API Management

Publish APIs reliably, securely and at scale

Microsoft Azure

API Management vs Layer7

Azure API Management vs

Layer7

Azure API Management offers a single, robust product as well as better options for
hybrid deployments in the roadmap..

More robust cloud-based offering and simpler pricing

Layer7 has separate on-premises and cloud-based offerings

Layer7 cloud-based offering does not operate at scale; on-premises product is

recommended

High performance, low-latency proxy

First class developer portal w/ rich tooling and easy customization

Self-service
More flexible hybrid deployment

Ability to route one subset of API calls through the Azure-based proxy and another
subset of API calls through the on-premises proxy (available at GA)

Access to wider suite of Azure cloud services

Notification Hubs, Mobile Services, BizTalk, Service Bus, Enterprise Mobility Suite, Active
Directory, Media Services, Websites
Together these underpin an end-to-end digital strategy
MICROSOFT CONFIDENTIAL
3
Consumption, commitment and EA pricing options

Azure API Management vs

Layer 7

API
Management

Layer 7

API Creation/Management
User Management
Versioning of the API configuration
Export/portability of the API configuration
APIs for white-labeling/3rd party integration of portal
Developer Portal

Q3 2014

Q3 2014

Products/Subscriptions
Docs
Content Management
Forums/Issue Tracking
Interactive console to make API calls from the portal
SDK generation in any language
APIs for white-labeling/3rd party integration of portal
Customize theme without writing any code

Management Portal

Portal Authentication
Portal Federated Auth

MICROSOFT CONFIDENTIAL

Azure API Management vs

Layer 7

API
Management

Layer 7

Q3 2014

API Authentication
API Key
HTTP Basic
SSL (X, 509 certs)
WS-SECURITY
Oauth 2.0
SAML

LDAP
Active Directory/ADFS
Analytics

Q3 2014

Ad-hoc reports
Export
API usage metrics
API performance
Cache utilization
Analytics for developers/API consumers

Q3 2014

Threat Protection
Policy for XML thread protection (validation,
corruption,
detection
MICROSOFT
CONFIDENTIAL
patterns)

Azure API Management vs

Layer 7

API
Management

Layer 7

XML Policy Editing

GUI Policy Editor

Policy for transformations between XML and JSON

Policy for transformations between SOAP and REST

Policies/Transformations

Policy for transforming XML with XSLT

Policy to set HTTP headers

Policy to set query string

Policy for URL Rewriting (static routing)

Policy for conditions-based URL rewriting (dynamic routing)

Q3 2014

Ability to make more multiple backend calls when orchestrating as a

single API call
Policy for custom messaging on (error) conditions
Policy for allowing cross-origin resource sharing (CORS)

Policy for enabling JSONP

Policy for replacing string content

MICROSOFT CONFIDENTIAL

Policy for generating alerts on given conditions

Custom post-processing
Caching

Q3 2014

API Management vs Mashery

Azure API Management vs

Azure API Management offers simpler and lower pricing as well as
Mashery
better options for hybrid deployments in the roadmap..
Simpler and lower pricing

First class developer portal w/ rich tooling and easy customization

Self-service

More flexible hybrid deployment

Ability to route one subset of API calls through the Azure-based proxy and
another subset of API calls through the on-premises proxy (available at GA)

Access to wider suite of Azure cloud services

Notification Hubs, Mobile Services, BizTalk, Service Bus, Enterprise Mobility
Suite, Active Directory, Media Services, Websites
Together these underpin an end-to-end digital strategy

Consumption, commitment and EA pricing options

MICROSOFT CONFIDENTIAL

Azure API Management vs

Mashery

API
Management

Mashery

API Creation/Management
User Management
Versioning of the API configuration
Export/portability of the API configuration
APIs for white-labeling/3rd party integration of portal
Developer Portal

Q3 2014

Q3 2014

Products/Subscriptions
Docs
Content Management
Forums/Issue Tracking
Interactive console to make API calls from the portal
SDK generation in any language
APIs for white-labeling/3rd party integration of portal
Customize theme without writing any code

Management Portal

Portal Authentication

Portal Federated Auth

MICROSOFT CONFIDENTIAL

Azure API Management vs

Mashery

API
Management

Mashery

API Authentication
API Key
HTTP Basic
SSL (X, 509 certs)

WS-SECURITY
Oauth 2.0
SAML

Q3 2014

LDAP
Active Directory/ADFS
Analytics

Q3 2014

Q3 2014

Ad-hoc reports
Export
API usage metrics
API performance
Cache utilization

Analytics for developers/API consumers

Threat Protection

MICROSOFT
CONFIDENTIAL
Policy for XML thread protection (validation,
corruption,
detection
patterns)

10

Azure API Management vs

Mashery

API
Management

Mashery

XML Policy Editing

GUI Policy Editor

Policy for transformations between XML and JSON

Policy for transformations between SOAP and REST

Policies/Transformations

Policy for transforming XML with XSLT

Policy to set HTTP headers

Policy to set query string

Policy for URL Rewriting (static routing)

Policy for conditions-based URL rewriting (dynamic routing)

Q3 2014

Ability to make more multiple backend calls when orchestrating as a

single API call
Policy for custom messaging on (error) conditions
Policy for allowing cross-origin resource sharing (CORS)

Policy for enabling JSONP

Policy for replacing string content

Policy for generating alerts on given conditions

Custom post-processing
Caching

MICROSOFT CONFIDENTIAL

Q3 2014

11

API Management vs Apigee

Azure API Management vs

Azure API Management offers lower prices as well as better options
Apigeefor hybrid deployments in the roadmap..
Simpler and lower pricing for richer functionality

High performance, low-latency proxy

First class developer portal w/ rich tooling and easy customization
Self-service

More flexible hybrid deployment

Ability to route one subset of API calls through the Azure-based proxy and
another subset of API calls through the on-premises proxy (available at GA)

Access to wider suite of Azure cloud services

Notification Hubs, Mobile Services, BizTalk, Service Bus, Enterprise Mobility
Suite, Active Directory, Media Services, Websites
Together these underpin an end-to-end digital strategy
MICROSOFT CONFIDENTIAL
Consumption, commitment
and EA pricing options

13

Azure API Management vs

Apigee

API
Management

Apigee

API Creation/Management
User Management
Versioning of the API configuration
Export/portability of the API configuration
APIs for white-labeling/3rd party integration of portal
Developer Portal

Q3 2014

Q3 2014

Products/Subscriptions
Docs
Content Management
Forums/Issue Tracking
Interactive console to make API calls from the portal
SDK generation in any language
APIs for white-labeling/3rd party integration of portal
Customize theme without writing any code

Management Portal

Portal Authentication
Portal Federated Auth

MICROSOFT CONFIDENTIAL

14

Azure API Management vs

Apigee

API
Management

Apigee

Q3 2014

API Authentication
API Key
HTTP Basic
SSL (X, 509 certs)
WS-SECURITY
Oauth 2.0
SAML

LDAP
Active Directory/ADFS
Analytics

Q3 2014

Ad-hoc reports
Export
API usage metrics
API performance
Cache utilization
Analytics for developers/API consumers

Q3 2014

Threat Protection
Policy for XML thread protection (validation,
corruption,
detection
MICROSOFT
CONFIDENTIAL
patterns)

15

Azure API Management vs

Apigee

API
Management

Apigee

XML Policy Editing

GUI Policy Editor

Policy for transformations between XML and JSON

Policy for transformations between SOAP and REST

Policies/Transformations

Policy for transforming XML with XSLT

Policy to set HTTP headers

Policy to set query string

Policy for URL Rewriting (static routing)

Policy for conditions-based URL rewriting (dynamic routing)

Q3 2014

Ability to make more multiple backend calls when orchestrating as a

single API call
Policy for custom messaging on (error) conditions
Policy for allowing cross-origin resource sharing (CORS)

Policy for enabling JSONP

Policy for replacing string content

MICROSOFT CONFIDENTIAL

Policy for generating alerts on given conditions

Custom post-processing
Caching

Q3 2014

16

API Management vs 3Scale

Azure API Management vs

Azure API Management offers richer functionality for the same price
3Scale
as well as access to a wider suite of cloud services.
More value for the same price

First class developer portal w/ rich tooling and easy customization

More extensive mediation policies
Built-in caching
Turnkey experience

Access to wider suite of Azure cloud services

Notification Hubs, Mobile Services, BizTalk, Service Bus, Enterprise Mobility
Suite, Active Directory, Media Services, Websites
Together these underpin an end-to-end digital strategy

Consumption, commitment and EA pricing options

MICROSOFT CONFIDENTIAL

18

Azure API Management vs

3Scale

API
Management

3Scale

Q3 2014

Management Portal
API Creation/Management
User Management
Versioning of the API configuration
Export/portability of the API configuration

APIs for white-labeling/3rd party integration of portal

Developer Portal

Q3 2014

Products/Subscriptions
Docs
Content Management
Forums/Issue Tracking
Interactive console to make API calls from the portal
SDK generation in any language

APIs for white-labeling/3rd party integration of portal

Customize theme without writing any code

Portal Authentication

Portal Federated Auth

MICROSOFT CONFIDENTIAL

19

Azure API Management vs

3Scale

API
Management

3Scale

Q3 2014

API Authentication
API Key
HTTP Basic
SSL (X, 509 certs)
WS-SECURITY
Oauth 2.0
SAML
LDAP

Active Directory/ADFS

Q3 2014

Analytics
Ad-hoc reports
Export
API usage metrics
API performance

Q3 2014

Cache utilization

Analytics for developers/API consumers

Threat Protection

MICROSOFT CONFIDENTIAL

Policy for XML thread protection (validation, corruption, detection

20

Azure API Management vs

3Scale

API
Management

3Scale

Policies/Transformations

XML Policy Editing

GUI Policy Editor
Policy for transformations between XML and JSON

Policy for transformations between SOAP and REST

Policy for transforming XML with XSLT
Policy to set HTTP headers

Policy to set query string

Policy for URL Rewriting (static routing)

Policy for conditions-based URL rewriting (dynamic routing)

Q3 2014

Ability to make more multiple backend calls when orchestrating as a

single API call
Policy for custom messaging on (error) conditions
Policy for allowing cross-origin resource sharing (CORS)

Policy for enabling JSONP

Policy for replacing string content

MICROSOFT CONFIDENTIAL

Policy for generating alerts on given conditions

21