Apigee for Private cloud as target server for Apigee Edge

[mararienzi]

Hello dear Community,

Our company has deployed an Apigee Edge for Private Cloud on our premises several years ago, and now our business is looking into using Apigee Edge (SaaS) because we would like to serve customers globally and we don't have a global data centre footprint. We have been looking into the Apigee Hybrid solution, but that would mean, at least in our understanding, ditching the existing Apigee Edge on-prem and replace it with an Apigee cluster running in AWS, GCP or Azure, on Kubernetes. We are also looking into the possibility of using Apigee Edge (SaaS) as an entry point for internet based clients and to kind of "bridge" it or chain to our existing on-premises Apigee. In practice we would expose our APIs on Edge (SaaS) and use our Apigee proxies on prem as Target endpoints. Is this a setup that any of you has ever implemented?

Thanks,

Mara

[#2]

yes, We have implemented the same.

We didn't go to Apigee SAAS or hybrid.

As you already have the Apigee Onprem license you need not go for Apigee SAAS and Hybrid.

You can take AWS EC2 instances and do your onprem Apigee installation there. It will overcome the limitation of global Datacenter issues. You can use that infrastructure accessible across the globe. and You can put the backend as your existing proxy. You will have to open firewall as per your requirement. All will be in your control like own datacenter.

We have done the same n our case as well.

[mararienzi]

Thanks for the valuable input Ajitav.

We did consider that option too, but our business wants to leverage some of the key capabilities of the SaaS solution, such as scalability, analytics and so on. I know we could achieve (at least) some of those with the solution you mention, but there will always be some management overhead.

[#4]

In that case, the hybrid will be also an overhead Maintainance for you. You can go for Apigee SaaS. from Apigee SAAS to make your onprem api as backend you need to open the firewall from Apigee SAAS to onprem. You can use nginx in between as another layer. Some companies use that as well, but that is not a core requirement.

[mararienzi]

Thanks again Aijitav.

True about the management overhead. On the other hand managing Nginx. although with a light configuration, would bring some overhead as well, which should be fine anyway. We could to mTLS between Apigee SaaS and a farm of Nginx servers in AWS/GCP and then re-route calls to our on-premises Apigee. I also suppose we would have 2 management planes: one for the existing Apigee and one for the Apigee SaaS. Or is it possible to unify the management interface?

[#6]

from Apigee SAAS to your backend you can connect using MTLS directly, you need to put Apigee Onprem in the middle.

You can go for Apigee onprem in the middle as well. In case of Saas you will not have any infra support, you have to focus on proxies only.