J2EE vs. .NET A Technical Workshop from NGUON VIET SOFTWARE LLC

Objectives To understand the Distributed System To understand the J2EE Technology To understand the .NET Technology To know the difference between J2EE and .NET

To understand the Distributed System

To understand the J2EE Technology

To understand the .NET Technology

To know the difference between J2EE and .NET

What is a Distributed System? A system made up of distinct sub-systems/ components that are distributed across multiple computers on a network. Availability Manageability Performance Reliability Scalability Securability

Availability

Manageability

Performance

Reliability

Scalability

Securability

J2EE Framework

J2EE The application server maintains controls and provides services through an interface or framework known as a container There are five defined container types in the J2EE specification Three of these are server-side containers The other two container types are client-side Containers

The application server maintains controls and provides services through an interface or framework known as a container

There are five defined container types in the J2EE specification

Three of these are server-side containers

The other two container types are client-side

J2EE A servlet is a server-side component Written in Java Extends the capabilities of servers Accessed via request-response programming model What can Servlet do? Share information Maintain in client state Filter requests and responses Control web flows Usage Used to develop the presentation (A controller in web tier) Servlet

A servlet is a server-side component

Written in Java

Extends the capabilities of servers

Accessed via request-response programming model

What can Servlet do?

Share information

Maintain in client state

Filter requests and responses

Control web flows

Usage

Used to develop the presentation (A controller in web tier)

J2EE A JSP page is a text document that contains two types of text Static data: HTML, SVG, WML, and XML JSP elements: Construct dynamic content What can JSP do? Generate dynamic pages to interact with users Transfer control to another web component Access server-side objects Support Tag Library Usage Used to develop the presentation JSP

A JSP page is a text document that contains two types of text

Static data: HTML, SVG, WML, and XML

JSP elements: Construct dynamic content

What can JSP do?

Generate dynamic pages to interact with users

Transfer control to another web component

Access server-side objects

Support Tag Library

Usage

Used to develop the presentation

J2EE An enterprise java bean is a server-side component that can be deployed in a distributed multi-tier environment. EJB Enterprise JavaBeans (EJBs) Session Bean (SB) Entity Bean (EB) Message Driven Bean (MDB) Stateless (SLSB) Stateful (SFSB) Bean Managed Persistence (BMP) Container Managed Persistence (CMP) Synchronous Communication Asynchronous Communication

An enterprise java bean is a server-side component that can be deployed in a distributed multi-tier environment.

J2EE EJB usually plays roles in business tier EJB

EJB usually plays roles in business tier

J2EE JMS (Java™ Messaging Service) Standard API for messaging JavaMail™ API allows an application component to send Internet mail. JAF (JavaBeans™ Activation Framework) Supports handling data in different MIME types JAXP (Java™ API for XML Parsing) SAX and DOM parser XSLT transform JCA ( J2EE™ Connector Architecture ) The Connector architecture is a J2EE SPI that allows resource adapters that support access to Enterprise Information Systems to be plugged in to any J2EE product. Service Technologies

JMS (Java™ Messaging Service)

Standard API for messaging

JavaMail™

API allows an application component to send Internet mail.

JAF (JavaBeans™ Activation Framework)

Supports handling data in different MIME types

JAXP (Java™ API for XML Parsing)

SAX and DOM parser

XSLT transform

JCA ( J2EE™ Connector Architecture )

The Connector architecture is a J2EE SPI that allows resource adapters that support access to Enterprise Information Systems to be plugged in to any J2EE product.

J2EE JDBC API API for connectivity with relational database systems. JTA (Java™ Transaction API) An application-level demarcation interface that is used by the container and application components to demarcate transaction boundaries. An interface between the transaction manager and a resource manager JNDI (Java Naming and Directory Interface™) Standard API for naming and directory access. Security Services The Java™ Authentication and Authorization Service (JAAS) enables services to authenticate and enforce access controls upon users . Service Technologies

JDBC API

API for connectivity with relational database systems.

JTA (Java™ Transaction API)

An application-level demarcation interface that is used by the container and application components to demarcate transaction boundaries.

An interface between the transaction manager and a resource manager

JNDI (Java Naming and Directory Interface™)

Standard API for naming and directory access.

Security Services

The Java™ Authentication and Authorization Service (JAAS) enables services to authenticate and enforce access controls upon users .

J2EE Web Services J2EE provides full support for both clients of web services as well as web service endpoints. Management The Java 2 Platform, Enterprise Edition Management Specification defines APIs for managing J2EE servers using a special management enterprise bean. The Java™ Management Extensions (JMX) API is also used to provide some management support. Deployment The Java 2 Platform, Enterprise Edition Deployment Specification defines a contract between deployment tools and J2EE products. Service Technologies

Web Services

J2EE provides full support for both clients of web services as well as web service endpoints.

Management

The Java 2 Platform, Enterprise Edition Management Specification defines APIs for managing J2EE servers using a special management enterprise bean.

The Java™ Management Extensions (JMX) API is also used to provide some management support.

Deployment

The Java 2 Platform, Enterprise Edition Deployment Specification defines a contract between deployment tools and J2EE products.

J2EE Internet protocols TCP/IP, HTTP, HTTPS/SSL. OMG Protocols Java IDL (Java Interface Definition language) Allows J2EE application components to invoke external CORBA objects using the IIOP protocol. RMI-IIOP (Java Remote Method Invocation over Internet Inter-ORB Protocol technology) To enable interoperability between J2EE products Communication Technologies

Internet protocols

TCP/IP, HTTP, HTTPS/SSL.

OMG Protocols

Java IDL (Java Interface Definition language)

Allows J2EE application components to invoke external CORBA objects using the IIOP protocol.

RMI-IIOP (Java Remote Method Invocation over Internet Inter-ORB Protocol technology)

To enable interoperability between J2EE products

J2EE Web Application Security: Authentication: HTTP Basic and Digest Authentication Form-Based Authentication HTTPS Client Authentication Authorization Declarative Security Programmatic Security Confidentiality and Integrity EJB Security Authentication (JAAS) Authorization Declarative Security Programmatic Security Security

Web Application Security:

Authentication:

HTTP Basic and Digest Authentication

Form-Based Authentication

HTTPS Client Authentication

Authorization

Declarative Security

Programmatic Security

Confidentiality and Integrity

EJB Security

Authentication (JAAS)

Authorization

Declarative Security

Programmatic Security

J2EE Security Interoperability IIOP/SSL CSlv2 Web Services Security End-to-End Security XML Digital Signature and XML Encryption SAML WS-Security Security

Security Interoperability

IIOP/SSL

CSlv2

Web Services Security

End-to-End Security

XML Digital Signature and XML Encryption

SAML

WS-Security

J2EE Support distributed transaction Supports Flat transaction model Does not supports Nested transaction model Provide ACID (Atomicity, Consistency, Isolation, and Durability) properties Transaction

Support distributed transaction

Supports Flat transaction model

Does not supports Nested transaction model

Provide ACID (Atomicity, Consistency, Isolation, and Durability) properties

J2EE There are two types of transactions Container-Managed Transactions Bean-Managed Transactions Transaction Container-Managed demarcation Bean-Managed demarcation Database A Database B Client EJB server Begin Commit Bean A Bean A Database A EJB server Database B EJB server Client Bean A Bean A Begin Commit

There are two types of transactions

Container-Managed Transactions

Bean-Managed Transactions

Container-Managed demarcation

Bean-Managed demarcation

.NET .NET is the Microsoft solution for Web services, the next generation of software that connects our world of information, devices, and people in a unified, personalized way Supports multiple operating systems Supports multiple programming languages. But you’ll have to use special .NET variants Supported by one vendor

.NET is the Microsoft solution for Web services, the next generation of software that connects our world of information, devices, and people in a unified, personalized way

Supports multiple operating systems

Supports multiple programming languages. But you’ll have to use special .NET variants

Supported by one vendor

.NET Framework Windows COM+ Services Common Language Runtime Base Class Library ADO.NET and XML ASP.NET/Web Forms Windows Forms Common Language Specification VB C++ C# JScript … Visual Studio.NET .NET Remoting

.NET Consists of two components: The form with its controls (.aspx file) The code behind it that handles events associated with the form's controls Code behind file can be written in any .NET languages (C#, VB.NET…) ASP.NET/Web Forms Web Form UI (aspx) Code behind Class System.Web.UI.Page Code behind association Inherits

Consists of two components:

The form with its controls (.aspx file)

The code behind it that handles events associated with the form's controls

Code behind file can be written in any .NET languages (C#, VB.NET…)

.NET Provides a unified programming model for standard Windows application development Window API .NET Window Form Windows Forms HWND hwndMain = CreateWindowEx( 0, "MainWClass", "Main Window", WS_OVERLAPPEDWINDOW | WS_HSCROLL | WS_VSCROLL, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, (HWND)NULL, (HMENU)NULL, hInstance, NULL); ShowWindow(hwndMain, SW_SHOWDEFAULT); UpdateWindow(hwndMain); Form form = new Form(); form.Text = "Main Window"; form.Show(); How much simpler ?

Provides a unified programming model for standard Windows application development

Window API

.NET Window Form

.NET Provides a hierarchy of classes to create UI components such as Forms, TextBoxes, Buttons,… Any .NET language can use this collection of classes that make up the Windows Forms object model. Fully supports and integrates with Web Services, ADO.NET, and the .NET Framework base classes. Windows Forms

Provides a hierarchy of classes to create UI components such as Forms, TextBoxes, Buttons,…

Any .NET language can use this collection of classes that make up the Windows Forms object model.

Fully supports and integrates with Web Services, ADO.NET, and the .NET Framework base classes.

.NET Allows to instantiate components on remote computer and use them as local components Communicate channels: HTTP or TCP Deployment: Window form application, Console application, Dedicated window service, IIS (with ASP.NET) .NET Remoting Application Domain Application Domain Client Object Component Direct access to component Component Communication between AppDomains Proxy Channel

Allows to instantiate components on remote computer and use them as local components

Communicate channels: HTTP or TCP

Deployment: Window form application, Console application, Dedicated window service, IIS (with ASP.NET)

.NET Allow access to software components through standard web protocols such as HTTP, SMTP,… Base on XML and SOAP Can be written in any .NET language (C#, VB.NET,…) XML Web Services Internet Search for Web Service functionality 1 2 3 4 Web Service Vendor WSDL File Web Service UDDI Registry Discovery Interface SOAP Messages Internet DISCO File

Allow access to software components through standard web protocols such as HTTP, SMTP,…

Base on XML and SOAP

Can be written in any .NET language (C#, VB.NET,…)

.NET Provides consistent access to data sources such as SQL Server, Oracle, Access,... Leverages Current ADO Knowledge Supports the N-Tier Programming Model Supports XML ADO.NET

Provides consistent access to data sources such as SQL Server, Oracle, Access,...

Leverages Current ADO Knowledge

Supports the N-Tier Programming Model

Supports XML

.NET The .NET Framework enables you to create components called serviced components , to access COM+ services System.EnterpriseServices namespace provides classes, interfaces and attributes for communicating with Component Services Component Services of COM+ Transactions Queued Components Security JIT Activation Object Pooling COM+ (Serviced components)

The .NET Framework enables you to create components called serviced components , to access COM+ services

System.EnterpriseServices namespace provides classes, interfaces and attributes for communicating with Component Services

Component Services of COM+

Transactions

Queued Components

Security

JIT Activation

Object Pooling

.NET Provide ACID properties A tomicity C onsistency I solation D urability Serviced Components have the ability to participate in transactions by voting on the outcome of the operations Transaction

Provide ACID properties

A tomicity

C onsistency

I solation

D urability

Serviced Components have the ability to participate in transactions by voting on the outcome of the operations

.NET .NET Framework security Role-based security Code access security Code signing Security What is the code Evidence-based authentication What does the code do Permission-based Authorization CAS Policy User Code Code Access Security Security Resources Privileged Operation Evidence

.NET Framework security

Role-based security

Code access security

Code signing

.NET ASP.NET security Authentication Forms-based authentication Windows authentication Passport authentication Authorization and Impersonation URL authorization Resource authorization Security

ASP.NET security

Authentication

Forms-based authentication

Windows authentication

Passport authentication

Authorization and Impersonation

URL authorization

Resource authorization

.NET Security What is the code Evidence-based authentication Authenticated Caller’s Access token (or IUSR_Machine Access token) ASP Processes Original Caller Fixed proxy Identity Authorization Web permissions NTFS Permission IP Address Restriction Authentication Anonymous Basic Digest Integrated Certificate ASP.NET (aspnet_wp.exe) Authorization File Authorization URL Authorization .NET Roles Authentication Windows Forms Passport None HTTP Requests SSL 1 Web Server 2 3 5 6 4 Local or Remote Resource 7 Identity ASP.NET Security

.NET Base Class Library System System.Data System.Web Globalization Diagnostics Configuration Collections Resources Reflection Net IO Threading Text Service Process Security OleDb Common SqlTypes SqlClient Runtime InteropServices Remoting Serialization Configuration SessionState Caching Security Services Description Discovery Protocols UI HTMLControls Web Controls System.Xml XPath Schema XPath Serialization System.Drawing Imaging Drawing2D Text Printing System.Windows.Forms Design Component Model

J2EE Distributed System Swing JSP Servlet Browser HTTP EJB - Session EJB-Entity EJB-MDB JMS Java mail RMI/IIOP, SOAP Oracle Database MS SQL Database Data in XML Format JDBC/JDO

.NET Distributed System Windows Forms ASP.NET/ Web Forms ASP.NET/ XML Web Services Browser HTTP Managed Classes (Base Class Library) COM+ DCOM (Serviced Components) .NET Remoting, SOAP Oracle Database MS SQL Database ADO.NET Data in XML Format

J2EE vs. .NET Technologies Equivalences Technology J2EE .NET Technology Type of Technology Standard (Specification) Product Programming Language Java C#, J# , C++, VB.NET, Cobol Library Java API Based and Extended classes Run-time Environment JVM CLR Distributed Protocol RMI-IIOP, SOAP, CORBA DCOM, SOAP Platform Support Multiple Platforms Windows Presentation Tier Technologies Infrastructure Standard (Specification). There are several web servers IIS Programming Model JSP, Servlet, Swing ASP.NET, WebForms, WindowForms

J2EE vs. .NET Technologies Equivalences Technology J2EE .NET Business Logic Tier Technologies Infrastructure EJB ( Session Bean, Entity Bean and Message Driven Bean). Provided by the server COM+. Provided by the Platform Asynchronous JMS MSMQ Distributed Transaction JTS MS-DTC Connectivity JDBC, JCA (Java Connector Architecture) ADO.NET, HIS (Host Integration Server) Naming and Directory Service JNDI(Java Naming and Directory Interface) ADSI (Active Directory Services Interface) Security JAAS, supported by the Server COM+ Security , Supported by platform

J2EE vs. .NET Technologies Equivalences Technology J2EE .NET Other Technologies Web Services XML Web Services XML Web Services XML Parser JAXP Build-in

J2EE or NET? Scorecard Criteria J2EE .NET Comments Easy of use (Development Environment) VB.NET and C# are easier to use than J2EE because of VS.NET Scalability Execute Java code on mainframe Single Language Multiple Platforms Java can run on many platforms Multiple Languages, Single platform VB, C#, J#, etc. all run in the same run-time environment Reliability VB/COM developed in 1993 (J2EE – 1999) Performance Both will perform equally well Speed of development Visual Basic code is easier to learn Reuse Deploy same code on multiple platforms and multiple projects Open Standard Java, JVM are open standards

J2EE or .NET? J2EE .NET

References Microsoft www.microsoft.com SUN www.sun.com IBM www.ibm.com J2EE vs. .NET The Platform Wars: .NET vs. J2EE Brian G. Lyons, Number Six Software, Inc. J2EE vs. .NET Roger Sessions, ObjectWatch, Inc.

Microsoft

www.microsoft.com

SUN

www.sun.com

IBM

www.ibm.com

J2EE vs. .NET

The Platform Wars: .NET vs. J2EE

Brian G. Lyons, Number Six Software, Inc.

J2EE vs. .NET

Roger Sessions, ObjectWatch, Inc.

Appendix Session Beans: A session bean represents a single client inside the Application Server Stateful session beans: Can maintain a conversational state for the client Stateless session beans: Does not maintain a conversational state for the client Message Driven Beans Allows J2EE applications to process messages asynchronously Entity Beans: An entity represents a business object and an in-memory view of persistent data (data in a database) Container-Managed Persistence: Declarative persistent Bean-Managed Persistence: Programmatic persistent J2EE-EJB

Session Beans: A session bean represents a single client inside the Application Server

Stateful session beans: Can maintain a conversational state for the client

Stateless session beans: Does not maintain a conversational state for the client

Message Driven Beans

Allows J2EE applications to process messages asynchronously

Entity Beans: An entity represents a business object and an in-memory view of persistent data (data in a database)

Container-Managed Persistence: Declarative persistent

Bean-Managed Persistence: Programmatic persistent

Glossary Acronyms/ Abbreviations Definitions JTA Java Transaction API JAAS Java Authentication Authorization Service EJB Enterprise Java Bean JNDI Java Naming Directory Interface XML Extensible Markup Language XSL Extensible Style sheet Language XSLT XSL Transformation JSP Java Server Page JDBC Java Database Connectivity EIS Enterprise Information System DTO Data Transfer Object MVC Model View Controller JDO Java Data Object

Glossary Acronyms/ Abbreviations Definitions WML Wap Markup Language OMG Object Management Group CORBA Common Object Request Broker Architecture RMI-JRMI Remote Method Invocation - Java Remote Method Protocol RMI-IIOP Java Remote Method Invocation over Internet Inter-ORB Protocol technology IDL Java Interface Definition language Windows DNA Microsoft Windows D igital inter N et Applications A rchitecture OMG Object Management Group CORBA Common Object Request Broker Architecture SOAP Simple Object Access Protocol JIT Just-In-Time MIME Multipurpose Internet Mail Extension