mediating mature services, esbs and apis: lessons learned from five years of api management...

24
World ® ’1 6 Mediating Mature Services, ESBs and APIs Tom Porterfield - Senior Software Engineer - Unum Alison Lucy - Software Engineer - Unum DO3X19S DEVOPS

Upload: ca-technologies

Post on 10-Jan-2017

71 views

Category:

Technology


1 download

TRANSCRIPT

Page 1: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

World®’16

MediatingMatureServices,ESBsandAPIsTomPorterfield- SeniorSoftwareEngineer- UnumAlisonLucy- SoftwareEngineer- Unum

DO3X19S

DEVOPS

Page 2: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation

Page 3: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

3 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Abstract

Buildinguponthepopular‘LessonsLearnedFrom5YearsofAPIManagementSuccess’sessionfromlastyear'sCAWorld,Unum'sTomPorterfieldandAlisonLucywilldiveintoakeyareaofAPIManagement– servicemediation.SOAandESBarchitecturesstillandwillexistinorganizationsaroundtheworld.Learnhowusinggatewaystosuccessfullyintegrate,govern,andreducethecostofolderandlegacysystemsincreasesthevalueandROIofyourAPIManagementsolution.

TomPorterfieldUnumSr.SoftwareEngineer

AlisonLucyUnumSoftwareEngineer

Page 4: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

4 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Agenda

ABOUTUNUM

SOA@UNUM

ESBTECHNOLOGY@UNUM

MEDIATION

PUTTINGITALLTOGETHER

1

2

3

4

5

Page 5: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

5 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

AboutUNUM

WhoisUnum?Unumisaleadingproviderofemployeebenefits,includingdisability,lifeandvoluntaryinsurance.NearlyoneinfiveU.S.employerswhoprovidegrouplongtermdisabilitybenefitsandmorethan42percentoftheFortune500dobusinesswithUnum.WithoperationsintheUnitedStatesandtheUnitedKingdom,Unumisadiversefamilyofbusinesseswitha160-yearhistory.

OurfamilyofbusinessesUnumGroup consistsofUnumUS andColonialLife intheUnitedStatesandUnumUK intheUnitedKingdom.WithprimaryofficesinChattanooga,Tenn.,andPortland,Maine,Unumemploysabout10,000peopleworldwide.UnumUS isamarketleaderingroupandindividualdisabilitybenefitsintheUnitedStates,andisoneofthelargestprovidersofgrouplifeandvoluntaryworkplacebenefits.ColonialLife isoneoftheleadingprovidersofvoluntaryworksitebenefits,includingdisability,life,accidentandcriticalillnesscoverage,intheUnitedStates.UnumUK istheleadingproviderofincomeprotectionandcriticalillnesscoverageintheUnitedKingdom,andalsooffersdualbenefitandlifeproductsandservices.

Unum'svisionandvaluesUnum'svisionistobetheleadingproviderofemployeebenefitsproductsandservicesthathelpemployersmanagetheirbusinessesandemployeesprotecttheirfamiliesandlivelihoods.

Page 6: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

6 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

SOA@Unum

Page 7: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

7 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WhatisSOA

§ ServiceOrientedArchitecture(SOA)isdrivenbybusinessagilityneed,nottechnicaladvancements

§ SOAisanarchitecturalstyle– Contrarytosomevendors,youcannotbuyaSOA– Itisaboutapproachesandprinciples,notfixedtechnicalsolutionsorpatterns

§ Focusesonreuse,agility,integration,interoperability,standards…

§ SOAisabouttheprinciplesofconstructingloosely-coupled,reusable,application-agnosticbusinessservices

§ SOAisaboutfocusingonbuildingservicesthatmaptobusinesscapabilities

Page 8: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

8 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Unum’sApproach

BusinessCapabilityMapping:§ TheenterpriseDomainModelAKABusinessObjectModelisaconceptual

model,whichdefinesthebusinessobjectsofinteresttotheenterpriseandhowtheyrelatetooneanother

§ Itmayalsodefinecriticalattributesassociatedwithagivenbusinessobject,especiallyiftheyareneededforbusinessrules;however,thismodelisnotafullyattributedmodel

§ ThismodelsetsthestagefordrivingouttheenterprisevocabularythatisthenexpandedupononcethefullyattributeddataobjectsarebuiltoutintheEnterpriseDataandMessageModels

Page 9: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

9 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

EnterpriseModels

IT Owned:

Business Object Model

(aka Domain Model)

Enterprise Data Model

(logical view)

Enterprise Message Model

(physical view)Drives

generation of entity schemas

EnterpriseGlossary of

Terms

Central source of all business

concepts/objects and terms identified through project initiatives and

used in development of rules. Provides for an

enterprise wide common language and meaning of terms used in the

business.

Database ImplementationData Models

e.g., DB2, SQL Server, Teradata

Logical Data

Model

Physical Data

Model

LEGEND:Green = Enterprise ModelsBlue = Database Models (application level)Pink = Enterprise Glossary

Enterprise Service Model

(Service Interfaces & Contracts)

Page 10: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

10 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

LogicalLayersoftheArchitecture

Ente

rprise

Com

pone

nts

Secu

rity

UserExperience(UX)• RoleBasedUserExperience

Services• Accesstodata,workflowandrulesisviaservices

• Accesstoorchestrationviaqueues

Data• Databases• LegacyAssets

Workflow

Orchestration

Rule

s

Business ServicesEmployer

Service

Infr

astr

uctu

re S

hare

d Se

rvices

ClaimService

Internal Desktop

UX

Browser\IVRUX

CTI Desktop for

Telephonic Role

NativeDataAccess

LegacySystemIntegration

Queue

Page 11: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

11 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

ESBTechnology@Unum

Page 12: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

12 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WhatisanESB?§ Fundamentally

– Anarchitecture

– Middleware

§ Providesamechanismforintegratingnumerousapplicationsoverabus-likeinfrastructure,usingaconsistentsetofrulesandprinciples

§ Incorporatesthefeaturesrequiredtoimplementaservice-orientedarchitecture

§ Itsprimaryuseisintegrationofheterogeneousandcomplexlandscapes

§ Promotesagilityandflexibilitywithregardtocommunicationbetweenapplications

§ Keyfunctions– Transformation(XML,COBOL,CSV,Json)

– Portabilitybetweendifferentoperatingenvironments

– Failover

Page 13: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

13 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

P2PvsSOAandESB

IncreasingorganizationalagilitybyreducingtimetomarketfornewinitiativesisoneofthemostcommonreasonsthatcompaniesimplementanESBasthebackboneoftheirITinfrastructure.

Tightlycoupled,complexEachapplicationmustunderstandthedetailsoftheapplicationswithwhichitinterfaces

Looselycoupled,simplerNoneedfortheapplicationstoknowthedetailsoftheothers

Page 14: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

14 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

AddingaMediationGateway

Page 15: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

15 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WhatisServiceMediation

§ Anintermediatelayerbetweenserviceclientsandphysicalservice– Providesaunifiedinterfacetoserviceclients

§ akavirtualservice,comparedtophysicalservice

– Serviceclientsnolongercommunicatedirectlywithphysicalservice– Servicemediationcaninterpretmessagerequestsfromserviceclientsand

decidehowtocommunicatetherequesttothephysicalservice– Servicemediationisfullytrustedbyphysicalservice– Fromaclientperspective,theserviceresponseonlycomesfromthemediated

(virtual)service.Clientisunawareofphysicalimplementation

Page 16: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

16 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

BenefitsofServiceMediation

§ Separatephysicalservicetechnicalimplementationfromserviceclientstoallowmoreflexibleserviceimplementation,suchasversioning,physicalserverlocationandsetup,servicetechnologyselectionandsoon– Servicemediationexposesvirtualserviceinterfacewithservicecontractthatcanbeaccessedwith

industrystandardwayofcommunication,butnotaparticularservicecommunicationrequirement– Physicalserviceselectsaparticularvendorproductortechnologythatfitsbestwiththephysical

servicelogicimplementation– PhysicalServiceclientswillonlycareaboutservicecontractandusethestandardwaytoaccess

service

§ Physicalservicefocusesonimplementingservicelogictodeliverbusinessrequirementsandleavesservicemediationtohandleadditionalservicerequirements,suchassecurity,exceptionformatting,messagevalidation,etc.

§ Servicemediationappliesruntimepolicyandcapabilitiestofiltermessagetraffic,validatemessages,controltraffic,routetrafficandsoon

Page 17: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

17 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

CAAPIGateway

§ Usedasamediationgatewayforallofourenterpriseservices(andanumberoftacticalservices)forinternalandexternalconsumers

§ Providesadditionalflexibilitybydecouplingtheconsumerserviceendpointfromthephysicalimplementation– Allowingforsplitrouting

§ Sendmessagetodifferentphysicalservicebasedonserviceversion– Controlserviceavailability

§ Preventmessagesfrombeingroutedtophysicalservicewhenthatserviceisscheduledtobeunavailable– Throttleconsumertraffic

§ Preventahighvolumeconsumerfromimpactingoverallserviceperformancebyrestrictingtheamountoftrafficthatconsumerisallowedtosendtoaservice

§ SecurityandValidation– Centralizedauthenticationandauthorization– Messagevalidation

§ Preventsinvalidmessagesfromeverreachingthephysicalservice

§ Andmore…

RoleinUnum’sSOAArchitecture

Page 18: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

18 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

TechnologyRoles

IBMIntegrationBus

§ Complextransformations

§ Complexintegrations

§ MQmessaging

CAGateway

§ Security

§ Mediation

§ MessageValidation

§ SimpleTransformations

Page 19: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

19 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

PuttingitAllTogether

Page 20: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

20 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

BuildingaMessageBasedArchitecture

OurApproach

§ BuildEnterpriseServicesusingStandardprotocols

§ Addamediationlayer

§ AddafullESB

§ Connectitalltogether

ABetterApproach

§ BuildafullESBcomprisedofindustryleadingtools

§ Separateresponsibilitiesbasedonbest-in-breedapproach

§ Usethatflexibilitytoexpose/buildbusinesscapabilities

§ Connectitalltogether

Page 21: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

21 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

CAAPIGatewayWorkingWiththeESB

§ Protection– Nounauthorizedaccesstoservices– Invalidmessagesstoppedat

theperimeter

§ Reliability– Throttlehighvolumeconsumers

(BizTalk)topreventimpacttocustomers

– Enforceusagemetrics(Salesforce)

§ Flexibility– Decoupleconsumerfrom

implementation– Routingbasedonversionorother

messagecontent

SecuringthePerimeteroftheWebService/APIBoundary

CA API Gateway

Service Client

HTTP

IBM Integration Bus

Enterprise Identity Provider

Management Console

Application Servers

MQ

Mainframe

MDMServer

Informatica

Page 22: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

22 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Questions?

Page 23: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

23 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Thankyou.

Stayconnectedatcommunities.ca.com

Page 24: Mediating Mature Services, ESBs and APIs: Lessons Learned from Five Years of API Management Implementation Success at Unum

24 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

DevOps– APIManagementandApplicationDevelopment

FormoreinformationonDevOps– APIManagementandApplicationDevelopment,pleasevisit:http://cainc.to/DL8ozQ