and aqualogic - onlineappsdba.comonlineappsdba.com/upload/beasoagovernance.pdf · soa governance...
TRANSCRIPT
SOA Governance with BEA and AquaLogic
“Hope is not a viable SOA Strategy”
Monte Kluemper Principal Consultant BEA Systems Iberia
BEA Confidential. | 2
Enterprise Service Infrastructure
Developers
B2B Communications
Enterprise Collaboration
Enterprise Service Bus
Enterprise Interaction
Presentation Services
Business Process Services
Data Services
Services Fabric
Operations
Architects Enterprise Security
Service Registry
Architectural Governance
Enterprise Svc Mgmt
BEA Confidential. | 3
Governance is the harvesting and management of key assets owned by an organization in order to promote and enforce their use for maximum business benefit.
Governance Models must address �What decisions must be made for effective management �Who should make these decisions �How will these decisions be made and monitored
Example Areas of Governance �Corporate Governance � IT Governance �And now SOA Governance
What is SOA Governance?
BEA Confidential. | 4
Lack of Governance #1 reason why enterprises do not reap the benefits of SOA
Business Services are distributed in nature
SOA Governance : An agile and efficient decision and accountability framework to effectively enable and assist in realizing the benefits of SOA
SOA Governance can not be solved with tools alone
Why is SOA Governance important?
BEA Confidential. | 5
Construction costs Business & IT Benefits Key Measures
Organization Design Funding Skillsets Roles & Responsibilities Standards Operational Processes & Tools Change Management Existing Applications
Key “Inflight” Projects Infrastructure Construction Plans
Reference Architectures Manageability/Availability Scalability Security
Infrastructure Services Info. & Access Services Shared Business Services Presentation Services Composite Applications
SOAenabled Business Strategies Business Process Architecture
Business Strategy & Process
Architecture Costs & Benefits
Projects &
Applications
Building Blocks
Organization & Governance
Projects and
Applications
Business Strategy and Process
Architecture Costs & Benefits
Building Blocks
Organization & Governance
BEA SOA Domain Model © for SOA Governance
BEA Confidential. | 6
How are IT and/or SOA Governance decisions made today? What decisions needs to made for your organization to have effective SOA Governance? Who should make these SOA Governance decisions? How will these SOA Governance decisions be made and monitored? What Structures, Process, Communication, Tools should be deployed
Effective SOA Governance
Structure
Process
Tools
SOA Governance Framework
Current Organization & Governance
Communication
BEA SOA Domain Model © for SOA Governance
BEA Confidential. | 7
Tools to support SOA Governance
Start with an Enterprise Service Bus � Change Management and Policy Enforcement
Integrate a Service Registry � Asset Management and Approval Workflow
Configure an Enterprise Service Management solution � Endtoend Service Monitoring � Exception Management � Transactional SLA Enforcement
Create a master Data Services model
Implement an Enterprise Security solution � Federated authentication and policies � Integration with singlesignon (SSO) solutions
AquaLogic Service Registry
BEA Confidential. | 9
Evolving to Service Orientation
Business Logic
Legacy ERP CRM Finance
Business Logic
Business Logic
Business Logic
Business Logic
Legacy ERP CRM Finance
Business Logic
Business Logic
Business Logic
New Business Processes
Business Services
Application, Asset Silos Serviceoriented Applications, Assets
Business functionality buried in applications, asset silos … proprietary interfaces serving the silos
Business functionality exposed as business services … standardsbased, shared &
reusable services
LOB Manager
Architects
Developers
Operations
Architects
Developers
Develop & Deploy
Develop & Deploy
Develop & Deploy
Business Logic
Legacy ERP CRM Finance
Business Logic
Business Logic
Business Logic
No ability to guide what services are built, how they’re built, and no way to ensure interoperability
No systematic way to find and reuse existing services
No ability to manage services and enforce policy at runtime
No control over changes to services, or visibility into dependencies and impact analysis
No checkpoint to control service provisioning in the SOA, and to validate compliance with service design policy and best practices
Problems of scaling a SOA without a Service Registry
BEA Confidential. | 11
Visibility � Can’t reuse and manage what you can’t find, or don’t know about � SOA accentuates the problem of visibility in the face of constant change
Reusability � Organic development drive redundancy � Reuse is the key to business agility and ROI, but hard to achieve � Requires technical and business standards, and best practices
Adaptability � The ability to quickly and easily adapt to change � Separation of concerns between business logic and infrastructure � Declarative, policydriven configuration drives resilience
Lifecycle Management � Define and enforce policy at design and runtime � Governance of the SOA is critical to achieving the benefits
Problems of scaling a SOA without a Service Registry
BEA Confidential. | 12
Service Registry
Taxonomies
Specifications / Capabilities
Service Type • Retail Accounts DB • CMS Document Publish • HR Employee Info • CRM Customer Info
Authentication • HTTP Digest • X.509 • Kerberos • XML Sign
Transport • HTTP • JMS • IIOP • SMTP/POP
Service Interfaces • WSDL • XML Schema
Documents • Functional Specification •API reference •Examples
Department • Retail • Securities • Wholesale
Response Time • < 0.1 s • < 0.5 s • < 1 s • < 5 s
Mapping Relationships • Between Services • And People
Policies – Capabilities & Constraints
SLO • Availability • Performance
Technical • WSI • Security
Regulatory • FDA • SarbOx
Corporate • SLO • Governance
• Cost Center • IT
Visibility
Reusability
Adaptability
Lifecycle Management
AquaLogic Service Registry
BEA Confidential. | 13
AquaLogic Service Registry
Developers Operations, Systems Management
Enable (Assets) Publish, Discover (Assets, Services) Manage (Services)
Policy
Governance
Designtime Runtime
Web Services
WSDL, XML
Business Process
Business
Management Agents
Composite Applications
Business Logic
Legacy
Services
BEA AquaLogic Service Registry
Policy
Operations
ESM, System Management Console
ERP CRM Finance
Business Logic
Business Logic
Business Logic
BEA Confidential. | 14
AquaLogic Service Registry
Complete & Proven business service registry � Provides mechanism by which services can be published, discovered & consumed.
� Contains metadata about services providing what consumer needs to know to use a service
� Provides centrally managed, reliable & searchable location for service descriptions
� Fully supports latest UDDI V3 specification
Complements ALSB & Web Services Management in service lifecycle
BEA Confidential. | 15
AquaLogic Service Registry Service Approvals
Control of Service
Deployment
• Approval for any new services or versions before going live • Alerts for any changes to registered services • Delegatable administration authority
BEA Confidential. | 16
AquaLogic Service Registry Service Approvals
Approval Processes Publishing Registry
“Production” “Test”
Discovery Registry
Service Submission Service Approval Service Lookup & Reuse
Automatic Approvals Approval Routing
BEA Confidential. | 17
OneStep Approval Configuration
ManytoOne Approval Configuration
MultiStep Approval Configuration
PUBLICATION
ALSR
PUBLICATION
ALSR DISCOVERY
ALSR
DISCOVERY
ALSR
INTERMEDIATE
ALSR
INTERMEDIATE
ALSR
Approved Data
Development Production
PUBLICATION
ALSR
PUBLICATION
ALSR
PUBLICATION
ALSR
PUBLICATION
ALSR
PUBLICATION
ALSR
PUBLICATION
ALSR
DISCOVERY
ALSR
DISCOVERY
ALSR
Approved Data
Approved
Data
Approved Data
PUBLICATION
ALSR
PUBLICATION
ALSR DISCOVERY
ALSR
DISCOVERY
ALSR Approved Data
Development Production
Approved Data
Testing
AquaLogic Service Registry Service Approvals
AquaLogic Data Services
BEA Confidential. | 19
Data Service Tools Data
Services Apache XMLBeans / XQuery
• Strong typing of XML from Java • Support of 100% XML Schema • Integrated XQuery transformations • Integrated IDE support
Apache XMLBeans / XQuery
• Strong typing of XML from Java • Support of 100% XML Schema • Integrated XQuery transformations • Integrated IDE support
AquaLogic Data Services
• Create views from multiple, heterogeneous data sources
• Query Optimization and Cache • Automatic Import of Data Models • Complex Transformations • Publish as WebSvcs or Java
AquaLogic Data Services
• Create views from multiple, heterogeneous data sources
• Query Optimization and Cache • Automatic Import of Data Models • Complex Transformations • Publish as WebSvcs or Java
POJO Wrappers
Apache Beehive Controls
• POJO Wrappers for connecting to external services
• Hides implementation from developers
• Graphical design and packaging
Apache Beehive Controls
• POJO Wrappers for connecting to external services
• Hides implementation from developers
• Graphical design and packaging
AquaLogic & Enterprise Service Management
BEA Confidential. | 21
Process Integration
Services Integration AquaLogic Service Bus
Data Services AquaLogic Data Services Platform
Portal Tier WLP or AL User Interaction
Service Integration
Data Service Data Service
Mainframe .Net ERP Data
Warehouse Oracle
Process Tier WLI
Portlet Web App
Security Services AquaLogic Enterprise Security
Service Registry AquaLogic Service Registry
Enterprise/Web Services Management
Service Registry
Service Registry
Service Registry
Service Registry
WSM
WSM
WSM
AquaLogic Reference Architecture
BEA Confidential. | 22
Integration with the Service Registry
Business Service Console
Management Controls
Management Data
Describing and discovering services by WSM metrics Describing and discovering services by WSM metrics
BEA Confidential. | 23
Example Customer Use Case
Customer maintains a 7 X 24 X 365 operational environment in which critical business processes must be constantly available.
Customer adopting SOA, resulting in � Fewer monolithic applications to manage, but � Systems will have increasingly complex dependencies � Understanding the operational footprint is a challenge � Management of those systems is critical to success
Using both HP SOA Manager and AquaLogic, but must support existing messaging solutions
BEA Confidential. | 24
Example Customer Use Case Architectural Design Goals
Maintain a heterogeneous technology environment � Interoperable messages � Uniform metadata � Rolebased views
Manage and monitor business processes that cross technical, organizational, and geographic boundaries � Manage evolution of architecture � Integrate vendors into a unified management architecture
BEA Confidential. | 25
Example Customer Use Case Solution: Manage managers, not messages
XML Firewall Forum
Systems, Reactivity
Process Engine TIBCO, BEA WLI
WS Intermediary Amberpoint, Actional
WS Container Websphere, BEA WLS
Application
Database Oracle, Sybase
WS Adapter
Enterprise Services Bus (BEA AquaLogic ESB)
Management Services
Enablement Firewall Agent BPM Agent WSM WSEE Database
Agent
Management Architectural
Services AquaLogic ESB HP OpenView
SOA Manager TIBCO or other BPM
Management Service Model AquaLogic
Registry HP OpenView SOA Manager
BEA Confidential. | 26
Example Customer Use Case SOA Architecture
Services Management, Security and Governance
Managed SOA Infrastructure
SOAM Network Services
Application WS Consumers
DB
Management Services
Layer 2&3 Networking
Internet/ Intranet Internet/ Intranet
BEA WebLogic Server
WS Implementation
Management Agent
Security PEP
Security PEP
AquaLogic
Registry
Security PDP Security PDP
Directory Server
Directory Server
Management WS Consumers
Security PEP
Security PEP
DB
Web services
SOAM WSM Broker
Management Agent
Security PEP
Security PEP
Web services
AquaLogic ESB
Management Agent
Security PEP
Security PEP
…
JMS Server
Mgmt Agent
…
JMS Server
Mgmt Agent
BEA Confidential. | 27
SOA Governance Enterprise Service Management
J2EE J2EE
.NET .NET Order Order
Order Order WebLogic WebLogic
Credit (Siebel) Credit (Siebel)
Order (SAP)
Order (SAP)
OnBus Services
AquaLogic ESB
.NET .NET Shipping (Partner)
Shipping (Partner)
J2EE J2EE
Inventory (Siebel)
Inventory (Siebel)
OffBus Services
AquaLogic Svc Bus Console • Applicationlevel visibility • Centralized control for Bus
AquaLogic Svc Bus Console • Applicationlevel visibility • Centralized control for Bus
3 rd party consoles • Extensions for monitoring service level information
• Extensions for monitoring multiple service buses
3 rd party consoles • Extensions for monitoring service level information
• Extensions for monitoring multiple service buses
BEA Confidential. | 28
SOA Governance Customer Success Story
• Implemented AquaLogic Service Registry for design and runtime discovery and binding of Web services, as “cornerstone of SOA” and basis for SOA Governance
Reposition Web Services in an SOA Need to reduce costs without reducing pace of new services Need to become more agile, developing services more quickly to respond to business
Opportunities & Challenges
Solution Powered by BEA
Expected Benefits Developers can more easily locate “hidden” applications for reuse Reusable services increased from 50 to 100+ in less than 3 months Reduced duplication of efforts Better Business/IT alignment
ThinkLiquid
monte.kluemper @ bea.com