managing the complexity of microservices deployments

Proprietary + Confidential

Managing the Complexity of Microservices Deployments

May 9, 2017

Kenny Bastani (Principal Technologist)Prithpal Bhogill (Product Management)

Proprietary + Confidential

Reminder: “This webinar may include mention of some future features. Please make any purchasing decisions based on currently GA features.

This information is Google confidential information, covered by the terms of Apigee and Google Cloud Platform License Agreement.”

Speaking Today

Prithpal BhogillProduct Management

Kenny BastaniPrincipal Technologist

Proprietary + Confidential

Agenda

Monolith to MicroservicesWhy API Management?Apigee and Pivotal Cloud FoundryCustomer BenefitsCall to Action

Proprietary + Confidential

From Monoliths to Microservices

Proprietary + Confidential

We started with the monolith

Proprietary + Confidential

● Slows our velocity getting into production

● It takes too long to ramp up new engineers

● The code base is just too large for any one person to fully comprehend

● Centralized authority and change management slows progress (DBA, Ops)

Cultural problems with monoliths

Proprietary + Confidential

● Coordinated releases batch many changes together from different teams

● Operations drives the runtime environment of applications

● Operators take on all operational responsibility (including VM upgrades)

● Deploy everything at once or nothing at all

Operational problems with monoliths

Proprietary + Confidential

We then moved towards SOA

Proprietary + Confidential

We have now arrived at microservices

Proprietary + Confidential

● Small teams organized around business capabilities

● Independently deployable

● Teams produce and consume APIs

● Teams can choose the best tools for the job

Microservices

Proprietary + Confidential

Online Store Microservices

Proprietary + Confidential

Online Store Microservices

Proprietary + Confidential

Proprietary + Confidential

Splitting the monolith

Proprietary + Confidential

Proprietary + Confidential

Proprietary + Confidential

Pivotal Cloud Foundry

Proprietary + Confidential

Proprietary + Confidential

Why API Management?

Proprietary + Confidential

APIs and Microservices are complementary

CATALOG

CUSTOMER

REVIEWS

FAVORITES

RECOMMEND

ORDERS

SHOPPING CART

MicroserviceseCommerce

System

MonolithiceCommerce

System

APIAPI

Proprietary + Confidential

APIs shield consumers from Microservices Complexity

Ordering API Customer APIBilling API

Consumers Shouldn’tCare About What’s

Behind the API

Proprietary + Confidential

REST APIs - Enable easy consumption

REST APIsenable easy consumption

CONTAINERSenable independent deployment

CLOUDenable independent scaling

Proprietary + Confidential

Microservices will fail without API Management

API SPRAWLDifficult to discover & reuse

CYBER THREATSLimited built-in security

FLYING BLINDLimited use & performance visibility

Proprietary + Confidential

API Gateway

DevelopersDeveloper Portal

Apigee API Platform

Analytics

Management

Management

Runtime

Backend

App

API Team

Scalable Services

Microgateway

Technology powering the Apigee API Platform

Available as Apigee managed

+Customer managed

A family of federated gateways

Available native integration capability with respective cloud

Comprehensive API Management

OAuth2, OpenID, SAML, TLS

OWASP Threat Protection

RBAC, 3rd party IDM Support

Bot Detection

Mediation, Caching & Traffic Management

node.jsrun-time Engine

Data Persistence / BaaS

Hybrid Deployment / Microgateway

Secure API RuntimeApps Backend

Business &Developer Metrics

Fine-grainedPerformance Analytics

End User Analytics

Custom Data Capture & Reports

Trace & Diagnostics

Analytics

CustomizableDeveloper Portal

SmartDocs

Self-service Developer On-boarding

API Products

API Monetization

DeveloperManagement

Partners / Developers

API-driven Platform Automation

Multi-tenancy & Scaling with Traffic Isolation

Zero Downtime Upgrades

Cross-region AutomatedRouting & Failover

Global Policy Enforcement

Operations Automation

Flow-based Proxy Editor & Pre-built Policies

API Studio with Open API / Swagger

Test & Monitoring

Extensibility with node.js / Java

Version Management

API Development

API Team

For the Full API Lifecycle

Design

Develop

Secure

PublishMonitor

Analyze

Monetize

Scale

Proprietary + Confidential

Apigee provides the API layer for Microservices

CATALOG

CUSTOMER

REVIEWS

FAVORITES

RECOMMEND

ORDERS

SHOPPING CART

MicroserviceseCommerce

System

Apigee’s centralized gateway provides comprehensive API management and an API layer for yourmicroservices

CATALOG

Apigee’s microgateway provides security, throttling and analytics for individual microservices as well.

Proprietary + Confidential

Com

mon

Sec

urity

Mod

el -

OAu

th

Thre

at P

rote

ctio

n

Cach

ing

Monetization/Rate

Plans

External API

Façade & Proxy

Med

iatio

n /

Aggr

egat

ion

Developer Portal

Use API management as you transition to microservices

CATALOG

CUSTOMER

REVIEWS

SHOPPPING

CART

RECOMMEND

Mobile & Web apps

Microservices

Apigee authenticates, applies security policies and routes request to microservices. Also orchestrates to your legacy services/monolith apps

On-Premises or Private Cloud

Monolith Apps

Proprietary + Confidential

What we are doing together?

added support for Edge Microgateway...

We’ve integrated our products… released BOSH Installers for Apigee Edge

Proprietary + Confidential

Integration Options - Flexibility & Choice Route Services CF Buildpack*

* Edge Microgateway Buildpack available today as OSS on https://github.com/swilliams11/edgemicro-decorator.

Apigee Edge MicrogatewayApigee Edge Enterprise

App App App

Apigee Edge Microgateway

Proprietary + Confidential

Benefits for Developers & Operators

Developers• Apply pre-built traffic management

and security features to their app

• Apply pre-built pricing models to

monetize their app

• Automatically expose their app (as

services) to other developers

• Discover, test, and obtain access to

other services (as APIs)

Accelerate Application Modernization

Operators• Apply a set of security and traffic

management features across projects

• Scale these features through PCF

• Obtain visibility into the usage and

performance of APIs

• Install and manage Apigee Edge

through BOSH

Ease Operational Concerns

Proprietary + Confidential

Use Cases

Use Case

Apigee protects and enables authorized access to microservices

Microservices Development Application Modernization Enabling Ecosystems

Apigee Edge Microgateway

3 policies OOTB, specifically spike arrest, API key validation / OAuth, and quota limitsOperational analyticsCentralized API management

Apigee mitigates risk in app modernization/migration

Apigee Edge

35+ policies OOTB, including transformation, mediation, & securityDeveloper portalOperational analyticsCentralized API management

Apigee enables APIs to be discovered and managed by app developers

Apigee Edge

35 policies OOTB, including transformation, mediation, & securityDeveloper portalOperational analyticsCentralized API management

Description

Product

Features

Powering the “Digital Value Chain”

Consuming digital products and digital experiences

“Outside-in” – digital consumer view

User App Developer API API team Backend

Reduce time to develop connected experiencesEnable consumption of APIs

Reduce time to build better softwareReduce operational complexity

Proprietary + Confidential

Call to Action

Visit www.apigee.com and sign up for a trial accountLearn about Apigee’s integrations with Pivotal hereIf you are new to Apigee

Learn more about Apigee’s Service Broker with Edge Microgateway hereAsk your PCF rep about Apigee’s free Microservices Starter Kit offerAsk you PCF rep for an introduction to Apigee Sales

If you are PCF Developer or Operator

Visit www.pivotal.io to learn how to develop and deploy software with cloud native techniquesAsk your Apigee rep for an introduction to Pivotal Sales.

If you are new to Pivotal

Proprietary + Confidential

Thank You