F5 Identifies API Sprawl as Significant Threat to Business and the Economy

Report finds APIs are a primary economic driver, points to better API governance as a critical success factor for business

SEATTLE – F5 (NASDAQ: FFIV) today announced the publication of “Continuous API Sprawl: Challenges and Opportunities in an API-Driven Economy,” a report analyzing the serious threat to business and the economy posed by the global proliferation of APIs.

When APIs gained widespread adoption in the early 2000s, they were primarily viewed as a technical solution enabling applications to connect and exchange data. Today, by contrast, APIs are increasingly recognized as a major driver of innovation, value creation, and revenue. From digital marketplaces and entertainment apps to the Internet of Things (IoT) and IT microservices, APIs are at the heart of how the world conducts business.

“We estimate that the number of public and private APIs today is approaching 200 million, and by 2031 that number could be in the billions,” said Rajesh Narayanan, senior director and distinguished technologist at F5. “And we’ve merely scratched the surface in terms of the anticipated global economic impact of APIs.”

APIs come in many shapes and sizes, and serve a range of functions. There are public APIs, accessible by the general public—like those used by Google Maps or the Lyft app. There are private APIs, which are part of internal systems, as in the case of microservices APIs, or for use by internal teams only. There are partner APIs that enable data sharing and the creation of innovative offerings. Roku’s service, for example, would not be possible without the ability to access data from Netflix, HBO, and other content providers using APIs. Managing and controlling all these different kinds of APIs can be a significant challenge for enterprises.

“As APIs of all kinds proliferate, it will become common for organizations to reach a point where they’re unable to effectively manage and control them,” said Narayanan. “This is API sprawl, the condition of having too many APIs of too many different kinds in too many different locations to get a handle on.”

A number of factors contribute to API sprawl:

• A lack of global standards results in interoperability issues, driving the creation of multiple APIs to serve the same function.
• Most enterprises are evolving toward microservices architectures, which by their nature result in dozens of APIs.
• Continuous software development results in the frequent release of new API versions.
• Enterprises create new APIs to enable integration between internal systems, programs, or applications.
• Siloed business units often take separate API approaches.
• Edge computing and everything-as-a-service business models drive the creation of yet more APIs, in more locations.

The problem is real and growing.

API sprawl introduces significant operational and security challenges. As the number of APIs and the complexity of apps grow, it becomes very hard to track where APIs are located. Discovering them within and outside the enterprise can be difficult, and end-to-end connectivity can be impacted. Frequent updates to APIs result in versioning and documentation issues. Beyond that, APIs are prone to fraud and malicious behavior. External APIs must be validated continuously for trust, and internal API keys can be compromised, giving attackers access to critical infrastructure.

“If data is the new oil, then APIs could unfortunately become the new plastic, with byproducts wreaking havoc on the ecosystem,” said Narayanan. “To stay healthy and thrive in the API-driven economy, it’s time for organizations to get serious about creating, using, and managing APIs responsibly.”

Solutions like API gateways, ingress controllers, and sidecar proxies can enable highly effective management of intra-cluster API architectures, but they are insufficient for managing inter-cluster API sprawl. To solve API sprawl across multiple clusters, enterprises require a single source of truth that tracks all APIs, seamless API discovery, proper versioning and documentation, API-to-API connectivity, and uniform monitoring of API reliability. And with APIs opening up so many new threat vectors, enterprises need to recognize the risk they pose, and make trust a metric for third parties accessing their APIs.

To learn more about the causes of and challenges posed by API sprawl, as well as steps organizations can take to get a handle on it, download the report from www.f5.com. For additional perspective on today’s news, please see the new blog from F5 Office of the CTO’s Rajesh Narayanan and Lori MacVittie.

About F5

F5 (NASDAQ: FFIV) is a multi-cloud application security and delivery company that enables our customers—which include the world’s largest enterprises, financial institutions, service providers, and governments—to bring extraordinary digital experiences to life. For more information, go to f5.com. You can also follow @F5 on Twitter or visit us on LinkedIn and Facebook for more information about F5, its partners, and technologies.

F5 is a trademark, service mark, or tradename of F5 Networks, Inc., in the U.S. and other countries. All other product and company names herein may be trademarks of their respective owners.

# # #

This press release may contain forward looking statements relating to future events or future financial performance that involve risks and uncertainties. Such statements can be identified by terminology such as "may," "will," "should," "expects," "plans," "anticipates," "believes," "estimates," "predicts," "potential," or "continue," or the negative of such terms or comparable terms. These statements are only predictions and actual results could differ materially from those anticipated in these statements based upon a number of factors including those identified in the company's filings with the SEC.