Building an API Centric SOA with WSO2 Platform

Sumedha Rubasinghe

WSO2

We will talk aboutAPI creation, hosting, management, monitoring capabilities

in WSO2 Platform.

Conceptual Model of SOA Architectural Style

Source : https://www.ibm.com/developerworks/library/ws-soa-design1/

Attributes of SOA

Source : https://www.ibm.com/developerworks/library/ws-soa-design1/

Layers of a SOA

Source : https://www.ibm.com/developerworks/library/ws-soa-design1/

End result?

Where you SOA is now?

● Re-usable Services

● Discoverable?

- UDDI? Service Registry?

● What’s the usage ratio?

- 1 Service -> n consumers

- How do you keep track of subscribers?

● How it’s provisioned?

● How access is managed?

Missing Piece?

Convert your naked service into a managed API.

Managed APIs can help businesses to connect & grow.

http://www.kapruka.com

Every business is a digital business.

Digital businesses can be connected business.

WSO2 helps businesses to connect.

WSO2 Platform, 2012

WSO2 Platform, 2013

API is a formidable way for businesses to connect.

Presence of APIs are becoming pervasive.

API Adoption ...

Source : http://www.slideshare.net/jmusser/j-musser-apibizmodels2013

Some interesting API usage statistics ...

Source : http://blog.programmableweb.com/2011/05/25/who-belongs-to-the-api-billionaires-club/

API is the product.

API is the product.

Recap

● Every business is a digital business● APIs allow digital businesses to connect● APIs adoption is vastly increasing and becoming

pervasive● In some businesses API is the main product● SOA focused on implementation. APIs focus on

consumption.

Apps, App Stores

Transaction happens through interactions.

Interaction happens through Apps/portals.

APIs make Apps/Portals possible.

APIs need to be designed and implemented.

WSO2’s Tooling support for creating/designing APIs

● WSO2 Developer Studio

● WSO2 App Factory

● WSO2 Service Repository

● WSO2 Governance Registry

APIs need to be hosted.

Support for hosting APIs in WSO2 Platform

● WSO2 ESB● WSO2 AS● WSO2 DSS● WSO2 G-Reg● WSO2 UES● App Factory● WSO2 Cloud

● Scalable deployment, caching, state replication, configuration management,

user/access management, authorization policies, multi tenancy

APIs need to be managed as well.

What is API Management?

● Dumb API -> Intelligent API● Authentication & Authorization

- Subscription Management - Access Provisioning

● How to control access? - Throttling

● Monitoring & SLA

APIs need to be tested (and automated).

Recap

● Txns happen through interactions● End users interact through Apps● APIs facilitate App Economy● WSO2 platform supports creating, managing &

hosting APIs● Also provides an automation testing framework

Developers use APIs to build Apps.

How Developers interact with APIs?

● Discover APIs● Research about the API (docs, comments, rating,

forums)● Try out the API● Subscribe to API & develop application

Collaboration with developers create better APIs.

API Portal facilitates collaboration.

Tool to manage application development is always an advantage.

WSO2 App Factory

WSO2 App Factory

Application development tool can also provide easy integration with APIs.

Recap

● Developers use APIs to create Apps● Collaboration with developers help improve APIs● Providing application development infrastructure can

boot API centric initiative

(End) user interactions generate data.

How (end) users interact with App should be captured.

WSO2 platform can capture data

● Agents in all interaction points - Capture data - Publish data - Store data (scalably)

● Attribute of captured data - Quality - Volume - Customizable

Analytics generate insight out of captured interaction data.

WSO2 platform can also analyse data

● Online Analytics - Complex Event Processing - Siddhi

● Offline Analytics - Hive - Hadoop

if (interactions -> data)Interactions need to be smooth.

How to make end user interactions smooth?

● BYOD - interaction through different devices● Mobile/bandwidth friendly technologies/techniques

- Push notifications - JSON, MQTT - Caching - MBaaS

Apps should be showcased for the end user to discover.

WSO2 Enterprise Store

Interaction with existing/known identity stores

● Connecting to existing user bases - Corporate LDAP, AD, DB

● Connecting global user bases - Login using Facebook, Whatsup, Twitter, G+ - Also applicable to developers

- Github, G+● Federating Identities

- BYOID

SSO provides smoother interaction between Apps.

And a place to manage all App subscriptions can save lot of time for the end user.

WSO2 App Manager

With all these, end user interactions can be intense.

Support for scalable deployment & multi tenancy for cost effectiveness.

Interactions can be malicious too...

Malicious usage pattern detection

● No longer a sole task of firewall● APIs go beyond traditional networking boundaries● APIs expose business● Hackers can now directly attack your core business

Shouldn’t we be talking about going up there?

Heaven?

Cloud !!

Gartner Says Nearly Half of Large Enterprises Will Have Hybrid Cloud Deployments by the End of 2017.

(http://www.gartner.com/newsroom/id/2599315)

WSO2 Cloud : The Future today !!

● WSO2 Cloud● Apache Stratos

- Cartridges for API building blocks● Cloud connector - Supporting hybrid clouds

Recap - no more !!

● Every business is a digital business.● Digital businesses are meant to be connected.● WSO2 helps businesses to connect.● APIs are a formidable way to connect businesses.● Being API centric increases the way your business can

connect to other businesses.● Going API centric requires futuristic design, guidance, tools

& infrastructure.● WSO2 has helped many customers to jump the API hurdle.

Thank you for listening.