In this deck, we discuss how to augment service mesh functionality with API management capabilities, so you can create an end-to-end solution for your entire business functionality — from microservices to APIs, to end-user applications. Watch the On-Demand Webinar - https://wso2.com/library/webinars/2019/05/api-management-in-service-mesh-using-istio-and-wso2-api-manager/

1. API Management in Service Mesh Using
Istio and WSO2 API Manager
Pubudu Gunatilaka
Associate Technical Lead
Lakmal Warusawithana
Senior Director Cloud Architecture

2. Agenda
● Evolution of Applications
● Why Microservice Architecture?
● Challenges with Microservices
● Why Service Mesh?
● Istio Demo
● Why API Management?
● WSO2 API Manager with the Istio
● WSO2 API Manager with Istio Demo

4. Monolith to Microservice
● Easy to scale with customer
demands.
● Agility, flexibility and speed to
market.
● Smaller teams, agile software
development life cycles.
● Freedom to use heterogeneous
technologies, early feedback
cycles

5. Microservice Challenges

6. Microservices Challenges - Resiliency

7. Microservices Challenges - Service Discovery

8. Microservices Challenges - Security

9. Microservices Challenges - Observability

10. Microservices Challenges - Risk of Code Releases

11. How can this be solved?

12. Service Mesh
A service mesh is a dedicated infrastructure layer that
controls service-to-service communication over a network.
It provides a method in which separate parts of an
application can communicate with each other.
source:techtarget.com

13. Sidecar

14. Service Mesh

15. Istio is an open source service mesh implementation which
provides behavioral insights and operational control over
the service mesh as a whole, offering a complete solution
to satisfy the diverse requirements of microservice
applications.
Istio

16. Istio Architecture (source — https://istio.io/docs/concepts/what-is-istio/)

17. Demo

18. User Story
Online Shopping Store
Products Microservice
Inventory Microservice
Review Microservice

19. User Story
Online Shopping Store
Products Microservice
/products
/products/{productId}
Inventory Microservice
/inventory/{productId}
Review Microservice
/review/{productId}

20. Type Service Mesh API Management
Routing • L3/L4 • HTTP, GRPC, GraphQL
Security • Service identity and mTLS • User/App Authentication
and Authorization (OAuth /
JWT)
Analytics • Service Operational Analytics • Business and Developer
focus Analytics
Rate Limiting • RPC level rate limiting • Business related rate
limiting
Personas and
Portal
• DevOps portals
• Publisher, Developer, CXO
portals

21. When is API Management required in a Service Mesh
● When users need to expose microservices to outside in
a secured and a controlled manner.
● When fine grained security should be enforced on APIs
exposed.
● When stats need to be collected on API usage for
monetization and billing.
● When it is required to offer a marketplace for APIs for
easy discovery and adoption.

22. WSO2 API Manager and Istio

25. Demo

26. JWT Validation Process

27. JWT Token Validation Process

28. OAuth 2.0 Validation Process

29. Analytics Process

30. Q & A

31. THANK YOU
wso2.com