APIs and Services: One Platform or Two?
Download as PPTX, PDF0 likes342 views
This document discusses the differences and relationships between APIs and web services. It argues that APIs are a superset of web services and the distinction is based more on business needs than technology. A single platform is needed to handle all aspects of API and service management, including publication, mediation and integration, monitoring and remediation, and lifecycle management regardless of the underlying protocols and standards used. Such a platform provides flexibility to support multiple protocols while simplifying development and management of APIs and services across their lifecycle.
APIs and Services: One Platform or Two?
- 1. Copyright Β© 2001-2012 SOA Software, Inc. All Rights Reserved. All content subject to confidentiality agreement between SOA Software and Customer. APIs and Services One Platform or Two?
- 2. Common Misconceptions β’ APIs and Web Services are distinguished by the technology they use, JSON vs. SOAP β’ APIs have become the external interface to an organization while Web Services have become components for internal collaborations
- 3. What is an API β’ Has become a broader term than web service, it is not exclusive to JSON/HTTP as some may lead us to believe β’ Can utilize different data formats such as XML, SOAP, JSON, or plain text β’ Can utilize different transports such as WebSockets, HTTP, TCP, MLLP, JMS, or MQ β’ Does not exclude Web Services, SOAP, XML, JMS
- 4. Differentiating through Exposure β’ The choice of technology should be dictated by the client: β Web/JavaScript β JSON/HTTP, WebSockets β Mobile β JSON/HTTP β Java A2A β XML over the most relevant protocol β’ You may need to expose multiple types depending on the channel
- 5. Simplifying the Landscape β’ APIs are a superset of Web Services β it is a business differentiation, not a technical one β’ You need a single platform that is flexible enough to handle multiple: β Transports and Protocols β Message types β Descriptors and Documentation Standards
- 7. Common Challenges β’ Publication β’ Mediation and Integration β’ Monitoring and Remediation β’ Lifecycle management
- 8. Publication β’ Publishing different types of APIs requires a central location for all interface information β Protocol β Parameters β Behavior β Location β Security
- 9. Publication β’ A single platform can: β Present different descriptor and documentation models β Mediate between them: Swagger, WSDL, Schema, JSON Schema β’ A single platform can support a cohesive developer community
- 10. Mediation and Integration β’ Publishing an API often requires mediation: β API is currently XML but clients also need JSON β API is currently SOAP but client applications can benefit from WebSockets β Trust domains (Identities) may be different β API uses OAuth but Service uses WS-Security β’ A platform that supports mediation of a wide variety of protocols provides a needed bridge between APIs and Services β Needs native understanding to eliminate custom coding
- 11. Mediation and Integration β’ Publishing an API often requires multiple calls to backend system to provide a single call to simpler client applications β’ Speeds up API development to meet the needs of the business β’ Abstracts protocol and security from the API developer
- 12. Using a Gateway β’ Brokers all communication between clients, APIs, and Services β’ Multiple protocol bindings can provide protocol mediation β’ By supporting enforcement and implementation security mediation can be performed β’ Integration with multiple identity systems can support multiple trust domains β’ Data conversions can be performed with simple orchestrations and transformations β’ Aggregating multiple calls can be performed with more complex orchestrations
- 13. Monitoring and Remediation β’ Performance and failures are often driven by downstream APIs and Services β’ Root Cause Analysis β With a common platform performance and failures can be traced to their root cause β’ Capacity Planning β A single platform aids in collecting capacity information from all dependent APIs β Easily compare committed vs. existing capacity β’ Throttling and QoS Managements β A single platform utilizes throttling at different integration points to ensure SLAβs are met at each level
- 14. Monitoring and Remediation β’ Dependencies can be modeled from top to bottom β’ Easier to find root causes of failures β’ Consistency of metrics for all APIs
- 15. Lifecycle Management β’ At their core, APIs and Services are both just software β’ Templates and Standards β Standards for the use of protocols, documentation, security should be established and adhered to β’ Best Practices β Business justification, requirements gathering, dependency management, integration testing, compliance testing should be performed consistently for both β’ Control β A single platform can provide centralized control and reporting
- 16. Conclusion β’ APIs are a superset of Services, albeit with more business focus β’ API standards are constantly evolving, so be careful when investing in a constrained technology platform (e.g. XML-focused) β’ Irrespective of the standards, APIs need a single platform for: β Publication β Integration and Mediation β Monitoring and Remediation β Lifecycle management
- 17. Thanks⦠Alistair Farquharson, CTO, SOA Software ajf@soa.com www.soa.com @afarqu @SOASoftwareInc