Azure VPN Gateway connects on-premises networks to Azure through Site-to-Site VPNs in a similar way that you set up and connect to a remote branch office. The connectivity is secure and uses the industry-standard protocols Internet Protocol Security (IPsec) and Internet Key Exchange (IKE).

VPN gateways provide secure connectivity between multiple sites, such as on-premises data centers, Google Cloud Virtual Private Cloud (VPC) networks, and Google Cloud VMware Engine private clouds. Traffic is encrypted because the VPN connections traverse the internet. Each VPN gateway can support multiple connections.

There are four types of VPNs that can be used with Microsoft Azure cloud computing:

Azure VPN Gateway connects your on-premises networks to Azure through Site-to-Site VPNs in a similar way that you set up and connect to a remote branch office

The hub is a virtual network in Azure that acts as a central point of connectivity to your on-premises network. The spokes are virtual networks that peer with the hub and can be used to isolate workloads. Traffic flows between the on-premises data center(s) and the hub through an ExpressRoute or VPN gateway connection.

The hub and spoke topology is a network design where we have a central device (the hub) that is connected to multiple other devices (the spokes). This is a cost effective solution except the hub is a single point of failure. One example of where we can use a hub and spoke topology is in a frame-relay network.

The original Visio file can be found here as I cleaned it up in my version here: 
https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli 


The Azure hub and spoke topology network design

Azure Hub-Spoke Network

 I recently finished a project that required replacement of an on-prem version of Mashery or take the path of the Tibco Cloud API Management. I ended up pushing towards Azure based on cost savings and ability to meet requirements.

Azure API Management (APIM) and Tibco's Mashery are in the business capability category of 

"Full API Lifecycle Management and API Hub/Gateway"

- Sign In and discover new APIs from our open data commons of RESTful APIs or contributed from our open source I/O Docs GitHub Project

- Developer Connect matches API developers with API projects.

- The Mashery API Status monitor provides this transparency with third-party real-time and historical performance issues.

Azure provides a Hybrid, multi-cloud management platform for APIs with a single place for managing APIs. It is classified as a platform-as-a-service, and supports the complete API lifecycle. 

You can use API Management to provide a Gateway to any service residing on-premise, in a container or cloud (back-end services). It can help you securely expose your APIs to third parties, partners or internally.

 - administrative interface where you set up API program to:

Set up policies like quotas or transformations on the APIs.

Accepts API calls and routes them to your backends

Verifies API keys, JWT tokens, certificates, and other credentials

Transforms your API on the fly without code modifications.

Logs call metadata for analytics purposes.

 - serves as the main web presence for developers to:

Try out an API via the interactive console.

Create an account and subscribe to get API keys.

 - works well out of the box, while a little rough around the edges and provides a fairly nice UI for externalizing APIs. Developers can register themselves and request and manage subscriptions to products/APIs. The site is customizable though that process cumbersome. The sign-up process even has customizable email templates for verification.

- there are tons of customizations that are possible through API policies. This could be transforming XML to JSON or vice versa, modifying headers, restricting parameters, redirecting to different end-points depending on the message body.

- the structure of how APIs are managed is well thought-out. It makes it quick to start standing up new APIs and versioning them. Additionally, the analytics provided are also very helpful in diagnosing possible bottlenecks or unusual usage.

- the upfront cost is flexible. If you're just starting out with API management, it can be an expensive proposition. Value increases as you add additional APIs. If you're using Azure B2C for the developer portal, you'll require Standard or Premium since they support AAD integration however it's only identity-based tokens.

 - at time of writing, APIM doesn't support breaking out operations to products. For example, if you have an API that has a GET and a POST operation, and you want the POST operation to require a different subscription. There is a work around, but it makes management a bit messy.

 - it's a bit strange at first. Microsoft hasn't migrated all the publisher portal functionality into the "native" Azure portal. So some of it feels a little weird - especially when working with the content management side of things for the developer portal.

- while it's easy to scale up, the cost of APIM ramps up very quickly and you will want to have budget alerts setup. Standard -> Premium is a 4x jump.

These are a few of the notible alternatives to Azure and Tibco.

- API management, design, analytics, and security are at the heart of modern digital architecture. The Apigee intelligent API platform is a complete solution for moving business to the digital world.

- Aimed at people using .NET running a micro services/service oriented architecture that need a unified point of entry into their system. However it will work with anything that speaks HTTP and run on any platform that ASP.NET Core supports. It manipulates the HttpRequest object into a state specified by its configuration until it reaches a request builder middleware where it creates a HttpRequestMessage object which is used to make a request to a downstream service.

also known as an API Gateway, or API Middleware)

. Kong controls layer 4 and 7 traffic and can be extended via Plugins that provide extra functionality and services beyond the core platform.

How I replaced Tibco Mashery With Azure API Management

Replacing Mashery With Azure API Management

I orchestrated a transition from legacy on-prem data center to Azure and M365 while adhering to strict industry regulations in Healthcare. The transition-state architecture included a Hybrid-cloud deployment model with on-prem data centers while integrating a new Identity Management system.

Reduce time to market by avoiding manual migration and minimizing custom development.

Orchestrating a transition from legacy on-premise data center to Azure and M365

Digital Transformation Journey to The Cloud

Involved replace of Mashery using Azure API Management.

Involved replacement of Mashery using Azure API Management.

Replaced Mashery With Azure API Management

Cloud computing architecture refers to the components and subcomponents required for cloud computing. These components typically consist of a front end platform, back end platforms, a cloud based delivery, and a network. Combined, these components make up cloud computing architecture. 

Cloud Architecture

A data center is a building, a dedicated space within a building, or a group of buildings used to house computer systems and associated components, such as telecommunications and storage systems.

Data Center

Cloud services are application and infrastructure resources that exist on the Internet. Third-party providers contract with subscribers for these services, allowing customers to leverage powerful computing resources without having to purchase or maintain hardware and software.

Cloud Services

Cloud monitoring is the practice of measuring, evaluating, monitoring, and managing workloads inside cloud tenancies against specific metrics and thresholds. It can use either manual or automated tools to verify the cloud is fully available and operating properly.

Cloud Monitoring

Microsoft Azure, often referred to as Azure, is a cloud computing platform run by Microsoft, which offers access, management, and development of applications and services through global data centers.

Azure

Cyber security can be described as the collective methods, technologies, and processes to help protect the confidentiality, integrity, and availability of computer systems, networks and data, against cyber-attacks or unauthorized access.

Cyber Security

Cloud networking is a type of IT infrastructure in which some or all of an organization's network capabilities and resources are hosted in a public or private cloud platform, managed in-house or by a service provider, and available on demand.
Companies can either use on-premises cloud networking resources to build a private cloud network or use cloud-based networking resources in the public cloud, or a hybrid cloud combination of both. These network resources can include virtual routers, firewalls, and bandwidth and network management software, with other tools and functions available as required.

Cloud Networking

Deployment automation is what enables you to deploy your software to testing and production environments with the push of a button. Automation is essential to reduce the risk of production deployments.

Automation And Deployment

Cryptography is the practice and study of techniques for secure communication in the presence of adversarial behavior and is about constructing and analyzing protocols that prevent third parties or the public from reading private messages.

Cryptography

Infrastructure is the foundation or framework that supports a system or organization. In computing, information technology infrastructure is composed of physical and virtual resources that support the flow, storage, processing and analysis of data.

IT Infrastructure

Cloud security is a collection of procedures and technology designed to address external and internal threats to business security. Organizations need cloud security as they move toward their digital transformation strategy and incorporate cloud-based tools and services as part of their infrastructure.

Cloud Security

Cloud governance is the process of defining, implementing, and monitoring a framework of policies that guides an organization's cloud operations. This process regulates how users work in cloud environments to facilitate consistent performance of cloud services and systems.

Everyday is great to be alive!

Contact Me

Technology Details

TECHNOLOGY SELECTED:

Additional Info

Category:

Product Name: