F5 Identifies API Sprawl as Significant Threat to Business and the Economy
F5 (NASDAQ: FFIV) released a report titled “Continuous API Sprawl: Challenges and Opportunities in an API-Driven Economy.” The report highlights the rising number of public and private APIs, estimated to approach 200 million today and potentially reach billions by 2031. API sprawl, characterized by an overwhelming number of APIs leading to operational and security challenges, is becoming a significant issue for enterprises. The report stresses the need for better API governance and suggests solutions such as unified API management to mitigate risks and enhance business performance.
- Highlighting the rapid growth of APIs, with an estimated 200 million currently, indicating a thriving market.
- The report provides insights into API governance as a critical success factor, which could lead to business opportunities.
- API sprawl presents operational and security challenges that may hinder effective management and data integrity.
- The lack of global standards leads to interoperability issues, complicating API management across various platforms.
Report finds APIs are a primary economic driver, points to better API governance as a critical success factor for business
When APIs gained widespread adoption in the early 2000s, they were primarily viewed as a technical solution enabling applications to connect and exchange data. Today, by contrast, APIs are increasingly recognized as a major driver of innovation, value creation, and revenue. From digital marketplaces and entertainment apps to the Internet of Things (IoT) and IT microservices, APIs are at the heart of how the world conducts business.
“We estimate that the number of public and private APIs today is approaching 200 million, and by 2031 that number could be in the billions,” said
APIs come in many shapes and sizes, and serve a range of functions. There are public APIs, accessible by the general public—like those used by Google Maps or the Lyft app. There are private APIs, which are part of internal systems, as in the case of microservices APIs, or for use by internal teams only. There are partner APIs that enable data sharing and the creation of innovative offerings. Roku’s service, for example, would not be possible without the ability to access data from Netflix,
“As APIs of all kinds proliferate, it will become common for organizations to reach a point where they’re unable to effectively manage and control them,” said Narayanan. “This is API sprawl, the condition of having too many APIs of too many different kinds in too many different locations to get a handle on.”
A number of factors contribute to API sprawl:
- A lack of global standards results in interoperability issues, driving the creation of multiple APIs to serve the same function.
- Most enterprises are evolving toward microservices architectures, which by their nature result in dozens of APIs.
- Continuous software development results in the frequent release of new API versions.
- Enterprises create new APIs to enable integration between internal systems, programs, or applications.
- Siloed business units often take separate API approaches.
- Edge computing and everything-as-a-service business models drive the creation of yet more APIs, in more locations.
The problem is real and growing.
API sprawl introduces significant operational and security challenges. As the number of APIs and the complexity of apps grow, it becomes very hard to track where APIs are located. Discovering them within and outside the enterprise can be difficult, and end-to-end connectivity can be impacted. Frequent updates to APIs result in versioning and documentation issues. Beyond that, APIs are prone to fraud and malicious behavior. External APIs must be validated continuously for trust, and internal API keys can be compromised, giving attackers access to critical infrastructure.
“If data is the new oil, then APIs could unfortunately become the new plastic, with byproducts wreaking havoc on the ecosystem,” said Narayanan. “To stay healthy and thrive in the API-driven economy, it’s time for organizations to get serious about creating, using, and managing APIs responsibly.”
Solutions like API gateways, ingress controllers, and sidecar proxies can enable highly effective management of intra-cluster API architectures, but they are insufficient for managing inter-cluster API sprawl. To solve API sprawl across multiple clusters, enterprises require a single source of truth that tracks all APIs, seamless API discovery, proper versioning and documentation, API-to-API connectivity, and uniform monitoring of API reliability. And with APIs opening up so many new threat vectors, enterprises need to recognize the risk they pose, and make trust a metric for third parties accessing their APIs.
To learn more about the causes of and challenges posed by API sprawl, as well as steps organizations can take to get a handle on it, download the report from www.f5.com. For additional perspective on today’s news, please see the new blog from F5 Office of the CTO’s
About F5
F5 (NASDAQ: FFIV) is a multi-cloud application security and delivery company that enables our customers—which include the world’s largest enterprises, financial institutions, service providers, and governments—to bring extraordinary digital experiences to life. For more information, go to f5.com. You can also follow @F5 on Twitter or visit us on LinkedIn and Facebook for more information about F5, its partners, and technologies.
F5 is a trademark, service mark, or tradename of
Source:
View source version on businesswire.com: https://www.businesswire.com/news/home/20211104005224/en/
F5
(206) 272-6208
r.gruening@f5.com
(212) 551-4858
cvaltierra@we-worldwide.com
Source:
FAQ
What is the main focus of F5's report on APIs?
How many APIs are estimated to exist today according to F5?
What are the implications of API sprawl for businesses as mentioned by F5?
What solutions does F5 suggest to address API sprawl?