API Led Innovation Full Lifecycle API Management API

API Led Innovation Full Lifecycle API Management – API Connect June 2020 Robert Thelen IBM Cloud Integration | 2020 | © IBM 1

Please note - - IBM’s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice and at IBM’s sole discretion. Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon many factors, including considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve results similar to those stated here. 2 IBM Cloud Integration | 2020 | © IBM 2

Agenda • • • Product Evolution New Innovations in v 10 Upgrades Beyond v 10 Q&A IBM Cloud Integration | 2020 | © IBM 3 3

Continued Innovations for API Lifecycle v 5 Established as market leader with API lifecycle innovation with ability to Create, Run, Secure and Manage APIs IBM Cloud Integration | 2020 | © IBM v 2018 Consistence with Choice for Multi-cloud and Hybrid cloud deployment through cloud-native microservice architecture v 10 API Led Innovation driving new business and technical models for modern cloud native development 4 #APILed. Innovation 4

New Innovations in v 10 IBM Cloud Integration | 2020 | © IBM 5

Increase Productivity and Unleash Your API Led Innovation with v 10 OPTIMIZE ACCESS TO DISTRIBUTED DATA SECURE BUSINESS EVENTS WITH THE GATEWAY CONSISTENT HIGHER QUALITY APIs Secure and socialize Graph. QL endpoints through a unified API catalog Automated API behavior testing and monitoring with no-code Secure event-based applications with a single unified gateway Streamline and simplify API consumption for fast and easy data access `Be the first to know`First responder of your APIs through synthetic monitoring and testing Secure integration gateway for modern, cloud native event architectures IBM Cloud Integration | 2020 | © IBM #APILed. Innovation ENTERPRISE SCALE OPERATIONS Adaptive and automated scaling to simplify Day 2 operations Simplified Ops with insight driven auto-pilot for cloud scale deployments 6

Optimize Access to Distributed Data with Graph. QL Endpoints § Next-Gen evolution of Gateway technology beyond Web services and REST with Graph. QL support § Secure and Manage APIs with Graph. QL backends, efficiently managing compute intensive services § Threat Protection against cyberattacks using advance query complexity analysis to prevent API-based attacks § Rate Limit Graph. QL queries with consumer plans based on number of API calls & backend compute time IBM Cloud Integration | 2020 | © IBM #APILed. Innovation @Shopify: New Storefront Graph. QL APIs made a vast performance improvement in terms of size of data and the number of round trips required. For a simple usecase it had reduced from 4 calls to 1, while reducing the data size 294 times resulting in giant leap forward for its partners and clients* 77 #APILed. Innovation

Automated API behavior testing enables rapid development § Rapid API Development with built-in Test and Debug of API assembly § Automated API testing and monitoring designed for developers and teams § No code necessary, visual composer to create tests in <1 minute § Integrate into CI/CD for automation using pre-built plugins like Jenkins #APILed. Innovation @Large. Manufacturer Ability to generate test for our APIs greatly accelerated our test suite creation. The monitoring feature allowed us ensure uptime of the APIs powering [their] digital transformation projects including the high-profile mobileapp* § Continuous performance & behavior monitoring of APIs deployed anywhere in the world IBM Cloud Integration | 2020 | © IBM 88 #APILed. Innovation

Accelerate development with Test and Debug of API Execution § Simple Test UX to test APIs including client credentials, OAuth etc. § Accelerate development through visual representation of the API execution flow for simple tracing § Debug each assembly activity by viewing input and output § Optimize policy execution through performance driven insights § Iteratively develop, test and debug with intuitive user experience IBM Cloud Integration | 2020 | © IBM 99 #APILed. Innovation

Secure event-based applications with consistent policies § Single Gateway stack that natively connects between Microservices and Event-based workloads without any special adapters Data. Power Gateway § Enforce security consistently across Microservices and Event-based workloads without external security solutions, minimizing overall cost of ownership and accelerating go-to-market. § One Gateway solution avoids complex product integrations which reduces infrastructure complexity and operational / people costs IBM Cloud Integration | 2020 | © IBM Event AMQP Streams Microservices 10 10 #APILed. Innovation

Improved resiliency for continuous availability § Enterprise secure and cloud native install experience with Operators § High resiliency with two data-center clustering mapping to your infrastructure § Self-healing for continuous availability of the microservices within API Connect § Simplified and automated backup & restore reducing operations overhead #APILed. Innovation @Red. Hat: Operators systematize human knowledge as code and do this in a scalable, repeatable, standardized fashion. This results in improved resiliency while reducing the tax and burden on IT teams. It also accelerates Multi-cloud adoption by simplifying and making ops consistent* § Accelerate upgrades with future-ready over-the-air-upgrades IBM Cloud Integration | 2020 | © IBM 11 11 #APILed. Innovation

Improved Productivity with Modern User Experience § Simple and Enhanced user experience through open design language § Faster access to resources through easy search and discovery § Consistent user experience across Cloud Pak for Integration and IBM Product Portfolio IBM Cloud Integration | 2020 | © IBM 12 12 #APILed. Innovation

Secure to the Core § Track and Audit user activity for security and compliance § Stronger security to protect your APIs through TLS 1. 3 § Flexibility with no security compromise for subsystem communication with 1 -way TLS+JWT § Enhanced platform security through simple certificate rotation operations IBM Cloud Integration | 2020 | © IBM 13 13 #APILed. Innovation

Continued Innovation Across API Lifecycle § Automate Portal customizations promotion with integrations in your Dev. Ops § Control for consumer on-boarding with approvals by product manager § Governance for universal policy enforcement through Global Policy preflow actions IBM Cloud Integration | 2020 | © IBM 14 14 #APILed. Innovation

API Connect v 10 brings productivity benefits across the team Build consistently higher-quality APIs by shortening test and debug cycles Build trust with your API Consumer by SLA Compliance Easer access to data and processes to build new applications Streamline operations across their multi cloud and hybrid landscape API Developer API Product Manager API Consumer Dev-Ops IBM Cloud Integration | 2020 | © IBM #APILed. Innovation Design more timely and responsive solutions with event-based technologies IT Architect 15

Upgrades IBM Cloud Integration | 2020 | © IBM 16

Upgrade simplification Available with v 10 APIC Fix Pack AMU for v 10 is available now v 5 upgrades supported via AMU upgrade tool v 10 supports new in-place upgrade process v 2018 v 10 v 5 Artifacts are migrated from v 5 to future versions (Multiprotocol gateway) IBM Cloud Integration | 2020 | © IBM Upgrade operates like a Fix Pack leveraging flexible architecture benefits (API or Multiprotocol gateway) 17

Migration from Multiprotocol to API GW v 10 Data. Power Gateway Service IBM Cloud Integration | 2020 | © IBM API Gateway Service With v 10, we plan to extend the upgrade capabilities to support automating some level of API translation for OOTB policies from the Multi-Protocol Gateway service to the API Gateway Service 18

Helping You Succeed with Thought Leadership Provides a set of security principles to drive the highest possible level of API protection. Published Mar’ 20 https: //ibm. biz/Bdq. ZYR How to organize both IT and business roles in order to have a successful API agenda Published Feb’ 20 https: //ibm. biz/Bdqi. En Principles of Agile Integration and illustrates how to use the recent advancements in CP 4 i in order to deploy a modern integration solution Published Feb’ 20 http: //www. redbooks. ibm. com/redbooks/pdfs/sg 248452. pdf IBM Cloud Integration | 2020 | © IBM 19 1

Beyond v 10 IBM Cloud Integration | 2020 | © IBM 20

Three strategic investment imperatives 1 Provide a unified means to develop, secure and operate integrations across legacy, hybrid and public cloud environments 2 Establish the next generation cloud native architecture for the enterprise by leveraging open source and best-of-breed runtimes 3 Leverage artificial intelligence within the api and integration offerings to increase productivity and speed time-to-value IBM Cloud Integration | 2020 | © IBM 21

Highlights of upcoming innovations for API Lifecycle 2 H’ 2 0 Further extend next generation event and microservice architectures IBM Cloud Integration | 2020 | © IBM 1 H’ 2 1 Expanding on the use of analytics and AI to increase productivity 2 H’ 2 1 Expanding on the use of analytics and AI to strengthen security 22

Open. API 3. 0 § Support all security schemes • HTTP JWT Bearer (HTTP Basic scheme is supported) • OAuth 2 with multiple flows (a single flow is supported) • Open. ID Connect (OIDC) § Support all policies as we do today with OAI 2 § Developer toolkit limitations § Support for Drafts in the backend • Support for Drafts in UI § Support for url/server arrays, wildcard IBM Cloud Integration | 2020 | © IBM 23

Service Discovery Roadmap (Draft ) - Service Discovery - Being able to see new APIs in the mesh - Able to add them quickly to existing APIs (as paths), update, or new APIs - Authorization vs Authentication - Authenticate in DP, Authorize in the Mesh - Combined Policies? - Schema Validation - Move simple validation to the mesh? - Smart Service Mesh Routing - Based on APIC / DP meta data - API Test and Mocking story IBM Cloud Integration | 2020 | © IBM 24

Q&A IBM Cloud Integration | 2020 | © IBM 25

Clarifications • API Connect in RH Catalog https: //access. redhat. com/containers/#/product/14 d 18 afd 61 b 54 a 6 d • Product API documentation IBM Cloud Integration | 2020 | © IBM 26

Helping You Succeed with Thought Leadership Provides a set of security principles to drive the highest possible level of API protection. Published Mar’ 20 https: //ibm. biz/Bdq. ZYR How to organize both IT and business roles in order to have a successful API agenda Published Feb’ 20 https: //ibm. biz/Bdqi. En Principles of Agile Integration and illustrates how to use the recent advancements in CP 4 i in order to deploy a modern integration solution Published Feb’ 20 http: //www. redbooks. ibm. com/redbooks/pdfs/sg 248452. pdf IBM Cloud Integration | 2020 | © IBM 27 2

API Connect & Data. Power Software Lifecycle 2020 1 H v 5 APIC only 2021 2 H 1 H 2022 2 H 1 H 2023 2 H 1 H 2 H 6. 5 yrs extended standard Announce EOS 5 yrs v 2018 extended standard (4 yrs) EOS Announce EOS v 10 >=4 yrs extended standard (3 yrs) GA VNext+ 1 IBM Cloud Integration | 2020 | © IBM Announce EOS >=4 yrs standard (3 yrs) Beta GA 28

v 5 Parity • • Feature Timeframe UI Search v 2018 FP 11 (partial) v 10 GA (enriched) While v 2018 introduced many new features, there were a variety of items which did not get brought forward in v 2018 UI Performance v 10 GA Audit trail and logs v 10 GA Scale with large # of orgs v 10 GA 2 site HA v 10 GA Vanity endpoint v 10 GA Going forward, we will focus on v 10 as the delivery vehicle for any of these v 5 parity items Assembly Debugger v 10 GA Monetization v 10 GA (limited avail) v 10 FP 2 (Aug) Notifications v 10 FP 2 (Aug) List Products/APIs v 10 FP 2 (Aug) Various user management 2 H Various import mechanisms 2 H Analytics REST APIs 2 H IBM Cloud Integration | 2020 | © IBM 29

Productivity Improvement with Modern User Experience ADDITIONAL v 10 BENEFITS GA planned 2 Q’ 20 § Simple and Enhanced user experience through open design language § Faster access to resources through easy search and discovery § Consistent user experience across Cloud Pak for Integration and IBM Product Portfolio IBM Cloud Integration | 2020 | © IBM 31

Six Key IBM Differentiators 1 Leading architecture for hybrid/multi-cloud deployment across any API management vendor 2 Native support for kubernetes and leading investments in Open. Shift 3 Key productivity features for the full compliment of personas – with specific leadership in API test & monitor Strongest enterprise-grade and industry-proven gateway security supporting both API and other protocols 4 5 6 critical for multinational businesses as well as hybrid IT ops simplifies modern dev-ops to standardize software & benefit TCO achieve higher quality outcomes and instill trust in the API program protect and secure critical business data and systems Handles aggressive workload demands by optimized performance within a horizontally scalable architecture help IT keep pace with the demands of the business Best of breed, market leading API, Integration, Messaging, Events, and Security in a single integration platform enables higher productivity across the entire integration solution space IBM Cloud Integration | 2020 | © IBM 32

Management Global enterprise / hybrid deployment models Architecture publish api manager developer toolkit Runtime ma na g e developer portal analytics HTTP(s) Client api gateway API traffic IBM Cloud Integration | 2020 | © IBM backend API Portal access • • DMZ-approved Independently scale Run disconnected` Collocate analytics 33

Global enterprise / hybrid deployment models Manageme nt publish Architecture publish api manager developer toolkit analytics backend api gateway e HTTP(s) Client m Country 2 an ag Country 1 m an ag e developer portal analytics HTTP(s) Client IBM Cloud Integration | 2020 | © IBM api gateway backend 34

Hybrid deployment at CVS/Athena Health • Their API-led integration agenda is multi-cloud on AWS, Azure, and on-premise • As part of this strategy, they are securing each edge of their business through a consistent use of a gateway • Each instance gets a copy of the same policies to ensure governance is maintained • APIs securely leverage integration capabilities in each location to connect their systems IBM Cloud Integration | 2020 | © IBM Architecture From public presentation at IBM Think 2019 35

Certified on Open. Shift - The single, strategic container platform • Reliability, Security, and Performance of Red Hat Linux with UBI as the Guest OS for API Connect Containers • Red Hat Certification of IBM Cloud Pak for Integration and API Connect validating RH prescribed enterprise security guidelines • Open. Shift as First Class Citizen with our installation and setup documentations IBM Cloud Integration | 2020 | © IBM 36

Delivered as a Certified Cloud Pak Production Grade • • Security Vulnerability Management Limited Security Privilege Secure Access, Keys, Certs Network & Data Protection Secrets and SPI Security & Privacy by Design • Secure Contexts Multi-cloud Storage Networking Resiliency Scalability Self Healing Recoverable • • • Open. Shift Quality Assurance • Comprehensive Testing • Architectures • OCP Versions • Currency • Airgap • Upgrades Lifecycle Management Patch Upgradeability Rollback/Restore Backup/Recovery OCP Version Alignment • Kubernetes Currency • • • Consistency and Standards • • Consistent Packaging / Publishing Supporting Operators and Helm Consistent Entitlement mgmt Common mgmt. of OSS elements • • UBI and Red Hat Certified Consistent use of OCP and IBM Services ~200 Code Standards enforced Governed Best Practice / Anti Practices • Managed Image CVEs • Trusted Source • Packaging • E 2 E Support • Publishing More details on IBM Cloud Pak Certification http: //ibm. biz/cp-certify IBM Cloud Integration | 2020 | © IBM 37

Large gaps in Apigee support for Open. Shift • Open. Shift Apigee hybrid runtime is specifically not supported on Open. Shift. https: //docs. apigee. com/hybrid/glossary Image taken April 19, 2020 • Apigee supports their limited Edge Gateway in “any Kubernetes cluster” but no specific message that is communicated around Open. Shift (whereas IBM actively certifies Open. Shift) IBM Cloud Integration | 2020 | © IBM 38

Productivity benefits for the whole team Local dev/test env; Flexibility in creating APIs – fully guided, import YAML, graphical assembly API Developer IBM Cloud Integration | 2020 | © IBM Managed API and product versioning; Staging APIs prerelease; Workflows for subscriptions API Product Manager API spec enhanced with custom info; Self-service subscriptions; Graph. QL support Flexible deploy of architecture components; 400+ CLIs/APIs for building solutions DMZ gateway; Distribute policies through the service mesh; supporing Open standards API Consumer Dev-Ops IT Architect 39

Highlights of upcoming innovations for API Lifecycle 2 H’ 2 0 Further extend next generation event and microservice architectures • Expanding the portal to provide for non-RESTful end points from messaging, event streams, and gateways • Deeper service mesh integration IBM Cloud Integration | 2020 | © IBM 1 H’ 2 1 Expanding on the use of analytics and AI to increase productivity • Recommendations to optimize API solutions based on learning from existing API traffic pattern • Intelligent API caching patterns • Next generation smarter API mocking services 2 H’ 2 1 Expanding on the use of analytics and AI to strengthen security • Deep API traffic analysis to identify and proactively protect against known and learned attacks 40

Release dates of interest April 1 Beta external starts April 28 Announce Letter May 1 Beta external ends May 28 V 10 software general availability June 22 V 10 CP 4 i general availability June 22 V 10 reserved instance availability NOTE: Cloud Public will remain on v 5 in Q 2. We will look to do this update to v 10 in 2 H’ 20 IBM Cloud Integration | 2020 | © IBM 41 4