We are building an ASP.NET Core API. We would like our API to have the following advantages:
- Infrastructure
- Caching (Server and Client Side)
- Scaling / Performance
- Security
- Throttling
- CORS
- Custom Domains and SSL
When you import an API into API Management, is importing more of a placeholder or does it manage the backing service as well (App Service). When in Azure, should you push all your APIs to an internal network so that only other Azure services can talk to your APIs? This effectively makes the Azure API Management service your public API service area.
We want to cache on the server and on the client, utlizing various criteria. We can do this via Cache Policies.
It seems like scaling is more focused on scaling the Azure API management instance (proxy), and scaling of your backend services would have to be done seperately.
We are using IdentityServer, you can configure your security to use it via the OAuth 2.0 spec.
Throttling and control can be done via a throttling policy.
Because our Frontend developers couldn't function without CORS.
Is a custom domain per API management service instance?