Microservices Expo Authors: Pat Romanski, Elizabeth White, Liz McMillan, Stackify Blog, Andreas Grabner

Blog Feed Post

Long Live API Management

It’s death came furiously and quick, like an earthquake shaking the carefully constructed buzzword tower engineered by Enterprise software marketers around the world. Anne Thomas Manes proclaimed the death of SOA back in 2009 in her seminal blog “SOA is dead; Long Live Services.” Yet here we are in late 2013, over four years later still wrestling with this undead terminology. We have analysts publishing new reports referencing SOA, popular blogs with references to the dreaded “SOA-saurus” and  we have companies with SOA in their name (still), and while #SOA now denotes the hash-tag for the popular show “Son’s of Anarchy” there was in fact a time when this term was heralded. With all of the recent activity and ‘fire’ in the API Management, let’s resolve to engulf and bury SOA once and for all.

SOA is Still Dead - Long Life to API Management

SOA is Still Dead

SOA promised to be the goose that laid a golden egg for Enterprises, and then we killed it. Whoops. So what’s a good Enterprise to do now? APIs and API Management are the rage, yes, but there is a lot of confusion out there. There is talk of open APIs, public APIs, and private APIs. Talk of developer communities and partner developers. There is talk of governance (this word is just a little bit too close to SOA, it scares me) and policy life-cycles (hold me back from the excitement). And then there are artificial categories created. Some say that if you are doing internal stuff that’s “SOA” and if you are doing external stuff, that’s “APIs.” I’m not so sure… ever heard of WS-Security for external B2B WS-* exchanges?

Or, if you’re doing “business agility” and “application integration”, well that’s “SOA” and if you are doing developer communities, well, *that’s APIs*. Or, if its social and cool, that’s an API and if its boring and ‘Enterprisey’, that’s SOA. All of this is hogwash. Let’s agree now that Anne had it right – long live services.

#SOA star Tara Knowles - Long Live API Management

#SOA star Tara Knowles

And let’s also agree that while the term “APIs” is a bit jargony (is that a word?) and thumbs its nose at CS degree holders everywhere, the term is infinitely more descriptive than SOA. Here comes the popular culture Netflix-analogy: If orange is the new black, APIs are the new SOA, but APIs are a long way from a low security women’s detention facility. Furthermore, API Management and services should run deep within the organization; an artificial split between SOA and APIs is nonsensical. Amazon, in their famous example of adopting a service model simply declared that their internal systems would have published, stable interfaces or the developers would be fired. That’s what we call a services strategy folks. The concept of API Management is more descriptive and includes all of the important concepts of SOA. Web services are APIs. Call them APIs, don’t call them SOA unless you want to artificially date yourself. Remember: In the tech world, 4 years is like 40 years in real-life, so do the math. It’s time to bring these two worlds together, to forcefully bring these two old friends to the bar and agree to be the same thing and share a drink. Don’t be fooled into a false dichotomy.

It’s an unfortunate aspect that the history of this subject brings these categories which are hard to shake. Let’s talk in plain language about what is needed.

 Enterprise API Management Requirements

Enterprises need to:

  1. Turn existing business assets into well-defined, stable interfaces, suitable for internal, partner, or public consumption.
  2. Provide scalability, security and control for these interfaces and corresponding back-end systems
  3. Ensure compliance for data transferred through these interfaces
  4. Publish interface definitions and accelerate use among internal, partner or public developers
  5. Deploy such infrastructure in a flexible, yet cost-effective means

And lastly, item 6: Manage change throughout items 1 through 5.

What about API lifecycle? That’s covered in #1. What about hosting choices? That’s covered in #5. What about SOA registry/repository? That’s covered in #4. What about Hackathons? That’s covered in #4. What about reuse? That’s covered in #4. What about OAuth? That’s covered in #2. What about a developer portal? That’s covered in #4.

The truth is, once you boil down the requirements into the essentials, it’s easy to see that SOA and APIs live rather harmoniously. It isn’t ‘decisive’ that REST is always easier than SOAP. What if you’ve been using SOAP for the last 10 years in your organization? The costs to rip and replace could be quite expensive. Similarly, it isn’t ‘decisive’ that JSON should be the format for all API calls – what if you aren’t (gasp) exposing data to a mobile application?  The answer is both. Enterprises should use whatever weapon is available to get the job done and if they want real business agility, ditch the jargon.

This is the way we see it at Intel with Expressway and API Management. We want to help Enterprises get moving on their projects. We can help you with your progression to deploying cost effective API management solutions – no matter how they are deployed and where you are across items 1-5 above. The progress of APIs becoming a larger part of the daily lexicon is happening and has happened. Just the other day I heard my non-technical sister-in-law talking about the unofficial Vine API. When members of the general public understand your job, your ship has come in. Intel can help your ship come in with API Management today.

The post Long Live API Management appeared first on Application Security.

Read the original blog entry...

More Stories By Application Security

This blog references our expert posts on application and web services security.

Microservices Articles
In his session at 20th Cloud Expo, Scott Davis, CTO of Embotics, discussed how automation can provide the dynamic management required to cost-effectively deliver microservices and container solutions at scale. He also discussed how flexible automation is the key to effectively bridging and seamlessly coordinating both IT and developer needs for component orchestration across disparate clouds – an increasingly important requirement at today’s multi-cloud enterprise.
While some developers care passionately about how data centers and clouds are architected, for most, it is only the end result that matters. To the majority of companies, technology exists to solve a business problem, and only delivers value when it is solving that problem. 2017 brings the mainstream adoption of containers for production workloads. In his session at 21st Cloud Expo, Ben McCormack, VP of Operations at Evernote, discussed how data centers of the future will be managed, how the p...
In his session at 20th Cloud Expo, Mike Johnston, an infrastructure engineer at Supergiant.io, discussed how to use Kubernetes to set up a SaaS infrastructure for your business. Mike Johnston is an infrastructure engineer at Supergiant.io with over 12 years of experience designing, deploying, and maintaining server and workstation infrastructure at all scales. He has experience with brick and mortar data centers as well as cloud providers like Digital Ocean, Amazon Web Services, and Rackspace. H...
Most DevOps journeys involve several phases of maturity. Research shows that the inflection point where organizations begin to see maximum value is when they implement tight integration deploying their code to their infrastructure. Success at this level is the last barrier to at-will deployment. Storage, for instance, is more capable than where we read and write data. In his session at @DevOpsSummit at 20th Cloud Expo, Josh Atwell, a Developer Advocate for NetApp, will discuss the role and value...
DevOps is under attack because developers don’t want to mess with infrastructure. They will happily own their code into production, but want to use platforms instead of raw automation. That’s changing the landscape that we understand as DevOps with both architecture concepts (CloudNative) and process redefinition (SRE). Rob Hirschfeld’s recent work in Kubernetes operations has led to the conclusion that containers and related platforms have changed the way we should be thinking about DevOps and...
Modern software design has fundamentally changed how we manage applications, causing many to turn to containers as the new virtual machine for resource management. As container adoption grows beyond stateless applications to stateful workloads, the need for persistent storage is foundational - something customers routinely cite as a top pain point. In his session at @DevOpsSummit at 21st Cloud Expo, Bill Borsari, Head of Systems Engineering at Datera, explored how organizations can reap the bene...
Is advanced scheduling in Kubernetes achievable?Yes, however, how do you properly accommodate every real-life scenario that a Kubernetes user might encounter? How do you leverage advanced scheduling techniques to shape and describe each scenario in easy-to-use rules and configurations? In his session at @DevOpsSummit at 21st Cloud Expo, Oleg Chunikhin, CTO at Kublr, answered these questions and demonstrated techniques for implementing advanced scheduling. For example, using spot instances and co...
In his session at 20th Cloud Expo, Mike Johnston, an infrastructure engineer at Supergiant.io, will discuss how to use Kubernetes to setup a SaaS infrastructure for your business. Mike Johnston is an infrastructure engineer at Supergiant.io with over 12 years of experience designing, deploying, and maintaining server and workstation infrastructure at all scales. He has experience with brick and mortar data centers as well as cloud providers like Digital Ocean, Amazon Web Services, and Rackspace....
Skeuomorphism usually means retaining existing design cues in something new that doesn’t actually need them. However, the concept of skeuomorphism can be thought of as relating more broadly to applying existing patterns to new technologies that, in fact, cry out for new approaches. In his session at DevOps Summit, Gordon Haff, Senior Cloud Strategy Marketing and Evangelism Manager at Red Hat, discussed why containers should be paired with new architectural practices such as microservices rathe...
SYS-CON Events announced today the Kubernetes and Google Container Engine Workshop, being held November 3, 2016, in conjunction with @DevOpsSummit at 19th Cloud Expo at the Santa Clara Convention Center in Santa Clara, CA. This workshop led by Sebastian Scheele introduces participants to Kubernetes and Google Container Engine (GKE). Through a combination of instructor-led presentations, demonstrations, and hands-on labs, students learn the key concepts and practices for deploying and maintainin...