Amsterdam, November 8, 2019

Drive innovation in a multi cloud reality

Cloud & AI Summit

IBM Cloud Pak for Integration +IBM API Connect Updates for 2H2019

Johan TholeTechnical Sales Hybrid Cloud Integration

Important Disclaimers

IBM’s statements regarding its plans, directions and intent are subject to change

or withdrawal without notice at IBM’s sole discretion. Information regarding

potential future products is intended to outline our general product direction and

it should not be relied on in making a purchasing decision. The information

mentioned regarding potential future products is not a commitment, promise, or

legal obligation to deliver any material, code or functionality. Information about

potential future products may not be incorporated into any contract. The

development, release, and timing of any future features or functionality described

for our products remains at our sole discretion.

2

• Agile Integration Mindset

• IBM Cloud Pak for Integration Introduction

• IBM API Connect Updates

• Q/A

Agenda

5

1. (Re)Invent with Data APIs, Events, Integration…

2. Scale and Flexibility Break the monolith

3. Speed and Agility Developer/Ops productivity

Agile Integration Mindset

6

Agile Integration Mindset

People & Process

Decentralized ownership

Empower teams to build, re-use, and govern integrations and best practices

Agile Architecture

Fine grained, integrate where needed across clouds, SaaS, and on-premises

Hybrid Integration Platform

Rapidly build, manage and optimize integrations across applications, data, cloud services, APIs, events

Support an expanding range of integration styles

Open, hybrid cloud approach

7

Concept Of A Cloud Pak

Complete yet simple

IBM certified

Run anywhere

IBM containerized software

Container platform

and operational servicesLogging, monitoring, security,

identity access management

IBM Cloud Private SystemsEdge

Integrated Software based on common use cases e.g. APIs, Security, App flows, Messaging and

Events, Files

8

What is IBM Cloud Pak for Integration (CP4I)

• Create all types of Integrations quickly

using simple tools following modern

development practice

• Manage secure integration deployments

across any cloud leveraging cloud-native

practices & architecture, consistent

operational services.

• Re-use integration assets, skills to speed

up development and time-to-market

maintaining the right governance

IBM Cloud Pak for IntegrationMulti-Cloud, Secure, Enterprise-proven Platform

9

10

• Cloud agnostic to run virtually

anywhere on Red Hat OpenShift.

• Unmatched scalability and resiliency

through container and microservices

based design

• Development and operations Agility

through consistent deployment onto

Red Hat OpenShift Kubernetes

CP4I Cloud-Native Architecture

11

CP4I product components

12

API

LifecycleUnlock business data

and assets as APIs

Application

IntegrationConnect your cloud

and on-prem

applications

Data IntegrationUnderstand, cleanse,

transform and deliver

quality data

Secure AccessControl access

to vital resources

wherever

they are

High Speed

TransferSuper fast & secure

data transport across

any cloud

Messaging &

EventsDeliver msgs reliably

with enterprise-grade

messaging

Fast

Secure

Simple

12

CP4I Integration and Platform Services

Logo/Picture

13

• Asset Repository – Integration goldmine

to store all types of integration assets

for re-use of assets, skills across the

organization

• Logging – Common logging built-in the

platform for all components

• Metering – Platform wide metering of

products for licensing and audit

readiness

• Security – Identity and access

management service for common

onboarding of users / groups

15

Next Generation Hybrid Multicloud Platform

Foundation

Infrastructure

Advise Move Build Manage

Certified Offerings

Open Hybrid MulticloudPlatform

Common Services

OpenShift

Multi-cluster Management

RHEL

Cloud Paks

Applications Data Integration AutomationMulticloud

Management

Services

IBM CloudSystems

IBM Power & ZEdge

Private

Roadmap Subject to Change15

• OpenShift Entitlements included within

the Cloud Pak for Integration

• No additional charge for OpenShift to

deploy Cloud Pak for Integration

• Deploy Cloud Pak on any OpenShift

supported 3rd party cloud

• OpenShift v3.11 supported for

customer managed deployments

• Restricted use of OpenShift for CP4I

components only

CP4I Includes OpenShift Entitlements

16

New in v2019.3.2

Seamless Integration for APIs and Application Flows

• Frictionless design-time experience in

App Connect to publish APIs in API

Connect

• Developer-oriented design to create

flows, expose and manage as APIs

• Without leaving App Connect, in just 5

steps, publish APIs from App Connect

into API Connect

• Increased developer productivity during

design time with no switching between

App Connect & API Connect consoles17

New in v2019.3.2

IBM API Connect: Ranked #1 in API Management

Ranked #1 in market share with

nearly double the share of the

next closest vendor (IDC June

2018)

Trusted by enterprises of all sizes

across industries and geographies

Learn more

API Integration Market Trends

API back ends are distributed across multiple on-

premises and off-premises clouds

API volume explosion requires performance,

without sacrificing security

API Integration is becoming a core IT function,

requiring ease of operations for developers and

admins alike

Modern integration architectures with API,

Application, Messaging, Events and Fast File

Transfer are being adopted

Security-hardened and

highly performant API

Gateway service laying

the foundation for growing

API projects and volumes

What’s New in 2019

21

Scalability, flexibility &

IBM managed options

through a Microservices

and Cloud native

architecture across any

cloud

Multi-Cloud Fabric Performant & Secure Agile Operations

Simple and easy

operations for developers

and administrators with

automation and reduced

overhead

Multi-Cloud Fabric

22

• Built Into IBM Cloud Integration Platform for an integrated UX

across integration styles

• New & Simpler UX on IBM Cloud API Connect Reserved

Instance

• Multi-Cloud deployment flexibility with microservices &

Kubernetes-based API Connect

• Improved Transaction Latency thorough co-location of API

Gateway & Analytics with Systems of Records

• Handle SLAs & Usage Spikes by auto-scaling components

(i.e. API Gateway)

• Improved Resiliency through autonomic API Gateway cluster

management

Multi-Cloud Deployment Flexibility

Flexibility to deploy on cloud using

Standard Kubernetes, IBM Cloud Private,

Red Hat OpenShift & VMWare

Performant, reliable and low latency

architecture with co-located gateway

deployed with analytics

Enhanced operational efficiency with

hybrid deployment topology with

components on any cloud

Hybrid licensing for IBM and Customer

managed deployments with a unified API

call volume based business model

24

• Istio Integration for improved performance & security by

passing API header and tokens into Istio

• Open API V3 support to meet security industry standards (i.e.

PSD2) & improve reuse

• OpenBanking & PSD2 Compliant including flexible JWT and

OAuth features

• 10X Improved Performance with cloud-native API-centric

Gateway Service

• Fast Time to Value through Out of the Box policies for API

Gateway Service

• Enterprise Specific Security Support through OAuth flow

customization

• Expanded Security with OIDC, CAPTCHA, Perimeter, DNS

check on Portal, etc.

Performant and Secure

Open API V3 support of Berlin Group

NextGenPSD2 framework through CLI

Accelerate your PSD2 adoption with set of Open

Banking specifications for exposing banking

information securely

Manage and enforce other OAI3 APIs within the

same constructs

Open API V3 support for Open Banking / PSD2

Protect your Client with Advanced Security

Accelerates market delivery of APIs by

delivering support for OpenID Connect to

provide Single-Sign-On (SSO) and identity

validation using JSON Web Tokens (JWT)

Granularity to Revoke OAuth access token

using enhanced token management

Advanced OAuth Consent with Dynamic scope

enforcement during API Invocation

Up to 10X increased performance with natively built

API Gateway using purpose-built technology for

native OpenAPI/Swagger REST and SOAP APIs

Multi-cloud scalability and extensibility to help meet

SLAs and improve client user experience

Optimized drag & drop built-in policies for security,

traffic control and mediation including flexible OAuth,

enhanced JSON & XML threat protection

Secure to the core with self-contained signed &

encrypted image to minimize risk, plus proven

security policies to quickly protect APIs

Continued support for Multiprotocol Gateway Service

to ease migrations

Before: DP Multi protocol

Gateway Service

API call Backend

New: Native API

Gateway Service

API call Backend

Cloud-Native API Gateway Service in DataPower

API GW service

Policies for Enforcement on API Gateway Service

Gateway Script and XSLT policy support

provides flexible message mediation &

dynamic security enforcement

Dynamic Routing support through

Conditional Policy

Enforce strong security through Parse,

JSON and XML Schema Validation policy

OpenID Connect support to enable banks to

meet PSD2 / Open Banking regulations

OAuth Token revocation to enable self-

service token management

Foundational Security Mediation

Invoke API Key Map

Activity Log JWT Validate JSON-XML

Rate Limit JWT Generate Gateway Script

Throw OAuth Policy XSLT

Set Variable Parse

(Threat Detection)

Conditional Validate

User Security

OpenID Connect

Built-in policies for new API Gateway Service

Policies for Enforcement on API Gateway Service

Gateway Script and XSLT policy support

provides flexible message mediation &

dynamic security enforcement

Dynamic Routing support through

Conditional Policy

Enforce strong security through Parse,

JSON and XML Schema Validation policy

OpenID Connect support to enable banks to

meet PSD2 / Open Banking regulations

OAuth Token revocation to enable self-

service token management

Foundational Security Mediation

Invoke API Key Map

Activity Log JWT Validate JSON-XML

Rate Limit JWT Generate Gateway Script

Throw OAuth Policy XSLT

Set Variable Parse

(Threat Detection)

Conditional Validate

User Security

OpenID Connect

Built-in policies for new API Gateway Service

Hardened Portal Security

Supports OpenID Connect for

accelerated developer on-boarding and

social login

Enable PSD2/ Open Banking compliance

to programmatically onboard consumers

using REST Management APIs and

OpenID Connect

Enhanced spam protection against spam

bots with CAPTCHA and honeypot

Detect and prevent malicious attacks

with perimeter and DNS check

Agile Operations

31

• No-Code Automated API Testing & Monitoring for Developer

productivity

• Local API Test & Monitor App to speed adoption

• Granular Migration to transform current topology into a

modern topology

• Line of Business Autonomy with OOTB API updates for

Blue/Green deployments

• Integrated Security with ODIC for Enterprise identity

providers governing API developer and admin user access

• Auto-Generated GraphQL APIs via LoopBack for Developer

productivity

• Reduced TCO with DataPower Operations Dashboard plugin

for Splunk

• Cloud-Native operational resiliency with Istio integration

API Connect Test and MonitorNo code necessary, visual composer to create

tests in < 1 minute

Automated testing and monitoring to

understand API performance and behavior

Collaborate and win as a team by sharing tests

and detect errors earlier

No charge as a standalone offering via Cloud

and native Desktop application

Bundled with IBM products to become

ubiquitous within enterprises

Deep engagement with Developer community

to win together

Run a Lightweight API Connect on Your Desktop!Rapidly create and test APIs with an improved

developer experience

Improved developer productivity by removing

requirement to connect to APIC Cloud

Host a light weight API Manager and gateway

service for testing APIs locally

Operate independently as a developer to

design and test APIs on laptop/desktop

Developers have the ability to connect to localhost or to connect to their APIC Cloud(s)

Thank you for your attention!

Learn more on www.ibm.com/