MuleSoft Surat Virtual Meetup#25 - Anypoint Platform Features and Capabilities - API Proxy and API Auto Discovery

1. MuleSoft Surat Meetup Group
Anypoint Platform and MuleSoft
Capabilities

2. Organizers
2
Nitish Jain
Jitendra Bafna

3. Speakers
3
Jitendra Bafna
Principal Integration Consultant
Devoteam
➢ Overall 13 years of experience in API and Integration Technologies.
➢ MuleSoft Ambassador and Surat/Nashik MuleSoft Meetup Leader
➢ Published overall 300+ YouTube Videos and 150+ Articles on MuleSoft
and Anypoint Platform.
➢ Expertise in setting up MuleSoft platform includes Hybrid
Implementation, CloudHub (Anypoint VPC, VPN and DLB), Customer
Hosted Mule Runtime (Clustering and Server Group).
➢ Expertise in Application Integration using API Led Connectivity and
Event Driven Architecture.
➢ Expertise in Integration with various systems like Salesforce, NetSuite
ERP, Snowflake, Databases, SAP,
➢ Define Integration and migration strategy and roadmap includes
migrating from on premise to CloudHub, migrating to higher version of
Mule Runtime etc.

4. 4
Agenda
Introduction
Anypoint Platform Capabilities
Anypoint VPC, VPN, DLB and Transit Gateway
Live Demonstration
Trivia Quiz

5. What is MuleSoft?
MuleSoft is the software company having headquartered in the San Francisco, California that provides the
integration software to connect applications, data or devices etc.
Founded as a MuleSource by Ross Mason and Dave Rosenberg.
MuleSource has been renamed to MuleSoft. MuleSoft originally provided Messaging and Middleware
capabilities, later expanded to IPaaS through product Anypoint Platform.
2006
2009
2013
2016
MuleSoft acquired the ProgrammableWeb.
MuleSoft was ranked #20 on the Forbes Cloud 100 list.
MuleSoft filed the IPO and start trading in New York Stock Exchange.
2017
2018 MuleSoft acquired by Salesforce.

6. Anypoint Platform Components
Design Center
Design Center provides tools to design the APIs, developer Connectors and
MuleSoft Applications. RAML is used to design the APIs.
Anypoint Exchange
Anypoint Exchange is repository hub where you can store your reusable
assets and search for connectors, public or private assets.
Runtime Manager
Runtime Manager is the place where you can deploy and manage the
MuleSoft Application. It also provide capabilities to setup Anypoint Virtual
Private Cloud, Virtual Private Network and Dedicated Load Balancer.
API Manager
API Manager is the component of the Anypoint Platform for managing the
lifecycle of API and secure the APIs using policies. This component
basically governed the APIs.
Access Management
This component is basically used to manager users, subscriptions, roles,
organization, environments, Identity Management etc.
Workers are dedicated instances of Mule runtime
engine that run your integration applications on
CloudHub.
Worker sizes have different compute, memory, and
storage capacities.
Worker and Worker Size
Worker Size Heap Memory Storage
0.1 vCores 500 MB 8 GB
0.2 vCores 1 GB 8 GB
1 vCore 1.5 GB 12 GB
2 vCores 3.5 GB 40 GB
4 vCores 7.5 GB 88 GB
8 vCores 15 GB 168 GB
16 vCores 32 GB 328 GB
Horizontal and Vertical Scaling
In CloudHub, Horizontal Scaling can easily done by
increasing the number of workers.
Vertical scaling can be achieved by increasing the
vCores size.
Auto Scaling
CloudHub allows you to make the processing power
behind your applications responsive to changes in their
usage. You can define policies that respond to CPU or
memory usage thresholds by scaling up or scaling
down the processing resources used by an application.
Intelligent Healing
CloudHub monitors the worker clouds for problems and
provides a self-healing mechanism to recover from
them. If the underlying hardware suffers a failure, the
platform migrates your application to a new worker
automatically.
Zero-Downtime Updates
CloudHub supports updating your applications at
runtime so end users of your HTTP APIs experience
zero downtime. While your application update is
deploying, CloudHub keeps the old version of your
application running. Your domain points to the old
version of your application until the newly uploaded
version is fully started.

7. MuleSoft Capabilities
MuleSoft is multitenant Integration platform as a Service for connecting the data, applications and integrations.
MuleSoft allows easy integration with any systems or services for exchanging the data.
❖ Connect any application, data or devices.
❖ Automate Business Processes
❖ API Integration
❖ Data Integration
❖ Design, Deploy, Manage or secure API
❖ Provide wide range of out-of-box connectors to connect any systems like SAP, Salesforce,
NetSuite, Databases etc.
❖ Design and Develop application once and can be deploy to Cloud, Customer Hosted Environment or
❖ Runtime Fabric Manager.
❖ ESB Solutions.
❖ Supports all Enterprise Integrations Patterns like Message Routing, Message Enrichment, Scatter-
Gather, Content Based Routing, JMS
❖ Support Integration Architectural Styles like API Led Connectivity, Microservices, Domain Driven
Design, Event Driven Architecture etc.
❖ Full support of Maven.
❖ Supported deployment using external CI/CD tools like Jenkins, Azure DevOps, Gitlab etc.

8. MuleSoft Strengths
• Gartner has recognized the company as a Leader for the sixth time in the 2020 Magic Quadrant for
Enterprise Integration Platform as a Service (iPaaS).
• MuleSoft has been named a Leader for the fifth consecutive time in the 2020 Gartner Magic
Quadrant for Full Life Cycle API Management.
• MuleSoft provides more than 200+ connectors to connect any system (like SAP, NetSuite,
Salesforce, databases etc.) anywhere. It also provides XML SDK and Java SDK to write custom
connectors.
• API Manager provides many out of box policies like Rate Limiting, Spike Control, Security policies
etc. and even you can write custom policies.
• B2B Management and Partner Management.
• Full support of Maven lifecycle.
• Provides many core components to implement Enterprise Integration Patterns.
• MuleSoft provides multiple deployment options like CloudHub, Customer Hosted (On Premise),
Hybrid and Runtime Fabric Manager (Kubernetes based).
• With MuleSoft, you can design and develop APIs with no code or low code. APIs can be developed
at lightning speed.
• MuleSoft supports many architectural styles like Microservicess, Domain Driven Design, API Led
connectivity,

9. MuleSoft Strengths
• MuleSoft provides Anypoint Monitoring for monitoring the APIs and retrieving the real time metrics
and insights.
• MuleSoft application can be deployed in 12 different AWS region.
• Robust enterprise security enforcement capabilities.
• Built-in high availability & clustering.
• Provides multiple options for data security and various encryption and decryption mechanism
supported like JCE, PGP, XML etc.
• Support for One Way SSL and Two Way SSL authentication.

10. API Manager
API Manager
API Manager is the component of the Anypoint Platform for managing the lifecycle of API and securing the
APIs using policies. This component basically governed the APIs.
➢ Manage the API lifecycle.
➢ Secure tha APIs by applying security policies like IP Whitelisting, Blacklisting, JWT Validation Policy,
Client Id Enforcement Policies etc.
➢ Enable API Analytics.
➢ Enable API Alerts.
➢ Proxy existing SOAP services or create new APIs from OAS and RAML definitions.
➢ Unlock applications, data, and microservices with an API gateway.
10

11. Access Management
Access Management is basically used to govern and control the platform access. There are many more
features provided by Access Management.
➢ Integrate with Identity Providers like Azure IdP, Okta IdP etc. for Identity Management.
➢ Integrate with OAuth 2.0 Identity Providers like Okta, Ping, OpenAM for Dynamic Client Registration and
Client Management.
➢ Provide capability of Multi-factor authentication and connected apps for authentication and authorization.
➢ Managing the Business Group and Subscriptions.
➢ Set up and assign custom roles to users. There are many predefined roles by default.
➢ Manage the environment.
➢ User Management.
11

12. Anypoint DataGraph
Anypoint DataGraph is a component of Anypoint Platform which allows you to unify the multiple APIs into a
single data service. With Anypoint DataGraph, you can reuse multiple APIs in a single request. Enterprise
architects can easily unify APIs into one data service — all without writing more code. Developers can
consume multiple APIs from the data service in a single GraphQL request.
➢ Unify the multiple APIs into the single data service. With Anypoint DataGraph, you can serve
data from multiple underlying APIs within a single request without writing any code.
➢ Consume the data from multiple APIs using a single request.
➢ Developer doesn't have to write the code to parse the data from multiple APIs.
➢ Anypoint DataGraph is managed service, no maintenance or patching for IT.
➢ Request the data you want, no more no less.
➢ Reduce development and maintenance efforts.
➢ Anypoint DataGraph is a managed service and no need to worry about underlying
infrastructure and maintenance.
12

13. Runtime Manager
Runtime Manager is the place where you can deploy and manage the MuleSoft Application. It also provides
capabilities to set up Anypoint Virtual Private Cloud, Virtual Private Network and Dedicated Load Balancer.
➢ Deploy and manage the application lifecycle.
➢ Setup Anypoint Virtual Private Cloud.
➢ Setup Anypoint Virtual Private Network.
➢ Setup Anypoint Dedicated Load Balancer.
➢ Setup Alerts for the applications.
13

14. Anypoint Virtual Private Cloud
Anypoint Virtual Private Cloud allows you to create an isolated, virtual, secure network segment where you
can deploy the applications. Anypoint VPC allows you to create an isolated network where you can host the
workers or mule applications.
By default when no Virtual Private Cloud is created, CloudHub workers are deployed to Global Cloud
workers which are the public network segment of CloudHub network. It exposes the two DNS
for your application.
<app-name>.region.cloudhub.io to access applications directly over shared load balancer.
mule-worker-<app-name>.region.cloudhub.io to access workers directly.
Anypoint VPC allows you to extend your corporate network and allows CloudHub workers to connect
resources behind the firewalls. VPC connects CloudHub workers to an on-premise datacenter using below
techniques
➢ Secure VPN Tunnel (IPSec Tunneling)
➢ Private AWS using VPC Peering.
➢ AWS Direct Connect.
14

15. Anypoint Dedicated Load Balancer
MuleSoft provides 2 types of load balancers
➢ Shared Load Balancer
➢ Dedicated Load Balancer
Whenever you deploy your application to CloudHub, it provides default load balancer which is a multitenant
and known as Shared Load Balancer. Shared Load Balancer provided basic functionalities like TCP load
balancing but it is not possible to implement custom domains or custom ssl certificates on Shared Load
Balancer. Shared Load Balancer also comes with rate limiting.
To access application over shared load balancer, we can use <app_name>.region.cloudhub.io
To overcome the limitation of shared load balancer, MuleSoft provides another load balancer that is known
as dedicated load balancer.
Dedicated Load Balancer is the optional component of Anypoint platform which allows you to route traffic to
applications deployed on CloudHub within Anypoint Virtual Private Cloud.
To create a dedicated load balancer, there must be at least one Anypoint Virtual Private Cloud existing and
associated with one or more environments.
Each dedicated load balancer exposes an external CNAME record lb-name.lb.anypointdns.net that
resolves to the two or more public IP addresses and internal CNAME internal-lb-
name.lb.anypointdns.net. 15

16. Dedicated Load Balancer Architecture
16

17. Anypoint Transit Gateway
MuleSoft enables another great features as part of Anypoint Platform Runtime Manager and that is transit
gateway attachments. Transit Gateway acts as a Cloud Router in AWS and simplify the network access
between VPC's, on premise data centers and third party software.
Transit Gateway generally merge the on premise and cloud network into single network topology.
You can add multiple transit gateway in your Anypoint Organization and that is completely depends on
number of the Transit Gateway entitlement with your organizations.
To create Transit Gateway on Anypoint Platform, Anypoint Virtual Private Cloud and AWS Transit Gateway
must exists in the same region.
One of the main advantage of the Transit Gateway to simplify the network topology and merge all the
network (On Premise or Cloud) to act as a single network topology.
With AWS transit gateway, you can connect on premise, cloud resources and also establish the connection
with Direct connect and using Anypoint Transit gateway within Virtual Private Cloud you can connect AWS
transit gateway.
17

18. Anypoint Transit Gateway
18

19. Use Case 1: CloudHub Architecture
19
Problem Statement:
● Client is looking to implement MuleSoft for connecting SaaS applications like Salesforce, Netsuite etc.
● Cloud based solution where they don’t want to manage infrastructure and all applications must be highly
available and fault tolerance.
● API must be secured with Client Id Enforcement policies.
● Platform must have feature like Intelligent healing, Zero Down Time updates.

20. Use Case 1: CloudHub Architecture - Solution
20
SaaS Apps
(Salesforce/Netsuite
/Databases)
Runtime Manager
Dev Test Prod
Platform Services
Worker
Worker
Worker
Worker
Worker
Worker
Worker
Worker
Worker
Worker
Worker
Worker
Logs Insights Scheduler
Management Alerts
Application
Data
API Manager
API
Policies/Security
API Gateway API Analytics API Alerts and
Monitoring
Public
Internet
API Proxy/API Auto Discovery
Anypoint Platform
Client

21. Use Case 2: CloudHub Architecture (Accessing
Application Within Private DC or Cloud)
21
Problem Statement:
● Client is looking to implement MuleSoft for connecting SaaS applications like Salesforce, SAP system in
private AWS cloud and Databases and resources in on premise system.
● Cloud based solution where they don’t want to manage infrastructure and all applications must be highly
available and fault tolerance.
● Application can be access by fewer client publicly.
● API must be secured with OAuth JWT.
● Platform must have feature like Intelligent healing, Zero Down Time updates.

22. Use Case 2: CloudHub Architecture (Accessing
Application Within Private DC or Cloud)
- Solution
22
SaaS Apps
(Salesforce/Netsuite
/Databases)
Platform Services
Logs Insights Scheduler
Management Alerts
Application
Data
API Manager
API
Policies/Security
API Gateway API Analytics API Alerts and
Monitoring
API Proxy/API Auto Discovery
Anypoint Platform
Client
Runtime Manager
Non Prod VPC (10.0.1.0/22)
Prod VPC (192.168.1.0/22)
Dedicated
Load
Balancer
(Prod)
Dedicated
Load
Balancer
(Non Prod) Dev Test
Prod
Databases
Databases
Core Systems
Core Systems
VPN IPSec
Tunnelling
VPN IPSec
Tunnelling
Corporate Datacenter
(Non Prod)
Corporate Datacenter
(Prod)
us-east-1
us-east-1
AWS Cloud DC
(us-east-1)
AWS Resources
(Prod)
172.168.1.0/16
AWS Resources
(Non Prod)
11.0.1.0/16

23. Use Case 3: Customer Hosted MuleSoft Runtime
(Hybrid Implementation) - Clustering
23
Problem Statement:
● Financial institution is looking to implement cost effective solution and can operate on minimal cores.
Solution must be highly available and having low workloads.
● Due to compliance or security requirements within organization, they cannot move to cloud based
approach.
● API must be secured with Client Id Enforcement policy.
● Application deployed on Mule Runtime must be highly available.
● Need to support integration with HTTP Listener, JMS Topic and Queue Listener, File Listener, SAP
Listener. Data needs to shared across the node.

24. Use Case 3: Customer Hosted MuleSoft Runtime
(Hybrid Implementation) - Solution
24
Prod Server 1
(Mule Runtime 4.3)
Prod Server 2
(Mule Runtime 4.3)
Test Server 1
(Mule Runtime 4.3)
Test Server 2
(Mule Runtime 4.3)
Prod Environment
Clustering
Test Environment
Clustering
Prod Load Balancer
Test Load Balancer
Customer Hosted (Data Plane)
Behind Firewall
https
443
https
443
https
443
https
443
Distributed
Memory Grid
Distributed
Memory Grid
API Manager
API
Policies
API
Analytics
API
Security
API Auto Discovery/API
Proxy
Anypoint Platform (Control Plane)
Anypoint Monitoring
and Alerts

25. Use Case 4: Customer Hosted MuleSoft Runtime
(Hybrid Implementation) – Server Group
25
Problem Statement:
● Financial institution is looking to implement cost effective solution and can operate on minimal cores.
Solution must be highly available and having low workloads.
● Due to compliance or security requirements within organization, they cannot move to cloud based
approach.
● API must be secured with Client Id Enforcement policy.
● Application deployed on Mule Runtime must be highly available.
● Need to support integration with HTTP Listener and JMS Queue Listener. No need of data sharing.

26. Use Case 4: Customer Hosted MuleSoft Runtime
(Hybrid Implementation) - Solution
26
Prod Server 1
(Mule Runtime 4.3)
Prod Server 2
(Mule Runtime 4.3)
Test Server 1
(Mule Runtime 4.3)
Test Server 2
(Mule Runtime 4.3)
Prod Environment
Server Group
Test Environment
Server Group
Prod Load Balancer
Test Load Balancer
Customer Hosted (Data Plane)
Behind Firewall
https
443
https
443
https
443
https
443
API Manager
API
Policies
API
Analytics
API
Security
API Auto Discovery/API
Proxy
Anypoint Platform (Control Plane)
Anypoint Monitoring
and Alerts

27. Use Case 5: Customer Hosted - Runtime Fabric
Manager
27
Problem Statement:
● Client is looking to implement cost effective solution and can operate on minimal cores.
● Solution must be highly available, fault tolerant and having moderate workloads.
● They want to migrate all the 400+ integration to MuleSoft and able to assign minimum unit of core while
deploying applications.
● Client is looking for container based solution.
● API must be secure at Edge and application level by applying policies like Rate Limiting, Client Id
Enforcement.

28. Use Case 5: Customer Hosted - Runtime
Fabric Manager - Solution
28
Customer Hosted (Data Plane)
Customer Hosted (Data Plane)
API Manager
API Policies API
Analytics
API
Security
Anypoint Platform (Control Plane)
Anypoint Monitoring and
Alerts
Mule Runtime
Application
Mule Runtime
Application
Mule Runtime
Application
Agent
Internal Load
Balancer
Agent
Internal Load
Balancer
Agent
Internal Load
Balancer
Mule Runtime
Application
Mule Runtime
Application
Mule Runtime
Application
Worker 1 Worker 2 Worker 3
Controller Controller Controller
Anypoint Security
https
443
Behind Firewall
TCP Load Balancer
API Auto Discovery/API
Proxy

29. Use Case 6: Leverage Anypoint API Management
Capabilities for Non MuleSoft Application
29
Problem Statement:
● Client wants to implement API Management Capabilities for Non MuleSoft applications.
● Having ‘n’ number of web services and apis implemented using non mule technologies but there is no
capabilities of API governance.
● Need to enable OAuth 2.0 Authentication for all the web services and apis.
● Want fewer clients can access apis publicly and securely.
● Non MuleSoft

30. Use Case 6: Leverage Anypoint API Management
Capabilities for Non MuleSoft Application - Solution
30
Web Services Non MuleSoft APIs
On Premise VPN
Anypoint VPN
VPN IPSec Tunnelling
Behind Firewall
On Premise
Mule Proxy
1
Mule Proxy
2
Mule Proxy
3
Mule Proxy
4
Mule Proxy
5
Anypoint VPC (10.0.1.0/24)
API Policies API Security
API
Analytics
API Alerts
and
Monitoring

31. API Proxy V/S API Auto Discovery
API Proxy
When we are enabling the API Proxy for the applications or apis, it means that we are enabling API
governance layer to apply the security policies, managing traffics etc. and by default it consumes 0.1
vCores.
➢ API Proxy can be implemented when you have n number of APIs already exists or SOA layer for which
no control of api governance.
➢ When you want to expose data externally and deploy the proxy in a DMZ following the Gateway pattern.
API Auto Discovery
API Auto Discovery is mechanism of peering API Manager API with Runtime Manager, so API policies can
be applied, traffic management can be done and it doesn’t consume extra vCores.
31

32. Demonstration on API Proxy and
API Auto Discovery

33. Demonstration on Anypoint
Virtual Private Cloud and
Dedicated Load Balancer

34. Q & A Session

35. Thank you