SOA Rolls out an API Management Solution

It seems like every week I spend time talking to one or another of the many API management vendors that seem to be popping up with great regularity. In the last couple of months alone I’ve moderated a great focus.com roundtable that had me talking with Mike Maney from Alcatel Lucent, Sam Ramji from Apigee and Delyn Simons from Mashery. Then earlier this month I moderated a panel at Gluecon with another bunch of protagonists – this time Steve Willmott from 3Scale, William Oellermann from OpusGrid and Jeff Hoffman from enStratus.This along with several API specific blog posts has seen me take up a real API theme.

Maybe this makes sense – at Gluecon, Programmable Web founder John Musser gave a keynote detailing the state of the API market (see slideshare below) and in it he detailed the incredible growth that everything API has enjoyed of late.

Continuing this theme I spent some time recently talking with Alistair Farquharson from SOA. SOA is a company with a (not surprisingly given the name) host of products for SOA Governance Automation. Building on top of that they’re now introducing the Atmosphere API Management Solutions that they’re touting as “the Industry’s First Enterprise-Ready API Management Solution”. I’m not sure about that lofty claim but nonetheless it is worth looking at what SOA are doing.

According to the blurb, Atmosphere provides a secure, robust platform that companies can use to share their APIs with the growing developer community. Atmosphere manages, monitors and secures APIs ensuring that companies’ APIs deliver the level of service customers and partners require; the security of corporate and customer information and assets; and the integrity of the corporate brand.

Specific functionality includes;

  • API definition, content, policy and lifecycle management
  • Intermediation to simplify the creation of RESTful APIs with both XML and JSON content
  • Security capabilities to help protect the APIs from abuse
  • QoS management (SLAs and quotas) to protect internal applications from overload at the API and to provide customers with service-level guarantee
  • Consumer contract monitoring and management of traffic from individual apps

Nothing much in there that is significantly different from the incumbents but where SOA is placing its bets is on what they call “hybrid deployment”. First a little clarification here – there are two main approaches to providing third party API management services – proxy services and proxy-less services. Over on Kin Lane’s blog, there is a great post detailing the difference between the two approaches and utilizing some great diagrams.

Firstly the Proxy approach taken by vendors like Mashery and Apigee;

Secondly the proxy-less approach taken by 3Scale;

Farquharson goes into more detail in his blog post but the SOA approach is to marry the benefits of a proxy-less API service (SOA calls them agents), with the benefits of proxies.  As Farquharson says;

What if you could take advantage of the benefits of both approaches? Put half of the solution on premise, and half in cloud – a hybrid deployment approach. This allows a local proxy to be deployed on premise, but put the administrative console and API management activities in the cloud. This allows API providers to find their ‘balance point’, between what they deploy on premise and in the cloud, and to adjust it as technical considerations – and financial considerations – change.

With this approach SOA enables solutions to be deployed either on-premise or in the cloud – giving what they believe is a more flexible, compliant and enterprise-ready solution.

The API space is moving really fast and is also home to quite a lot of marketing speak that does little more than confuse customers – with this uber-flexible approach SOA believe they have a unique proposition for enterprise customers – watch this space.

5 Comments
  • Battle-tested “uber-flexible” deployment options and enterprise-ready API Management have already been around for several years, but choice is always great to see in a healthy market space.

  • We use a product called CloudGate from Managed Methods to manage our APIs and web services. It has both agent based and proxy based approaches. Its very comprehensive and cost-effective

  • Always good to see competition in the marketplace! As Delyn mentions above – there have been excellent enterprise solutions for a while. 3scale (http://www.3scale.net) also already supports hybrid deployments – the choices for us are: completely cloud hosted, cloud hosted management layer and on premise security using Layer7’s high performance XML gateway or completely on premise security and management) or integration with external CDNs for rapid content delivery.

    You’re right that acronym storm doesn’t help much – hopefully that’s something that’ll crystalize out over time.

  • Add WSO2 API Manager to the list; http://wso2.com/products/api-manager

    WSO2 API Manager is the only open source API management product available today. The product builds upon WSO2’s deep investment in integration, governance, analytics, and security to solve traditional SOA adoption challenges, deliver managed and secure RESTful APIs, and enable new business-to-developer distribution channels.

    WSO2 API Manager focuses on API governance, API promotion, and rapid developer on-boarding. Because the product is built on WSO2 Carbon’s flexible architecture foundation, teams can configure the WSO2 API Manager to handle complex use cases and integrate with existing enterprise security, management, and service infrastructure.

  • For that matter using an API Management solution is important.
    3scale provides a hybrid ,API traffic management on-premise,
    API administration, traffic reports and developer portal cloud based and full featured API Management solution , Setup and Design your API Billing and Payments operations
    http://www.3scale.net/api-management/api-billing-payments/

Leave a Reply