APIs form the core of technology backbone for most enterprises today or they intend to do so. The API Management tool is a key ingredient to the mix. An API Management tool provides following capabilities in a nutshell:
As you adopt modern architectures, including cloud, microservices and containers, to build innovative applications, you need an API gateway that is scalable, highly performant, and flexible. Kong is the only enterprise-class API gateway that provides low latency, is lightweight, deployment-agnostic and extensible for these modern architectures.
We’re thought leaders in the space and have provided a cloud native, future proofed solution for your organization that legacy API management solutions cannot. Odds are that your developers are already using Kong open source and love it - but your org has likely outgrown it. As you push the boundaries with infrastructure agnostic applications, and embrace a completely decentralized approach, you can rest assured that Kong Enterprise offers flexible deployment models from bare metal to containers including Kubernetes, to make that transition seamless.... And, when you decide to go serverless, that’s no sweat for Kong.
The performance of API gateways became critical when applications started becoming more distributed in a microservices architecture. Kong provides the lowest latency performance results of nanoseconds, where legacy vendors latency performance results are a thousand times higher in the hundreds of milliseconds, which starts to add-up when the gateway is invoked multiple times within a workflow.
The benefits of Kong’s solution include role-based security, interactive management interfaces, 24x7 white glove customer success and a lot more. You also gain access to the Kong developer portal that supports all your teams: internal, external and partners. Additionally, you gain the power of deep, real-time analytical insights and easy operations that your DevOps team will love.
Our plugin architecture allows us to add, move, delete, and create plugins for all your internal and external API traffic. These include but are not limited to, authentication, rate limiting, transformations, and whatever your needs may be because of the extensible architecture.
Apigee and Kong both are very comprehensive API management tools, both offers robust API Management, Development and Deployment options, while there are many points of convergence for both in terms of functionality and technical capabilities, in this article we will talk about few key technical considerations which should be kept in mind while migrating from APIGEE to Kong.
Our Methodology involves:
The solution comes bundled with automated deployment & installation of all Kong components. It is loosely coupled and can be run independently.
Although there are many components that must be considered for migration, here we have listed few technical components that needs special mention as architecturally Kong may not be following similar patterns or features. So, it becomes imperative to understand at what capacity these features are being used and what impact this can bring to overall migration.
Coforge’ s migration services provide a set of services, from strategy to execution that help our clients transform existing applications enabling quicker realization of business outcomes. Our overall tested & reliable solution package can help customers with application inventory, assessment, code analysis, migration planning and execution.
The below chart describes the process that is followed for migrating APIGEE to Kong API gateway. There are obvious steps that can be automated by embracing utilities for migrating to Kong API gateway.
| Apigee Component | Apigee Description | Kong Component | Kong Description |
|---|---|---|---|
| API Specs | Depends on Infrastructure & Users based | Depends on Usage | Open API Spec is accepted and supported by Kong. |
| API Proxy | API proxies acts as managed 'facades' for backend services for the APIs | backend services for the APIs.OTB Support (Kong Routes) | Open API Spec is accepted andsupported by Kong. |
| Shared Flows | combine policies and resources into a shared flow that you can consume from multiple API proxies, and even from other shared flows. It is exposed as another API or proxy. | Not Supported (Custom Solution Required) | For combined common plugin features, We can build custom solution or same plugin can be applied to multiple Kong components (services, routes, upstream, consumer). |
| Environments & Organization |
Organization: An organization is the toplevel container in Apigee Edge. It contains all API proxies and related resources. Environments: An Apigee environment is a software environment, within an organization, for creating and deploying API proxies. APIs & API proxies must be deployed to an environment before it can be accessed. APIs & proxies can be deployed to a single environment or to multiple environments. |
Kong Runtime | Organization in Kong is used for user roles and group mapping. Onboarding to Kong SaaS Konnect platform is done based upon Org. Customer hosted Kong Runtime provides the infrastructure to deploy Kong artefacts and proxies the services. |
| Groups | Logical grouping of environments | Kong Runtime Group | Group of Kong Runtime managed in a single Kong Runtime Group |
| Hostnames | DNS end-points assigned to Apigee server for exposing APIs & Proxyd | Kong Runtime DNS | DNS mapped to Kong Runtime server/ Runtime server external ip |
| Flow Hooks | Flow hook attaches a shared flow so that it executes at the same place for all API proxies deployed to a specific environment. This allows a separately implemented and deployed sequence of logic that is not part of a proxy's implementation code. | Not Supported (Custom Solution Required) | Custom Solution can be built to support the feature. Kong provides a feature to execute plugins in sequence based upon need. |
| Target Servers | TargetServers decouple concrete endpoint URLs from TargetEndpoint configurations. Instead of defining a concrete URL in the configuration, it allows to configure one or more named TargetServers. Then, each TargetServer is referenced by name in a TargetEndpoint HTTPConnection. | Upstream | Kong Gateway services and Upstream can be used to configure the target service provider endpoint and other security or header related parameters. |
| TLS Keystores | A keystore contains a TLS certificate and private key used to identify the entity during TLS handshaking. In one-way TLS, when a client connects to the TLS endpoint on the server, the server's keystore presents the server's certificate (public cert) to the client | Certificates & SNI | Certificates used to store certificates that is required for TLS or SSL hand shake. SNI is ued to map certificates to host server. |
| Roles-GCP | Granular access privileges assigned to a GCP user | Kong Organization | Organization in Kong is used for user roles and group mapping. |
| Users-GCP | Users represents the organization's API team, which can include people such as administrators, API proxy and API product creators, users monitoring analytics and other statistics, and any others. They are directly tied to GCP IAM users | Kong Organization | Organization in Kong is used for user roles and group mapping. |
| API Product | The users in an organization create one or more API products, where an API product is a bundle of API proxies combined with a service plan. That service plan can set access limits on API proxies, provide security, allow monitoring and analytics, and provide additional features. | Kong Services, Third Party Plugins and Custom Solution | n Kong services provide base to support this feature. Different Third Party plugins and Custom solution can be build to support these features. |
| API Portal | API portals are bridges between API providers and API consumers that provide information about the API at every stage of an API's lifecycle. API portals allow providers to expose and publicize their APIs, educate developer communities about them, provision user access, generate client keys and more. | Developer Portal | Kong Developer Portal is used for API documentation, API discovery, bridges between consumer client and API. |
API Management tool has become a vital part of enterprise solution, we at Coforge have niche expertise on API solutions around Kong including migration from existing API solution to Kong API solution.
We are trying to solve following common problems around API Management Tool & Kong Migration: