Apigee Gateway Specifications
Logging and Auditing
Feature Description
Data Selection • Request/response messages
• HTTP headers
• Simple Object Access Protocol (SOAP) headers • Custom fragment selection via XPath
Data Handling • Encryption of sensitive information • Obfuscation of sensitive information • Custom transformation support
Destination • Local disk
• NFS server
• Java Message Service (JMS) queue
Mode • Asynchronous or synchronous
Format • Custom via templates
Other • Support for simultaneous logging to multiple destinations using shared/different formats
Interoperability
Feature Description
XML Protocol
Mediation • POX/REST to SOAP 1.1/1.2 • SOAP 1.1/1.2 to POX/REST SOAP 1.1 to SOAP 1.2 • SOAP 1.2 to SOAP 1.1
• Custom transformation via XSLT Transport Mediation • JMS to HTTP/S
• HTTP/S to JMS
• HTTP header manipulation Bullet Data Mediation • Insert, delete, and replace functions
• Custom message templates via service callout • Custom SOAP fault generation
• XSLT transformation • XML to JSON conversion
• Custom Java code • Custom Python code
Version Mediation • Custom transformation and routing
Management
Feature Description
SLA Monitoring • Per-target response time • Per-target fault rate • Per-client response time • Per-client fault rate
Load Balancing • URL based
• Weighted round-robin • Affinity based routing
Rate Limiting • Target-specific limits based on messages-per-unit time • Target-specific limits based on concurrent requests • Client-specific limits based on messages-per-unit time • Distributed quota support for large deployments
Content-Based Routing • Route requests to specific targets based on request/response and headers Fault Management • Routing to exception queue
• Canned outage message generation • Rejection of faulty requests
Personalization
Feature Description
Profile Lookup • Lightweight Directory Access Protocol (LDAP) profile attributes • Custom lookup via service callout
Data Personalization • Profile-based transformations Policy Personalization • Profile-based selection of policy
• Policy parameters set using profile attributes • Profile-based service callouts
Target Personalization • Profile-based request routing to target services Application Key
Performance
Feature Description
Response Caching • Cache target service responses per client or across clients • Cache interval defined statically or dynamically
• Cache in memory and on disk
• Distributed invalidation for consistency across clustered deployments Data Validation • Schema-based validation
• Verification of well-formed XML
Data Compression • Automatic compression/decompression of responses and requests Credential Caching • Cache credentials received from LDAP servers
Context Caching • Cache responses of custom service callouts used to build context
Security
Feature Description
Authentication • Client credential format support o OAuth 1.0a and 2.0
o SAML assertion o HTTP Basic Auth o WS-Security
o Custom Userid/Password o Certificate based
• Authentication provider support
o LDAP—Active Directory, Open LDAP o File based
o Custom Java Authentication and Authorization Service (JAAS) Provider • Apigee key manager support – validate API calls for valid application key Credential Mapping • Target credential format support
o HTTP Basic Auth o WS-Security
o Security Assertion Markup Language (SAML) assertion o Custom userid/password
o Custom token via service callout
Authorization • File based
• LDAP group based
• Custom authorization via LDAP attributes
• Custom authorization via message context attributes (HTTP headers, IP address, etc.)
• Network segmentation support
Data Protection • One-way and two-way Secure Sockets Layer (SSL) to client and/or target • Full and partial message encryption
Data Validation • Schema-based validation • Check for well-formed XML
• Full and partial message signing • Check for XML threats
• Check for SQL injection, CSS, and other attacks
Tools
Feature Description
Web-Based Control
Center • Create proxies • Apply policies from templates • Monitor performance
• Manage service versions
Apigee Studio • Create proxies
• Apply policies from templates
• Create custom policies from pre-built components • Create policies from custom Java, Python, and XSLT • Windows, Mac, and Linux desktop application
• Not supported in Enterprise Cloud production deployments Command-line
Interface • Apigee Gateway platform configuration • Network-router like command pattern
Platform
Feature Description
Administration • Web-based console for service policy application deployment, configuration, and monitoring
• Web-services API for externally managed application deployment, configuration, and monitoring
• Command Line Interface (CLI) for system configuration
Development • Web-based tool for rapid assembly of service policy applications
• Eclipse-based tool for full range of service policy application development • Support for full development lifecycle—development, testing, staging, and
production
• Support for collaborative development Reliability, Availability,
and Serviceability (RAS)
• Active-active configuration with automatic failover for continuous availability • Hot updates of configuration with zero downtime
• Systems Management Server (SMS) for centralized deployment • Systems Management Server (SMS) for centralized deployment • Simple Network Monitoring Protocol support with MIB
Performance • Dual-plane architecture modeled on network routers • Streaming, non-blocking message processing
Alerts • Comprehensive support for generation of alerts
Extensibility • Service callout for data enrichment • Streaming message transform • JAAS
• Web services–based management API
• Endpoint provisioning from Universal Description, Discovery, and Integration (UDDI)
• Custom policy assertion development
Key Manager
Feature Description
Features • Storage for individual “API keys” for each developer and application • Storage for OAuth tokens
• Additional storage for metadata such as user ID, rate limit
Integration • REST API
• Built-in integration with Apigee Gateway
• Built-in integration with Apigee Developer Connect
Packaging
Feature Description
Software Platforms • VMWare (ESX, ESXi, Workstation) • Citrix XenServer
• Amazon EC2 AMI
Managed Service • Fully-managed service available
• See “Apigee Enterprise Cloud” data sheet
