Manage, scale, secure, and build APIs and apps Hex #FC4C02 Hex #54585A
Manage, scale, secure, and build APIs and Apps with is designed to unite the best of Internet and enterprise technologies to provide rock-solid reliability, and enterprise-grade flexibility all in the industry s most complete and unified platform. provide the foundation that meets digital business requirements by providing a modern architecture that enables you to manage, scale, secure, and build the APIs and Apps that deliver value in the digital economy. API Management is an important component of API Services but not sufficient to address all the infrastructure requirements for digital services. adds an API Backend as a Service (BaaS), vertically integrated security, and flexible API Programmability for a unified and complete foundation. API Management Fig. 1: Configurable policies securely transform existing back-ends to APIs Manage access to APIs via OAuth or other security schemes Protect your organization and customers against XML specific threats and sensitive data exposure Manage API versioning with a virtualization layer that abstracts customers from your API Control and throttle API traffic using quotas or create a safety valve using API rate-limiting API Management enables the transformation of existing backend services to APIs with over 30 policies designed for configure rather than code deployment, which simplifies customer self-service and reduces time-to-value. Transform from any API protocol to any other, including SOAP, REST, JSON, XML binary, or custom protocol 1
API BaaS The API Backend as a Service provides web and mobile App developers with a cloud datastore and services that simplify building Apps including user management, push notifications, and social networking and geolocation services. BaaS - Use the built-in Backend as a Service to enable new data services such as social graphs, geo-location, and push notifications with a cloud scale datastore User Management - Add and manage users by providing the core services necessary for secure registration and log in, including OAuth 2.0-compliant client authentication Datastore - Extend existing data systems with the information needed by today s modern, socially connected apps. Location - Capture geolocation data from users GPS-enabled devices and associate with places, activities, events, people and devices Social Take advantage of the benefits of increased social interaction with social graphs that show user location, activity streams that enable publishing of user actions, comments, activities, and tweets Push notifications - Reach app users with messages they care about with highly targeted and effective events and notifications. Partner Services Datastore Pre- Built Existing Backend User Data Connections/ Social Location Inquiries Push Notifications Fig. 2: Pre-built services streamline development of modern, socially aware Apps 2
Security In the world of accelerated digitization, the IT mandate is still to provide secure access to services while protecting customers and the business from threats, back-end overload, and service issues. Edge provides a unified security infrastructure that ensures optimized performance, reduced latency, and enterprisegrade security. Edge security capabilities include: Fig. 3: Configurable security policies Role-based access control (RBAC) - Fine-grained policy management for authorization Authentication for users, developers, and administrators Authentication for APIs via OAuth, SAML, and LDAP Threat protection against XML, JSON, and DoS attacks Content-based routing, rate-limiting, and protection against traffic spikes Performance optimization and throttling on back-end connections 3
API Programmability Social can be extended increasing flexibility and how they are used. Apigee enables developers a choice of options with support for JavaScript, Java, Python, and node.js. The rapid growth of node.js enables developers to Mobile Web http/https Rate Limit Fault Handling Threat Protection XSL OAuth Service Callout JS/Java Callout Cache Native Node.js container Load Balancing Fall-over http/https Backend Service address a number of custom requirements. Developers can add to Node.js, Apigee API management features, such as OAuth security and traffic management, using Apigee configuration capabilities. Create custom logic and perform complex Management UI Fig. 4: Node.js in the environment transformations Build API and App backends and mediate and orchestrate backend systems Enrich apps with security, traffic management, and protocol transformation logic using the 30+ existing policies Build mash-ups and composite services by orchestration or aggregation of existing APIs and web services Rapidly mock up and prototype new APIs quickly using a web framework like Express or an API framework like Argo Licensing and Deployment is available either as a cloud service subscription or for on-premises deployment. An subscription is included in all Edge cloud configurations. For additional throughput performance an Pack provides additional API Services infrastructure On-premises deployment is licensed on a 4 core or 8 core basis API BaaS is sold separately In addition, these applications can take advantage of the tens of thousands of third-party modules that the Node.js community has already created, making new capabilities available to Apigee users. 4