Webinar:

Introducing WSO2 API Manager for

Mobile Applications and Rapid Integration

Invention comes in many forms and at many

scales. The most radical and transformative

of inventions are often those that empower

others to unleash their creativity – to

pursue their dreams.

Jeff Bezos

Growth which can’t be ignored

The API billionaires

• More than 15 billion calls per day

• More than 1 billion calls per day

• More than 5 billion calls per day

•More than 260 billion objects stored in S3

•More than 1 billion transactions per day

(via WSO2 runtime for API gatewaying)

Running Your SOA as a Web Startup

APIs

• An API is a business capability delivered over

the Internet to internal or external consumers

• Network accessible function

• Available using standard web protocols

• With well-defined interfaces

• Designed for access by third-parties

• A Managed API is:

• Actively advertised and subscribe-able

• Available with SLAs

• Secured, authenticated, authorized and protected

• Monitored and monetized with analytics

WSO2 API

Management

Platform

WSO2’s API Management Vision

• Create APIs

• WSO2 Application Server, Data Services Server and

ESB

• Find and subscribe/buy APIs

• API Store and Governance

• Manage, secure and protect APIs

• API Management and Gateway

• Monitor and Monetize APIs

• API Monitoring and Analytics

• Develop, host and run API-based applications in a

Platform-as-a-Service

• WSO2 App Factory

• Domain Specific PaaS

APIs three ways

1. Offering external APIs to

partners, mobile apps and

cloud apps

2. Managing access from inside

the enterprise to cloud APIs

3. Managing cross-department access to

internal APIs

WSO2 API Manager 1.0.0

• Launched in August 2012

• Can be installed and deployed:

• as a single JVM for small usage or testing

• as a HA cluster for scalability and failover

• as an EC2 image for cloud deployment

• Runs on the WSO2 Carbon core

• OSGi, modular, robust, scalable, in large scale

production

• Already in production!

Not really a 1.0.0 product...

• API Manager leverages WSO2 proven components:

o WSO2 ESB

used as API Gateway by eBay, AAA, and others. eBay

handles > 1 billion API calls/day

o WSO2 Governance Registry

used by British Airways, Intermountain Healthcare, and

many others

o WSO2 Identity Server

used by Citigroup, Federal Home Loan Bank of SF, US

Navy and others

WSO2 Business Activity Monitor

In production at AAA, MA and others

API Manager Components

Product Features

• API Storefront for subscribers

• Including link to OAuth2 provider for key

issuing

• API Producer back office

• Including publishing lifecycle, versioning, etc

• API Gateway

• OAuth2 token validation

• Throttling and SLA management

• API Monitor

• Monitoring, links to monetization engines

API Store

API Store Features

API Publisher

API Publisher Features

API Store: Key Management

Scalable Analytics Deployment

API Analytics

Further Details

• Full support for web protocols:

• JSON/HTTP(S), REST interactions

• SOAP/HTTP(S), XML/HTTP(S)

• Non-blocking high-performance HTTP transport handles

thousands of concurrent connections

• API Key Management based on OAuth2

• Get Key (with or without asynchronous approval process)

• Monitoring and analytics

• Latency, Response Time, Failures vs Success, Total

Transactions, Transactions by API Key

• By user specified time period as well as over the last 1m,

5m, 10m, 1hr, 4hr, 8hr, 24hr periods

• Throttling by API and API key

Using the API Manager for Mobile

• Supports issuing keys to mobile apps

• Supports JSON/HTTP for simple iPhone/Android apps

• A single key for each app makes life simple and allows

app usage monitoring

• Throttling of different applications protects backend

services from over-eager developers

• Managing side-by-side versions for different versions of

apps in the iPhone or Android AppStore

Roadmap Summary

• API Publishing:

• Documentation/Samples/SDK/Links to

external docs

• Tagging

• Track consumers by API

• View Statistics by API

• API LifeCycle Management

• API Subscribing

• Search - Rate - Comments

• API Versioning

• Manage multiple APIs via the application

concept

• User self-registration

• OAuth2 based Key Management

• Throttling/SLA Limits per API

• Integration with BAM for API Statistics

• Skinnable UI

1.0 next

• Monetization

• Improved API experience

• Embedded API Testing

• Enhanced Self-Registration process

• Additional Collaboration Features

• Improved administration

• Custom API LifeCycle

• Integration with 3rd party Key Management Systems

• Integration with 3rd party repositories such as GITHub

• Role-based views for usage reports

• GoogleApps / OpenID based login

• Enhanced Throttling Scenarios

Powering Cloud-Enabled Enterprise Integration

and Application Development

Resources

• Website

• http://wso2.com/products/api-manager/

• Product Documentation

• http://docs.wso2.org/wiki/display/AM100/WS

O2+API+Manager+Documentation

• Getting Started (highly recommended)

• http://d.content.wso2.com/files/WSO2APIMan

ager-v1.0.0-GettingStarted.pdf

• Remaining webinars in this series:

• http://wso2.com/landing/api-webinar-series/

Questions?