Managing APIs across the lifecycle

By Vanessa Ramos and Christina Lin
Red Hat Summit, Boston 2017

Transcript

1. Managing across the API lifecycle Presenters: Vanessa Ramos, Christina Lin Red Hat Summit 2017
2. 2 WHY ARE WE HERE • API lifecycle 101 • Phases of the API lifecycle ◦ Plan & Design ◦ Built, Integrate & Deploy ◦ Operate & Manage ◦ Share & Engage ◦ End of life • Demo
3. API lifecycle 101
4. 4 Why APIs?
5. 5 BUSINESS BENEFITS OF APIs Agility Innovation Awareness Revenue
6. 6 APIs are products
7. 7 API LIFECYCLE The API lifecycle Plan Design Build Integrate Deploy Operate Manage Share Engage End of Life 1 2 3 4 5
8. Plan & Design
9. 9 API DESIGN The API lifecycle 1 Integration Granularity Availability IT Assets Data Integrity Security Policies Controls
10. 10 SPEAK THE SAME LANGUAGE The API lifecycle 1 • Vendor neutral • Industry standard • Choice of tools • Spec as the source of truth • Mock Testing
11. 11 • Web based, visual API Designer • Code optional • Fully Open Source • Design collaboratively http://apicur.io The API lifecycle 1 APICURIO STUDIO
12. Build, Integrate & Deploy
13. 13 Integration != Management - Composing Services - Authentication - Transformation - Authorization The API lifecycle 2 BEST PRACTICE 101
14. 14 The API lifecycle 2 PROVIDE API WITH MICROSERVICES microservice by Fuse
15. 15 PACKAGING AND RUNNING APIs The API lifecycle 2
16. 16 MAKING API DevOps READY The API lifecycle 2
17. Operate & Manage
18. 18 App & Website The API lifecycle 3 SECURING YOUR APIs
19. 19 API Mgmt. App/ Website The API lifecycle 3 SECURING YOUR APIs
20. 20 API Provider API Consumer The API lifecycle 3 API Manager Access Control Usage Policies Traffic Analytics API Monetization Dev portal Interactive API Docs APIcast API Gateway API MANAGEMENT
21. ACCESS CONTROL 21 • Authenticate traffic • Restrict by policy • Drop unwelcome calls • Protect backend services • Generate overage alerts • Impose rate limits The API lifecycle 3
22. USAGE POLICIES 22 API Services Rate Limits Pricing Application #1 Application #2 Application #3 Internal teams Strategic partners • Endpoint A • Endpoint B • X calls/ minute • Y calls/ day • Free • $X per month • $Y per call Developers The API lifecycle 3
23. 23 TRAFFIC ANALYTICS API Consumer Consumers Types Service Goals Frequency and Loads Ripple effects The API lifecycle 3
24. 24 TRAFFIC ANALYTICS • Data capture • Analysis of traffic patterns • Learn how your APIs are being used… • … and fine-tune your API program accordingly The API lifecycle 3
25. Share & Engage
26. 26 SEAMLESS DEVELOPER EXPERIENCE • Make it very clear what the API does • Providing instant sign up • Providing free access • Being transparent about pricing • Having great documentation From John Musser’s OSCON 2012 talk. The API lifecycle 4
27. 27 DEVELOPER PROGRAM The API lifecycle 4 Developer portal Pilots / Case studies Community building Measure Acceleration
28. 28 DEVELOPER PORTALS POWERED BY 3SCALE The API lifecycle 4
29. End of Life
30. 30 API RETIREMENT & CHANGE MANAGEMENT • Breaking changes vs. non-breaking changes • Communication and migration plan • Contract, API terms • The end of the line The API lifecycle 5
31. DEMO
32. 32 API FIRST API Manager APICast Developer Portal
33. 33 MAIN TAKEAWAYS APIs are products Plan & Design Design with your user in mind API spec as the unique source of truth. Build, Integrate & Deploy Integration =! Mgmnt Pipelines to support CI/CD automation Operate & Manage Secure your API Diff. types of access for diff. types of users Share & Engage Provide a seamless dev. experience End of Life Communicate changes in your API(s) 1 2 3 4 5
34. Q&A
35. THANK YOU plus.google.com/+RedHat linkedin.com/company/red-hat youtube.com/user/RedHatVideos facebook.com/redhatinc twitter.com/RedHatNews