and AquaLogic - onlineappsdba.comonlineappsdba.com/upload/BEASoaGovernance.pdf · SOA Governance with BEA and AquaLogic “Hope is not a viable SOA Strategy ” Monte Kluemper Principal

SOA Governance with BEA and AquaLogic

“Hope is not a viable SOA Strategy”

Monte Kluemper Principal Consultant BEA Systems Iberia

BEA Confidential. | 2

Enterprise Service Infrastructure

Developers

B2B Communications

Enterprise Collaboration

Enterprise Service Bus

Enterprise Interaction

Presentation Services

Business Process Services

Data Services

Services Fabric

Operations

Architects Enterprise Security

Service Registry

Architectural Governance

Enterprise Svc Mgmt


Governance is the harvesting and management of key assets owned by an organization in order to promote and enforce their use for maximum business benefit.

Governance Models must address �What decisions must be made for effective management �Who should make these decisions �How will these decisions be made and monitored

Example Areas of Governance �Corporate Governance � IT Governance �And now SOA Governance

What is SOA Governance?


Lack of Governance #1 reason why enterprises do not reap the benefits of SOA

Business Services are distributed in nature

SOA Governance : An agile and efficient decision and accountability framework to effectively enable and assist in realizing the benefits of SOA

SOA Governance can not be solved with tools alone

Why is SOA Governance important?


Construction costs Business & IT Benefits Key Measures

Organization Design Funding Skillsets Roles & Responsibilities Standards Operational Processes & Tools Change Management Existing Applications

Key “Inflight” Projects Infrastructure Construction Plans

Reference Architectures Manageability/Availability Scalability Security

Infrastructure Services Info. & Access Services Shared Business Services Presentation Services Composite Applications

SOAenabled Business Strategies Business Process Architecture

Business Strategy & Process

Architecture Costs & Benefits

Projects &

Applications

Building Blocks

Organization & Governance

Projects and

Applications

Business Strategy and Process

Architecture Costs & Benefits

Building Blocks

Organization & Governance

BEA SOA Domain Model © for SOA Governance


How are IT and/or SOA Governance decisions made today? What decisions needs to made for your organization to have effective SOA Governance? Who should make these SOA Governance decisions? How will these SOA Governance decisions be made and monitored? What Structures, Process, Communication, Tools should be deployed

Effective SOA Governance

Structure

Process

Tools

SOA Governance Framework

Current Organization & Governance

Communication

BEA SOA Domain Model © for SOA Governance


Tools to support SOA Governance

Start with an Enterprise Service Bus � Change Management and Policy Enforcement

Integrate a Service Registry � Asset Management and Approval Workflow

Configure an Enterprise Service Management solution � Endtoend Service Monitoring � Exception Management � Transactional SLA Enforcement

Create a master Data Services model

Implement an Enterprise Security solution � Federated authentication and policies � Integration with singlesignon (SSO) solutions

AquaLogic Service Registry


Evolving to Service Orientation

Business Logic

Legacy ERP CRM Finance

Business Logic

Business Logic

Business Logic

Business Logic


Business Logic

Business Logic

Business Logic

New Business Processes

Business Services

Application, Asset Silos Serviceoriented Applications, Assets

Business functionality buried in applications, asset silos … proprietary interfaces serving the silos

Business functionality exposed as business services … standardsbased, shared &

reusable services

LOB Manager

Architects

Developers

Operations

Architects

Developers

Develop & Deploy

Develop & Deploy

Develop & Deploy

Business Logic


Business Logic

Business Logic

Business Logic

No ability to guide what services are built, how they’re built, and no way to ensure interoperability

No systematic way to find and reuse existing services

No ability to manage services and enforce policy at runtime

No control over changes to services, or visibility into dependencies and impact analysis

No checkpoint to control service provisioning in the SOA, and to validate compliance with service design policy and best practices

Problems of scaling a SOA without a Service Registry


Visibility � Can’t reuse and manage what you can’t find, or don’t know about � SOA accentuates the problem of visibility in the face of constant change

Reusability � Organic development drive redundancy � Reuse is the key to business agility and ROI, but hard to achieve � Requires technical and business standards, and best practices

Adaptability � The ability to quickly and easily adapt to change � Separation of concerns between business logic and infrastructure � Declarative, policydriven configuration drives resilience

Lifecycle Management � Define and enforce policy at design and runtime � Governance of the SOA is critical to achieving the benefits

Problems of scaling a SOA without a Service Registry


Service Registry

Taxonomies

Specifications / Capabilities

Service Type • Retail Accounts DB • CMS Document Publish • HR Employee Info • CRM Customer Info

Authentication • HTTP Digest • X.509 • Kerberos • XML Sign

Transport • HTTP • JMS • IIOP • SMTP/POP

Service Interfaces • WSDL • XML Schema

Documents • Functional Specification •API reference •Examples

Department • Retail • Securities • Wholesale

Response Time • < 0.1 s • < 0.5 s • < 1 s • < 5 s

Mapping Relationships • Between Services • And People

Policies – Capabilities & Constraints

SLO • Availability • Performance

Technical • WSI • Security

Regulatory • FDA • SarbOx

Corporate • SLO • Governance

• Cost Center • IT

Visibility

Reusability

Adaptability

Lifecycle Management




Developers Operations, Systems Management

Enable (Assets) Publish, Discover (Assets, Services) Manage (Services)

Policy

Governance

Designtime Runtime

Web Services

WSDL, XML

Business Process

Business

Management Agents

Composite Applications

Business Logic

Legacy

Services

BEA AquaLogic Service Registry

Policy

Operations

ESM, System Management Console

ERP CRM Finance

Business Logic

Business Logic

Business Logic



Complete & Proven business service registry � Provides mechanism by which services can be published, discovered & consumed.

� Contains metadata about services providing what consumer needs to know to use a service

� Provides centrally managed, reliable & searchable location for service descriptions

� Fully supports latest UDDI V3 specification

Complements ALSB & Web Services Management in service lifecycle


AquaLogic Service Registry Service Approvals

Control of Service

Deployment

• Approval for any new services or versions before going live • Alerts for any changes to registered services • Delegatable administration authority



Approval Processes Publishing Registry

“Production” “Test”

Discovery Registry

Service Submission Service Approval Service Lookup & Reuse

Automatic Approvals Approval Routing


OneStep Approval Configuration

ManytoOne Approval Configuration

MultiStep Approval Configuration

PUBLICATION

ALSR

PUBLICATION

ALSR DISCOVERY

ALSR

DISCOVERY

ALSR

INTERMEDIATE

ALSR

INTERMEDIATE

ALSR

Approved Data

Development Production

PUBLICATION

ALSR

PUBLICATION

ALSR

PUBLICATION

ALSR

PUBLICATION

ALSR

PUBLICATION

ALSR

PUBLICATION

ALSR

DISCOVERY

ALSR

DISCOVERY

ALSR

Approved Data

Approved

Data

Approved Data

PUBLICATION

ALSR

PUBLICATION

ALSR DISCOVERY

ALSR

DISCOVERY

ALSR Approved Data

Development Production

Approved Data

Testing


AquaLogic Data Services


Data Service Tools Data

Services Apache XMLBeans / XQuery

• Strong typing of XML from Java • Support of 100% XML Schema • Integrated XQuery transformations • Integrated IDE support

Apache XMLBeans / XQuery

• Strong typing of XML from Java • Support of 100% XML Schema • Integrated XQuery transformations • Integrated IDE support


• Create views from multiple, heterogeneous data sources

• Query Optimization and Cache • Automatic Import of Data Models • Complex Transformations • Publish as WebSvcs or Java


• Create views from multiple, heterogeneous data sources

• Query Optimization and Cache • Automatic Import of Data Models • Complex Transformations • Publish as WebSvcs or Java

POJO Wrappers

Apache Beehive Controls

• POJO Wrappers for connecting to external services

• Hides implementation from developers

• Graphical design and packaging

Apache Beehive Controls

• POJO Wrappers for connecting to external services

• Hides implementation from developers

• Graphical design and packaging

AquaLogic & Enterprise Service Management


Process Integration

Services Integration AquaLogic Service Bus

Data Services AquaLogic Data Services Platform

Portal Tier WLP or AL User Interaction

Service Integration

Data Service Data Service

Mainframe .Net ERP Data

Warehouse Oracle

Process Tier WLI

Portlet Web App

Security Services AquaLogic Enterprise Security

Service Registry AquaLogic Service Registry

Enterprise/Web Services Management

Service Registry

Service Registry

Service Registry

Service Registry

WSM

WSM

WSM

AquaLogic Reference Architecture

http://welcome.hp.com/country/us/en/welcome.html


Integration with the Service Registry

Business Service Console

Management Controls

Management Data

Describing and discovering services by WSM metrics Describing and discovering services by WSM metrics


Example Customer Use Case

Customer maintains a 7 X 24 X 365 operational environment in which critical business processes must be constantly available.

Customer adopting SOA, resulting in � Fewer monolithic applications to manage, but � Systems will have increasingly complex dependencies � Understanding the operational footprint is a challenge � Management of those systems is critical to success

Using both HP SOA Manager and AquaLogic, but must support existing messaging solutions


Example Customer Use Case Architectural Design Goals

Maintain a heterogeneous technology environment � Interoperable messages � Uniform metadata � Rolebased views

Manage and monitor business processes that cross technical, organizational, and geographic boundaries � Manage evolution of architecture � Integrate vendors into a unified management architecture


Example Customer Use Case Solution: Manage managers, not messages

XML Firewall Forum

Systems, Reactivity

Process Engine TIBCO, BEA WLI

WS Intermediary Amberpoint, Actional

WS Container Websphere, BEA WLS

Application

Database Oracle, Sybase

WS Adapter

Enterprise Services Bus (BEA AquaLogic ESB)

Management Services

Enablement Firewall Agent BPM Agent WSM WSEE Database

Agent

Management Architectural

Services AquaLogic ESB HP OpenView

SOA Manager TIBCO or other BPM

Management Service Model AquaLogic

Registry HP OpenView SOA Manager


Example Customer Use Case SOA Architecture

Services Management, Security and Governance

Managed SOA Infrastructure

SOAM Network Services

Application WS Consumers

DB

Management Services

Layer 2&3 Networking

Internet/ Intranet Internet/ Intranet

BEA WebLogic Server

WS Implementation

Management Agent

Security PEP

Security PEP

AquaLogic

Registry

Security PDP Security PDP

Directory Server

Directory Server

Management WS Consumers

Security PEP

Security PEP

DB

Web services

SOAM WSM Broker

Management Agent

Security PEP

Security PEP

Web services

AquaLogic ESB

Management Agent

Security PEP

Security PEP

…

JMS Server

Mgmt Agent

…

JMS Server

Mgmt Agent


SOA Governance Enterprise Service Management

J2EE J2EE

.NET .NET Order Order

Order Order WebLogic WebLogic

Credit (Siebel) Credit (Siebel)

Order (SAP)

Order (SAP)

OnBus Services

AquaLogic ESB

.NET .NET Shipping (Partner)

Shipping (Partner)

J2EE J2EE

Inventory (Siebel)

Inventory (Siebel)

OffBus Services

AquaLogic Svc Bus Console • Applicationlevel visibility • Centralized control for Bus

AquaLogic Svc Bus Console • Applicationlevel visibility • Centralized control for Bus

3 rd party consoles • Extensions for monitoring service level information

• Extensions for monitoring multiple service buses

3 rd party consoles • Extensions for monitoring service level information

• Extensions for monitoring multiple service buses

http://welcome.hp.com/country/us/en/welcome.html


SOA Governance Customer Success Story

• Implemented AquaLogic Service Registry for design and runtime discovery and binding of Web services, as “cornerstone of SOA” and basis for SOA Governance

Reposition Web Services in an SOA Need to reduce costs without reducing pace of new services Need to become more agile, developing services more quickly to respond to business

Opportunities & Challenges

Solution Powered by BEA

Expected Benefits Developers can more easily locate “hidden” applications for reuse Reusable services increased from 50 to 100+ in less than 3 months Reduced duplication of efforts Better Business/IT alignment

ThinkLiquid

monte.kluemper @ bea.com