TechTalk: Extend Existing Architectures to Digital Endpoints with CA API Management

TechTalk: Extend Existing Architectures to
Digital Endpoints with CA API Management
Aaron Flint
DevOps: API Management and Application Development
CA Technologies
Sr. Principal Product Manager
DO3T27T
#CAWorld

2 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2015 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2015 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

Abstract
As an enterprise architect, you understand the
integration challenges of the application
economy and that legacy architectures can’t be
left behind. In order to be successful,
enterprises must leverage APIs to seamlessly
connect existing systems and data to cloud,
mobile and IoT.
Stephen Mak
CA Technologies
Principal Product
Manager

Agenda
COMMON INTEGRATION CHALLENGES
THE CA API GATEWAY: A BRIEF INTRODUCTION
SUMMARY
GATEWAY INTEGRATION USE CASES
CA API GATEWAY AS A PLATFORM
GATEWAY IN CA API MANAGEMENT SAAS
1
2
3
4
5
6

Common Integration Challenges
 API Modernization
– From mainframe to web services to RESTful APIs
 Connecting Disparate Systems
– New and legacy
– Different protocols
 New Integration Paradigms
– Microservices
– Services deployment

The CA API Gateway
Connect and Protect Services and APIs to Applications
API Server
DataAPI
OUTSIDE PARTNERS / DIVISIONS
EXTERNAL DEVELOPERS
MOBILE APPS CLOUD SERVICES INTERNET OF THINGS
APPS
CA API Gateway CA Mobile API GatewayCA API Developer Portal
CA API Management Suite

The CA API Gateway
Policies, Assertions and Policy Manager
 Assertions are atomic components
of API Gateway policies.
 Less than 200 pre-defined assertions
available.
 Extensible assertion framework
– Custom Assertion SDK
 Policy constructs facilitate re-use
– Global policies
– Policy fragments
– Encapsulated assertions
Assertions
Palette
Policy
Development
Window
Services &
Policies

Gateway Integration Use Cases
 API and Services
Security, Proxying,
Aggregation and
Orchestration
 Message Transformation
 Data Integration
Flight Information Service
Flight Reservation Service
Baggage and Cargo Tracking
LDAP
Social Networks
CA API Gateway
Published APIsThird-Party App
Developers
Mobile Apps
Example: Airline Customer Loyalty Through Mobile Engagement

Case Study: Financial Payments
 Problem
Customer needed an all-in-one PCI compliant,
edge-deployed gateway to secure B2B
interactions, manage integrations to SFDC and
Workday and manage API for customer’s
mobile funds transfer service.
 Solution
CA API Gateway secures all interactions with
cloud-based SaaS providers and mobile
applications, authenticating and authorizing
all inbound/outbound interactions.
 Results
Successful rollout of enhanced services with
flexibility to add/grow over time faster and
with lowered costs.
Cloud Integration: Hybrid B2B, SaaS and Mobile Integration:
1 Login requests
5 Response
2Delegated
authentication
request
3 Login Approved?
4 Login Approval
CA API Gateway
Enterprise Data Internal User
Mobile Funds
Transfer

CA API Gateway as a Platform
 Custom Assertion SDK
– Enables developers to write their own assertions, and include them in the Gateway for
use in policies
 Gateway REST-Management API
– Provides CRUD control over (nearly) all entities on the Gateway
– Gateway migration utility
 Solution Kit framework
– Enables Developers to put policies, assertions and Gateway configurations in easily
distributable, installable and maintainable package
Extension Points That Enable Integration Beyond OOB Capabilities:

Custom Assertion SDK
 Integration via Java™ and third-party libraries
 Gateway version-independent
 Examples
– AMQP
– Contivo
– DFDL
– CA APM-API Gateway
integration
Enable new integration and functionality in policies:

Gateway REST-Management API:
 Enabled via Gateway REST Management Service
 Thirty-eight resources available (and growing)
Resource/function Method REST-MAN API request
Documentation GET https://MyGateway:8443/restman/1.0/doc/home.html
Services (all) GET https://MyGateway:8443/restman/1.0/services
Folders (all) GET https://MyGateway:8443/restman/1.0/folders
Folders (specific) GET
https://MyGateway:8443/restman/1.0/folders?name=MyFolde
r
JDBC connections GET https://MyGateway:8443/restman/1.0/jdbcConnections
Bundle (export) GET https://MyGateway:8443/restman/1.0/bundle?all=true
Bundle (import) PUT https://MyGateway:8443/restman/1.0/bundle?test=true

Solution Kit Framework
 May contain
– Policies
– Assertions
– Configurations
 Enables
– Distribution
– Installation
– Upgrade
– Maintenance

Gateway in CA API Management SaaS
How the CA API Gateway enables hybrid deployment:
 Security
 Silent provisioning
 Scheduler—secure
synchronization
API Portal Portal Gateway
CA API Management
SaaS Environment
Tenant Gateway
Cluster 1
Secured On-
Premises
Environment
Protected APIs
API calls from
tenant
Tenant Gateway
Cluster 2
 First time enrollment
 Regular data synchronization
 Published data sync’d between
Portal & Tenants

Gateway in CA API Management SaaS
How the CA API Gateway Enables Analytics
API Portal
Portal Gateway
GoodData Analytics
Tenant Gateway Data lakeMobile apps
API requests
scheduled raw
data transfer ETL
SSO &
authentication
Portal user
view/edit reports

Dynamic, On-Demand API Proxying:
 Dynamically deploy dedicated
gateway, publish and secure APIs.
 Secure API to enterprise standards.
– e.g., OAuth, LDAP, …
 Set service (API) availability.
– e.g., rate limit, day/time, …
(1) create API
central
enterprise GW
(2) request API proxy
on-demand GW
(3) deploy GW
(4) publish API
(6) route to
developer
(5) call API
app
api
APIAPIAPIAPIAPI

Using the CA API Gateway for Integration
 The CA API Gateway provides a rich collection of policy assertions out-of-the box that enable integrations
with a wide range of protocols and systems.
 The CA API Gateway is extensible and can be used as a platform for building new and creative solutions.
Developers can create new custom assertions to integrate with third-party systems, or use the gateway
management REST APIs to integrate with organizational processes and workflows.
 Many of the SDKs and APIs of the CA API Gateway that the CA API Management team utilizes to enable
new features and functionality—such as integration with third-party analytics—are also available to
gateway users.
Summary
Enabling Seamless Integration

Recommended Sessions
SESSION # TITLE DATE/TIME
DO3T05S
Vision and Roadmap: Accelerating the Speed of App Delivery
with Developer-Centric API Management (Phil Walston)
11/18/2015 at 1:00 pm
DO3T28T
TechTalk: Secure the Open Enterprise with CA API Management
(Ola Mogstad & Sascha Preibisch)
11/19/15 at 11:30 am
DO3T29T
TechTalk: Accelerate Mobile Development using SDKs and Open
APIs with CA API Management (Leif Bildoy)
11/19/15 at 1:00 pm
DO3T30T
TechTalk: Unlock the Value of APIs through Direct and Indirect
Business Models with CA API Management (Dana Crane)
11/19/15 at 4:30 pm

Q & A

For More Information
To learn more, please visit:
http://cainc.to/Nv2VOe
CA World ’15

TechTalk: Extend Existing Architectures to Digital Endpoints with CA API Management

Recommended

More Related Content

What's hot (20)

Similar to TechTalk: Extend Existing Architectures to Digital Endpoints with CA API Management (20)

More from CA Technologies (20)

Recently uploaded (20)

TechTalk: Extend Existing Architectures to Digital Endpoints with CA API Management