API Gateways are policy enforcement points that can protect backend APIs from the types of attacks discussed above. API Gateways should be designed to be fast and lightweight. To keep the API gateway as lean and performant as possible it is important to remember where the gateway fits into the overall Enterprise IT architecture and what roles it should play. Gateways should concentrate on determining whether a consumer has the rights to access a service, protect endpoints from malicious requests, routing, throttling, and facilities to analyze and monetarize API calls. They are not meant to replace traditional service buses as they play an entirely different role.
Integration platforms, on the other hand, such as Oracle ...
