Staging
Dev
Products
Products
gateway -e
ProductsAPI.v1.prod.endpoint.0="http://dev.apis.wso2.com/products"

27. https://wso2.com/architecture
WSO2 Reference Architecture for Agility, v0.9

28. Microgateway VM
Microgateway
API Gateways in a Cell-based Architecture

29. Microgateway VM
API Gateways vs Service Meshes
Microgateway
ControlPlane

30. From Orchestration to Choreography

32. THANK YOU
wso2.com