DZone
Thanks for visiting DZone today,
Edit Profile
  • Manage Email Subscriptions
  • How to Post to DZone
  • Article Submission Guidelines
Sign Out View Profile
  • Post an Article
  • Manage My Drafts
Over 2 million developers have joined DZone.
Log In / Join
Refcards Trend Reports Events Over 2 million developers have joined DZone. Join Today! Thanks for visiting DZone today,
Edit Profile Manage Email Subscriptions Moderation Admin Console How to Post to DZone Article Submission Guidelines
View Profile
Sign Out
Refcards
Trend Reports
Events
Zones
Culture and Methodologies Agile Career Development Methodologies Team Management
Data Engineering AI/ML Big Data Data Databases IoT
Software Design and Architecture Cloud Architecture Containers Integration Microservices Performance Security
Coding Frameworks Java JavaScript Languages Tools
Testing, Deployment, and Maintenance Deployment DevOps and CI/CD Maintenance Monitoring and Observability Testing, Tools, and Frameworks
Culture and Methodologies
Agile Career Development Methodologies Team Management
Data Engineering
AI/ML Big Data Data Databases IoT
Software Design and Architecture
Cloud Architecture Containers Integration Microservices Performance Security
Coding
Frameworks Java JavaScript Languages Tools
Testing, Deployment, and Maintenance
Deployment DevOps and CI/CD Maintenance Monitoring and Observability Testing, Tools, and Frameworks
  1. DZone
  2. Data Engineering
  3. Databases
  4. Why Open Source API Management Is Right for Your Business

Why Open Source API Management Is Right for Your Business

Over the last five years, we've seen tremendous growth and options available for API management. Many vendors are launching as open-source API management solutions.

James Higginbotham user avatar by
James Higginbotham
·
Nov. 04, 16 · Opinion
Like (0)
Save
Tweet
Share
4.97K Views

Join the DZone community and get the full member experience.

Join For Free

Over the last five years, we've seen tremendous growth and options available for API management. While some are closed-source, many vendors, such as Tyk.io, are choosing to launch as open-source API management solutions. Companies are now asking if an open source API management layer the right choice. Let’s examine some of the advantages of open-source API management to help us through the decision-making process.

Advantage #1: Avoid the “DIY” API Management Solution

I have spoken to some groups that have rolled their own API management solution. While your team may be the unique snowflake that needs to build your own API management layer, doing so requires considerable time, resources, and expertise. Instead, start with an open-source API management layer.

Dave Koston, VP Engineering for Help.com, agrees: “There’s simply no way we could internally build the feature set of many of the OSS products we use, as it would take 10-20 times longer than learning their product and the cost would be many times higher as well.”

A good open-source API management layer should offer ways to customize the solution either via clearly defined APIs or plugin-architecture. Your focus should be on delivering value to the market, not becoming experts in API management.

Advantage #2: Code Reviews Create Confidence

Open-source solutions allow the API provider to perform a code and security review, perhaps pairing someone from the API provider with an engineering resource from the vendor. However, Mr. Koston recommends caution when factoring code reviews into your OSS selection: “We reviewed other solutions which were wrapped into other web servers like Nginx, but having multiple levels of software inside the gateway made it hard to determine where problems arose. Being able to simply read the source of a single product and talk to a single vendor makes the product and any issues much easier to reason about and deal with.”

Keep in mind that your API management priorities may not be the priorities of some vendors. API management layers must offer a breadth of features. Not every vendor will focus on the ones most important to you. Being confident in the code that is protecting your APIs is important.

Advantage #3: Jumpstarts Your API Management Early

API monitoring and security should start early, not after experiencing growth. Too often, I have seen companies deploy without an API management solution only to realize that they have no insights into how it is consumed, who is consuming it, and if any security compromises have occurred. The most often cited reason is due to one of limited time, limited or no budget, or uncertainty if the API program will succeed. Once the API program experiences growth, the impact of installing an API management layer is much greater and can have a negative impact on existing API consumers due to changes in account and API token management. Open-source API management layers make this an easy and affordable option even if your API is only used internally or to power web and mobile apps.

What About Technical Support?

When adopting an open-source development tool, technical support may vary from GitHub tickets to mailing lists and Slack groups. However, choosing an open-source API management layer doesn’t mean that you have to go without vendor support. Many vendors, including Tyk.io, and others offer technical support packages that address the needs of the enterprise, mid-size companies, and growing startups. Be sure to evaluate how your API management layer will be supported long-term as part of your assessment.

Getting Started

Many open-source vendors offer distributions of their API management layer that are easy to install on a laptop, on-premise, or in the cloud. Start by building a prototype API that mimics your needs, then try out each API management layer to make sure it meets your needs. Your evaluation should include the considerations listed in one of our previous articles.

Part of any API program’s responsibility is to select a great API management layer. Make the time to do a proper evaluation to ensure that the one you select will meet the needs of your company.

API Open source

Opinions expressed by DZone contributors are their own.

Popular on DZone

  • Why Every Fintech Company Needs DevOps
  • Unlocking the Power of Polymorphism in JavaScript: A Deep Dive
  • Load Balancing Pattern
  • A Real-Time Supply Chain Control Tower Powered by Kafka

Comments

Partner Resources

X

ABOUT US

  • About DZone
  • Send feedback
  • Careers
  • Sitemap

ADVERTISE

  • Advertise with DZone

CONTRIBUTE ON DZONE

  • Article Submission Guidelines
  • Become a Contributor
  • Visit the Writers' Zone

LEGAL

  • Terms of Service
  • Privacy Policy

CONTACT US

  • 600 Park Offices Drive
  • Suite 300
  • Durham, NC 27709
  • support@dzone.com
  • +1 (919) 678-0300

Let's be friends: