March 2022 Summaries

Tyk, a company with a flexible and remote working culture, is empowering parents by allowing them to balance their careers and family life without compromise. Several employees share their experiences of being able to attend important family events, such as school recitals and doctor’s appointments, while maintaining their professional responsibilities. The company's inclusive parental leave policy and understanding leadership, particularly from founders who have young families themselves, create an environment where both work and personal life are respected and celebrated. Employees appreciate the ability to witness and partake in their children’s milestones, reducing the pressure of choosing between career advancement and being present parents. This approach reflects Tyk's commitment to fostering a supportive work-life balance where life’s essential moments are not sacrificed for career success.

OAuth2 Token Exchange RFC8693 is a protocol that addresses the challenges of securely propagating identity and permissions through API gateways in the context of microservices. It enhances API security by enabling the exchange of security tokens between OAuth2 authorization servers and API gateways, allowing the latter to authenticate and authorize themselves while maintaining user-specific information and permissions. Traditional methods like Auth Proxy and OAuth2 Client Credentials have limitations, such as potential security vulnerabilities and loss of user identity information, which the OAuth2 Token Exchange aims to overcome. By using a token-exchange grant, the protocol enables gateways to obtain unique tokens for each user request, dynamically reflecting the user's permissions and identity, thus standardizing API authentication and authorization mechanisms. This approach is considered an elegant solution for managing complex identity and permission propagation scenarios in modern API architectures.

GraphQL's performance capabilities have advanced significantly, allowing technology teams to enhance developer velocity and streamline API adoption. While Apollo has been a popular choice for GraphQL projects due to its ease of use, it's written in Node.js, which is slower compared to other languages. Tyk Gateway, which utilizes GoLang, offers a compelling alternative with performance improvements of 5-10 times faster than Apollo in terms of Requests Per Second (RPS) and latency, as demonstrated in tests involving a simulated Twitter application. By integrating multiple back-end REST services into a single GraphQL API, Tyk showcases its ability to efficiently manage API requests, resulting in reduced latency and improved scalability when additional data sources are added. This performance boost not only enhances the user experience but also offers potential cost savings in hardware for organizations considering a switch to Tyk.

In the detailed exploration of GraphQL performance testing, the article compares the performance of Tyk and Apollo GraphQL implementations using a Twitter profile page scenario, where three backend REST services are combined into a single GraphQL API. The performance tests, executed on EC2 machines using Ansible scripts, reveal that Tyk processes 11,320 requests per second (RPS) compared to Apollo's 3,913 RPS, attributing Tyk's superior performance to its use of a powerful open-source Golang library, as opposed to Apollo's Node.js implementation. The article suggests that Tyk's Universal Data Graph, which allows for combining multiple REST APIs into a single GraphQL API without code, offers a more efficient approach to API management, potentially transforming the API landscape with its full lifecycle capabilities, including authentication, analytics, and more.

Tyk's approach to product delivery emphasizes empowerment, creativity, and innovation, fostering a culture where every team member is encouraged to think like a product manager. This environment allows for controlled risks and collaborative idea development, leading to unique products like their Open Policy Agent. Their product strategy is built on strategic pillars that provide freedom within a framework, allowing product managers to shape and innovate without needing prior approval. The company's model includes Senior and Operational Product Managers, along with Technical Leads and execution resources, to ensure strategic clarity and operational excellence. Tyk integrates UX research and design thinking to create user-centric solutions, offering different task completion methods for technical and non-technical users. Their flexible delivery framework, which includes Scrum and other methodologies, supports the entrepreneurial spirit by allowing teams to adapt processes to optimize results. In 2022, Tyk aims to enhance predictability and agility in product delivery, focusing on continuous delivery and testing to maintain high code quality and automation.