Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
CON7967 Oracle’s API Management Roadmap
Peter Belknap Director, Product Management Cloud and SOA IntegraLon, Oracle Pete Osborne IT Technical Lead IT Business InformaLon PlaQorms, LG&E and KU Luis Weir Principal Architect & Global Lead for OFM SoluLons HCL Technologies
Oracle ConfidenLal – Internal/Restricted/Highly Restricted
Presented with
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Safe Harbor Statement The following is intended to outline our general product direcLon. It is intended for informaLon purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or funcLonality, and should not be relied upon in making purchasing decisions. The development, release, and Lming of any features or funcLonality described for Oracle’s products remains at the sole discreLon of Oracle.
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 3
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle API Management Overview
Oracle API Catalog at LG&E KU
HCL’s Oracle API Management 12c ImplementaLon
Summary and Q&A
1
2
3
4
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 4
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle API Management Overview
Oracle API Catalog at LG&E KU
HCL’s Oracle API Management 12c ImplementaLon
Summary and Q&A
1
2
3
4
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 5
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
APIs are the doors of the digital world.
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 6
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenLal – Internal/Restricted/Highly Restricted 7
B2B
AutomoLve
Public Sector
Finance
Hospitality LogisLcs
Manufacturing SaaS IntegraLon
Mobile
Web
Media
ULliLes
Science
Comm.
Healthcare
Retail
Telco
Energy
Data IntegraLon
ApplicaLon IntegraLon
Things
Data Access
SaaS Apps
eCommerce
API management is essenEal
Billions of endpoints
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
SECURE CATALOG MANAGE
• Secure APIs in the DMZ • API Key generaLon/validaLon • Client Throcling • Security token & protocol mediaLon
• API aggregaLon & mash-‐up
• Catalog for APIs • Lightweight governance • AutomaLon to populate APIs • Rate & Review APIs
• Curate, publish and manage APIs • Find and test APIs • Register applicaLons to use them • Monitor usage at run-‐Lme • Run on-‐premises or in the cloud
Oracle API Management Collect, Publish, Manage and Secure Access to Key Data and Processes
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Oracle Cloud PlaQorm
9
DATA MANAGEMENT
IT OPERATIONS MANAGEMENT
IDENTITY MANAGEMENT
CONTENT & PROCESS
APPLICATION DEVELOPMENT
INTEGRATION
MOBILE
BUSINESS ANALYTICS
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Oracle Cloud PlaQorm: IntegraLon Services
10
• IntegraLon • SOA • API Manager
• Internet of Things • GoldenGate
INTEGRATION
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Key Features § API visibility in the cloud: API Manager provides visibility to APIs through a cloud-‐based portal
§ Protects backend services : API Manager protects backend services by providing a security layer in the cloud
§ Supports on-‐premise and cloud-‐based services : APIs can virtualize both cloud and on-‐premise services
§ Scalability: Easily provision addiLonal resources to scale as needed § Low maintenance: Automated backup and recovery, single click patching
Benefits § Easily expose APIs to internal and external consumers § Provides security to protect backend systems § Rapid and fully automated provisioning § Secure, Highly Available with Clustering
Oracle API Manager Cloud Service The Front Door to Your Digital Business -‐ The PlaPorm for InnovaEon and Speed
NEW!
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Oracle API Manager Cloud Service The Front Door to Your Digital Business -‐ The PlaPorm for InnovaEon and Speed
NEW!
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Focus on the API consumer (applicaEon developer) • Easily build and customize APIs, usage plans, moneLzaLon approaches
for different consumer types • Monitor and control API usage by consumer • ProacLvely engage consumers about new features, usage issues
Security • Ensure that only the right consumers have access to the right resources • Defend against potenLal acacks against your infrastructure
Service OpEmizaEon • Dynamically improve capacity, response Lme and upLme of services • Route requests to the opLmal service
Analysis • Understand how your API is discovered, used and by whom • Keep aware of important happenings in your API ecosystem
API PlaQorm Cloud Service Fully integrated plaPorm for comprehensive API Management
COMING SOON!
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Oracle API Management Roadmap
2013-‐14
Oracle API Gateway Oracle Service Bus 12c
• Enterprise-‐grade service virtualizaLon and DMZ-‐level security
2014 Oracle API Catalog
• Collect, and publish APIs for easy discovery by developers
2015
Oracle API Manager Oracle API Manager Cloud
Service • Create and publish APIs
on-‐premise or in the cloud
• Speed developer API discovery, registraLon and usage tracking
2016
Oracle API PlaPorm Cloud Service
• Integrated API management plaQorm
• Drive digital business • Streamline, control and
accelerate the API development lifecycle
• One-‐stop shopping for API access to SaaS and on-‐premise services and data
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle API Management Overview
Oracle API Catalog at LG&E KU
HCL’s Oracle API Management 12c ImplementaLon
Summary and Q&A
1
2
3
4
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 15
Oracle API Catalog (OAC) In Production
When implementing the Oracle API Catalog (OAC), there are several business decisions to be made prior to harvesting and publishing APIs. These decisions will set the stage for a well organized/usable catalog for the end-user.
Page 17
Oracle API Catalog (OAC) In Production
What are you trying to accomplish with OAC? — A simple library of the API’s available? — A integrated tool in a governance strategy?
What is the intended end user audience? — Development Staff? — Integration Partners?
What API’s will you manage in your catalog? — All services in the environment? — Enterprise level API’s intended as the integration gateways for your
applications?
Page 18
Oracle API Catalog (OAC) In Production
What information do you want/need to capture? — Harvested information and a description for the API? — Use HTML Formatting to enhance Description field to capture additional
details for the API? Where will you harvest API’s from (Dev, QA, Stage, Prod)? — If the API is being consumed for development purposes, doesn’t it make
sense to harvest from the development environment? — For integration partners, should APIs from a staging or production
environment be harvested?
Page 19
Oracle API Catalog (OAC) In Production
At what stage in the API lifecycle will you publish it in OAC? — Do you want developers to be able to leverage service in development
process even before going to testing? — Should the API be stable enough for acceptance testing or production
before publishing it to the catalog? After the usage criteria and processes are defined, API’s can be pulled into OAC …
Page 20
OAC – Step 1: Harvest the API
• Leverage the Harvester command utility to introspect the API, gather details and create the initial catalog entry for the API:
Helpful Hint – the Harvester utility can be wrapped in a Hudson/Jenkins job to provide an easier to use interface.
Page 21
OAC – Step 2: Complete the Draft Entry
• The Harvester will capture API information including the endpoint URL, service type, and methods/operations.
Page 22
OAC – Step 2: Complete the Draft Entry
• Once harvested, the curator can update the catalog entry to update some information and provide additional content pertinent to the API: — Update the Name and Version fields. — Add searchable keywords to help Catalog users find the API more easily
in their searches. — Provide a Documentation URL. — Change the Icon Image – used to visually associate similar API’s
together when the displayed in the list. — Update the Description field to include information about the API’s
functionality.
Page 23
OAC – Step 2: Complete the Draft Entry
• The Description field recognizes HTML formatting tags, which expands its capability.
• Rather than just free form text, the curator can use a HTML template to create additional label/value pairs in the Description field.
• These HTML tags provide a mechanism to capture the information in a consistent manner for all API’s, lending to OAC’s usability as part of a governance solution.
Page 24
OAC – Step 2: Complete the Draft Entry
• Description Examples: Free Form Text: Formatted Details:
Page 25
OAC – Step 3: Publish the API Entry
• After adding all of the information for an API, the Curator will change the API Status to ‘Published’ and keep the Active Status as ‘Active’. This will make the catalog entry visible to the developer:
Page 26
OAC – Step 4: View/Consume API Entry
• Once published, the API will appear in the catalog list:
Page 27
OAC – LG&E and KU’s Implementation
• OAC is used a design time catalog for developers to determine what API’s are available for integration.
• The catalog is not meant to be viewed by integration partners. It is for internal integration development.
• APIs are harvested from the development environment • Harvesting occurs as part of a migration from the Development
Environment to the QA environment as part of a set of governance tasks.
• The API is published after harvested. Endpoints and any additional details regarding QA and Production are updated when the API is migrated to those environments.
Page 29
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle API Management Overview
Oracle API Catalog at LG&E KU
HCL’s Oracle API Management 12c ImplementaLon
Summary and Q&A
1
2
3
4
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 30
Copyright © 2014 HCL Technologies Limited | www.hcltech.com
HCL API ManagementLuis Weir Oracle ACE DirectorPrincipal Architect / Global Lead OFM Solutions [email protected] hcp://uk.linkedin.com/in/lweir @luisw19 hcp://www.soa4u.co.uk/
Copyright © 2014 HCL Technologies Limited | www.hcltech.com 32
Cloud
Firewall
EDI, RosettaNet, Custom/SOAP, etc REST / JSON REST / JSON & SOAP /XML REST / JSON
Threads
ERP MDM BI LEGACY
Social MediaSaaS ApplicationsMobile AppsBusiness /
Trading Partners
The need for API’s
Want to save costs with SaaS but don’t know how? Business is worry about data
migration and integration
Don’t have a cloud or mobile integration strategy…
Departments are building point-to-point integrations to the cloud
on their own….
Business expect us to deliver solutions to
market quickly…
All vendors talk about API’s. Do I throw away my SOA Investment? Do I need new technologies? What
do I need?Urgent need for Mobile Solution
mean that departments are building ad-hoc Mobile Apps and APIs
Copyright © 2014 HCL Technologies Limited | www.hcltech.com 33
API Management
CloudSocial Media &
other Cloud Platforms
SaaS ApplicationsMobile Apps
DMZ
Marketing & Offer Management
Financial & Asset Management
Supplier/Partner Relationship Management
Customer Relationship Management
Supply Chain Management
SOA Domains
EnterpriseBusinessServices
EDI, RosettaNet, Custom/SOAP, Files. etc REST / JSON REST / JSON & SOAP /XMLREST / JSON
IntegraLon-‐pacerns: Request/Reply, Pub/Sub, Pull/Push, Change Data Capture, Batch IntegraLon Adapters: SOAP, Database, JMS, AQ, Legacy, etc
Threads
Developer Communities
Business / Trading Partners
ERP MDM BI LEGACY
X Enroll Discovery Subscribe AuthenticatePromote Operate Monitor Analyze Authorize Secure Prevent
SOA
Gov
erna
nce
Application Services
Governance
SOA + API Management: Ready for Digital
Copyright © 2014 HCL Technologies Limited | www.hcltech.com 34
• APIM readiness assessment
• APIM strategy elaboration
APIMStrategy
• Elaborate APIM governance framework
• Install and configure design-time and runtime governance tools
• Implement DevOps
Foundation• Solution architecture(s)
design for Pilot:• Detail planning• Pilot
Pilot
• Establish the factory with processes and tools
API Factory
HCL’s API Management Implementation Approach
Week 1 to 4 Week 5 to 12 Week 13 to 18 Week 18 to 22(optional)
Copyright © 2014 HCL Technologies Limited | www.hcltech.com 35
0.0#
0.5#
1.0#
1.5#
2.0#
2.5#
3.0#
API$Gateway$
API$Manager$
API$Catalog$
DevOps$
APIM$Product$Evalua;on$Results$Summary$
MuleSo.#
Mashery#
Oracle#APIM#Suite#
APIM Product Selection
2
DMZ$2%$
Policy$enforcement$and$defini6on$point$
3%$
AuthN$&$AuthZ$(Oauth$2.0,$WSE*,$etc)$2%$
Confiden6ality$and$integrity$2%$
Audi6ng$2%$
OWASP$thread$protec6on$3%$
Service$externaliza6on$2%$
ThroNling$2%$
Streaming$$2%$
Protocol$conversions$2%$
Hybrid$deployment$models$(cloud,$onprem,$both)$
2%$
Extensibility$and$APIs$1%$Responsive$API$portal$
3%$
Community$management$(onboarding,$selfEservice,$RBAC,$etc)$
3%$
API$lifecycle$management$(create,$test,$promote,$deprecate,$re6re)$
3%$API$documenta6on$$
2%$
CDLs$support(i.e.$RAML,$WADL,$Swagger,$etc)$2%$
API$run6me$opera6ons$2%$
API$Metering$and$charge$
back$(billing)$2%$
Governor$limits$(total$calls$per$day,$concurrent$sessions,$etc)$
2%$API$keys$
genera6on$2%$
Hybrid$deployment$models$(cloud,$onprem,$both)$
2%$Extensibility$and$APIs$
2%$Responsive$online$catalog$
3%$
API$and$service$harves6ng$
3%$
Discovery$features$(based$on$metadata,$wildcards,$etc)$
3%$
Cataloguing$and$categoriza6on$capabili6es$
3%$
API$interdependency$management$2%$
Comprehensive$repor6ng$3%$
Integra6on$with$run6me$engines$$3%$
Hybrid$deployment$models$(cloud,$onprem,$both)$
3%$
Extensibility$and$APIs$2%$
Agile$methodologies$alignment$2%$
Project$/$team$online$management$tools$2%$
Online$collabora6on$tools$&$$knowledge$Base$3%$
Con6nuous$integra6on$2%$
Regression$tes6ng$2%$
Deployment$automa6on$2%$
Centralized$administra6on$2%$
End$to$end$transac6on$monitoring$2%$
Opera6onal$monitoring$2%$ SLA$management$
2%$ADP$
management$2%$
Infrastructure$provisioning$and$config$management$$automa6on$
2%$APIM%Evaluta,on%Criteria%Summary%
1Create Evaluation Criteria Compare all capabilities based on 4 key pillars
Copyright © 2014 HCL Technologies Limited | www.hcltech.com 36
DMZ Firewall
Internet
Oracle SOA/BPM Suite
WLS Domain 1
Oracle API Catalog (OAC)
WSM: WS-Policy
Mobile Devices
Harves
t
REST / JSON
Green-Zone Firewall
Oracle API Gateway (OAG)
Oracle API Manager (OAPIM)
REST / JSON
XML / SOAP
Oracle SOA/BPM Suite
WSM: WS-Policy
WLS Domain N…
EM
Fusion Middlew
are C
ontrol
XML / SOAP
Web Proxy
App Developers
Discovery, Use, Collaborate
Service/APIs Architects & Developers
EM
Fus
ion
Mid
dlew
are
Con
trol
Oracle Enterprise Manager Cloud Control
Discover/rate public and private services and APIs
Publish & discover, manage, monitor public
APIs
Harvest
Secure & Expose
SaaS Applications
Others….
REST / JSON, XML / SOAP, others…
Har
ves
t
HCL Reference Platform for Oracle API Management
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle API Management Overview
Oracle API Catalog at LG&E KU
HCL’s Oracle API Management 12c ImplementaLon
Summary and Q&A
1
2
3
4
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 37
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 38
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 39
Which Oracle API Management product was just released as a Cloud Service?
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 40
Which Oracle API Management product was just released as a Cloud Service?
§ Oracle API Manager Cloud Service
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 41
Which Oracle API Management product was just released as a Cloud Service?
§ Oracle API Manager Cloud Service
What is Pete’s recommended API lifecycle stage for harvesLng into the catalog?
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 42
Which Oracle API Management product was just released as a Cloud Service?
§ Oracle API Manager Cloud Service
What is Pete’s recommended API lifecycle stage for harvesLng into the catalog?
§ Development -‐> QA
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 43
Which Oracle API Management product was just released as a Cloud Service?
§ Oracle API Manager Cloud Service
What is Pete’s recommended API lifecycle stage for harvesLng into the catalog?
§ Development -‐> QA
What are the four key pillars of API Management in Luis’ evaluLon graph?
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Quiz QuesLons
Oracle ConfidenLal – Internal/Restricted/Highly Restricted 44
Which Oracle API Management product was just released as a Cloud Service?
§ Oracle API Manager Cloud Service
What is Pete’s recommended API lifecycle stage for harvesLng into the catalog?
§ Development -‐> QA
What are the four key pillars of API Management in Luis’ evaluLon graph?
§ API Manager, API Gateway, API Catalog, DevOps
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Oracle API Management Roadmap
2013-‐14
Oracle API Gateway Oracle Service Bus 12c
• Enterprise-‐grade service virtualizaLon and DMZ-‐level security
2014 Oracle API Catalog
• Collect, and publish APIs for easy discovery by developers
2015
Oracle API Manager Oracle API Manager Cloud
Service • Create and publish APIs
on-‐premise or in the cloud
• Speed developer API discovery, registraLon and usage tracking
2016
Oracle API PlaPorm Cloud Service
• Integrated API management plaQorm
• Drive digital business • Streamline, control and
accelerate the API development lifecycle
• One-‐stop shopping for API access to SaaS and on-‐premise services and data
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
#SOA12c #oracleAPI
Copyright © 2014, Oracle and/or its affiliates. All rights reserved– ConfidenLal Oracle Restricted .
46
Join the Community Visit us on Oracle Technology Network
Oracle SOA blog blogs.oracle.com/SOA
Oracle SOA Website h`p://bit.ly/soaotn
Connect with Oracle on Social Media
OR connect via the web
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenLal – Internal 47
Classroom Training
Learning SubscripLon
Live Virtual Class
Training On Demand
Keep Learning with Oracle University
educaEon.oracle.com
Cloud
Technology
ApplicaLons
Industries
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |
Session Surveys
Help us help you!! • The [Program Commicee J1] [organizing commicee OW] would like to invite you to take a moment to give us your session feedback. Your feedback will help us to improve your conference.
• Please be sure to add your feedback for your acended sessions by using the Mobile Survey or in Schedule Builder.
Oracle Confidential – Internal/Restricted/Highly Restricted 48