asked on

What's API gateway/firewall & how it's used

We have API comms with our vendor.

In what way(s) do an API firewall help?

Could you provide more detail to make sure your references are what ...
Application programming ?Interface (API)?

A gateway usually means your program/application has to use the functions in the API with the destination.....
Full details of what you provider might shed more light on your situation, firewall might refer to a proxy, or a VPN to the vendor.

sunhux

ASKER

Yes by API, I meant Application Programmg Interface & we plan to have our apps talk to
vendors' apps via Internet

SOLUTION

arnold

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER CERTIFIED SOLUTION

noci

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sunhux

ASKER

a) So we normally place this API firewall at DMZ ?

b) is this device more for outgoing apps traffic or incoming?

c) Do we need to subject such applications comms traffic to WAF if we have API Firewall ?

d) what's the usual practice for non-encrypted traffic when it goes thru API firewall?
Still recommended for it to be encrypted on plain http & ODBC is safe in both directions?

sunhux

ASKER

> or does you application has to handle both changing the process to
I don't have any idea on the above. Just a preliminary study my
management asks me to explore for possibility of setting up an
API firewall/gateway

arnold

Does the app provider have publicly accessible technical specs?

sunhux

ASKER

Don't see they publish it; at least not that I'm aware

SOLUTION

arnold

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION