Qantas APIs Take Flight with WSO2 Technology


Qantas Airways moved to an API-first strategy allowing the company to build a fully connected experience for its customers.


Qantas relies on technology, people, and processes to ensure that it is well-positioned for the future. In tune with this objective, it moved to an API-first strategy to build a fully connected experience for its customers. Whether planning for a trip, making a booking, or requesting departure or in-flight assistance, Qantas ensures a seamless journey for its passengers. But bringing some of its legacy technology up to speed with the company’s vision was a challenge. It was slow in responding to change, had a fixed computing capacity, was costly, and involved extensive manual work.

To overcome these challenges, Qantas needed technology to revamp that would allow it to speed development time, provide multi-channel services, ensure scalability, and fuel business agility. The company also required a solution capable of ensuring that any APIs developed met the required security and visibility standards, without becoming a bottleneck that restricted the creativity and speed of development the business demanded. Qantas realized that it needed a modern API management solution that could help the company operate, protect, and capitalize on its assets.


After careful consideration, Qantas chose the WSO2 Integration Agile Platform as its technology solution. Key factors in the decision were WSO2’s open-source nature; flexible, hybrid deployment models; quality of customer support; and additional authentication capabilities. With the help of WSO2, Qantas re-architected its technology implementation around an API-first strategy. To meet all of the company’s requirements, it leveraged Agile development practices, RESTful APIs, microservices, and the cloud.

Today, WSO2 API Manager is used to provide internal software development teams and partners the ability to securely publish their APIs for use across Qantas. Meanwhile, WSO2 Identity Server is used as the key manager for the API manager. It also supports single sign-on to the platform by federating identity to the relevant existing identity providers at Qantas. Together, the technologies helped to address three key requirements identified by Qantas:

Deliver a good user experience for developers by providing self-service capabilities and integration into their own API CI/CD pipelines to enable automated API registration.

Promote API reuse across teams by increasing visibility across the broad range of available APIs and providing a framework to facilitate a subscription-based model for sharing access.

Employ API usage analytics and insights to ensure that all APIs are optimized.

Qantas developed services in Node.js to orchestrate the required integration between WSO2 API Manager and its developers’ build pipelines. This has enabled teams to simply provide a Swagger file describing their API along with a JSON configuration file to set configuration requirements, such as where to publish the API. Qantas also used Node.js to further extend WSO2 API Manager, so software developers could publish and invoke serverless APIs using Amazon Web Services Lambda functions in addition to standard HTTP-based endpoints.

The entire API-driven platform is built on AWS where all the infrastructure requirements, product installation, and configuration scripts are stored as code under version control. A distributed architecture with blue-green deployments is used to help facilitate rapid changes to specific components of the solution.


Since launching the WSO2 API Management platform, Qantas has:

  • Increased the number of APIs published tenfold.
  • Seen a 500% increase in API traffic.
  • More than halved its operating costs.