What is an API Gateway?

[@IBMTechnology]

Congrats to Parth Vikani for being the first lucky viewer to answer the question correctly! Thank you again to everyone who participated in the contest and please make sure to subscribe!

[@IBMTechnology]

Hi Parth! We apologize! Let us check what has happened.

[@sherryzafar7507]

SSL stands secure SOCKET LAYER

[@wirelessnerd7131]

Congrats Parth 👍

[@happyfriend789]

Where can one buy the t-shirt from? Do you guys have merchandise too?

[@shreyanshgupta1481]

SSL termination (or SSL offloading) is the process of decrypting this encrypted traffic. Instead of relying upon the web server to do this computationally intensive work, we can use SSL termination to reduce the load on our servers, speed up the process, and allow the web server to focus on its core responsibility of delivering web content.

[@MrEvansjethro]

There's a lot to learn in IT, and often times you become anxious. However, the great deal about IBM Technology, is that you get a preview of your concerned aspect of Technology before you can actually dive deep into learning it, which makes it a lot easier because by then you will have a clear perspective and concept about your Technology of concern. Thank you IBM Technology.

[@Safirshad]

HI Jason , Thanks for your nice explanation. ""SSL Termination"" For all incoming HTTPS connections, the load balancer service ends the SSL connection and establishes a plain text HTTP communication with the back-end server. CPU-intensive SSL handshakes and encryption or decryption tasks are shifted away from the back-end servers, allowing them to use all their CPU cycles for processing application traffic.

[@nive216]

SSL termination is a process where we decrypt and offload the encrypted SSL data within the API Gateway instead of going to our backend microservices which helps performance of our frontend.

[@PranavBhattarai]

IBM is doing nice things. Engaging with us through this medium helps to solidify our virtual bond between us. I hope IBM makes a lot of these videos in the future. And at some point create a playlist so viewers can understand the flow, like from where it would be great to start and where are we going towards. Love you guys. And although many people have already answered the question of "What is SSL termination", I will attempt to answer that question because "what if...", here you go: SSL termination refers to the process of decrypting encrypted traffic before passing it along to a web server. 💁

[@IBMTechnology]

Thank you for taking your time to give us this wonderful feedback and suggestion, Pranav! We truly appreciate it! 🙏 We do plan to make more videos 😉 so be sure to stay subscribed.

[@andypsc9844]

Thanks for having this channel IBM. I think IBM has done a good job in social responsibility by sharing valuable info, knowledge to the everyone. thumb up IBM.

[@devrajin5795]

SSL Termination is basically refers to the process of decrypting the encrypted traffic/data before passing it to a web server that helps the web server to speed up its process so that it can smoothly deliver the content that is requested by the client

[@bitcrawler]

The presentation and production quality are super duper amazing. I wish any content would look like this

[@bandsk88]

SSL termination involves decrypting encrypted HTTPS traffic at a specific point, like a load balancer or reverse proxy, before sending it to backend servers. These relieve the backend servers from handling encryption tasks, enhancing performance, and simplifying certificate management.

[@rudrasarkar1852]

This is the reason I like IBM Technology explanation no such boring thing here.

[@danygagnon8446]

Thanks so much for all these videos. I am binge watching them in no particular order. I love these videos

[@patrickwheeler1979]

This was very helpful. Moving from a monolithic database to microservices, this was helpful.

[@stefanrhonnstad4014]

SSL termination refers to the process of decrypting encrypted traffic before passing it along to a web server or microservice. (love that t-shirt!)

[@FelixZhao]

Hey! SSL termination refers to the process of decrypting encrypted SSL/TLS traffic at a network device, such as a load balancer or reverse proxy, before forwarding it to the destination server. When SSL termination occurs, the encrypted traffic is decrypted, allowing the network device to inspect, route, and process the data in plaintext.

[@robergeFelix]

SSL( Secure Socket Layer). SSL Termination is the process of decrypting encrypted traffic before passing it to a web server. This prevents you from relying upon the webserver to do this intensive computational work. Help reduce the load on the server and speed up the process which is very important in a microservice architecture like you have just shown.

[@shivasheeshtripathi9116]

SSL Termination, also known as “SSL Offloading”, is the process of decrypting SSL-encrypted traffic. The process of decrypting SSL-encrypted traffic is CPU intensive and can impact your application’s performance due to the additional processing required.

[@moimori]

daaamn these educators are what i wish i had in my college

[@johnfredricks647]

The backwards writing is beyond impressive. How has no one commented on that yet

[@HaileyGehringer]

I'm pretty sure that they are actually all writing normally and the video is just flipped horiztonally. Either that or all of their presenters are left handed. :)

[@gustavo68258]

Nice video!! A secure socket layer (SSL) connection uses a certificate for authentication before sending encrypted data from a client computer to the web server.

[@hirenpatel6118]

hmm doesn't make sense, if you were going to perform another request for price + info without api gateway. what makes you NOT perform another request with an api gateway in the middle?

[@royy9010]

The thing I love most about this video is how your shirt was custom made for this video. I would want *that* specific shirt. Kudos for going the extra mile! Also, nice job on the technical explanation too! ;-)

[@shahzadsyed-j1j]

SSL Termination, Secure Socket Layer Termination, it work on OSI layer7 we decrypt handshake, for example if igress traffic is comings on port 443 we decrypt it then it will route on port 80. cryptography will happen at application load balancer.

[@guysela2001]

How did you improve client performance? You still have 5 roundtrips, just done by the API gateway instead of the client. Did you mean to say it's faster because the API Gateway sits closer to the microservices themselves?

[@codesrinivas2816]

i guess there are a few benifits 1. we can reduce the decrypt computing load over our micro services. this allows the api gateway to talk to all micro services without encryption which is a lot efficient. 2. we can channel the load of different clients based on frontend application like ios,android,browser etc

[@pentalite5]

Other than what's talked about there are other factors that make api gateways more performant. 1. Service providers to service providers connections are much faster than client to service provider connections - Gbps vs Mbps. 2. Also if you're using the same service provider for your database and other microservices, all your resources are probably in the same building, so it's closer and fewer routers to pass through. 3. This is more niche, but you can also set up a memcache/redis to cache common requests, so instead of reading from the resource over the network, you can just read from RAM.

[@hemantkhare5545]

They implement caching at API gateways so most frequently requested ones get served by API gateway itself.

[@NguyenTung-ss8cq]

I agree with you. We still have 5 roundtrips. That won't make the response faster.

[@eswareshkarnati4609]

SSL is secure socket layer , It is used to secure the data that is flow from the API to the client and Client to the API . By which we can achieve the security for the data from a malicious attack

[@AjayiQuadri-g1p]

SSL termination (or SSL offloading) is the process of decrypting this encrypted traffic. Instead of relying upon the web server to do this computationally intensive work, you can use SSL termination to reduce the load on your servers, speed up the process, and allow the web server to focus on its core responsibility of delivering web content.

[@shivamsaha4116]

Servers with a secure socket layer (SSL) connection can simultaneously handle many connections or sessions. An SSL connection sends encrypted data between an end-user’s computer and web server by using a certificate for authentication. SSL termination helps speed the decryption process and reduces the processing burden on backend servers.

[@madhavbharadwaj6208]

Just curious, how does an api gateway reduce latency? Isn't it an extra hop the request needs to go through?

[@muhammedashkar692]

DOUBT :- @05:19 you said there are multiple round trips from the client to do a whole operation, wouldn't that be in when client have direct calls to services. if we deploy in a cloud tech like kubernetes, we could use ingress like an API gateway or web server(like nginx) right? It would help if anyone has a view, post on this?

[@jgokulac]

SSL termination is a process by which SSL-encrypted data traffic is decrypted or offloaded. Servers with a secure socket layer (SSL) connection can simultaneously handle many connections or sessions. SSL termination helps speed the decryption process and reduces the processing burden on backend servers.

[@Latif127]

SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), are protocols for establishing authenticated and encrypted links between networked computers.

[@chayanchoudhury6041]

Is the API gateway behind a load balancer ?? When a user interacts does his/her request go to load balancer first or API gateway?

[@markxp2002]

SSL termination in API gateway is the gateway itself as the frontline facing client, having the SSL certificate and decrepting the request before passing to backend services. Noting that before passing to backend services, you may (optionally) choose another SSL (mTLS) to encrypt the transport between the gateway and your backend.

[@jorgebarrero5299]

SSL is a security mechanism based on adding a trust certificate that helps to keep the endpoints secure. Not absolute security but it helps a lot

[@1anre]

Was really helpful to see it broken down on this your reverse see-through board. Funny thing is the ‘API Gateway’ concept is actually the best analogy for the role I currently play in leading my Tech team - hahah. The Human API Gateway Broker(H.A.G.B)

[@felicienfotiomanfo4160]

Does anybody know what tool is used for the presentation? it's super immersive and cool.

[@atomiccoding]

SL connection sends encrypted data between an end-user’s computer and web server by using a certificate for authentication. SSL termination helps speed the decryption process and reduces the processing burden on backend servers.

[@dasuneranda]

IBM has good teachers.

[@amirtv106]

I've seen a load balancer placed in front of an API gateway. But, should we put one behind the gateway as well? Considering that the services may be horizontally scaled.

[@NihadAziz]

how do they do the reversed writing?🤔 Great video!

[@DhirajPatra]

API Gateway also can be used to make async request and responses. So that it can send ackw to requester and can use hook to write the response when it available as well. Is sort of type of socket by API Gatway can also be used.

[@Priyuenid]

SSL Termination in API GATEWAY terms is when API GATEWAY will accept incoming and send out going request in HTTPS to clients but the communication to server or Microservices is HTTP.

[@quantumaimarketing7745]

SSL termination refers to the process of decrypting encrypted traffic before passing it along to a web server.

[@neerajbadlani1989]

SSL ( Secure Socket Layer ) Termination : Process of decrypting encrypted traffic at API Gateway before passing it along to a web/other servers

[@freegaming3186]

SSL termination is the process to establishing or terminating a connection between two application (usually client and server) by putting encryption/decryption.

[@mojo8791]

SSL termination is the process of decrypting HTTPS traffic and forwarding plain HTTP traffic to downstream systems. In the context of API Gateway, one could imagine a publicly accessible API Gateway to do the SSL termination and safely route HTTP traffic to private services thus saving on some computational overhead.

[@taseermufti1331]

TLS termination proxy (or SSL termination proxy,[1] or SSL offloading[2]) is a proxy server that acts as an intermediary point between client and server applications, and is used to terminate and/or establish TLS (or DTLS) tunnels by decrypting and/or encrypting communications.

[@bawajanxxx]

SSL Termination, also known as “SSL Offloading”, is the process of decrypting SSL-encrypted traffic

[@sergezeda9738]

SSL stands for secure socket layer. Looking forward to collecting this catchy t-shirt after a year 🙂

[@topcatalpha1]

What about SWARM for loadbalancing the API gateway ? instead of separating the api gateways for IOS/android, browser, etc... ?

[@stylishskater92]

I understand that the gateway is practical to bundle requests and handle authentication and other things in one place, but how do prevent it from becoming a bottleneck for the scalability part? just multiple instances and clients being distributed to them either on connection or due to region? Does that mean there would be another gateway before to make that decision/assigment?

[@123qwe4ify]

SSL Termination happens when an incoming client https protocol can be translated by the API gateway and just convert to http protocol to communicate with the server.

[@RavenGallana]

Secure Socket Layer - This is a process where you decrypt and offload the encrypted SSL data within the API Gateway instead of going to our backend micro services.

[@mhsn27mhsn10]

After write and build Api where can upload and run it over internet

[@lethatsinkin]

Can anyone help with the order to watch this playlist? Beginner here

[@wyp4032]

SSL terminiation is the point that SSL session ends, and http session start from that point onwards.

[@mehranjavid4770]

SSL termination is the decryption of encrypted traffic. Instead of relying on the web server to do this intense work it can be used to reduce the load and it also allows the webserver to focus on its core responsibilities

[@shounakrendalkar9460]

SSL stands for Secure Socket Layer it provides security to the data transferred between web browser and server

[@DeepakKhopade]

Amazingly explained, love the way it was. Thanks.

[@zeeshanshaikh3450]

SSL termination refers to the process of decrypting encrypted traffic before passing it along to a web server.

[@hlkn333]

Hmm...how can the client faster (Web app) via a centralise API Gateway I wonder. Day1- Web app communicates to various microservices to constructs the Web pages Day2- Web app communicates via the API Gateway. The API Gateway communicates to various microservices. Now the Gateway API becomes bottle neck. I agree that the Gateway API will have provide authentication and secured data transport. IoT jargon is included into the conversation and should not be as it is for another conversation whether Gateway API supports MQTT and/or CoAP/LwM2M/IPSO. I believe. In general, I love IBM short conversations to explain various concepts.

[@sidhuk3128]

ssl termination reduces the load on web servers during data exchange, better for performance. but remember it done from an API gateway to a webserver instead of from client to server

[@jeff.dev.insights]

SSL termination is the process of decrypting encrypted data before sending it to the server, and then later it's encrypted again before sending it to the user.

[@kbriaz]

SSL termination means traffic will not be encrypted, between the load balancer or reverse proxy and the back-end server.

[@patty-hv9jj]

Cool, videos, and very informative at the high level. very well presented. love it. thank you!!

[@anuragbisht1200]

great video as always and thank you ! I just thinking out loud, is not SSL termination is against the zero trust architecture?

[@birenderdahiya4089]

SSL termination describes the transition process when data traffic becomes encrypted and unencrypted. This happens at the server end of a secure socket layer (SSL) connection.

[@stwatertown]

6:33 Secure Socket Layer (SSL)

[@jcwriter]

SSL - Secure Sockets Layer. It’s an encryption-based Internet security protocol. 😊 I really would love to have this T-shirt. 🎉

[@rajajayaraman5954]

If the system is going to expect heavy traffic due to the holiday season, and in this case, should we not add the smart load balancers.

[@prakashverugamya1363]

SSL termination is the process of ending an encrypted SSL/TLS connection and passing unencrypted requests to a backend server. The SSL/TLS encryption is terminated at a designated point, usually a load balancer or a reverse proxy, and the unencrypted request is then sent to the backend server. This approach is used in situations where it is not necessary to encrypt the entire end-to-end communication, or where the backend server is not capable of handling SSL/TLS encryption. By terminating the SSL/TLS connection at the load balancer or reverse proxy, the load on the backend server can be reduced, and performance can be improved. However, it's important to consider the security implications of SSL termination, as unencrypted data is vulnerable to interception and tampering. Therefore, it's critical to secure the connection between the load balancer/reverse proxy and the backend server with appropriate network security measures.

[@andersaaenspringborg8227]

SSL termination is where we decrypt, encrypted traffic. Is beneficial to do on a hardware chip on your server, to offload the CPU on requets

[@zenganow]

great video. do you have anything on WSS or Squid?

[@nocoty1316]

6:37 "decrypt and offload the encrypted SSL data within the API Gateway" in what terms this offloads anything? offloads what from who?

[@BlueJay-z]

Great video for the API Gateway. it would be wonderful if you can illustrate how load balander works with the API Gateway.

[@andreykrivoshein3788]

Thank you!

[@borisdorofeev5602]

So it's basically a multiplexer for services with a firewall

[@deepakk6092]

you are performing all encryption and decryption at the edge of your network, such as at the load balancer. The load balancer strips away the encryption and passes the messages in the clear to your servers.

[@cyberluk3]

I like those t-shirts and API's :)

[@adeshkumar4640]

Very Nice & Simplified Presentation. Thanks for providing valuable topic.

[@Evergreenscoderzone]

Let's see if I get a t-shirt for that: SSL termination is when you remove your shoes before entering your house. Results in a smaller footprint of the "traffic" around rooms. Makes all holes in your socks exposed to everyone at home. Allows you to step an a lego and enjoy it for the rest of the evening.

[@danzinde]

Can someone answer what tool is used to make such a cool presentation?

[@IBMTechnology]

Search on "lightboard videos".

[@habtamusium8646]

Interesting methodology ! many thanks

[@rajkishor49]

Ssl termination means authenticating the user requests within api gateway without going to microservices components.

[@aadityakiran_s]

Why all the text is hard to read? Can't even see where you've written API Gateway.

[@use-hustlelucre]

Can you make this video once again in more depth, please !! 🙏🏻

[@tonezou3918]

How does API Gateway handle a global/shared transaction between a few microservices? Let's say we want some functionalities of the Order Svc and the Inventory Svc to be part of a single transaction in the API Gateway that either succeeds and commits as a whole, or reverts all the changes from these microservices on error.

[@IBMTechnology]

No, an API gateway doesn't address distributed transactions across microservices. One of the key tenets of microservices architecture is independence, i.e., they're self-contained, loosely coupled, and independently deployable. If that's not possible, there's several solutions like two-phase commit or "eventual consistency" if ACID isn't a hard requirement (e.g., it *may* be tolerable if the inventory count is momentarily inconsistent due to pending order processing; it wouldn't be acceptable for something like a financial transaction). Here's a few references that go into much more detail: developers.redhat.com/blog/2018/10/01/patterns-for-distributed-transactions-within-a-microservices-architecture#possible_solutions www.baeldung.com/transactions-across-microservices www.ibm.com/cloud/learn/microservices

[@kanaanbahmani5062]

Ok API gateways are amazing and awesome but how do you manage and implement your API gateway using the relevant tools, how do you make sure the API gateway is working properly, and how do you manage them, how don you make them highly available since everything from client side to backend side is going through them? I'd sincerely appreciate it if one of the engineers from IBM could answer my question 🤓☺️

[@IBMTechnology]

Hi Kanaan! We'll see what we can do. 🙂 In the meantime, maybe this blog can answer some of your questions: ibm.co/39pJHGS You can find more links about API Management in this video's description.

[@kanaanbahmani5062]

@@IBMTechnology thanks for the link

[@KhaledRenno]

please share link to buy the t-shirt. thanks.

[@sushantsharma9636]

secure socket layer used as data encryption based internet security protocol

[@ParthVikani]

SSL termination means it will decrepit the encrypted traffic before passing to web server.

[@ParthVikani]

@Jason thanks for interesting learning videos. Hope I will get tshirt 👕 with IBM logo. 😅

[@IBMTechnology]

Congrats Parth Vikani for being the first lucky viewer to answer the question correctly! Please send your shirt size and the address where you'd like the t-shirt delivered by emailing the information to this email address → [e-mail]. Thank you again for participating!

[@sivakrishnan7213]

SSL termination ---> removing 's' from http, the secure credential, that need not be authenticated. By this an additional effort is not needed for SSL handshake.

[@tyronefrielinghaus3467]

This video was NOT up to the usual standard of IBM technology light board video. Too vague, presenter not dynamic.

[@kittysaywut]

I actually believe this presentation was up to pollos standards.

[@olivermoorthy]

@@kittysaywut I bet that was a sour candy. How one t-shirt turn one to become ungrateful 😢

[@j653vup]

removing the need for extra layer of security ?

[@hassanmeraj8037]

SSL means Secure Socket Layer. Not sure whether I'm still eligible for the offer, anyway great video. Thank you

[@MuhammadYazid]

SSL termination works by intercepting encrypted traffic at the server receiving data from the SSL connection. It helps the server by decrypting and verifying the data on a different device so the server does not need to handle the process.

[@joel9909]

What magic is making the board interactive?

[@IBMTechnology]

See ibm.biz/write-backwards

[@zhangshiyucao]

Great explanation!

[@kawaiilime]

Your request and response traffic between two endpoints is encrypted and safe from man in the middle attacks

[@spikecf]

SSL termination is the transition process when data traffic becomes encrypted and unencrypted.

[@marouaniAymen]

SSL stands for Secure Socket Layer