Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
Beyond the Cloud
Agenda
Welcome + Akamai OverviewIntroduction
1Part Akamai for DevOps Update
Design Your ApplicationPart 2
Build and Deploy Your Application
Monitor Your Application
Optimize Your Application
3Part
4Part
5Part
October Update
Akamai for DevOps
Akamai for DevOps Update
‑ Akamai Pipeline (GA)
‑ Application Security APIs (Beta)
‑ Bulk Config Updates (Beta)
‑ Cache Tags (Limited Beta)
‑ API Improvements (Ongoing)
‑ 4+ Akamai CLI Packages
‑ Network Lists v2 (Beta, v1 Deprecated)
‑ Real-Time Web Security Analytics (Beta)
Now Available
Learn more: developer.akamai.com/devops
Now Available, Cont’d
‑ Akamai Control Center (Tech Preview)
‑ DataStream (Beta)
‑ Akamai Developer Toolkit for Chrome (GA)
‑ Akamai Sandbox (Tech Preview)
Coming Soon
‑ Akamai EdgeWorkers (2019)
‑ DNS Config Management API v2 (2019)
‑ Terraform (0.12)
NEW!
Akamai CLI Update
‐ Akamai CLI for CPS (Certificate Provisioning Service)
‐ Akamai CLI for Fast DNS
‐ Akamai CLI for Firewall and Site Shield
‐ Akamai CLI for API Gateway
‐ Akamai CLI for Image Manager
‐ Akamai CLI for mPulse
‐ Akamai CLI for Application Security
New PackagesUpdated Packages
‐ Akamai CLI for Purge
‐ Akamai CLI for Visitor Prioritization
‐ Akamai Pipeline
‐ Akamai CLI for Property Manager
Coming Soon
‐ Akamai CLI for Akamai Test Center (ATC)
‐ Akamai CLI for Request Control Cloudlet
‐ Akamai CLI for Global Traffic Management (GTM)
‐ Akamai Sandbox
Learn more: developer.akamai.com/cli
NEW!
Urban Crawl
Urban Crawl App
Urban Crawl Origin Architecture
Urban Crawl Edge Architecture
Application Lifecycle
Designing Your Application
Designing Your Application
‑ API-first backend
‑ Mobile-first frontend
‑ Cloud
‑ Security
‑ User experience
‑ Intelligent
‑ Performant
‑ Edge business logic
‑ Caching
‑ DevOps-enabled
Architecture at the Edge
Leveraging the edge for better architectures
API-First Design at the Edge
Securing APIsUse Case:
Exposing Multiple APIsUse Case:
Akamai API Gateway
‐ Global quota enforcement
‐ API key authorization
‐ JWT authentication
‐ CORS Pre-flight at edge
‐ Granular cache control
‐ Message validation
Governance of enterprise APIs at scale:
‐ OAuth 2.0 authentication
‐ GraphQL caching
‐ Real-time reporting
‐ Open API 3.0 support
‐ Endpoint-specific origin
‐ Version-specific origin
October Release updates (beta):
NEW UPDATES!
WORKS WITH KONA SITE DEFENDER
Learn More: developer.akamai.com/api-gateway
Securing APIsSolution:
Coalescing Multiple APIsSolution:
Start the API Gateway free trial, onboard your first API, then get a Google Home Mini.
Visit us at bit.ly/api-gateway-free-trial, follow the instructions, and you’re on your way to a brand-new Google Home Mini.
*Google Home Mini not to scale
Akamai API Gateway Free Trial
Designing for Site Reliability
CloudletsSite reliability at the edge
‐ Get intelligent, scalable traffic management between multiple origins.
Application Load Balancer
‐ Prioritize web traffic based on custom conditions.
‐ Ensure a consistent web experience even when origin is unable to meet demand.
Visitor Prioritization‐ Prioritize API traffic based
on custom conditions.
‐ Ensure a valid API response even when origin is unable to meet demand.
API Prioritization
‐ Segment traffic intelligently to allow gradual rollout of new features or infrastructure.
Phased Release
Learn more: developer.akamai.com/cloudlets
Application Logic at the Edge
Geo TargetingTarget users based on geography without requiring the user to grant location access (or prior to requesting it)
Use Case:
Live UpdatesUse Case:
Live Updates with Fast PurgeSolution:
Build and Deploy Your Application
Deployment Environments
‐ Development
‐ CI environment
‐ Isolated QA
‐ Integrated QA
‐ Staging
‐ Production
Federated DevelopmentUse Case:
Akamai CLI for Property Manager 2.0
‐ Property CRUD
‐ Breaks down a property into smaller snippets at the top rule level
‐ Validates against Akamai schemas
‐ Ability to easily plug in an external code template
Tracking Development at the EdgeUse Case:
Edge Configuration PipelineSolution:
Akamai Pipeline
‐ Seamlessly promote changes between environments, from development to QA to production
‐ Automate the entire pipeline with templated variables for different environments
Learn more: bit.ly/announcing-akamai-pipeline
Debugging & Testing
• Deploy property changes in a sandbox environment
• Functionality testing
• Debug with the edge
• Test with the edge
• Real-time request logs
Use Case:
Akamai Sandbox
‐ Design code within a local dev environment
‐ Easily pull in existing property config
‐ Allow easy co-workers to clone sandboxes
‐ Test property changes in a sandboxed environment
‐ <1 min propagation time to enable rapid iterative development
‐ API-first product (CLI coming soon)
Enable rapid CDN testing
Interested in our early access program?Register here: bit.ly/sandbox-early-access
Monitoring Your Application
Bot TrafficBots generate one-fifth of all Internet traffic. For retailers, it’s often >70% of all traffic.
Use Case:
• Bots directly impact your business (poor user experience, price scrapping, credential and gift card abuse, etc.)
• Bot detection is difficult and time-consuming
• Bot creators are very active, constantly updating bot logic
Bot Manager
‐ Behavioral bot detections identify bots interacting with website and app infrastructure
‐ Mobile SDK integrates behavioral signal collection into your mobile app
Protect your websites and native mobile apps from brute-force login and other bot attacks
Mitigating Common AttacksUse Case:
• Denial of service (DDoS) attacks
• SQL Injections
• Cross-site scripting (XSS)
• XML external entities (XXE)
• Zero-day exploits
Kona Site Defender
‐ Protection for websites and APIs
‐ Mitigation of distributed denial of service (DDoS) attacks at the network and application layers
‐ Full-featured web application firewall
‐ Origin cloaking
Comprehensive security solution package
SIEM Integration
‐ Supports on-prem or cloud based SIEMs
‐ Connector for Splunk and CEF Syslog
‐ API for other SIEM tools
Centralized view for security information
Monitoring the Status of Your Site in Real TimeQuickly identify changes in site behavior
Use Case:
• Detect frontend and backend application behavior changes in real time
• Identify effectiveness of the CDN (i.e. offload ratios)
DataStream
‐ Real-time aggregated stats
‐ Real-time raw logs
‐ Plug-and-play monitoring
‐ Data governance and retention
Real-time edge stats API
Adhering to Performance BudgetsUse Case:
• Monitor performance across new deployments
• Compare performance across releases and time
• Isolate issues within a population group (e.g. Safari on iOS)
mPulse
‐ Use the mPulse Annotation API with new releases and other important events
‐ Touchless integration (beacon injected at the edge)
‐ REST APIs, Jenkins, and Google AMP integrations
‐ Performance Alerts (email, Slack, PagerDuty, etc.)
Advanced performance monitoring made easy
‐ Aggregate Waterfall
‐ Mobile Waterfall
‐ Resource Impact Score
October Release updates
NEW!
Learn more: developer.akamai.com/akamai-mpulse
Optimize Your Application
at the Edge
Optimize Your Application
Median Weightby Content Type
Optimize Your Application
Median Weight by Content Type
(Excluding Video)
Responsive Design
• Automatic breakpoint variants
• Automatic device detection and format negotiation
• Variants for multiple usages of the same image (e.g. banner + thumbnail, or mobile layout vs. desktop)
Use Case:
Large Image Compression
• Responsibly deliver assets uploaded by non-technical users
• Exclusive perceptual-quality algorithm to ensure the highest fidelity images at the smallest possible sizes
• Targeted fidelity thresholds, e.g. allow lower quality on slower or mobile networks, or to specific geo-locales
Use Case:
Image Manager
‐ Automatically optimize images and short videos (<5 min.) for end-user device and browser
‐ Policy-driven workflow (UI, API, or CLI)
‐ Artistic transformations
‐ Media viewer for zoom and 360° spin
‐ Next-gen format support: WebP, JPEG2000, and JPEGXR
Intelligently optimize and deliver the best image every time
Learn more: developer.akamai.com/imager-manager
Managing Third-Party Scripts
‐ More than one-quarter of sites have >90% third-party requests; scripts are a large portion of that content
‐ Need for third-party performance monitoring by type of network
‐ Scripts can be a single point of failure (SPOF)
Ensure that scripts don’t block rendering
Google DoubleClick OutageUse Case:
• March 2018
• Ensure that third-party scripts aren’t blocking when there is an outage
• Avoid single point of failure (SPOF)
Script Management
‐ Single point of failure protection
‐ Ability to block or defer problematic third parties from a single console
‐ Easily test how page behaves locally before applying policy changes
Easily monitor and control first- and third-party scripts
Learn more: bit.ly/ion-adaptive-acceleration
Thank you
Akamai Developer @akamaidev
developer.akamai.com Akamai SandboxRegister at bit.ly/sandbox-early-access for our early access program.
URL reminders:
Akamai API Gateway free trialRegister at bit.ly/api-gateway-free-trial and follow the instructions to get your brand-new Google Home Mini.