September 2020 Summaries

James Lucktaylor, a Go Developer at Tyk, discusses his role and experiences in an interview, sharing insights into his work on the backend of Tyk's new platform and his preference for remote working, which he was accustomed to even before joining Tyk. He highlights the challenges of getting started with open-source projects, emphasizing the importance of improving the developer experience (DX) to make it easier for developers to engage with and contribute to such projects. James reflects on his career journey from Melbourne, Australia, through various tech roles in London, and his eventual landing at Tyk after an extensive job search focused on working with open-source products and the Go programming language. He values the flexibility of Tyk's remote-first, asynchronous work environment, which allows him to live anywhere without impacting his job. Additionally, he shares personal anecdotes about his interests outside work, such as his love for video games, movies, and data-driven decision-making in baseball, illustrating a well-rounded and thoughtful approach to both his professional and personal pursuits.

The Tyk Community Awards 2020 celebrated significant contributions to API acceleration, recognizing individuals who have gone above and beyond in this field. Despite the challenges of an unusual year, Tyk has made notable advancements, including the launch of its new GraphQL features, the release of Tyk 3.0, and the establishment of a side project fund. The company has expanded its global team and received recognition from Gartner MQ, all while maintaining its commitment to its open-source, community-based roots. Tyk's community plays a crucial role in driving innovation and breaking down barriers to API adoption, and the awards serve to acknowledge the invaluable efforts of those involved.

Cloud native API management involves addressing challenges posed by diverse architectural styles, emerging API protocols, and multi-cloud environments. Traditional monolithic and modern microservices architectures require different management approaches, with microservices necessitating careful handling of independent release cycles and network traffic management, including both north-south and east-west traffic. Emerging API styles like GraphQL and gRPC introduce additional complexities, requiring custom solutions for effective management and security. Kubernetes provides a flexible orchestration layer that aids in managing API traffic, while the growing API portfolios demand effective governance to segment and manage access. Multi-cloud strategies further complicate API management, necessitating solutions that can operate across various cloud providers and regions while maintaining centralized control. Effective API management in this context is crucial for ensuring seamless integration, security, and compliance across an organization's digital landscape.

Deploying Tyk on Microsoft Azure and Ubuntu is simplified through a step-by-step guide that begins with setting up a virtual machine (VM) instance on Azure, followed by the installation of necessary software components such as Docker and Git. The process involves creating a VM, configuring it with Ubuntu, and opening specific ports for HTTP, HTTPS, and SSH. After setting up the VM, Docker is installed, followed by docker-compose, which facilitates the deployment of Tyk using the Tyk Pro Docker image. Once Tyk is up and running, users are guided to configure the Tyk dashboard by activating a license key and setting up their first API endpoint with a sample configuration that utilizes open, keyless authentication. The tutorial concludes with testing the API endpoint using tools like Postman, emphasizing the ease with which users can start exploring Tyk's features on the Azure platform.

Managing third-party APIs effectively involves using reverse gateways, which act as proxies and token managers, to enhance security, access control, and centralized management. This approach prevents the leakage of sensitive OAuth tokens and ensures only authorized requests reach external APIs like Salesforce and Google’s GSuite. Reverse gateways also facilitate efficient cost management by centralizing procurement and tracking API usage, thus avoiding pitfalls like lack of visibility and over-provisioning. Effective secrets management, including secure storage, access control, and regular token rotation, is crucial to minimize security risks. Building strong relationships with API providers through regular communication and information sharing, along with active monitoring and performance testing, ensures optimal API performance. Organizations should treat third-party APIs with the same diligence as their own, utilizing API management solutions to optimize usage and reduce costs while maintaining robust security practices.

Deploying Tyk on Google Cloud Platform using Red Hat Enterprise Linux 7 involves setting up a virtual machine, installing necessary components like Docker and Docker Compose, and configuring the Tyk software to create and test an API endpoint. The process starts by creating a VM instance on GCP, ensuring the correct operating system and network settings, and then accessing the instance via SSH to install updates and tools. Tyk is installed using a Docker image, and configuration files are edited to ensure proper volume mappings. After bringing the stack up with Docker Compose, the Tyk dashboard is accessed to activate the license key and set up a basic API endpoint with an open authentication mode. The endpoint is then tested using tools like Postman, demonstrating the deployment's success and allowing users to explore Tyk's features further.

Deploying Tyk on Google Cloud Platform (GCP) using Debian and Docker containers is a straightforward process that enables users to explore Tyk's features efficiently. The tutorial guides users through setting up a Virtual Machine (VM) instance on GCP, installing Docker and Docker-Compose, and deploying Tyk using the tyk-pro-docker image. After configuring the Tyk dashboard and creating a test API endpoint, users can test it using tools like Postman. This setup provides a practical introduction to using Tyk on GCP, making it accessible for those interested in leveraging Tyk's capabilities in API management.