arcgis server for administrators

40
Esri UC2013 . Technical Workshop . Technical Workshop 2013 Esri International User Conference July 8–12, 2013 | San Diego, California ArcGIS Server for Administrators Sterling Quinn Shreyas Shinde

Upload: elton

Post on 13-Jan-2016

124 views

Category:

Documents


9 download

DESCRIPTION

2013 Esri International User Conference July 8–12, 2013 | San Diego, California. Technical Workshop. ArcGIS Server for Administrators. Sterling Quinn Shreyas Shinde. Agenda. ArcGIS Server architecture Distributing and scaling components Implementing security Monitoring server logs - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Technical Workshop

2013 Esri International User ConferenceJuly 8–12, 2013 | San Diego, California

ArcGIS Server for Administrators

Sterling Quinn

Shreyas Shinde

Page 2: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Agenda

• ArcGIS Server architecture

• Distributing and scaling components

• Implementing security

• Monitoring server logs

• Automating server administration

• What’s new in 10.2?

• Backup and restore

• Q&A

ArcGIS Server for Administrators

Page 3: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Sterling Quinn

Server architectures

Page 4: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Pre-10.1 architecture

Type Presentation Name Here

Page 5: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Motivation for architecture change

• Performance (64 bit)

• HTTP only

• Faster installation

• Scalability and elasticity

• High availability

• Cloud deployments

• Linux improvements

Page 6: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

ArcGIS for Server 10.1 Architecture

ArcGIS Server account (OS level)

ArcGIS Server account (OS level)

ArcGIS Server site

GIS ServerGIS Server

Services DirectoryServices Directory

ManagerManager

Server Administrator APIServer Administrator API

http://6080http://6080

Primary SiteAdministrator (PSA)

Primary SiteAdministrator (PSA)

Data

Server directoriesServer directories

Configuration storeConfiguration store

Page 7: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Single machine deployment with Web Adaptor

• Easily block admin end points

• Forward compatibility- Connect via port 80

- GIS site name

• Leverage Web tier features- Security

- Logging

Web ServerWeb Server

http://80http://80

Web AdaptorWeb Adaptor

GIS site GIS ServerGIS Server

http://6080http://6080

Data

Server directoriesServer directories

Configuration storeConfiguration store

Firewall

• OOTB reverse proxy

A

Page 8: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Multiple machine site

Web ServerWeb Server

http://80http://80

Web AdaptorWeb Adaptor

Data

Server directoriesServer directories

Configuration storeConfiguration store

GIS Server1

GIS Server1

GIS Server2

GIS Server2

ArcGIS Server site

Page 9: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Join site checklist

• Same ArcGIS Server account across all machines

• All machines can see config-store & server directories and have read/write/create permissions to these via ArcGIS Server account

• No mix of Windows and Linux among machines

• Necessary ports open on each machine:- 6080- 6443 (for HTTPs)- 4000 – 4005+ (communication between GIS Servers)

• Each machine has valid log location

Page 10: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

cluster Bcluster A

Multiple machine site with clusters

Web ServerWeb Server

http://80http://80

Data

Server directoriesServer directories

Configuration storeConfiguration store

GIS Server1

GIS Server1

GIS Server2

GIS Server2

GIS Server3

GIS Server3

ArcGIS Server site

Web AdaptorWeb Adaptor

Page 11: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

cluster Bcluster A

Multiple machine site with clusters

A

Web ServerWeb Server

http://80http://80

Data

Server directoriesServer directories

Configuration storeConfiguration store

GIS Server1

GIS Server1

GIS Server2

GIS Server2

GIS Server3

GIS Server3

Web AdaptorWeb Adaptor

Page 12: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Benefits of clusters

• Hardware isolation- Cluster contains machine with the same hardware

specs

• Dynamic allocation of resources- You set thread instances per machine, NOT per

service like previously- You can re-assign machines to different clusters at

different times

• Isolate intensive processes in their own cluster

Page 13: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Web Server

High Availability Configuration

GIS Server 2

GIS Server 2

Config-StoreConfig-StoreServer DirsServer Dirs

http:6080http:6080

Web AdaptorWeb Adaptor

GIS Server 1

GIS Server 1

http:6080http:6080

Web Server

Web AdaptorWeb Adaptor

http: 80http: 80

Page 14: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Active-Passive Failover Configuration

GIS Server 1

GIS Server 1

Config-StoreConfig-StoreServer DirsServer Dirs

ArcGIS Server sitehttp:6080http:6080

Web Server

Web AdaptorWeb Adaptor

http: 80http: 80

NLB

GIS Server 2

GIS Server 2

Config-StoreConfig-StoreServer DirsServer Dirs

ArcGIS Server sitehttp:6080http:6080

Web Server

Web AdaptorWeb Adaptor

http: 80http: 80

Page 15: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Shreyas Shinde

Implementing Security

Page 16: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Security is tiered

• Installation security- OS permissions on install directory, server

directories and configuration store- ArcGIS Server account (OS account)- Database account

• Security for published geo content- Administrators, Publishers, Consumers

ArcGIS Server for Administrators

Page 17: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Identity stores

• Built-in- Out of the box

• Windows domain

• LDAP

• Custom identity providers- You write the identity provider adaptors and deploy

it to Server

ArcGIS Server for Administrators

Page 18: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Demo: Setting up identity store

ArcGIS Server for Administrators

Page 19: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Authentication

• Token based- Out of the box authentication scheme

• Enterprise authentication- Needs to be configured on the web adaptor

- Integrated Windows- PKI/Client certificates- Java EE- …

ArcGIS Server for Administrators

Page 20: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Demo: Configuring authentication

ArcGIS Server for Administrators

Page 21: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Authorization

• Role based access control

• Fundamental privileges- Publishers- Administrators

• For consumers:- Set permissions on roles- Assign roles to user accounts

ArcGIS Server for Administrators

Page 22: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Demo: Configuring authorization

ArcGIS Server for Administrators

Page 23: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Sterling Quinn

Server logs and monitoring

Page 24: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Logs available in Manager

• Each GIS server writes logs locally

• Manager synthesizes logs from all machines- Don’t open or edit manually

• Verbose levels for troubleshooting- Map draw extents- Layer draw times

Type Presentation Name Here

Page 25: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Demo: Using logs for troubleshooting

Type Presentation Name Here

Page 26: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Going further

• ArcGIS Server Administrator API lets you query logs and stats through REST

Type Presentation Name Here

Page 27: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Statistics available in the Administrator Directory

• Administrator Directory gives a window into stats

• Shows number of requests per machine

• Not available currently in Manager

Type Presentation Name Here

Page 28: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Shreyas Shinde

Automating Server Administration

Page 29: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Why automate?

• Repetitive workflows- Add more machines during business hours- Start caching during non-peak hours- Understand usage

• Very easy- Full administration through HTTP API- Can program in most languages like Java, Python, C#,

Ruby…

ArcGIS Server for Administrators

Page 30: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Demo

ArcGIS Server for Administrators

Page 31: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Sterling Quinn

What’s new in 10.2

Page 32: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

A taste of what’s new in 10.2

• Integration with Portal for ArcGIS

• Backup and restore

• Disable automatic data copying when publishing

Type Presentation Name Here

Page 33: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Shreyas Shinde

Backup and restore

Page 34: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Backup

• You want to:- Take regular snapshots of your server for archival- Move from staging to production

• Through Python tools or through Admin API

• Produces a self contained .agssite (ZIP) file

ArcGIS Server for Administrators

Page 35: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Restore

• Requires a valid Site

• Import exported .agssite (ZIP) file

• Deletes all current configuration of site and restores site to the configuration in the .agssite file

ArcGIS Server for Administrators

Page 36: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Demo: Creating a backup

ArcGIS Server for Administrators

Page 37: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Questions?

ArcGIS Server for Administrators

Page 38: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Please fill out the session evaluation

Wednesday Offering ID: 1307

Thursday Offering ID: 1408

Online – www.esri.com/ucsessionsurveys

Paper – pick up and put in drop box

Thank you…

Page 39: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop .

Related sessions

• ArcGIS Server – An introduction- Tue 3:15PM, Wed 8:3AM

• ArcGIS Server Performance and Scalability – Optimizing GIS Services- Tue 8:30AM, Thu 8:30AM

• Securing ArcGIS Server Services – Introduction- Tue 1:30PM, Fri 9:00AM

• What’s New in ArcGIS 10.2 for Server- Tue 8:30Am, 1:30PM

ArcGIS Server for Administrators

Page 40: ArcGIS Server for Administrators

Esri UC2013 . Technical Workshop . ArcGIS Server for Administrators