Layer7 API Management

  • 1.  Promoting Policies

    Posted May 21, 2015 10:54 AM

    Does anyone have any "Best Practices" for or experiences you can share on promoting policies from one gateway environment to another? I see that there are a couple of options; export/import from the Policy Manager, Enterprise Service Manager, and the recently released Gateway Migration Utility (which I do not have access to yet, since we need to upgrade to 8.3 to get this). Also, if anyone has experience with promoting "Portal Managed Services", we'd like to know how promoting from one gateway to another affect the API in the API Portal as well as the policy in the Policy Manager.

     

    Thanks,

    James



  • 2.  Re: Promoting Policies
    Best Answer

    Posted May 21, 2015 01:29 PM

    I'm not sure of any 'Best Practices' document per se, but can relay some of my knowledge.

    1. Manual Migration via 'Export Policy'
      1. Works good, but need to specify the dependency mappings each time and for each service
      2. Time Consuming if you need to migrate 100 services
    2. ESM Migration
      1. Graphical Migration tool
      2. doesn't support 'Encapsulated Assertions' or some of the new 'object/entity types'
        1. so most of the modern deployments won't be able to take advantage of ESM's migration capabilities to date.
    3. CLI Migration ( GMU / CMT )
      1. CMT ( CommandLine Migration Tool )
        1. was developed internally to meet the functionality gap in our migration process
        2. was meant to be more of a 'Toolkit', that customers could leverage and script/code around to meet their specific needs
        3. This toolkit was only delivered to customers via 'Professional Services'
          1. this toolkit doesn't have support so a Special Training would need to happen to make sure the customer was educated enough to troubleshoot and work with it.
        4. Based on the /wsman interface ( soap based management interface ) ( similar to Datapower's 'SOMA/AMP' interface, ( i noticed you worked with Datapower ) )
        5. available as a .sh and .bat
        6. pretty safe to use with 8.0+ versions
          1. does have some 'legacy' support for previous versions, but i don't have much experience with pre 8.0
    4. GMU ( Gateway Migration Utility )
      1. The productization of CMT, with official Support
      2. released with version 8.3 ( as you already know )
      3. built on the new /restman interface ( Rest Based Management )
      4. Supports all the newer Object/Entity types
      5. Available on the Support Portal
      6. available as a .sh and .bat
      7. Is being represented as the current automated 'go-to' solution for Migration

     

    **[edit] I'm not sure about the Portal based stuff, i would assume as long as the destination environment is set up to it's portal that everything will work okay, as the 'Portal Managed Service' is just an assertion in the policy, but don't have a lot of Portal Experience to confirm.

     

    hope this helps,

     

    Doyle



  • 3.  Re: Promoting Policies

    Posted May 21, 2015 01:36 PM

    Yes, it helps. Very thorough, thanks Doyle!