Enterprises and individual developers alike are heavily leveraging API-based access to data and services, especially for mobile and cloud apps. And they're getting an increasing palette of technologies to choose from for managing all those API processes. "A lot of our customers are exposing their services through APIs," says Apigee spokesman Bala Kasiviswanathan.
For example, the NCR consumer transaction company processes 300 million transactions a day and ran into a challenge where customers were looking to connect different services from different lines of businesses, said Eli Rosner, vice president of global software engineering. "Integration and orchestration became a very strategic need." Part of the answer was to bring API management capabilities into its MuleSoft enterprise service bus to orchestrate transaction-routing workflows in modern mobile and cloud applications, not just in its traditional back-office systems.
[ InfoWorld's David Linthicum explains why service governance has morphed in cloud API management. | Go deep into HTML5 programming in InfoWorld's "HTML5 Megaguide Deep Dive" PDF how-to report. Then understand the issues surrounding HTML5 today in InfoWorld's HTML5 Deep Dive PDF strategy report. ]
Companies such as Apigee, CA's just-acquired Layer 7 Technologies, MuleSoft, Temboo, and WSO2 are tackling the API management need. Some secure API access, some provide an API exchange, and some provide cloud-based conduits to APIs:
- Apigee's API exchange platform is geared to the telecom industry, but the company plans to expand it to include health care and financial services.
- Layer 7's API management suite offers back-end data and application integration, mobile capabilities, cloud orchestration, and developer management.
- MuleSoft's AnyPoint platform connects applications, APIs, and data sources across on-premise and cloud systems.
- Temboo offers a library of common-access APIs, with links to systems such as Facebook.
- WSO2's API Manager enables publishing of APIs, managing a developer community, and routing API traffic.
Forrester says it has fielded an increasing number of inquiries about whether and how companies should expose Web APIs directly to third-party development organizations to create and unlock the value of business data: "Sometimes, an API provider's data gains value only when combined with data from other sources; for example, mashing up maps with transit data, payment data with retail [point-of-sale] systems, or sports scores with Open Graph information."
In some ways, API management is a follow-up to service-oriented architecture (SOA), an approach to modular, orchestrated software delivery that was the "it" enterprise technology in the mid-2000s but later fell out of favor as too academic and abstract for businesses paying the software architecture bills. Nonetheless, SOA's principles remain as valid as ever and have continued to be used -- especially in cloud offerings -- even as few vendors and developers dare speak the term.
Sign up for Computerworld eNewsletters.