SlideShare a Scribd company logo
API Gateway is essential to business
Zhiyuan Ju Aug 24, 2022
- Head of Global, API7.ai
- Apache APISIX PMC Member
- Apache Software Foundation Member
- freeCodeCamp China Core Organizer
@jjzhiyuan
@juzhiyuan
juzhiyuan@apache.org
About me
Zhiyuan Ju / 琚致远 July 1997
APIs
from api7.ai
API Evolution
The monolithic architecture is considered to be a traditional way
of building applications. A monolithic application is built as a single
and indivisible unit. Usually, such a solution comprises a
client-side user interface, a server side-application, and a
database. It is unified and all the functions are managed and
served in one place.
Disadvantages
- Large code base
- Lack modularity
- …
API Evolution
#1 Monolithic
from n-ix.com
The microservice architectural style is an approach to developing
a single application as a suite of small services, each running in
its own process and communicating with lightweight
mechanisms, often an HTTP resource API.
Challenge
- Manage massive amounts of APIs
- API Security
- Quick Debug (Observability)
- Circuit Breaker
- …
API Evolution
#2 Microservice
from n-ix.com
A service mesh is a dedicated infrastructure layer for
handling service-to-service communication. It’s
responsible for the reliable delivery of requests through
the complex topology of services that comprise a
modern, cloud-native application. In practice, the service
mesh is typically implemented as an array of lightweight
network proxies that are deployed alongside application
code, without the application needing to be aware.
API Evolution
#3 Service Mesh
from DZone and RedHat
API Management
API Management
- Design
- Develop
- Test
- Publish (API Gateway)
- Monitor (API Gateway with Prometheus, etc.)
- Retirement
Full Lifecycle API Management
API Gateway
API Gateway
- Implement non-business-related logic on the API
Gateway
- Reduces the number of requests/roundtrips. For
example, the API gateway enables clients to retrieve
data from multiple services with a single round-trip.
- Simplifies the client by moving logic for calling multiple
services from the client to API gateway
- Translates from a “standard” public web-friendly API
protocol to whatever protocols are used internally
Benefit
from microservices.io and Apache APISIX
API Gateway
Security
“API security refers to the practice of preventing or
mitigating attacks on APIs. APIs work as the backend
framework for mobile and web applications. Therefore,
it is critical to protect the sensitive data they transfer. “
Cases:
- Broken User Authentication
- Security Misconfiguration
- Code Injection
- Insufficient Logging & Monitoring
- Functional Level Authorization
- …
from fortinet.com
API Gateway
Connect any APIs efficiently and securely in
any environment ⚡
Performance
API Gateway
Hundreds of global contributors building the
open-sourced but well-tested Infra software :)
Open Source
Apache APISIX
- Apache Software Foundation Top-level Project
- Donated by API7.ai Inc in 2019
- Dynamic, real-time, high performance API
Gateway
- Rich traffic management
- Dynamic upstream
- Authentication
- Observability
- and more
- API Gateway, Ingress Controller, Service Mesh
Apache APISIX
What’s Apache APISIX?
Apache APISIX
“The Apache Software Foundation (ASF) incorporated in 1999
with the mission of providing software for the common good.
Today the ASF is the world’s largest Open Source foundation,
stewarding 227M+ lines of code and providing $22B+ worth of
software to the public at 100% no cost. ASF projects are
integral to nearly every aspect of modern computing,
benefitting billions worldwide.”
from The ASF’s 2021 Annual Report
Apache Software Foundation
Apache APISIX
- Nginx
- Nginx doesn’t support hot reloading the nginx.conf
- Kong
- PostgreSQL becomes a bottleneck
- Route matching’s efficiency decreases when having
many routes
- Unify API Infrastructure by Apache APISIX: API
Gateway, Ingress Controller, Service Mesh
Why build a new API Gateway?
Apache APISIX
Dynamic
- What?
- Route/Upstream/Service/Consumer/SSL hot
reload
- Plugin hot updates
- Dynamic load balancer and heath check
- Why?
- Connection failed (HTTP, WebSocket, …) when
reloading configurations
- How?
- LuaJIT + Nginx
Apache APISIX
- Why
- Nginx takes very long time to reload thousands of
configuration files
- Kong usually takes 5 seconds to fetch configurations
(PostgreSQL)
- How
- ETCD’s Watch API provides an event-based interface
for asynchronously monitoring changes to keys less
than one millisecond
Real-time
Apache APISIX
- Route matching algorithm
- Apache APISIX: O(K) (K is URI length)
- Kong: O(n), (n is total number of Routes)
- IP matching algorithm: O(1)
- APISIX’s every plugin is carefully optimized
- APISIX’s dataplane is stateless (etcd), no
SPOF issue, higly scaleable
- …
High Performance
Apache APISIX
Security
- OpenID Connect
- TLS/mTLS
- Authentication
- Rate Limiting
- CORS
- Request Validation
- …
Apache APISIX
- Lua
- Plugin Runner
- Java
- Golang
- Python
- Node.js
- WASM
Plugins
Apache APISIX
- GitHub: nearly 10K stars and 470+ contributors
- Slack: 930+ community users
- Mailing List
- Meetup
Join in →
https://apisix.apache.org/docs/general/join/
Community Developers
https://lists.apache.org/list.html?dev@apisix.apache.org
Apache APISIX
- 27 PMC Members
- 19 Committers
- 470+ Contributors (apache/apisix-*)
Community Contributors
from https://git-contributor.com/
Apache APISIX
- Community Meeting, Meetup:
https://apisix.apache.org/docs/general/join/
- Apache APISIX Summit:
https://apisix-summit.org/
Community Meetings
Apache APISIX
1. Ask questions on GitHub, Slack, Mailing List
a. https://apisix.apache.org/docs/general/join/
2. Maintainers check and reply
3. Schedule a quick online meeting if necessary:
https://meetings.hubspot.com/zhiyuan
Community Support
Apache APISIX
Global Users
from https://apisix.apache.org/blog/ags/case-studies/
Q&A
@jjzhiyuan
@juzhiyuan
juzhiyuan@apache.org
Ad

Recommended

Building enterprise depth APIs with the IBM hybrid integration portfolio
Building enterprise depth APIs with the IBM hybrid integration portfolio
Kim Clark
 
2016 06 - design your api management strategy - axway - Api Management
2016 06 - design your api management strategy - axway - Api Management
SmartWave
 
I Love APIs 2015 : Zero to Thousands TPS Private Cloud Operations Workshop
I Love APIs 2015 : Zero to Thousands TPS Private Cloud Operations Workshop
Apigee | Google Cloud
 
Vert.X and MSA - DevOps
Vert.X and MSA - DevOps
YongHyuk Lee
 
AWS Serverless API Management - Meetup
AWS Serverless API Management - Meetup
Samuel Vandecasteele
 
RefCard API Architecture Strategy
RefCard API Architecture Strategy
OCTO Technology
 
API Management with wicked.haufe.io
API Management with wicked.haufe.io
Haufe-Lexware GmbH & Co KG
 
Gateway/APIC security
Gateway/APIC security
Shiu-Fun Poon
 
M meijer api management - tech-days 2015
M meijer api management - tech-days 2015
Freelance Consultant / Manager / co-CTO
 
API Gateways are going through an identity crisis
API Gateways are going through an identity crisis
Christian Posta
 
RESTful web APIs (build, document, manage)
RESTful web APIs (build, document, manage)
Cisco DevNet
 
Agile integration architecture in relation to APIs and messaging
Agile integration architecture in relation to APIs and messaging
Kim Clark
 
What’s behind a high quality web API? Ensure your APIs are more than just a ...
What’s behind a high quality web API? Ensure your APIs are more than just a ...
Kim Clark
 
The Best of Both Worlds: Introducing WSO2 API Manager 4.0.0
The Best of Both Worlds: Introducing WSO2 API Manager 4.0.0
WSO2
 
Introduction to Kong API Gateway
Introduction to Kong API Gateway
Yohann Ciurlik
 
API Management Microservices beyond HIP
API Management Microservices beyond HIP
SmartWave
 
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Haufe-Lexware GmbH & Co KG
 
Azure app service to create web and mobile apps
Azure app service to create web and mobile apps
Ken Cenerelli
 
apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias
apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias
apidays
 
Building APIs in a Cloud Native Era
Building APIs in a Cloud Native Era
Nuwan Dias
 
DEVNET-1128 Cisco Intercloud Fabric NB Api's for Business & Providers
DEVNET-1128 Cisco Intercloud Fabric NB Api's for Business & Providers
Cisco DevNet
 
apidays Singapore 2023 - Beyond REST, Claudio Tag, IBM
apidays Singapore 2023 - Beyond REST, Claudio Tag, IBM
apidays
 
Oow2016 review--paas-microservices-
Oow2016 review--paas-microservices-
Getting value from IoT, Integration and Data Analytics
 
APIdays Barcelona 2019 - How a Cloud native Architecture helps to drive Busin...
APIdays Barcelona 2019 - How a Cloud native Architecture helps to drive Busin...
apidays
 
The next step from Microsoft - Vnext (Srdjan Poznic)
The next step from Microsoft - Vnext (Srdjan Poznic)
Geekstone
 
APIConnect Security Best Practice
APIConnect Security Best Practice
Shiu-Fun Poon
 
Microservices&ap imanagement
Microservices&ap imanagement
pramodkumards
 
sMash_for_zOS-users
sMash_for_zOS-users
Otto Kee LeakPeng
 
apidays Singapore 2025 - What exactly are AI Agents by Aki Ranin (Earthshots ...
apidays Singapore 2025 - What exactly are AI Agents by Aki Ranin (Earthshots ...
apidays
 
apidays Singapore 2025 - Enhancing Developer Productivity with UX (Government...
apidays Singapore 2025 - Enhancing Developer Productivity with UX (Government...
apidays
 

More Related Content

Similar to apidays Hong Kong - Why is API Gateway essential to business, Zhiyuan Ju, API7.ai (20)

M meijer api management - tech-days 2015
M meijer api management - tech-days 2015
Freelance Consultant / Manager / co-CTO
 
API Gateways are going through an identity crisis
API Gateways are going through an identity crisis
Christian Posta
 
RESTful web APIs (build, document, manage)
RESTful web APIs (build, document, manage)
Cisco DevNet
 
Agile integration architecture in relation to APIs and messaging
Agile integration architecture in relation to APIs and messaging
Kim Clark
 
What’s behind a high quality web API? Ensure your APIs are more than just a ...
What’s behind a high quality web API? Ensure your APIs are more than just a ...
Kim Clark
 
The Best of Both Worlds: Introducing WSO2 API Manager 4.0.0
The Best of Both Worlds: Introducing WSO2 API Manager 4.0.0
WSO2
 
Introduction to Kong API Gateway
Introduction to Kong API Gateway
Yohann Ciurlik
 
API Management Microservices beyond HIP
API Management Microservices beyond HIP
SmartWave
 
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Haufe-Lexware GmbH & Co KG
 
Azure app service to create web and mobile apps
Azure app service to create web and mobile apps
Ken Cenerelli
 
apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias
apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias
apidays
 
Building APIs in a Cloud Native Era
Building APIs in a Cloud Native Era
Nuwan Dias
 
DEVNET-1128 Cisco Intercloud Fabric NB Api's for Business & Providers
DEVNET-1128 Cisco Intercloud Fabric NB Api's for Business & Providers
Cisco DevNet
 
apidays Singapore 2023 - Beyond REST, Claudio Tag, IBM
apidays Singapore 2023 - Beyond REST, Claudio Tag, IBM
apidays
 
Oow2016 review--paas-microservices-
Oow2016 review--paas-microservices-
Getting value from IoT, Integration and Data Analytics
 
APIdays Barcelona 2019 - How a Cloud native Architecture helps to drive Busin...
APIdays Barcelona 2019 - How a Cloud native Architecture helps to drive Busin...
apidays
 
The next step from Microsoft - Vnext (Srdjan Poznic)
The next step from Microsoft - Vnext (Srdjan Poznic)
Geekstone
 
APIConnect Security Best Practice
APIConnect Security Best Practice
Shiu-Fun Poon
 
Microservices&ap imanagement
Microservices&ap imanagement
pramodkumards
 
sMash_for_zOS-users
sMash_for_zOS-users
Otto Kee LeakPeng
 
API Gateways are going through an identity crisis
API Gateways are going through an identity crisis
Christian Posta
 
RESTful web APIs (build, document, manage)
RESTful web APIs (build, document, manage)
Cisco DevNet
 
Agile integration architecture in relation to APIs and messaging
Agile integration architecture in relation to APIs and messaging
Kim Clark
 
What’s behind a high quality web API? Ensure your APIs are more than just a ...
What’s behind a high quality web API? Ensure your APIs are more than just a ...
Kim Clark
 
The Best of Both Worlds: Introducing WSO2 API Manager 4.0.0
The Best of Both Worlds: Introducing WSO2 API Manager 4.0.0
WSO2
 
Introduction to Kong API Gateway
Introduction to Kong API Gateway
Yohann Ciurlik
 
API Management Microservices beyond HIP
API Management Microservices beyond HIP
SmartWave
 
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Haufe-Lexware GmbH & Co KG
 
Azure app service to create web and mobile apps
Azure app service to create web and mobile apps
Ken Cenerelli
 
apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias
apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias
apidays
 
Building APIs in a Cloud Native Era
Building APIs in a Cloud Native Era
Nuwan Dias
 
DEVNET-1128 Cisco Intercloud Fabric NB Api's for Business & Providers
DEVNET-1128 Cisco Intercloud Fabric NB Api's for Business & Providers
Cisco DevNet
 
apidays Singapore 2023 - Beyond REST, Claudio Tag, IBM
apidays Singapore 2023 - Beyond REST, Claudio Tag, IBM
apidays
 
APIdays Barcelona 2019 - How a Cloud native Architecture helps to drive Busin...
APIdays Barcelona 2019 - How a Cloud native Architecture helps to drive Busin...
apidays
 
The next step from Microsoft - Vnext (Srdjan Poznic)
The next step from Microsoft - Vnext (Srdjan Poznic)
Geekstone
 
APIConnect Security Best Practice
APIConnect Security Best Practice
Shiu-Fun Poon
 
Microservices&ap imanagement
Microservices&ap imanagement
pramodkumards
 

More from apidays (20)

apidays Singapore 2025 - What exactly are AI Agents by Aki Ranin (Earthshots ...
apidays Singapore 2025 - What exactly are AI Agents by Aki Ranin (Earthshots ...
apidays
 
apidays Singapore 2025 - Enhancing Developer Productivity with UX (Government...
apidays Singapore 2025 - Enhancing Developer Productivity with UX (Government...
apidays
 
apidays Singapore 2025 - Building Finance Innovation Ecosystems by Umang Moon...
apidays Singapore 2025 - Building Finance Innovation Ecosystems by Umang Moon...
apidays
 
apidays Singapore 2025 - 4 Identity Essentials for Scaling SaaS in Large Orgs...
apidays Singapore 2025 - 4 Identity Essentials for Scaling SaaS in Large Orgs...
apidays
 
apidays New York 2025 - Using GraphQL SDL files as executable API Contracts b...
apidays New York 2025 - Using GraphQL SDL files as executable API Contracts b...
apidays
 
apidays New York 2025 - The Future of Small Business Lending with Open Bankin...
apidays New York 2025 - The Future of Small Business Lending with Open Bankin...
apidays
 
apidays New York 2025 - Life is But a (Data) Stream by Sandon Jacobs (Confluent)
apidays New York 2025 - Life is But a (Data) Stream by Sandon Jacobs (Confluent)
apidays
 
apidays New York 2025 - Beyond Webhooks: The Future of Scalable API Event Del...
apidays New York 2025 - Beyond Webhooks: The Future of Scalable API Event Del...
apidays
 
apidays New York 2025 - API Security and Observability at Scale in Kubernetes...
apidays New York 2025 - API Security and Observability at Scale in Kubernetes...
apidays
 
apidays New York 2025 - Unifying OpenAPI & AsyncAPI by Naresh Jain & Hari Kri...
apidays New York 2025 - Unifying OpenAPI & AsyncAPI by Naresh Jain & Hari Kri...
apidays
 
apidays New York 2025 - The Challenge is Not the Pattern, But the Best Integr...
apidays New York 2025 - The Challenge is Not the Pattern, But the Best Integr...
apidays
 
apidays New York 2025 - Why an SDK is Needed to Protect APIs from Mobile Apps...
apidays New York 2025 - Why an SDK is Needed to Protect APIs from Mobile Apps...
apidays
 
apidays New York 2025 - The FINOS Common Domain Model for Capital Markets by ...
apidays New York 2025 - The FINOS Common Domain Model for Capital Markets by ...
apidays
 
apidays New York 2025 - Fast, Repeatable, Secure: Pick 3 with FINOS CCC by Le...
apidays New York 2025 - Fast, Repeatable, Secure: Pick 3 with FINOS CCC by Le...
apidays
 
apidays New York 2025 - Boost API Development Velocity with Practical AI Tool...
apidays New York 2025 - Boost API Development Velocity with Practical AI Tool...
apidays
 
apidays New York 2025 - Why I Built Another Carbon Measurement Tool for LLMs ...
apidays New York 2025 - Why I Built Another Carbon Measurement Tool for LLMs ...
apidays
 
apidays New York 2025 - Building Scalable AI Systems by Sai Prasad Veluru (Ap...
apidays New York 2025 - Building Scalable AI Systems by Sai Prasad Veluru (Ap...
apidays
 
apidays New York 2025 - Lessons From Two Technical Transformations by Leah Hu...
apidays New York 2025 - Lessons From Two Technical Transformations by Leah Hu...
apidays
 
apidays New York 2025 - Breaking Barriers: Lessons Learned from API Integrati...
apidays New York 2025 - Breaking Barriers: Lessons Learned from API Integrati...
apidays
 
apidays New York 2025 - Building Agentic Workflows with FDC3 Intents by Nick ...
apidays New York 2025 - Building Agentic Workflows with FDC3 Intents by Nick ...
apidays
 
apidays Singapore 2025 - What exactly are AI Agents by Aki Ranin (Earthshots ...
apidays Singapore 2025 - What exactly are AI Agents by Aki Ranin (Earthshots ...
apidays
 
apidays Singapore 2025 - Enhancing Developer Productivity with UX (Government...
apidays Singapore 2025 - Enhancing Developer Productivity with UX (Government...
apidays
 
apidays Singapore 2025 - Building Finance Innovation Ecosystems by Umang Moon...
apidays Singapore 2025 - Building Finance Innovation Ecosystems by Umang Moon...
apidays
 
apidays Singapore 2025 - 4 Identity Essentials for Scaling SaaS in Large Orgs...
apidays Singapore 2025 - 4 Identity Essentials for Scaling SaaS in Large Orgs...
apidays
 
apidays New York 2025 - Using GraphQL SDL files as executable API Contracts b...
apidays New York 2025 - Using GraphQL SDL files as executable API Contracts b...
apidays
 
apidays New York 2025 - The Future of Small Business Lending with Open Bankin...
apidays New York 2025 - The Future of Small Business Lending with Open Bankin...
apidays
 
apidays New York 2025 - Life is But a (Data) Stream by Sandon Jacobs (Confluent)
apidays New York 2025 - Life is But a (Data) Stream by Sandon Jacobs (Confluent)
apidays
 
apidays New York 2025 - Beyond Webhooks: The Future of Scalable API Event Del...
apidays New York 2025 - Beyond Webhooks: The Future of Scalable API Event Del...
apidays
 
apidays New York 2025 - API Security and Observability at Scale in Kubernetes...
apidays New York 2025 - API Security and Observability at Scale in Kubernetes...
apidays
 
apidays New York 2025 - Unifying OpenAPI & AsyncAPI by Naresh Jain & Hari Kri...
apidays New York 2025 - Unifying OpenAPI & AsyncAPI by Naresh Jain & Hari Kri...
apidays
 
apidays New York 2025 - The Challenge is Not the Pattern, But the Best Integr...
apidays New York 2025 - The Challenge is Not the Pattern, But the Best Integr...
apidays
 
apidays New York 2025 - Why an SDK is Needed to Protect APIs from Mobile Apps...
apidays New York 2025 - Why an SDK is Needed to Protect APIs from Mobile Apps...
apidays
 
apidays New York 2025 - The FINOS Common Domain Model for Capital Markets by ...
apidays New York 2025 - The FINOS Common Domain Model for Capital Markets by ...
apidays
 
apidays New York 2025 - Fast, Repeatable, Secure: Pick 3 with FINOS CCC by Le...
apidays New York 2025 - Fast, Repeatable, Secure: Pick 3 with FINOS CCC by Le...
apidays
 
apidays New York 2025 - Boost API Development Velocity with Practical AI Tool...
apidays New York 2025 - Boost API Development Velocity with Practical AI Tool...
apidays
 
apidays New York 2025 - Why I Built Another Carbon Measurement Tool for LLMs ...
apidays New York 2025 - Why I Built Another Carbon Measurement Tool for LLMs ...
apidays
 
apidays New York 2025 - Building Scalable AI Systems by Sai Prasad Veluru (Ap...
apidays New York 2025 - Building Scalable AI Systems by Sai Prasad Veluru (Ap...
apidays
 
apidays New York 2025 - Lessons From Two Technical Transformations by Leah Hu...
apidays New York 2025 - Lessons From Two Technical Transformations by Leah Hu...
apidays
 
apidays New York 2025 - Breaking Barriers: Lessons Learned from API Integrati...
apidays New York 2025 - Breaking Barriers: Lessons Learned from API Integrati...
apidays
 
apidays New York 2025 - Building Agentic Workflows with FDC3 Intents by Nick ...
apidays New York 2025 - Building Agentic Workflows with FDC3 Intents by Nick ...
apidays
 
Ad

Recently uploaded (20)

GenAI Opportunities and Challenges - Where 370 Enterprises Are Focusing Now.pdf
GenAI Opportunities and Challenges - Where 370 Enterprises Are Focusing Now.pdf
Priyanka Aash
 
From Manual to Auto Searching- FME in the Driver's Seat
From Manual to Auto Searching- FME in the Driver's Seat
Safe Software
 
Cluster-Based Multi-Objective Metamorphic Test Case Pair Selection for Deep N...
Cluster-Based Multi-Objective Metamorphic Test Case Pair Selection for Deep N...
janeliewang985
 
You are not excused! How to avoid security blind spots on the way to production
You are not excused! How to avoid security blind spots on the way to production
Michele Leroux Bustamante
 
Python Conference Singapore - 19 Jun 2025
Python Conference Singapore - 19 Jun 2025
ninefyi
 
Creating Inclusive Digital Learning with AI: A Smarter, Fairer Future
Creating Inclusive Digital Learning with AI: A Smarter, Fairer Future
Impelsys Inc.
 
Powering Multi-Page Web Applications Using Flow Apps and FME Data Streaming
Powering Multi-Page Web Applications Using Flow Apps and FME Data Streaming
Safe Software
 
FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptx
FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptx
FIDO Alliance
 
cnc-processing-centers-centateq-p-110-en.pdf
cnc-processing-centers-centateq-p-110-en.pdf
AmirStern2
 
PyCon SG 25 - Firecracker Made Easy with Python.pdf
PyCon SG 25 - Firecracker Made Easy with Python.pdf
Muhammad Yuga Nugraha
 
FIDO Seminar: Perspectives on Passkeys & Consumer Adoption.pptx
FIDO Seminar: Perspectives on Passkeys & Consumer Adoption.pptx
FIDO Alliance
 
AI VIDEO MAGAZINE - June 2025 - r/aivideo
AI VIDEO MAGAZINE - June 2025 - r/aivideo
1pcity Studios, Inc
 
10 Key Challenges for AI within the EU Data Protection Framework.pdf
10 Key Challenges for AI within the EU Data Protection Framework.pdf
Priyanka Aash
 
2025_06_18 - OpenMetadata Community Meeting.pdf
2025_06_18 - OpenMetadata Community Meeting.pdf
OpenMetadata
 
FIDO Seminar: New Data: Passkey Adoption in the Workforce.pptx
FIDO Seminar: New Data: Passkey Adoption in the Workforce.pptx
FIDO Alliance
 
Improving Data Integrity: Synchronization between EAM and ArcGIS Utility Netw...
Improving Data Integrity: Synchronization between EAM and ArcGIS Utility Netw...
Safe Software
 
MuleSoft for AgentForce : Topic Center and API Catalog
MuleSoft for AgentForce : Topic Center and API Catalog
shyamraj55
 
Cyber Defense Matrix Workshop - RSA Conference
Cyber Defense Matrix Workshop - RSA Conference
Priyanka Aash
 
OpenACC and Open Hackathons Monthly Highlights June 2025
OpenACC and Open Hackathons Monthly Highlights June 2025
OpenACC
 
The Future of AI Agent Development Trends to Watch.pptx
The Future of AI Agent Development Trends to Watch.pptx
Lisa ward
 
GenAI Opportunities and Challenges - Where 370 Enterprises Are Focusing Now.pdf
GenAI Opportunities and Challenges - Where 370 Enterprises Are Focusing Now.pdf
Priyanka Aash
 
From Manual to Auto Searching- FME in the Driver's Seat
From Manual to Auto Searching- FME in the Driver's Seat
Safe Software
 
Cluster-Based Multi-Objective Metamorphic Test Case Pair Selection for Deep N...
Cluster-Based Multi-Objective Metamorphic Test Case Pair Selection for Deep N...
janeliewang985
 
You are not excused! How to avoid security blind spots on the way to production
You are not excused! How to avoid security blind spots on the way to production
Michele Leroux Bustamante
 
Python Conference Singapore - 19 Jun 2025
Python Conference Singapore - 19 Jun 2025
ninefyi
 
Creating Inclusive Digital Learning with AI: A Smarter, Fairer Future
Creating Inclusive Digital Learning with AI: A Smarter, Fairer Future
Impelsys Inc.
 
Powering Multi-Page Web Applications Using Flow Apps and FME Data Streaming
Powering Multi-Page Web Applications Using Flow Apps and FME Data Streaming
Safe Software
 
FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptx
FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptx
FIDO Alliance
 
cnc-processing-centers-centateq-p-110-en.pdf
cnc-processing-centers-centateq-p-110-en.pdf
AmirStern2
 
PyCon SG 25 - Firecracker Made Easy with Python.pdf
PyCon SG 25 - Firecracker Made Easy with Python.pdf
Muhammad Yuga Nugraha
 
FIDO Seminar: Perspectives on Passkeys & Consumer Adoption.pptx
FIDO Seminar: Perspectives on Passkeys & Consumer Adoption.pptx
FIDO Alliance
 
AI VIDEO MAGAZINE - June 2025 - r/aivideo
AI VIDEO MAGAZINE - June 2025 - r/aivideo
1pcity Studios, Inc
 
10 Key Challenges for AI within the EU Data Protection Framework.pdf
10 Key Challenges for AI within the EU Data Protection Framework.pdf
Priyanka Aash
 
2025_06_18 - OpenMetadata Community Meeting.pdf
2025_06_18 - OpenMetadata Community Meeting.pdf
OpenMetadata
 
FIDO Seminar: New Data: Passkey Adoption in the Workforce.pptx
FIDO Seminar: New Data: Passkey Adoption in the Workforce.pptx
FIDO Alliance
 
Improving Data Integrity: Synchronization between EAM and ArcGIS Utility Netw...
Improving Data Integrity: Synchronization between EAM and ArcGIS Utility Netw...
Safe Software
 
MuleSoft for AgentForce : Topic Center and API Catalog
MuleSoft for AgentForce : Topic Center and API Catalog
shyamraj55
 
Cyber Defense Matrix Workshop - RSA Conference
Cyber Defense Matrix Workshop - RSA Conference
Priyanka Aash
 
OpenACC and Open Hackathons Monthly Highlights June 2025
OpenACC and Open Hackathons Monthly Highlights June 2025
OpenACC
 
The Future of AI Agent Development Trends to Watch.pptx
The Future of AI Agent Development Trends to Watch.pptx
Lisa ward
 
Ad

apidays Hong Kong - Why is API Gateway essential to business, Zhiyuan Ju, API7.ai

  • 1. API Gateway is essential to business Zhiyuan Ju Aug 24, 2022
  • 2. - Head of Global, API7.ai - Apache APISIX PMC Member - Apache Software Foundation Member - freeCodeCamp China Core Organizer @jjzhiyuan @juzhiyuan [email protected] About me Zhiyuan Ju / 琚致远 July 1997
  • 5. The monolithic architecture is considered to be a traditional way of building applications. A monolithic application is built as a single and indivisible unit. Usually, such a solution comprises a client-side user interface, a server side-application, and a database. It is unified and all the functions are managed and served in one place. Disadvantages - Large code base - Lack modularity - … API Evolution #1 Monolithic from n-ix.com
  • 6. The microservice architectural style is an approach to developing a single application as a suite of small services, each running in its own process and communicating with lightweight mechanisms, often an HTTP resource API. Challenge - Manage massive amounts of APIs - API Security - Quick Debug (Observability) - Circuit Breaker - … API Evolution #2 Microservice from n-ix.com
  • 7. A service mesh is a dedicated infrastructure layer for handling service-to-service communication. It’s responsible for the reliable delivery of requests through the complex topology of services that comprise a modern, cloud-native application. In practice, the service mesh is typically implemented as an array of lightweight network proxies that are deployed alongside application code, without the application needing to be aware. API Evolution #3 Service Mesh from DZone and RedHat
  • 9. API Management - Design - Develop - Test - Publish (API Gateway) - Monitor (API Gateway with Prometheus, etc.) - Retirement Full Lifecycle API Management
  • 11. API Gateway - Implement non-business-related logic on the API Gateway - Reduces the number of requests/roundtrips. For example, the API gateway enables clients to retrieve data from multiple services with a single round-trip. - Simplifies the client by moving logic for calling multiple services from the client to API gateway - Translates from a “standard” public web-friendly API protocol to whatever protocols are used internally Benefit from microservices.io and Apache APISIX
  • 12. API Gateway Security “API security refers to the practice of preventing or mitigating attacks on APIs. APIs work as the backend framework for mobile and web applications. Therefore, it is critical to protect the sensitive data they transfer. “ Cases: - Broken User Authentication - Security Misconfiguration - Code Injection - Insufficient Logging & Monitoring - Functional Level Authorization - … from fortinet.com
  • 13. API Gateway Connect any APIs efficiently and securely in any environment ⚡ Performance
  • 14. API Gateway Hundreds of global contributors building the open-sourced but well-tested Infra software :) Open Source
  • 16. - Apache Software Foundation Top-level Project - Donated by API7.ai Inc in 2019 - Dynamic, real-time, high performance API Gateway - Rich traffic management - Dynamic upstream - Authentication - Observability - and more - API Gateway, Ingress Controller, Service Mesh Apache APISIX What’s Apache APISIX?
  • 17. Apache APISIX “The Apache Software Foundation (ASF) incorporated in 1999 with the mission of providing software for the common good. Today the ASF is the world’s largest Open Source foundation, stewarding 227M+ lines of code and providing $22B+ worth of software to the public at 100% no cost. ASF projects are integral to nearly every aspect of modern computing, benefitting billions worldwide.” from The ASF’s 2021 Annual Report Apache Software Foundation
  • 18. Apache APISIX - Nginx - Nginx doesn’t support hot reloading the nginx.conf - Kong - PostgreSQL becomes a bottleneck - Route matching’s efficiency decreases when having many routes - Unify API Infrastructure by Apache APISIX: API Gateway, Ingress Controller, Service Mesh Why build a new API Gateway?
  • 19. Apache APISIX Dynamic - What? - Route/Upstream/Service/Consumer/SSL hot reload - Plugin hot updates - Dynamic load balancer and heath check - Why? - Connection failed (HTTP, WebSocket, …) when reloading configurations - How? - LuaJIT + Nginx
  • 20. Apache APISIX - Why - Nginx takes very long time to reload thousands of configuration files - Kong usually takes 5 seconds to fetch configurations (PostgreSQL) - How - ETCD’s Watch API provides an event-based interface for asynchronously monitoring changes to keys less than one millisecond Real-time
  • 21. Apache APISIX - Route matching algorithm - Apache APISIX: O(K) (K is URI length) - Kong: O(n), (n is total number of Routes) - IP matching algorithm: O(1) - APISIX’s every plugin is carefully optimized - APISIX’s dataplane is stateless (etcd), no SPOF issue, higly scaleable - … High Performance
  • 22. Apache APISIX Security - OpenID Connect - TLS/mTLS - Authentication - Rate Limiting - CORS - Request Validation - …
  • 23. Apache APISIX - Lua - Plugin Runner - Java - Golang - Python - Node.js - WASM Plugins
  • 24. Apache APISIX - GitHub: nearly 10K stars and 470+ contributors - Slack: 930+ community users - Mailing List - Meetup Join in → https://apisix.apache.org/docs/general/join/ Community Developers https://lists.apache.org/[email protected]
  • 25. Apache APISIX - 27 PMC Members - 19 Committers - 470+ Contributors (apache/apisix-*) Community Contributors from https://git-contributor.com/
  • 26. Apache APISIX - Community Meeting, Meetup: https://apisix.apache.org/docs/general/join/ - Apache APISIX Summit: https://apisix-summit.org/ Community Meetings
  • 27. Apache APISIX 1. Ask questions on GitHub, Slack, Mailing List a. https://apisix.apache.org/docs/general/join/ 2. Maintainers check and reply 3. Schedule a quick online meeting if necessary: https://meetings.hubspot.com/zhiyuan Community Support
  • 28. Apache APISIX Global Users from https://apisix.apache.org/blog/ags/case-studies/