APIs now serve as the primary building blocks for assembling data, events, and services from within the organization, throughout ecosystems, and across devices. Integrated legacy systems and support for modern event-driven architectures, on the other hand, are critical in allowing timely, relevant digital experiences in response to customer behavior. To support these demands, WSO2 has added significant new capabilities to WSO2 API Manager 4.0.0. Complete support for streaming APIs and event-driven architecture (EDA) The first solution to support full implementation of the AsyncAPI specification A Service Catalog to enable developers to discover a given service seamlessly API / API product revisioning to keep track of the changes Feature-rich, cloud-based analytics for easy integration You will gain a full understanding of WSO2 API Manager 4.0.0 features and how they cater to current API Management demands by attending this webinar. DURING THE WEBINAR, WE WILL COVER: Experience the power and synergy of Service Integration and API Management in a fully functional API ecosystem Understand the motivation behind WSO2 API Manager 4.0.0 release New streaming and event-driven architecture support available in API Manager 4.0.0 Learn the importance of catering all API Management and integration demands with one connected platform Explore other new features and enhancements to the product

1. The Best of Both Worlds: Introducing
WSO2 API Manager 4.0.0
May 19, 2020
Sanjeewa Malalgoda
Software Architect/A. Director

2. 2
750+ Employees
50% Engineering
500+ Customers
Around the world (139 new in 2020)
100% Open Source
Flexible Deployment, Faster Time
To Market
Founded in 2005
Backed by Cisco and Toba Capital
Global Presence
Colombo, New York, London, Mountain
View, São Paulo, Sydney, Berlin
USD 48M ARR
In 2020, 16% YoY Growth
WSO2 in a nutshell

3. 3
WSO2 Partner Network
Our partners deliver validated services, solutions, and technologies to customers worldwide.
150+
Partners
75
Countries
strengthening our global
presence
enabled to deliver our
solutions

4. 4
WSO2 API Manager
Addresses full API lifecycle
management operations. Open,
extensible, customizable.
WSO2 Enterprise Integrator
Hybrid integration platform for quick,
iterative integration of any application,
data, or system.
WSO2 Identity Server
Federates and manages identities
across both cloud service and enterprise
environments.
WSO2 Products and Services
WSO2 Open Banking
A purpose-built technology platform for
global open banking.
WSO2 Open Healthcare
Towards greater interoperability with a
proven integration platform and FHIR®
.
WSO2 Strategic Consulting
Streamline your business objectives and
rapidly achieve key results.
Together, with hundreds of the world’s largest corporations, leading universities, and governments, we execute in
excess of 6 trillion transactions, expose more than 200,000 APIs, and manage over 250 million identities every
single year.

5. Time for a poll

6. WSO2
API Manager
An open source approach for full API lifecycle management,
monetization, and policy enforcement. Allows extensibility
and customization, ensures freedom from lock-in.
Highlights
● Easily expose APIs to internal and
external consumers.
● Enable design and runtime
governance for your APIs.
● Provide enhanced API security and
policy enforcement.
● Monetize your digital assets
through APIs.
● Get business insights and
intelligence through APIs.
6

7. WSO2 API Manager: Core Competencies
Broad portfolio of API management functionality
7
Gateway
Internal and External API Management
○ Policy Enablement
○ Protocol Handling
○ Transformation
○ Microgateway
○ Mobile &
Multi-experience
○ Data & Data as a
Service
Security
○ OAuth2
○ OIDC
○ Federated ID
○ SSO
○ JWT
○ API Key
○ AI driven API Security
Analytics Cloud Native
○ Business value
reporting
○ Streaming &
event-driven
analytics
○ Real-time alerting
○ Traffic management
○ Monetization
○ Istio integration*
○ Installations -
Kubernetes, Docker,
PCF.
○ Monitoring with
Prometheus /
Grafana*
○ Improved CI/CD
○ Private jet mode for
Microgateways
Portal/Store
○ API Marketplaces
○ Monetization hooks /
partners
○ Flexible theme-based
architecture
○ Registry and
versioning model
Multiple plug-points and extensibility | Open source projects | Flexible deployment options

8. WSO2 Enterprise
Integrator
8
An open-source, cloud-native, distributed, hybrid integration
platform for integrating APIs, and data using microservices,
cloud-native or centralized ESB style architectures.
Highlights
● Microservices Integration
● Enterprise Service Bus
● Streaming Integration
● Integration Connectors
● Monitoring
● Visual Tooling

9. 9
Open Source API Management and Integration
Start with API management...
API
MANAGER
API design, creation, reuse, governance,
and analytics
20K APIs, 18 trillion transactions / yr
● API Publisher
● API Analytics
● API Designer
● API Gateway
● API Microgateway
● API Storefront/Marketplace
● API Repository/Registry
ENTERPRISE
INTEGRATOR
Quick, iterative integration of
any app, data, or system
6 trillion transactions / yr
● ESB
● Integration Designer
● Message Broker
● Workflows
● Business Rules
● Streaming Engine
● Stream Processing
● Integration Analytics
Complement APIs with integration, analytics
to connect apps and data.

10. Rationale for WSO2 API Manager 4.0
10
- An API-led Integration platform
- Merging WSO2 API Manager and WSO2 EI into a single product offering
- Why?
- Modern-day APIs require the integration of different systems and APIs
- WSO2 becomes a comprehensive platform for building and managing APIs
end-to-end
- Included profiles
- API Management
- Micro Integrator (request/response style integrations)
- Streaming Integrator (asynchronous integrations)

11. API Manager 4.0 - Components
Developer Portal
Service Catalog
Analytics
Traffic
Management
AI Capabilities
Micro Integrator
Streaming
Integrator
Choreo.io
Integrator
API Publisher
Key
Manager(STS)
API Gateways
API Operator
Anomaly Detection
IDE Plugins
Integration Studio
apictl
Streaming Editor
kubectl
Tooling Management Plane Data Plane Control Plane
Integration Layer
API Gateway Layer

12. WSO2 API Management and
Integration Platform

13. WSO2 API Manager
13
An open-source approach for full API lifecycle management, integration, streaming, API
monetization, and policy enforcement. Allows extensibility and customization; ensures
freedom from lock-in.
● 100% Open Source
● End-to-end API Lifecycle Management
● Secured
● Monitoring and Monetization
● On-Prem, On-Cloud, Hybrid

14. New Features
14

15. 15
New Features
Service Catalog for Integration
Making the integration service
discoverable and manageable in
API-M
API and API Product Revision support
Decouple publishing and
deployment operations
Recovery mechanism to revert
back to older state
Smooth integration and development
of services and API Proxies
Streaming API Integration Support
Import AsyncAPI Definitions
Support for SSE, WebHook, and
WebSocket
New Key Managers Connectors
Out-of-the-box connectors to
integrate with ForgeRock,
PingFederate and Auth0

16. 16
New Features at a Glance...cntd
Enhanced User Experience
Improved themes for Publisher
and Developer Portals
Exposing APIs via Custom Hostnames
Deploy API or API Product with a
custom hostname
Cloud-based Analytics
Deploy API or API Product with a
custom hostname
API Microgateway Improvements
API Microgateway based on Envoy
Proxy

17. 17
Service Catalog for Integration
● Main attribute in enabling API-first integration in WSO2 API Manager.
● Service catalogs makes the integration services discoverable to the API
Management layer.
● Allows smooth integration and development of services and API proxies.

18. ● Remove the coupling between publishing and deployment of the API and API
product.
● It is a snapshot of the API/API Product.
● Can be considered as checkpoints of the API development.
● API publisher gets more control over API deployments.
⦿ Revert back to a previous stable state during a failure.
⦿ Deploy to selected gateways
18
Revision Support for APIs and API Products

19. ● Streaming APIs are asynchronous APIs that support
asynchronous message flows.
● Support for creating APIs using AsyncAPI definitions.
● Build Streaming Integrations from ground-up and expose as
managed APIs
⦿ Web Based IDE for the development and testing of Streaming Apps
⦿ Runtime support with Streaming Integrator
● Manage, monetize, secure, and audit event streams
19
Async API Support

20. Protocols for Streaming APIs
1. WebSocket
2. WebHook
3. Server-Sent Events (SSE)
20

21. ● New addition to the connectors list
⦿ ForgeRock
⦿ PingFederate
⦿ Auth0
● Can connect to total of 6 external key managers
using out-of-the box API Manager
21
New Key Manager Connectors

22. ● Virtual Host (VHosts) for APIs
● Enables to deploy an API or API Product Revision to a Gateway with a custom
hostname.
● Easily configured using Admin portal.
● Application developers can access APIs by using the defined access URLs of
the virtual host.
22
APIs via Custom Hostnames

23. 23
Enhanced Publisher and Developer Portals
Easy theming and customization

24. ● Analytics is provided as a cloud solution
● A central portal is provided for all necessary charts for each customer with
data isolation.
● On-premise users will have to on-board on Choreo to use Analytics.
● Historically, managing analytics has been tough for customers in their
environments. Moving the solution to the cloud will take this burden away from
the customers while also benefiting WSO2 with the scalability of the cloud
architecture.
● Native Azure cloud services are used as much as possible for this architecture
to achieve cloud-native characteristics.
24
Cloud-based Analytics

25. 25

26. ● Developed on top of Envoy proxy with supporting components.
● Mutable API Gateway for cloud-native deployments.
● Support two deployment modes
⦿ Edge Gateway
⦿ Shared API Gateway
● Components in a Microgateway Deployment
⦿ Router - Envoy based Proxy
⦿ Enforcer - An Out Process Filter chain for envoy.
⦿ MG Adaptor
⦾ Receives the API create/update requests
⦾ Propagate control plane instructions to router and enforces
⦾ Configures and governs the data plane
26
Microgateway Improvements

27. Deployment Patterns
27

28. 28
API Façade Pattern
API
API
API
Mock Response
Generator
Client Applications
API Façade Mediation
<Under Construction/>
{ Composite Artifact }
{ Functional Backend }
{ Functional Backends }
{ Functional Backends }
API
API
API
Mock Response
Generator
Client Applications
<Under Construction/>
{ Composite Artifact }
{ Functional Backend }
{ Functional Backends }
{ Functional Backends }
API Gateway Integrator

29. 29
Minimal deployment with high availability
All-in-One Deployment

30. 30
Maintain scalability at each layer and higher flexibility at each component
Fully Distributed Deployment

31. Demo

32. Question Time!

33. Last poll

34. wso2.com
Thanks!

35. API Manager Product Roadmap
35
Mid-Term
Near-Term Future
● API led integration in cloud(SaaS)
Offer API Management and integration as a cloud
SaaS offering to cater all integration and API
Management demands.
● Cloud analytics improvements(SaaS).
Add more graphs and additional features into
analytics cloud.
● Websocket support with microgateway
● Microgateway as the edge gateway (ingress
gateway) in Kubernetes.
● Control plane support with xDS APIs.
● Extending support for dynamic (third-party)
gateways.
● Dynamic registration of microgateways on API
Manager.
● Support for serverless API gateways.
● Personalization of APIs for API consumers, which
can be deployed on personal API gateways
(private-jet).
● Web assembly support for request/response
transformation in microgateway
● Additional defenses for attack vectors, such as via
machine learning and honeypots.
● Federated API Marketplaces
Migrate the API Microgateway to be based on
Envoy Proxy
● Istio integration v2
API Management for Istio. Includes a control plane
extensions and extended Istio side car to support
API management.
● SaaS control plane for Hybrid API Gateways
Ability to control on-prem and multi cloud API
gateways through a hosted control plane and
developer portal.
● Generalized policies through OPA (Open Policy
Agent)
Policy generatlization to support different gateway
formats.
● First-class support for federated apps (login with
Facebook, Google, etc.).