Upload
others
View
6
Download
0
Embed Size (px)
Citation preview
Amsterdam, November 8, 2019
Drive innovation in a multi cloud reality
Cloud & AI Summit
IBM Cloud Pak for Integration +IBM API Connect Updates for 2H2019
Johan TholeTechnical Sales Hybrid Cloud Integration
Important Disclaimers
IBM’s statements regarding its plans, directions and intent are subject to change
or withdrawal without notice at IBM’s sole discretion. Information regarding
potential future products is intended to outline our general product direction and
it should not be relied on in making a purchasing decision. The information
mentioned regarding potential future products is not a commitment, promise, or
legal obligation to deliver any material, code or functionality. Information about
potential future products may not be incorporated into any contract. The
development, release, and timing of any future features or functionality described
for our products remains at our sole discretion.
2
• Agile Integration Mindset
• IBM Cloud Pak for Integration Introduction
• IBM API Connect Updates
• Q/A
Agenda
5
1. (Re)Invent with Data APIs, Events, Integration…
2. Scale and Flexibility Break the monolith
3. Speed and Agility Developer/Ops productivity
Agile Integration Mindset
6
Agile Integration Mindset
People & Process
Decentralized ownership
Empower teams to build, re-use, and govern integrations and best practices
Agile Architecture
Fine grained, integrate where needed across clouds, SaaS, and on-premises
Hybrid Integration Platform
Rapidly build, manage and optimize integrations across applications, data, cloud services, APIs, events
Support an expanding range of integration styles
Open, hybrid cloud approach
7
Concept Of A Cloud Pak
Complete yet simple
IBM certified
Run anywhere
IBM containerized software
Container platform
and operational servicesLogging, monitoring, security,
identity access management
IBM Cloud Private SystemsEdge
Integrated Software based on common use cases e.g. APIs, Security, App flows, Messaging and
Events, Files
8
What is IBM Cloud Pak for Integration (CP4I)
• Create all types of Integrations quickly
using simple tools following modern
development practice
• Manage secure integration deployments
across any cloud leveraging cloud-native
practices & architecture, consistent
operational services.
• Re-use integration assets, skills to speed
up development and time-to-market
maintaining the right governance
IBM Cloud Pak for IntegrationMulti-Cloud, Secure, Enterprise-proven Platform
9
• Cloud agnostic to run virtually
anywhere on Red Hat OpenShift.
• Unmatched scalability and resiliency
through container and microservices
based design
• Development and operations Agility
through consistent deployment onto
Red Hat OpenShift Kubernetes
CP4I Cloud-Native Architecture
11
CP4I product components
12
API
LifecycleUnlock business data
and assets as APIs
Application
IntegrationConnect your cloud
and on-prem
applications
Data IntegrationUnderstand, cleanse,
transform and deliver
quality data
Secure AccessControl access
to vital resources
wherever
they are
High Speed
TransferSuper fast & secure
data transport across
any cloud
Messaging &
EventsDeliver msgs reliably
with enterprise-grade
messaging
Fast
Secure
Simple
12
CP4I Integration and Platform Services
Logo/Picture
13
• Asset Repository – Integration goldmine
to store all types of integration assets
for re-use of assets, skills across the
organization
• Logging – Common logging built-in the
platform for all components
• Metering – Platform wide metering of
products for licensing and audit
readiness
• Security – Identity and access
management service for common
onboarding of users / groups
15
Next Generation Hybrid Multicloud Platform
Foundation
Infrastructure
Advise Move Build Manage
Certified Offerings
Open Hybrid MulticloudPlatform
Common Services
OpenShift
Multi-cluster Management
RHEL
Cloud Paks
Applications Data Integration AutomationMulticloud
Management
Services
IBM CloudSystems
IBM Power & ZEdge
Private
Roadmap Subject to Change15
• OpenShift Entitlements included within
the Cloud Pak for Integration
• No additional charge for OpenShift to
deploy Cloud Pak for Integration
• Deploy Cloud Pak on any OpenShift
supported 3rd party cloud
• OpenShift v3.11 supported for
customer managed deployments
• Restricted use of OpenShift for CP4I
components only
CP4I Includes OpenShift Entitlements
16
New in v2019.3.2
Seamless Integration for APIs and Application Flows
• Frictionless design-time experience in
App Connect to publish APIs in API
Connect
• Developer-oriented design to create
flows, expose and manage as APIs
• Without leaving App Connect, in just 5
steps, publish APIs from App Connect
into API Connect
• Increased developer productivity during
design time with no switching between
App Connect & API Connect consoles17
New in v2019.3.2
IBM API Connect: Ranked #1 in API Management
Ranked #1 in market share with
nearly double the share of the
next closest vendor (IDC June
2018)
Trusted by enterprises of all sizes
across industries and geographies
Learn more
API Integration Market Trends
API back ends are distributed across multiple on-
premises and off-premises clouds
API volume explosion requires performance,
without sacrificing security
API Integration is becoming a core IT function,
requiring ease of operations for developers and
admins alike
Modern integration architectures with API,
Application, Messaging, Events and Fast File
Transfer are being adopted
Security-hardened and
highly performant API
Gateway service laying
the foundation for growing
API projects and volumes
What’s New in 2019
21
Scalability, flexibility &
IBM managed options
through a Microservices
and Cloud native
architecture across any
cloud
Multi-Cloud Fabric Performant & Secure Agile Operations
Simple and easy
operations for developers
and administrators with
automation and reduced
overhead
Multi-Cloud Fabric
22
• Built Into IBM Cloud Integration Platform for an integrated UX
across integration styles
• New & Simpler UX on IBM Cloud API Connect Reserved
Instance
• Multi-Cloud deployment flexibility with microservices &
Kubernetes-based API Connect
• Improved Transaction Latency thorough co-location of API
Gateway & Analytics with Systems of Records
• Handle SLAs & Usage Spikes by auto-scaling components
(i.e. API Gateway)
• Improved Resiliency through autonomic API Gateway cluster
management
Multi-Cloud Deployment Flexibility
Flexibility to deploy on cloud using
Standard Kubernetes, IBM Cloud Private,
Red Hat OpenShift & VMWare
Performant, reliable and low latency
architecture with co-located gateway
deployed with analytics
Enhanced operational efficiency with
hybrid deployment topology with
components on any cloud
Hybrid licensing for IBM and Customer
managed deployments with a unified API
call volume based business model
24
• Istio Integration for improved performance & security by
passing API header and tokens into Istio
• Open API V3 support to meet security industry standards (i.e.
PSD2) & improve reuse
• OpenBanking & PSD2 Compliant including flexible JWT and
OAuth features
• 10X Improved Performance with cloud-native API-centric
Gateway Service
• Fast Time to Value through Out of the Box policies for API
Gateway Service
• Enterprise Specific Security Support through OAuth flow
customization
• Expanded Security with OIDC, CAPTCHA, Perimeter, DNS
check on Portal, etc.
Performant and Secure
Open API V3 support of Berlin Group
NextGenPSD2 framework through CLI
Accelerate your PSD2 adoption with set of Open
Banking specifications for exposing banking
information securely
Manage and enforce other OAI3 APIs within the
same constructs
Open API V3 support for Open Banking / PSD2
Protect your Client with Advanced Security
Accelerates market delivery of APIs by
delivering support for OpenID Connect to
provide Single-Sign-On (SSO) and identity
validation using JSON Web Tokens (JWT)
Granularity to Revoke OAuth access token
using enhanced token management
Advanced OAuth Consent with Dynamic scope
enforcement during API Invocation
Up to 10X increased performance with natively built
API Gateway using purpose-built technology for
native OpenAPI/Swagger REST and SOAP APIs
Multi-cloud scalability and extensibility to help meet
SLAs and improve client user experience
Optimized drag & drop built-in policies for security,
traffic control and mediation including flexible OAuth,
enhanced JSON & XML threat protection
Secure to the core with self-contained signed &
encrypted image to minimize risk, plus proven
security policies to quickly protect APIs
Continued support for Multiprotocol Gateway Service
to ease migrations
Before: DP Multi protocol
Gateway Service
API call Backend
New: Native API
Gateway Service
API call Backend
Cloud-Native API Gateway Service in DataPower
API GW service
Policies for Enforcement on API Gateway Service
Gateway Script and XSLT policy support
provides flexible message mediation &
dynamic security enforcement
Dynamic Routing support through
Conditional Policy
Enforce strong security through Parse,
JSON and XML Schema Validation policy
OpenID Connect support to enable banks to
meet PSD2 / Open Banking regulations
OAuth Token revocation to enable self-
service token management
Foundational Security Mediation
Invoke API Key Map
Activity Log JWT Validate JSON-XML
Rate Limit JWT Generate Gateway Script
Throw OAuth Policy XSLT
Set Variable Parse
(Threat Detection)
Conditional Validate
User Security
OpenID Connect
Built-in policies for new API Gateway Service
Policies for Enforcement on API Gateway Service
Gateway Script and XSLT policy support
provides flexible message mediation &
dynamic security enforcement
Dynamic Routing support through
Conditional Policy
Enforce strong security through Parse,
JSON and XML Schema Validation policy
OpenID Connect support to enable banks to
meet PSD2 / Open Banking regulations
OAuth Token revocation to enable self-
service token management
Foundational Security Mediation
Invoke API Key Map
Activity Log JWT Validate JSON-XML
Rate Limit JWT Generate Gateway Script
Throw OAuth Policy XSLT
Set Variable Parse
(Threat Detection)
Conditional Validate
User Security
OpenID Connect
Built-in policies for new API Gateway Service
Hardened Portal Security
Supports OpenID Connect for
accelerated developer on-boarding and
social login
Enable PSD2/ Open Banking compliance
to programmatically onboard consumers
using REST Management APIs and
OpenID Connect
Enhanced spam protection against spam
bots with CAPTCHA and honeypot
Detect and prevent malicious attacks
with perimeter and DNS check
Agile Operations
31
• No-Code Automated API Testing & Monitoring for Developer
productivity
• Local API Test & Monitor App to speed adoption
• Granular Migration to transform current topology into a
modern topology
• Line of Business Autonomy with OOTB API updates for
Blue/Green deployments
• Integrated Security with ODIC for Enterprise identity
providers governing API developer and admin user access
• Auto-Generated GraphQL APIs via LoopBack for Developer
productivity
• Reduced TCO with DataPower Operations Dashboard plugin
for Splunk
• Cloud-Native operational resiliency with Istio integration
API Connect Test and MonitorNo code necessary, visual composer to create
tests in < 1 minute
Automated testing and monitoring to
understand API performance and behavior
Collaborate and win as a team by sharing tests
and detect errors earlier
No charge as a standalone offering via Cloud
and native Desktop application
Bundled with IBM products to become
ubiquitous within enterprises
Deep engagement with Developer community
to win together
Run a Lightweight API Connect on Your Desktop!Rapidly create and test APIs with an improved
developer experience
Improved developer productivity by removing
requirement to connect to APIC Cloud
Host a light weight API Manager and gateway
service for testing APIs locally
Operate independently as a developer to
design and test APIs on laptop/desktop
Developers have the ability to connect to localhost or to connect to their APIC Cloud(s)