What is an API Gateway?

Рет қаралды 288,998

Күн бұрын

Learn more about API Management → ibm.biz/guide-to-api-mgmt
Watch "Why API Management" lightboard video → • Why API Management?
Watch "Scaling Without an API Gateway" lightboard video → • Scaling an Online Stor...
Check out IBM API Connect → www.ibm.com/products/api-connect
Check out IBM DataPower Gateway → www.ibm.com/products/datapowe...
The rapid increase of online services has driven the development of increasingly complex web applications using a microservice based system that can consist of dozens or even hundreds of individual services communicating with each other via APIs.
So how do you manage this increase of API traffic if you intend to scale and add more functionality to your app?
In this lightboard video, Jason Goode with IBM, demonstrates how implementing an API Gateway solution can help you better manage complex application communication by using an example of an eCommerce storefront that gets a surge in web traffic.
Chapters
0:00 - Intro to APIs
0:24 - Monolith to microservices
0:41 - Direct client to microservice communication
1:17 - eCommerce Storefront example
2:17 - Product detail UI functions
3:14 - Implementing an API Gateway architecture
3:47 - Client performance
5:14 - Adding extra security layers
5:51 - Protocol translation
7:06 - Offloading common functionality
8:06 - Black Friday traffic spike example
8:21 - Implementing a Backends for frontends (BFF) architecture
9:36 - Summary
#APIGateway #APIs #IBMCloud

Пікірлер: 193

@IBMTechnology 2 жыл бұрын

Congrats to Parth Vikani for being the first lucky viewer to answer the question correctly! Thank you again to everyone who participated in the contest and please make sure to subscribe!

@IBMTechnology 2 жыл бұрын

Hi Parth! We apologize! Let us check what has happened.

@sherryzafar7507 2 жыл бұрын

SSL stands secure SOCKET LAYER

@wirelessnerd7131 2 жыл бұрын

Congrats Parth 👍

@happyfriend789 Жыл бұрын

Where can one buy the t-shirt from? Do you guys have merchandise too?

@shreyanshgupta1481 2 жыл бұрын

SSL termination (or SSL offloading) is the process of decrypting this encrypted traffic. Instead of relying upon the web server to do this computationally intensive work, we can use SSL termination to reduce the load on our servers, speed up the process, and allow the web server to focus on its core responsibility of delivering web content.

@MrEvansjethro 2 жыл бұрын

There's a lot to learn in IT, and often times you become anxious. However, the great deal about IBM Technology, is that you get a preview of your concerned aspect of Technology before you can actually dive deep into learning it, which makes it a lot easier because by then you will have a clear perspective and concept about your Technology of concern. Thank you IBM Technology.

@Safirshad 2 жыл бұрын

HI Jason , Thanks for your nice explanation. ""SSL Termination"" For all incoming HTTPS connections, the load balancer service ends the SSL connection and establishes a plain text HTTP communication with the back-end server. CPU-intensive SSL handshakes and encryption or decryption tasks are shifted away from the back-end servers, allowing them to use all their CPU cycles for processing application traffic.

@PranavBhattarai 2 жыл бұрын

IBM is doing nice things. Engaging with us through this medium helps to solidify our virtual bond between us. I hope IBM makes a lot of these videos in the future. And at some point create a playlist so viewers can understand the flow, like from where it would be great to start and where are we going towards. Love you guys. And although many people have already answered the question of "What is SSL termination", I will attempt to answer that question because "what if...", here you go: SSL termination refers to the process of decrypting encrypted traffic before passing it along to a web server. 💁

@IBMTechnology 2 жыл бұрын

Thank you for taking your time to give us this wonderful feedback and suggestion, Pranav! We truly appreciate it! 🙏 We do plan to make more videos 😉 so be sure to stay subscribed.

@nive216 2 жыл бұрын

SSL termination is a process where we decrypt and offload the encrypted SSL data within the API Gateway instead of going to our backend microservices which helps performance of our frontend.

@danygagnon8446 8 ай бұрын

Thanks so much for all these videos. I am binge watching them in no particular order. I love these videos

@bitcrawler 4 ай бұрын

The presentation and production quality are super duper amazing. I wish any content would look like this

@devrajin5795 2 жыл бұрын

SSL Termination is basically refers to the process of decrypting the encrypted traffic/data before passing it to a web server that helps the web server to speed up its process so that it can smoothly deliver the content that is requested by the client

@andypsc9844 6 ай бұрын

Thanks for having this channel IBM. I think IBM has done a good job in social responsibility by sharing valuable info, knowledge to the everyone. thumb up IBM.

@DeepakKhopade 6 ай бұрын

Amazingly explained, love the way it was. Thanks.

@adeshkumar4640 2 жыл бұрын

Very Nice & Simplified Presentation. Thanks for providing valuable topic.

@royy9010 Жыл бұрын

The thing I love most about this video is how your shirt was custom made for this video. I would want *that* specific shirt. Kudos for going the extra mile! Also, nice job on the technical explanation too! ;-)

@rudrasarkar1852 Жыл бұрын

This is the reason I like IBM Technology explanation no such boring thing here.

@johnfredricks647 Ай бұрын

The backwards writing is beyond impressive. How has no one commented on that yet

@preechakhomvilai1092 2 жыл бұрын

SSL termination is the process of decrypting HTTPS traffic and forwarding plain HTTP traffic to downstream systems. In the context of API Gateway, one could imagine a publicly accessible API Gateway to do the SSL termination and safely route HTTP traffic to private services thus saving on some computational overhead.

@gustavo68258 2 жыл бұрын

Nice video!! A secure socket layer (SSL) connection uses a certificate for authentication before sending encrypted data from a client computer to the web server.

@TricoliciSerghei 2 жыл бұрын

Thank you so much for this great video, liked!

@habtamusium8646 Жыл бұрын

Interesting methodology ! many thanks

@patty-hv9jj Ай бұрын

Cool, videos, and very informative at the high level. very well presented. love it. thank you!!

@robergeFelix 2 жыл бұрын

SSL( Secure Socket Layer). SSL Termination is the process of decrypting encrypted traffic before passing it to a web server. This prevents you from relying upon the webserver to do this intensive computational work. Help reduce the load on the server and speed up the process which is very important in a microservice architecture like you have just shown.

@sheepsus 2 жыл бұрын

daaamn these educators are what i wish i had in my college

@1anre 2 жыл бұрын

Was really helpful to see it broken down on this your reverse see-through board. Funny thing is the ‘API Gateway’ concept is actually the best analogy for the role I currently play in leading my Tech team - hahah. The Human API Gateway Broker(H.A.G.B)

@rickharold7884 2 жыл бұрын

Always interesting! Thx

@ZhangJay 2 жыл бұрын

Great video for the API Gateway. it would be wonderful if you can illustrate how load balander works with the API Gateway.

@narveshnimje7970 2 жыл бұрын

SSL termination is a process by which SSL-encrypted data traffic is decrypted (or offloaded). Servers with a secure socket layer (SSL) connection can simultaneously handle many connections or sessions. SSL termination helps speed the decryption process and reduces the processing burden on backend servers.

@zhangshiyucao Жыл бұрын

Great explanation!

@shivasheeshtripathi9116 2 жыл бұрын

SSL Termination, also known as “SSL Offloading”, is the process of decrypting SSL-encrypted traffic. The process of decrypting SSL-encrypted traffic is CPU intensive and can impact your application’s performance due to the additional processing required.

@ernestkumeh3800 2 жыл бұрын

Excellent presentation

@PaulEllisBIGDATA 2 жыл бұрын

Dude. You rock! Thanks man.

@jorgebarrero5299 Жыл бұрын

SSL is a security mechanism based on adding a trust certificate that helps to keep the endpoints secure. Not absolute security but it helps a lot

@mehranjavid4770 2 жыл бұрын

SSL termination is the decryption of encrypted traffic. Instead of relying on the web server to do this intense work it can be used to reduce the load and it also allows the webserver to focus on its core responsibilities

@wirelessnerd7131 2 жыл бұрын

Great video, thanks.

@ayushmanyadav2006 2 ай бұрын

nice thanks for the knowledge

@DhirajPatra Жыл бұрын

API Gateway also can be used to make async request and responses. So that it can send ackw to requester and can use hook to write the response when it available as well. Is sort of type of socket by API Gatway can also be used.

@guysela2001 2 жыл бұрын

How did you improve client performance? You still have 5 roundtrips, just done by the API gateway instead of the client. Did you mean to say it's faster because the API Gateway sits closer to the microservices themselves?

@codesrinivas2816 2 жыл бұрын

i guess there are a few benifits 1. we can reduce the decrypt computing load over our micro services. this allows the api gateway to talk to all micro services without encryption which is a lot efficient. 2. we can channel the load of different clients based on frontend application like ios,android,browser etc

@pentalite5 2 жыл бұрын

Other than what's talked about there are other factors that make api gateways more performant. 1. Service providers to service providers connections are much faster than client to service provider connections - Gbps vs Mbps. 2. Also if you're using the same service provider for your database and other microservices, all your resources are probably in the same building, so it's closer and fewer routers to pass through. 3. This is more niche, but you can also set up a memcache/redis to cache common requests, so instead of reading from the resource over the network, you can just read from RAM.

@hemantkhare5545 2 жыл бұрын

They implement caching at API gateways so most frequently requested ones get served by API gateway itself.

@NguyenTung-ss8cq Жыл бұрын

I agree with you. We still have 5 roundtrips. That won't make the response faster.

@sunny-14689 Жыл бұрын

Very informative 🙂

@bandsk884 Ай бұрын

SSL termination involves decrypting encrypted HTTPS traffic at a specific point, like a load balancer or reverse proxy, before sending it to backend servers. These relieve the backend servers from handling encryption tasks, enhancing performance, and simplifying certificate management.

@jeyhunaliyev1765 2 жыл бұрын

Awesome explanation

@IBMTechnology 2 жыл бұрын

Thank you, Jeyhun! Glad you liked it! 👍

@shivamsaha4116 2 жыл бұрын

Servers with a secure socket layer (SSL) connection can simultaneously handle many connections or sessions. An SSL connection sends encrypted data between an end-user’s computer and web server by using a certificate for authentication. SSL termination helps speed the decryption process and reduces the processing burden on backend servers.

@zenganow Жыл бұрын

great video. do you have anything on WSS or Squid?

@andreykrivoshein3788 Жыл бұрын

Thank you!

@hirenpatel6118 Жыл бұрын

hmm doesn't make sense, if you were going to perform another request for price + info without api gateway. what makes you NOT perform another request with an api gateway in the middle?

@anuragbisht1200 11 ай бұрын

great video as always and thank you ! I just thinking out loud, is not SSL termination is against the zero trust architecture?

@taseermufti1331 Жыл бұрын

TLS termination proxy (or SSL termination proxy,[1] or SSL offloading[2]) is a proxy server that acts as an intermediary point between client and server applications, and is used to terminate and/or establish TLS (or DTLS) tunnels by decrypting and/or encrypting communications.

@amirtv106 Жыл бұрын

I've seen a load balancer placed in front of an API gateway. But, should we put one behind the gateway as well? Considering that the services may be horizontally scaled.

@MuhammadYazid 2 жыл бұрын

SSL termination works by intercepting encrypted traffic at the server receiving data from the SSL connection. It helps the server by decrypting and verifying the data on a different device so the server does not need to handle the process.

@Latif127 Жыл бұрын

SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), are protocols for establishing authenticated and encrypted links between networked computers.

@FelixZhao Ай бұрын

Hey! SSL termination refers to the process of decrypting encrypted SSL/TLS traffic at a network device, such as a load balancer or reverse proxy, before forwarding it to the destination server. When SSL termination occurs, the encrypted traffic is decrypted, allowing the network device to inspect, route, and process the data in plaintext.

@dasuneranda Жыл бұрын

IBM has good teachers.

@eswareshkarnati4609 Жыл бұрын

SSL is secure socket layer , It is used to secure the data that is flow from the API to the client and Client to the API . By which we can achieve the security for the data from a malicious attack

@markxp2002 2 жыл бұрын

SSL termination in API gateway is the gateway itself as the frontline facing client, having the SSL certificate and decrepting the request before passing to backend services. Noting that before passing to backend services, you may (optionally) choose another SSL (mTLS) to encrypt the transport between the gateway and your backend.

@user-jy3gp4xz3z 2 ай бұрын

SSL termination (or SSL offloading) is the process of decrypting this encrypted traffic. Instead of relying upon the web server to do this computationally intensive work, you can use SSL termination to reduce the load on your servers, speed up the process, and allow the web server to focus on its core responsibility of delivering web content.

@sabuein Жыл бұрын

Thank you.

@user-ju7hi4dv8u 7 ай бұрын

SSL Termination, Secure Socket Layer Termination, it work on OSI layer7 we decrypt handshake, for example if igress traffic is comings on port 443 we decrypt it then it will route on port 80. cryptography will happen at application load balancer.

@sergezeda9738 Жыл бұрын

SSL stands for secure socket layer. Looking forward to collecting this catchy t-shirt after a year 🙂

@NihadAziz Жыл бұрын

how do they do the reversed writing?🤔 Great video!

@madhavbharadwaj6208 Жыл бұрын

Just curious, how does an api gateway reduce latency? Isn't it an extra hop the request needs to go through?

@kbriaz 2 жыл бұрын

SSL termination means traffic will not be encrypted, between the load balancer or reverse proxy and the back-end server.

@victorsmith6115 2 жыл бұрын

Very concise explanation..no noise. Thanks a lot! Could have offered couple of more Tshirts..I liked the tshirt comment 😁😁✌

@IBMTechnology 2 жыл бұрын

Thanks for the feedback! 😀 We might come up with more contests in the future, so stay tuned! 😉

@birenderdahiya4089 2 жыл бұрын

SSL termination describes the transition process when data traffic becomes encrypted and unencrypted. This happens at the server end of a secure socket layer (SSL) connection.

@stwatertown Жыл бұрын

6:33 Secure Socket Layer (SSL)

@cyberluk3 Жыл бұрын

I like those t-shirts and API's :)

@Xochipilli 2 жыл бұрын

Gracias

@stylishskater92 Жыл бұрын

I understand that the gateway is practical to bundle requests and handle authentication and other things in one place, but how do prevent it from becoming a bottleneck for the scalability part? just multiple instances and clients being distributed to them either on connection or due to region? Does that mean there would be another gateway before to make that decision/assigment?

@freegaming3186 Жыл бұрын

SSL termination is the process to establishing or terminating a connection between two application (usually client and server) by putting encryption/decryption.

@bawajanxxx 2 жыл бұрын

SSL Termination, also known as “SSL Offloading”, is the process of decrypting SSL-encrypted traffic

@atomiccoding 2 жыл бұрын

SL connection sends encrypted data between an end-user’s computer and web server by using a certificate for authentication. SSL termination helps speed the decryption process and reduces the processing burden on backend servers.

@shounakrendalkar9460 Жыл бұрын

SSL stands for Secure Socket Layer it provides security to the data transferred between web browser and server

@chayanchoudhury6041 Жыл бұрын

Is the API gateway behind a load balancer ?? When a user interacts does his/her request go to load balancer first or API gateway?

@eduardovaldes7774 2 жыл бұрын

Good presentation but it's missing the biggest deal in an API Gateway. The web-interface or any other user/API interface will not need to be concerned with the complexities of the backend services that are implemented. They are totally transparent to these applications and allows for further development and decommissioning of services without any impact on the end-clients. To your SSL Termination question, the answer is in your own definition of an API Gateway. The decryption of encrypted data can be performed once and remove the burden from the backend services to deal with it. Since the security portion of the traffic is ensured in that enclosed ecosystem, there is no need to impose encryption/decryption to the processes. The similar process is defined in a Kubernetes (containerization model) where internal traffic is simplified.

@123qwe4ify 9 ай бұрын

SSL Termination happens when an incoming client https protocol can be translated by the API gateway and just convert to http protocol to communicate with the server.

@andersaaenspringborg8227 2 жыл бұрын

SSL termination is where we decrypt, encrypted traffic. Is beneficial to do on a hardware chip on your server, to offload the CPU on requets

@deepakk6092 2 жыл бұрын

you are performing all encryption and decryption at the edge of your network, such as at the load balancer. The load balancer strips away the encryption and passes the messages in the clear to your servers.

@topcatalpha1 Жыл бұрын

What about SWARM for loadbalancing the API gateway ? instead of separating the api gateways for IOS/android, browser, etc... ?

@zeeshanshaikh3450 2 жыл бұрын

SSL termination refers to the process of decrypting encrypted traffic before passing it along to a web server.

@neerajbadlani1989 2 жыл бұрын

SSL ( Secure Socket Layer ) Termination : Process of decrypting encrypted traffic at API Gateway before passing it along to a web/other servers

@rajkishor49 2 жыл бұрын

Ssl termination means authenticating the user requests within api gateway without going to microservices components.

@jcwriter 6 ай бұрын

SSL - Secure Sockets Layer. It’s an encryption-based Internet security protocol. 😊 I really would love to have this T-shirt. 🎉

@rajajayaraman5954 2 жыл бұрын

If the system is going to expect heavy traffic due to the holiday season, and in this case, should we not add the smart load balancers.

@use-hustlelucre Жыл бұрын

Can you make this video once again in more depth, please !! 🙏🏻

@kanaanbahmani5062 2 жыл бұрын

Ok API gateways are amazing and awesome but how do you manage and implement your API gateway using the relevant tools, how do you make sure the API gateway is working properly, and how do you manage them, how don you make them highly available since everything from client side to backend side is going through them? I'd sincerely appreciate it if one of the engineers from IBM could answer my question 🤓☺️

@IBMTechnology 2 жыл бұрын

Hi Kanaan! We'll see what we can do. 🙂 In the meantime, maybe this blog can answer some of your questions: ibm.co/39pJHGS You can find more links about API Management in this video's description.

@kanaanbahmani5062 2 жыл бұрын

@@IBMTechnology thanks for the link

@Priyuenid 10 ай бұрын

SSL Termination in API GATEWAY terms is when API GATEWAY will accept incoming and send out going request in HTTPS to clients but the communication to server or Microservices is HTTP.

@sidhuk3128 5 ай бұрын

ssl termination reduces the load on web servers during data exchange, better for performance. but remember it done from an API gateway to a webserver instead of from client to server

@mhsn27mhsn10 Жыл бұрын

After write and build Api where can upload and run it over internet

@lethatsinkin Жыл бұрын

Can anyone help with the order to watch this playlist? Beginner here

@wyp4032 Жыл бұрын

SSL terminiation is the point that SSL session ends, and http session start from that point onwards.

@sushantsharma9636 Жыл бұрын

secure socket layer used as data encryption based internet security protocol

@jeff.dev.insights Жыл бұрын

SSL termination is the process of decrypting encrypted data before sending it to the server, and then later it's encrypted again before sending it to the user.

@nocoty1316 Жыл бұрын

6:37 "decrypt and offload the encrypted SSL data within the API Gateway" in what terms this offloads anything? offloads what from who?

@tonezou3918 2 жыл бұрын

How does API Gateway handle a global/shared transaction between a few microservices? Let's say we want some functionalities of the Order Svc and the Inventory Svc to be part of a single transaction in the API Gateway that either succeeds and commits as a whole, or reverts all the changes from these microservices on error.

@IBMTechnology 2 жыл бұрын

No, an API gateway doesn't address distributed transactions across microservices. One of the key tenets of microservices architecture is independence, i.e., they're self-contained, loosely coupled, and independently deployable. If that's not possible, there's several solutions like two-phase commit or "eventual consistency" if ACID isn't a hard requirement (e.g., it *may* be tolerable if the inventory count is momentarily inconsistent due to pending order processing; it wouldn't be acceptable for something like a financial transaction). Here's a few references that go into much more detail: developers.redhat.com/blog/2018/10/01/patterns-for-distributed-transactions-within-a-microservices-architecture#possible_solutions www.baeldung.com/transactions-across-microservices www.ibm.com/cloud/learn/microservices

@danzinde Жыл бұрын

Can someone answer what tool is used to make such a cool presentation?

@IBMTechnology Жыл бұрын

Search on "lightboard videos".

@hassanmeraj8037 10 ай бұрын

SSL means Secure Socket Layer. Not sure whether I'm still eligible for the offer, anyway great video. Thank you

@KhaledRenno 9 ай бұрын

please share link to buy the t-shirt. thanks.

@JoseRojasDev 2 жыл бұрын

SSL: Secure Socket Layer. Where is my T-Shirt? n_n I Love this channel btw

@pbnsoft 2 жыл бұрын

SSL stands for Secure socket layer

@rehaans864 Жыл бұрын

It secure the crud with the socket layer.

@marouaniAymen 2 жыл бұрын

SSL stands for Secure Socket Layer

@aadityakiran_s Жыл бұрын

Why all the text is hard to read? Can't even see where you've written API Gateway.

@hlkn333 Жыл бұрын

Hmm...how can the client faster (Web app) via a centralise API Gateway I wonder. Day1- Web app communicates to various microservices to constructs the Web pages Day2- Web app communicates via the API Gateway. The API Gateway communicates to various microservices. Now the Gateway API becomes bottle neck. I agree that the Gateway API will have provide authentication and secured data transport. IoT jargon is included into the conversation and should not be as it is for another conversation whether Gateway API supports MQTT and/or CoAP/LwM2M/IPSO. I believe. In general, I love IBM short conversations to explain various concepts.