How to Choose a SOA Gateway

Choosing a SOA Gateway : 

Choosing a SOA Gateway Considerations for Business Managers

Agenda : 

Agenda Introduction Key Functionality Deployability Interoperability Extensibility Manageability etc Conclusions Total cost of ownership Additional Resources

Slide 3: 

INTRODUCTION

SOA Gateway Use Cases : 

SOA Gateway Use Cases SOA Runtime governance (security, policy enforcement and lifecycle management) Enterprise application integration Sharing sensitive information between businesses/governments Business rule enforcement (such as SLAs; contract-defined limits [# of downloads/day]) Web API management Cloud Identity federation (including SSO to SaaS applications) Integrating enterprise applications with cloud-based services

Slide 5: 

NOT ALL SOA GATEWAYS ARE THE SAME

Deployability : 

Deployability Multiple form factors allow you to choose a solution that matches your budget and requirements Hardware Software VMware Amazon Machine Image

Interoperability : 

Interoperability Appserver Secure Token Server (customizations, queues, etc) (identity federation) Cloud Gateway/ Cloud Broker (EDI, REST, SOAP, etc) Integration to Partners IAM system (authentication/ authorization) Avoid vendor lock-in by ensuring your vendor can accommodate heterogeneous SOA

Platform Interoperability : 

Platform Interoperability Out-of-the-box, multi-platform support decreases integration costs

Extensibility : 

Extensibility Gateways that run custom code simplify customization by avoiding appserver integration Custom Code

Secure Token Service, PKI & Custom Code Onboard : 

Secure Token Service, PKI & Custom Code Onboard An all-in-one solution speeds time to deployment and decreases costs

Manageability – Local Clusters : 

Manageability – Local Clusters (automated replication) (clustered systems) Single point of administration simplifies management Administration Console

Service Metering : 

Service Metering IPTV SMS MMS Ringtones Pascal Quincy Gets 1 free TV show per month Gets 200 SMS per month Customer Contract Telco service provisioning system Integrated clustering lets you enforce exact contractual limits

Manageability – Global Deployments : 

Manageability – Global Deployments Central administration and visibility for all Gateways lowers management costs

Manageability – Migration Risk : 

Manageability – Migration Risk Development (Asia) Test / Staging (cloud) Production (EMEA) test01LDAP prod02LDAP dev01LDAP Production (NA) prod01LDAP IP: XXX IP: XYY IP: XXY IP: YYY Trust relationships URL links Certificates Queue names Automatically resolving dependencies between environments reduces migration risk

Constrained National Service Rollout : 

Constrained National Service Rollout IT time and resource constraints can delay service rollout, impacting ROI

Streamlined National Service Rollout : 

Streamlined National Service Rollout Speed time to deployment by automating service migration ü ü ü ü ü

Upgradeability : 

Upgradeability Hardware Upgrade Migration Path Gateways that decouple hardware from soft/firmware simplify upgradeability Soft/Firmware Upgrade Migration Path

License Portability : 

License Portability Physical Virtual Cloud License portability lets you avoid platform lock-in and re-licensing costs

Slide 19: 

CONCLUSIONS

Total Cost of Ownership – Deployment : 

Total Cost of Ownership – Deployment Cost of Deployment

Total Cost of Ownership – Operations : 

Total Cost of Ownership – Operations Cost of Deployment Cost of Operations

Total Cost of Ownership – Extensibility : 

Total Cost of Ownership – Extensibility Cost of Deployment Cost of Operations Cost of Implementation

Additional Resources : 

Additional Resources Contact: Dana Crane, Product Marketing Manager dcrane@layer7tech.com Download: “Not all SOA Gateways are Created Equal” White Paper http://www.layer7tech.com/library/ Attend our next webinar: Managing API Security in SaaS and Cloud Presented by Scott Morrison, Layer 7 CTO & Liam Lynch, eBay Chief Security Strategist Security challenges posed by SOAP, REST and Odata APIs Approaches to addressing data and access security Ways to leverage existing security investments Methods for enrolling third-party developers Examples from the real world of how cloud providers use and secure APIs