WSO2 API Manager, which just completed its five-year-long journey, is now reborn. Version 3.0.0 of the WSO2 API Manager is a complete rewrite of the product from the ground up. This new version has a brand new architecture that addresses many a need on modern software development and deployment practices. This slide deck focuses on some of the key new capabilities and highlights of the product.

1. Architect, WSO2
Cloud-Native API Management
Nuwan Dias

2. Cloud Native?

3. Cloud Native
Containers Microservices
Dev-Ops CI/CD

4. API Manager Distribution
API Manager
Core
Gateway Key Manager
Traffic Manager Analytics

5. API Core
Product REST API Layer
Business Logic Layer
Persistence Layer
Message Broker
Hosts APIs that
expose functionality
of the API Publisher,
Store, Admin and
Analytics Apps
Lightweight
Message Broker to
notify updates to
Gateways

6. API Gateway
Security (OAuth2.0, APIKey, etc.)
Rate Limiting
Additional Policies (e.g.Threat Protection)
Analytics
Message Mediation and Routing

7. Integration at the Edge
APIGateway
Micro Service
Micro Service

8. Integration at the Edge
Just Got a Whole Lot Better With Ballerina!

9. Scaling the API Gateway
API Deployment - Pull vs Push Model
API Manager
Core
Gateway 1
Gateway 2
Product
UI
Other
Clients
create_api
Notifications Sent to
Gateways
Request API artifact and
Deploy
1
2
3
3

10. Partitioning Gateways using Labels
Hybrid Deployments
API Manager
Core
Gateway 1
[labels =
us-east]
Gateway 2
[labels =
sydney, eu]
Product
UI
Other
Clients
create_api
(label=us-east)
get_apis(labels=sydney, eu)
get_apis(labels=us-east)
create_api
(label=sydney)

11. • Offline execution capability
• Bootstrapped with necessary APIs and Keys for
allowing low-latency, secure access to Micro
Services
• Has edge proxy/integration capabilities
• Immutability
• Low memory, CPU and I/O
The Micro Gateway Architecture

12. API Developer - Discoverability of Endpoints
API Gateway - Runtime Service Discovery
Service Discovery
K8S/OpenShift cluster
Service 1
Service 2
Service 3
Service 4
API Publisher
API Gateway

13. • An API Publisher has the ability to spawn a Gateway
container per API from the Publisher Itself
• Facilitate Edge Integrations with no impact to other
APIs
Private Jet!
A Container per API
API Manager
Core
GW 1
GW 2
GW 3
GW 4
K8S/OpenShift cluster

14. Stateless UIs

15. UI Architecture
WebApp
Web
Browser
API Core
OAuth
Server
login (un, pw)
get_token (un, pw, ci, cs)
response (token)
set_cookies(token)
api_request (token)
validate_token(token)
response (data)
render_html(data)

16. Multi Tenancy: Shared
Runtime
Data
Tenant 1 Tenant 2 Tenant n

17. Multi Tenancy: Isolated
Runtime
Data
Tenant 1 Tenant 2 Tenant n
Runtime
Data
Tenant 1 Tenant 2 Tenant n

18. Deployment Automation
CLI
Publisher
(Production)
Push
API
Package
Publisher
(Staging)
API
Package
CLI
Pull
user$ wso2api pull Foo:v1 staging user$ wso2api push Foo:v1 production
APIM
_DB
APIM
_DBRead Write

19. • Documentation -
https://docs.wso2.com/display/AM300/WSO2+API+Manager+
Documentation
• Carbon Repo - https://github.com/wso2/carbon-apimgt/
• Product Repo - https://github.com/wso2/product-apim/
Reference Links and How to Contribute

20. wso2.com