Click here to close now.

Welcome!

MICROSERVICES Authors: Elizabeth White, Dana Gardner, ScriptRock Blog, Cynthia Dunlop, Adrian Bridgwater

Related Topics: MICROSERVICES, .NET, Virtualization, Web 2.0, Cloud Expo, SDN Journal

MICROSERVICES: Blog Post

API Management Predictions for 2014

The New Year is fast approaching and it’s time for some wild, speculative predictions on API Management for 2014

The New Year is fast approaching and it’s time for some wild, speculative predictions on API Management for 2014. As I mentioned in earlier posts, the space is has been rapidly maturing over the second half of 2013 with larger vendors such as IBM, Tibco and Intel making big moves. In Q3, 2013 Gartner sized the standalone API management market for 2013 at about $100M (70MM in 2012 with 40% expected growth).

The total market size as estimated here may seem small  but  this market intersects with the more traditional, and larger ($474M in 2012), SOA governance market because API management products both complement SOA governance and act as substitutes. The growth and success of API management programs, both public and internal, cause Enterprises to look at how they were handling their existing non-managed SOAP & REST APIs. This second look raises questions about how APIs and interfaces might be better managed in the future, especially when you have to address new demands and channels such as different screen types, developer communities, customers, partners, and devices. So what will 2014 bring? Here are my six API management predictions for 2014.

  1. SOA will reincarnate itself or die a second time – Services are alive and well and service orientation has reached the plateau of productivity, but unless Enterprises find a way to socialize APIs locked up in their existing SOA governance systems, these incumbent products will be quickly passed over in favor of new ways of sharing APIs – a simple developer portal. This services evangelism race is about marketing interfaces to developers and at the starting line developer portals are the Tesla Model S and SOA registry/repositories are the U-Haul. One vehicle you want to drive and the other you drive only when you have to.  If you don’t believe me, try searching a UDDI directory and compare that experience to this. The prediction here is that traditional SOA governance solutions will evolve to compete on experiences and improved sharing of API metadata or die trying.
  2. Internal API management will be the silent killer app – We have seen quote after quote this year from Netflix, and Programmable Web that Internal API management, which translates into a shared services layer for use by internal applications, is one of the largest, albeit hidden use cases. For newcomers to the space peppered with exciting stories of public and open developer programs, this is a shock, but only because internal API management programs aren’t advertised. The prediction here is that your company is probably already running with hundreds of internal APIs that lack management, are difficult to discover and document, and hard to use by internal developers, existing applications and partners. API management opportunities are likely under your nose in the form of exposing these APIs outside or helping your organization share data internally more efficiently.
  3. Mobile enablement will lead the way – APIs expose data to mobile devices. Without them, all of the ‘app’ experiences we have on tablets and smart-phones would be silo’d. Think back to the days of PC computing before modems or the Internet. That is what an app would be like without an API today. Almost every Enterprise we talk to has a mobile strategy that involves moving traditional IT services to an API layer to make new experiences available to their employees, powered by APIs. The prediction here is that second to internal use, mobile enablement will drive the use of API management and security for external interfaces in 2014.
  4. Security concerns will take center stage – As screen types proliferate, Enterprises will need a strategy and approach for API security that covers more than just enabling “OAuth”. As internal systems participate in API management, a security layer will be needed to decouple perimeter defense, denial of service protection, JSON attack protection, compliance, authentication, authorization and message level security. Otherwise, the ability for an Enterprise to scale its APIs externally will be limited by number of security developers and their expertise in the myriad middleware systems and programming languages in use at the Enterprise. The prediction here is that in order to scale their API management programs Enterprises will need to implement an API governance and delivery tier, whether on-premise or in the cloud – done with or without a vendor product.
  5. IoT could be a bull in the china shop – IoT promises a vision of Wireless sensor networks and low powered devices becoming part of the Industrial Internet. Once enabled, data from sensors could and eventually be exposed through APIs. If sensor data converges on REST (or SOAP) as the final consolidation point demand for API management could skyrocket beyond what we have seen to date, possibly altering the Gartner market size estimates in a big way.
  6. API management will be a journey – In 2014, API management will evolve to a suite or platform approach, rather than point tools and the vendor or vendors that can best easily fit into a heterogeneous environment with flexible products will be best positioned to compete. Here is what the journey might look like: Enterprises can start anywhere with API management – some may begin with an open developer program, move to internal API management and then eventually deploy API management in a hybrid architecture. Or, some Enterprises may start only with internal API management and devise a business case and marketing plan for long-tail exposure of their products through an open API developer program. Whenever they start, API management will be an enabler of a particular business model, either driving down costs or providing new sources of value.
API Management Enables Internal APIs

Expressway helps Enterprises power internal and hybrid APIs

The post API Management Predictions for 2014 appeared first on Application Security.

Read the original blog entry...

More Stories By Blake Dournaee

Blake Dournaee is currently the product manager responsible for Intel SOA products. As a product manager at Sarvega, he was deeply involved in the development of their flagship XML security, routing and acceleration appliance products. He was a specialist in applied cryptography applications at RSA Security and was a frequent speaker at many RSA conferences throughout the US and Europe. Dournaee is an established author who wrote the first book on XML Security and co-authored SOA Demystified from Intel press.

@MicroservicesExpo Stories
While poor system performance occurs for any number of reasons (poor code, understaffed teams, inadequate legacy systems), this week’s post should help you quickly diagnose and fix a few common problems, while setting yourself up for a more stable future at the same time. Modern application frameworks have made it very easy to build not only powerful back-ends, but also rich, web-based user interfaces that are pushed out to the client in real-time. Often this involves a lot of data being transf...
InfoScout in San Francisco gleans new levels of accurate insights into retail buyer behavior by collecting data directly from consumers’ sales receipts. In order to better analyze actual retail behaviors and patterns, InfoScout provides incentives for buyers to share their receipts, but InfoScout is then faced with the daunting task of managing and cleansing that essential data to provide actionable and understandable insights.
Best practices for helping DevOps and Test collaborate in ways that make your SDLC leaner and more scalable. The business demand for "more innovative software, faster" is driving a surge of interest in DevOps, Agile and Lean software development practices. However, today's testing processes are typically bogged down by weighty burdens such as the difficulty of 1) accessing complete Dev/Test environments; 2) acquiring complete, sanitized test data; and 3) configuring the behavior of the environm...
As a group of concepts, DevOps has converged on several prominent themes including continuous software delivery, automation, and configuration management (CM). These integral pieces often form the pillars of an organization’s DevOps efforts, even as other bigger pieces like overarching best practices and guidelines are still being tried and tested. Being that DevOps is a relatively new paradigm - movement - methodology - [insert your own label here], standards around it have yet to be codified a...
SYS-CON Events announced today that Solgenia will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY, and the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Solgenia is the global market leader in Cloud Collaboration and Cloud Infrastructure software solutions. Designed to “Bridge the Gap” between Personal and Professional S...
SYS-CON Events announced today that MangoApps will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY., and the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. MangoApps provides private all-in-one social intranets allowing workers to securely collaborate from anywhere in the world and from any device. Social, mobile, and eas...
Learn the top API testing issues that organizations encounter and how automation plus a DevOps team approach can address these top API testing challenges. Ensuring API integrity is difficult in today's complex application cloud, on-premises and hybrid environment scenarios. In this interview with TechTarget, Parasoft solution architect manager Spencer Debrosse shares his experiences about the top API testing issues that organizations encounter and how automation and a DevOps team approach can a...
Chef and Canonical announced a partnership to integrate and distribute Chef with Ubuntu. Canonical is integrating the Chef automation platform with Canonical's Machine-As-A-Service (MAAS), enabling users to automate the provisioning, configuration and deployment of bare metal compute resources in the data center. Canonical is packaging Chef 12 server in upcoming distributions of its Ubuntu open source operating system and will provide commercial support for Chef within its user base.
After what feel like an interminable cycle of media frenzy followed by hype and hysteria cycles, the practical elements of real world cloud implementations are starting to become better documented. But what is really different in the cloud? How do software applications behave, live, interact and interconnect inside the cloud? Where do cloud architectures differ so markedly from their predecessors that we need to learn a new set of mechanics – and, when do we start to refer to software progra...
When it comes to microservices there are myths and uncertainty about the journey ahead. Deploying a “Hello World” app on Docker is a long way from making microservices work in real enterprises with large applications, complex environments and existing organizational structures. February 19, 2015 10:00am PT / 1:00pm ET → 45 Minutes Join our four experts: Special host Gene Kim, Gary Gruver, Randy Shoup and XebiaLabs’ Andrew Phillips as they explore the realities of microservices in today’s IT worl...
The world's leading Cloud event, Cloud Expo has launched Microservices Journal on the SYS-CON.com portal, featuring over 19,000 original articles, news stories, features, and blog entries. DevOps Journal is focused on this critical enterprise IT topic in the world of cloud computing. Microservices Journal offers top articles, news stories, and blog posts from the world's well-known experts and guarantees better exposure for its authors than any other publication. Follow new article posts on T...
Even though it’s now Microservices Journal, long-time fans of SOA World Magazine can take comfort in the fact that the URL – soa.sys-con.com – remains unchanged. And that’s no mistake, as microservices are really nothing more than a new and improved take on the Service-Oriented Architecture (SOA) best practices we struggled to hammer out over the last decade. Skeptics, however, might say that this change is nothing more than an exercise in buzzword-hopping. SOA is passé, and now that people are ...
Hosted PaaS providers have given independent developers and startups huge advantages in efficiency and reduced time-to-market over their more process-bound counterparts in enterprises. Software frameworks are now available that allow enterprise IT departments to provide these same advantages for developers in their own organization. In his workshop session at DevOps Summit, Troy Topnik, ActiveState’s Technical Product Manager, will show how on-prem or cloud-hosted Private PaaS can enable organ...
For those of us that have been practicing SOA for over a decade, it's surprising that there's so much interest in microservices. In fairness microservices don't look like the vendor play that was early SOA in the early noughties. But experienced SOA practitioners everywhere will be wondering if microservices is actually a good thing. You see microservices is basically an SOA pattern that inherits all the well-known SOA principles and adds characteristics that address the use of SOA for distribut...
SYS-CON Events announced today the IoT Bootcamp – Jumpstart Your IoT Strategy, being held June 9–10, 2015, in conjunction with 16th Cloud Expo and Internet of @ThingsExpo at the Javits Center in New York City. This is your chance to jumpstart your IoT strategy. Combined with real-world scenarios and use cases, the IoT Bootcamp is not just based on presentations but includes hands-on demos and walkthroughs. We will introduce you to a variety of Do-It-Yourself IoT platforms including Arduino, Ras...
Microservice architectures are the new hotness, even though they aren't really all that different (in principle) from the paradigm described by SOA (which is dead, or not dead, depending on whom you ask). One of the things this decompositional approach to application architecture does is encourage developers and operations (some might even say DevOps) to re-evaluate scaling strategies. In particular, the notion is forwarded that an application should be built to scale and then infrastructure sho...
Microservices are the result of decomposing applications. That may sound a lot like SOA, but SOA was based on an object-oriented (noun) premise; that is, services were built around an object - like a customer - with all the necessary operations (functions) that go along with it. SOA was also founded on a variety of standards (most of them coming out of OASIS) like SOAP, WSDL, XML and UDDI. Microservices have no standards (at least none deriving from a standards body or organization) and can be b...
Our guest on the podcast this week is Jason Bloomberg, President at Intellyx. When we build services we want them to be lightweight, stateless and scalable while doing one thing really well. In today's cloud world, we're revisiting what to takes to make a good service in the first place. Listen in to learn why following "the book" doesn't necessarily mean that you're solving key business problems.
Right off the bat, Newman advises that we should "think of microservices as a specific approach for SOA in the same way that XP or Scrum are specific approaches for Agile Software development". These analogies are very interesting because my expectation was that microservices is a pattern. So I might infer that microservices is a set of process techniques as opposed to an architectural approach. Yet in the book, Newman clearly includes some elements of concept model and architecture as well as p...
Cloud computing is changing the way we look at IT costs, according to industry experts on a recent Cloud Luminary Fireside Chat panel discussion. Enterprise IT, traditionally viewed as a cost center, now plays a central role in the delivery of software-driven goods and services. Therefore, companies need to understand their cloud utilization and resulting costs in order to ensure profitability on their business offerings. Led by Bernard Golden, this fireside chat offers valuable insights on ho...