Download Apigee Gateway Specifications, Jul

Apigee Gateway Specifications
Logging and Auditing
Feature
Description
Data Selection
•
Request/response messages
•
HTTP headers
•
Simple Object Access Protocol (SOAP) headers
•
Custom fragment selection via XPath
•
Encryption of sensitive information
•
Obfuscation of sensitive information
•
Custom transformation support
•
Local disk
•
NFS server
•
Java Message Service (JMS) queue
Mode
•
Asynchronous or synchronous
Format
•
Custom via templates
Other
•
Support for simultaneous logging to multiple destinations using
shared/different formats
Data Handling
Destination
Interoperability
Feature
Description
XML Protocol
Mediation
•
POX/REST to SOAP 1.1/1.2
•
SOAP 1.1/1.2 to POX/REST
SOAP 1.1 to SOAP 1.2
Transport Mediation
Data Mediation
•
SOAP 1.2 to SOAP 1.1
•
Custom transformation via XSLT
•
JMS to HTTP/S
•
HTTP/S to JMS
•
HTTP header manipulation Bullet
•
Insert, delete, and replace functions
•
Custom message templates via service callout
•
Custom SOAP fault generation
•
XSLT transformation
•
XML to JSON conversion
Version Mediation
•
Custom Java code
•
Custom Python code
•
Custom transformation and routing
Management
Feature
Description
SLA Monitoring
•
•
•
•
Per-target response time
Per-target fault rate
Per-client response time
Per-client fault rate
Load Balancing
•
•
•
URL based
Weighted round-robin
Affinity based routing
Rate Limiting
•
•
•
•
Target-specific limits based on messages-per-unit time
Target-specific limits based on concurrent requests
Client-specific limits based on messages-per-unit time
Distributed quota support for large deployments
Content-Based Routing
•
Route requests to specific targets based on request/response and headers
Fault Management
•
•
•
Routing to exception queue
Canned outage message generation
Rejection of faulty requests
Personalization
Feature
Description
Profile Lookup
•
•
Lightweight Directory Access Protocol (LDAP) profile attributes
Custom lookup via service callout
Data Personalization
•
Profile-based transformations
Policy Personalization
•
•
•
Profile-based selection of policy
Policy parameters set using profile attributes
Profile-based service callouts
Target Personalization
•
Profile-based request routing to target services
Application Key
Personalization
•
•
Profile data based on application key stored in Apigee Key Manager
Rate limits based on application key
Performance
Feature
Description
Response Caching
•
•
•
•
Cache target service responses per client or across clients
Cache interval defined statically or dynamically
Cache in memory and on disk
Distributed invalidation for consistency across clustered deployments
Data Validation
•
•
Schema-based validation
Verification of well-formed XML
Data Compression
•
Automatic compression/decompression of responses and requests
Credential Caching
•
Cache credentials received from LDAP servers
Context Caching
•
Cache responses of custom service callouts used to build context
Security
Feature
Description
Authentication
•
•
•
Client credential format support
o OAuth 1.0a and 2.0
o SAML assertion
o HTTP Basic Auth
o WS-Security
o Custom Userid/Password
o Certificate based
Authentication provider support
o LDAP—Active Directory, Open LDAP
o File based
o Custom Java Authentication and Authorization Service (JAAS) Provider
Apigee key manager support – validate API calls for valid application key
Credential Mapping
•
Target credential format support
o HTTP Basic Auth
o WS-Security
o Security Assertion Markup Language (SAML) assertion
o Custom userid/password
o Custom token via service callout
Authorization
•
•
•
•
•
File based
LDAP group based
Custom authorization via LDAP attributes
Custom authorization via message context attributes (HTTP headers, IP
address, etc.)
Network segmentation support
Data Protection
•
•
One-way and two-way Secure Sockets Layer (SSL) to client and/or target
Full and partial message encryption
Data Validation
•
•
Schema-based validation
Check for well-formed XML
•
•
•
Full and partial message signing
Check for XML threats
Check for SQL injection, CSS, and other attacks
Tools
Feature
Description
Web-Based Control
Center
•
•
•
•
Create proxies
Apply policies from templates
Monitor performance
Manage service versions
Apigee Studio
•
•
•
•
•
•
Create proxies
Apply policies from templates
Create custom policies from pre-built components
Create policies from custom Java, Python, and XSLT
Windows, Mac, and Linux desktop application
Not supported in Enterprise Cloud production deployments
Command-line
Interface
•
•
Apigee Gateway platform configuration
Network-router like command pattern
Platform
Feature
Description
Administration
•
•
•
Development
Web-based console for service policy application deployment, configuration,
and monitoring
Web-services API for externally managed application deployment,
configuration, and monitoring
Command Line Interface (CLI) for system configuration
•
Web-based tool for rapid assembly of service policy applications
Eclipse-based tool for full range of service policy application development
Support for full development lifecycle—development, testing, staging, and
production
Support for collaborative development
Reliability, Availability,
and Serviceability
(RAS)
•
•
•
•
•
Active-active configuration with automatic failover for continuous availability
Hot updates of configuration with zero downtime
Systems Management Server (SMS) for centralized deployment
Systems Management Server (SMS) for centralized deployment
Simple Network Monitoring Protocol support with MIB
Performance
•
•
Dual-plane architecture modeled on network routers
Streaming, non-blocking message processing
Alerts
•
•
Comprehensive support for generation of alerts
Alerts delivered to multiple destinations—console, file, JMS
•
•
•
Extensibility
•
•
•
•
•
•
Service callout for data enrichment
Streaming message transform
JAAS
Web services–based management API
Endpoint provisioning from Universal Description, Discovery, and Integration
(UDDI)
Custom policy assertion development
Key Manager
Feature
Description
Features
•
•
•
Storage for individual “API keys” for each developer and application
Storage for OAuth tokens
Additional storage for metadata such as user ID, rate limit
Integration
•
•
•
REST API
Built-in integration with Apigee Gateway
Built-in integration with Apigee Developer Connect
Packaging
Feature
Description
Software Platforms
•
•
•
VMWare (ESX, ESXi, Workstation)
Citrix XenServer
Amazon EC2 AMI
Managed Service
•
•
Fully-managed service available
See “Apigee Enterprise Cloud” data sheet
Updated: Jun-11