Paul C Brown S O A Governance

This Presentation Courtesy of the
International SOA Symposium
October 7-8, 2008 Amsterdam Arena
www.soasymposium.com
info@soasymposium.com

Founding Sponsors

Platinum Sponsors

Gold Sponsors Silver Sponsors

SOA Governance
Essentials

Paul C. Brown
Principal Software Architect

© 2008 TIBCO Software Inc. All Rights Reserved.

1

Agenda

 SOA Governance Overview

 Run-Time Governance

 Design-Time Governance

 Organizational Issues

 Summary

3

SOA Governance Overview

SOA = Sharing: the producer is not the consumer

Sharing requires Governance: rule creation and
enforcement

Run-Time Design-Time
Governance Governance

Service Service Service Service
Usage Operation Creation Employment

4

2



enforcement



Enforced by Enforced by
systems procedures

Organizational Issues
5



enforcement



systems procedures

6

3

Run-Time
Governance


Typical Types of Run-Time Rules

 Access control
 Authentication
 Authorization

 Encryption
 Digital signatures
 Data filtering
 Logging
 Statistics gathering
 Invocation rate
 Response times

The list is open-ended!
8

4

It Is Possible to Enforce Policies Within the Service

Service
Life-Cycle
Modify the service architecture
Architect to make provision for policy
enforcement

Design Design the manner in
which the rule will be
implemented

Implement/
Implement and test the
Test rule

Deploy the revised service
Deploy
(may be disruptive!)

Operate Service enforces the rule

9

Enforcing Policies Within the Service Is Expensive!

Service
Life-Cycle
Modify the service
Architect architecture to make
provision for policy
enforcement
Design Design the manner in
which the rule will be
implemented
Implement/
Implement and test the
Test
rule

Deploy Deploy the revised
service
(may be disruptive!)

Operate Service enforces the
rule
10

5

Solution: Separate Policy Enforcement From Service

Service Policy Service
Consumer Agent Provider

Policy
enforcement
Interface
must still be
guarded

11

Solution: Separate Policy Enforcement From Service

Single Process Space

Service Policy Service
Consumer Agent Provider

Policy
enforcement
Interface is
now fully
protected

12

6

Enforcing Policies with a Policy Agent

Service Policy
Life-Cycle Life-Cycle
Put the infrastructure in
Architect
place to use Policy Agents

Design Select or create the
template for the type of
rule you need

Implement/
Configure the rule
Test

Associate the rule with the
Deploy
services it governs

Policy Agent enforces the
Operate rule
13

Design-Time
Governance


7

Governance During Service Development

Service
Life-Cycle

Architect
• Will the service fit multiple usages?
• Will the interface remain stable over time?
Design

Implement/
Test
• Is the testing adequate?
• Is the documentation adequate?
Deploy

Operate
• Manage service operation (start/stop)
15 • Manage service versioning

Governance During Solution Development

Service Solution
Life-Cycle Life-Cycle

Architect
• Are existing services being used?
• Are new services being built
appropriately?
Design

Implement/
Test
• Has service capacity planning been
done?
Deploy • Have policies been put in place for
service access?

Operate
• Coordinate with service operation
16
• Track service versioning

8

Organizational
Issues


Who Manages Intra-Project Dependencies?

Your Project
•Project Manager
Service A
Solution X •Business Process Architect
(new) •Systems Architect

18

9

Who Manages Inter-Project Dependencies?

Your Project
•Project Manager
Service A
Solution X •Business Process Architect

Sister Project
•Project Manager
Service B
Solution Y •Business Process Architect

Future Project
•Project Manager
Service C •Business Process Architect
Solution Z
(future) •Systems Architect

19

Enterprise Architecture Scope

Enterprise
Architecture

Business Process Systems Data
Architecture Architecture Architecture

Solution Service Infrastructure
Architecture Architecture Architecture

 Evaluate service opportunities
 Participate in service specification

 Provide technical coordination between projects
 Provide look-ahead technical guidance (future
projects)
20

10

Common Architecture Issues

 Project level
 There is no architect (i.e. nobody responsible for overall business
process and systems architecture)
 The architect has no authority
• The project manager may ignore the advice

 Architecture is treated as an after-the-fact review
• Too late to make substantial changes

 Enterprise Level
 No participation in actual projects
• No opportunity to guide them towards common goals
• No opportunity to recognize issues in standards and best practices

 No authority
• Projects do as they please

 Project participation is at a review level
• Too late to make substantial changes

21

Put All Architecture Under One Roof

Business Executive
Sponsor

Total Architecture
Management

Enterprise Enterprise
Projects Architecture

Project Project Project Business Process Systems Data
Manager Manager Manager Architecture Architecture Architecture

Business Business Business
Process Process Process Solution Service Infrastructure
Architect Architect Architect Architecture Architecture Architecture
Systems Systems Systems
Architect Architect Architect

22

11

Summary




enforcement



systems procedures


24

12


• Reuse SOA = Sharing: the producer is not the consumer
• Isolation
enforcement
• Checkpoints


systems procedures
• Separate policy • Coordination
from service Organizational Issues

25

For More Information…

 Succeeding with SOA
• The business and organizational
perspective
• For:
• CIO, COO, CEO, CTO
• Managers
• Enterprise and project architects

 Implementing SOA
• Creating the total architecture
• For
• Enterprise and project architects
• CTOs

26
www.total-architecture.com

13

Paul C Brown S O A Governance

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (11)

Similar to Paul C Brown S O A Governance

Similar to Paul C Brown S O A Governance (20)

More from SOA Symposium

More from SOA Symposium (13)

Recently uploaded

Recently uploaded (20)

Paul C Brown S O A Governance