Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

"Visibilidad y Control del la Arquitectura SOA"


Published on

  • Be the first to comment

  • Be the first to like this

"Visibilidad y Control del la Arquitectura SOA"

  1. 1. “ Visibilidad y Control del la Arquitectura SOA” Brandon Gibbs [email_address] Manager, US-East, Solution Engineers October 26, 2007
  2. 2. <ul><li>About Progress Software </li></ul><ul><li>Our Product/Solution Stack </li></ul><ul><ul><li>Actional </li></ul></ul><ul><ul><li>Demo </li></ul></ul><ul><li>Q&A </li></ul>Agenda
  3. 3. About Progess Software Corporation Headquarters: Bedford, MA Offices: 90 Worldwide Employees: 1,600 Revenues: $ 447 million NASDAQ: PRGS Founded: 1981 GLOBAL <ul><li>Deployed at 120,000 customer sites in 135 countries </li></ul><ul><li>2,000 Partners deliver 5,000 unique business applications </li></ul><ul><li>Over 600,000 new users acquire Progress-based technology annually </li></ul><ul><li>Application Infrastructure </li></ul><ul><ul><li>Progress supplies open application infrastructure software to simplify and accelerate the development, deployment, integration, and management of business applications. </li></ul></ul>INNOVATION <ul><li>InfoWorld Innovation Awards 2005 </li></ul><ul><ul><li>Actional Wins Award: Actional SOA management solutions dramatically reduce the cost and complexity of deploying and managing Web Services projects - NETWORK COMPUTING </li></ul></ul><ul><ul><li>Apama - Market Leading Event Processing Platform – Bloor Research </li></ul></ul><ul><ul><li>#1 Enterprise Service Bus – Sonic ESB </li></ul></ul><ul><ul><li>Gartner Dataquest </li></ul></ul>OPEN TECHNOLOGY EXPERIENCE
  4. 4. Progress Software Innovation Across All Product Lines Application Platforms Services Infrastructure Data Infrastructure Develop, Deploy and Manage Business Applications Connect, Mediate, Control and Monitor Services Manage, Integrate, Replicate, Cache and Access Data
  5. 5. Best-of-Breed Product Stack Enterprise Service Bus Semantic Integration SOA Management ESP/CEP BAM Mainframe Connectivity Data Access Application Platform Messaging-based ESB flexibly integrates new and existing business applications within an SOA SOA management platform providing operations support, continuous service optimization and policy enforcement Semantic mediation tools for application and service data management with common information model visualization, impact analysis and testing
  6. 6. Progress Software - Market Recognition for our Products Apama Event Processing Platform Market Leader DataXtend Best New Product: Semantic Data Integration Sonic ESB #1 Worldwide for ESB Segment Apama Winner ’06 Buy-Side Innovation Sonic ESB Best Enterprise Service Bus Actional SOA & Web Services Management Leader Billing World & OSS
  7. 7. The SOA Management Market – Recognized leader “Actional”
  8. 8. SOA Landscape “ &quot;Actional provides a far weightier Web Services management capability and toolset for building, securing, and managing a SOA network than its competitors' offerings ... [with] greater control ...&quot; Organizational Boundary Services From External Sources Services To External Sources Visibility - Beyond webservices, XML, SOAP for true end to end transaction visibility. Real time for each and every transaction Management - Service Policy (security, versioning, operations, change). Measure, manage and report on service level agreements Security - End to end security including last mile. Full CIA (WSS, XML Enc/DSig, SAML, etc…) Run-Time Governance – Measure, enforce and audit governance policies and rules in run-time environments. Synchronize registry information with real time service metadata. Web Services EJB http/https ESB RMI JMS JDBC
  9. 9. Why SOA Management? How do I ensure quality of service in my SOA, end-to-end , throughout the lifecycle? How do I understand the impact of a expected change or unexpected problem? How do I determine root cause to resolve incidents quickly without finger pointing? How do I proactively detect problems in the SOA before end users do? How can I track all services in production, what they depend on, who’s really using them, and how often?
  10. 10. Actional SOA Management Architecture Services From External Sources Services To External Sources SERVICES Insight and control over mission critical SOA projects SOA MANAGEMENT Enterprise Management Identity Management Directories ACTIONAL SERVER USERS Business Owners SOA Operations Staff Security and Compliance Staff
  11. 11. Actional SOA Management <ul><li>SOA Operations performance monitoring and alerting, dependency mapping and root cause analysis </li></ul><ul><li>Continuous Service Optimization business insight for decision support and runtime control of business outcomes </li></ul><ul><li>Active Policy Enforcement central creation and management of policies for SOA security and compliance </li></ul>
  12. 12. Actional SOA Management Components Actional Point of Visibility Actional Point of Control <ul><li>Weightless, non-intrusive (microseconds of latency) </li></ul><ul><li>Web services, database, messaging, and more </li></ul><ul><li>End-to-end process visibility and auto-mapping across applications </li></ul><ul><li>Automatic discovery, auditing, alerting, analysis, and reporting of service activity </li></ul><ul><li>Runs standalone or in conjunction with Actional Server </li></ul><ul><li>Policy enforcement (security, compliance, etc.) </li></ul><ul><li>Zero downtime service versioning </li></ul><ul><li>Adaptive content based routing, load balancing, and proactive fail-over for applications </li></ul>Actional Server <ul><li>Centralized visibility and control of distributed SOA infrastructure </li></ul><ul><li>Integrates IT and business views </li></ul><ul><li>Root cause analysis and triage of problems across tiers </li></ul><ul><li>Automatic discovery of dependencies, rogue services, and mapping of application topology </li></ul>
  13. 13. Actional for SOA Operations Experiences issue No one knows what’s really going on IT PERSPECTIVE SOA PERSPECTIVE   USER              ? ? ? ? ? APPLICATION OWNERS Why is it my problem? IT Operations sees normal behavior HELPDESK SOA OWNER Why look at me?
  14. 14. Actional for SOA Operations SOA Environment Discover process flows Map dependencies End to end across HTTP, RMI, EJB, Web services, .NET, database, messaging, custom apps No Custom Coding or Configuration ? ? ?
  15. 15. Actional for SOA Operations Monitor service levels Alert on performance and availability issues Snapshot individual transactions to easily isolate the root cause of problems Less than 1% overhead
  16. 16. <ul><li>Over 50 applications integrated to provide overall service </li></ul>Actional for SOA Operations Case Study: Telematics provider, for in-car services “ ... We don’t know where. We don’t know why. We don’t know when.” “ Some of our most mission critical transactions are not always completing…” “ Our BMC, OpenView, and Mercury systems are all showing green lights.” “ We know all of our services and applications are running properly.” RESULTS <ul><li>Automatically detected problems that were previously reported by customers </li></ul><ul><li>Reduced mean-time-to-resolution by 75% for web service issues </li></ul><ul><li>>50% drop in related number of help desk incidents (due to reduced MTTR) </li></ul><ul><li>Cost of help desk incidents estimated to be $150 each </li></ul>SOLUTION <ul><li>Used Actional to monitor SOA interactions, alert on detection of issues, and isolate the root cause of the issues </li></ul>
  17. 17. Actional’s “Flowmap” Patented Technology Demo DEMO
  18. 18. Actional Value Propositions SOA Initiative Scope Enterprise Department Project Budget Corporate Budget Funding Level ROOT-CAUSE ANALYSIS BUSINESS POLICY ENFORCEMENT POLICY DRIVEN SECURITY ROGUE SERVICE CONTROL
  19. 19. Rogue Services The Problem Registry Rogue Service Sensitive Customer Data SOA Environment Rogue Service Rogue Service Unexpected Reuse
  20. 20. Rogue Services Actional Solution Registry SOA Environment Sensitive Customer Data Rogue Service Rogue Service Unexpected Reuse Rogue Service
  21. 21. Trust Zones Protect the Last Mile Normal Path CONSUMER TRUST ZONE X Trust key = secure pseudo random key encrypted using secret symmetric platform key INTERNAL CONSUMER Last-mile Security Attack Service Service MD5(of trust key ) + Caller IP Address + Timestamp + Interaction ID + Security ID (user ID from credentials, if available) Trust Signature = MD5(of all of the above items)
  22. 22. Rogue Services “ We know there are about 5 applications using our service” They thought wrong! 34 apps used the service. <ul><li>With Actional they: </li></ul><ul><li>Isolated the cause </li></ul><ul><li>Understood the impact </li></ul><ul><li>Prioritized business-critical requests </li></ul><ul><li>Upgraded without disruption </li></ul>“ We gave the WSDL to 5 groups, but we think they’ve given it out.” “ At some times of the day, the service gets slow – but we don’t know what’s causing it, and we don’t know who is impacted”
  23. 23. Business Policy Enforcement Actional Solution Actional actively enforces policies across the SOA Managed Environment Actional automatically adjusts to changes in the SOA
  24. 24. Making Active Policy Enforcement Possible <ul><li>Centralized creation and management of policies with distributed enforcement </li></ul>Policy Groups <ul><li>Policies can change independent of services </li></ul>Security and Compliance Officers
  25. 25. Root-Cause Analysis SOA Environment The Problem Middleware Is Blamed !
  26. 26. Root-Cause Analysis SOA Environment Actional Solution Transaction Flow Map
  27. 27. Root-Cause Analysis Actional Solution Path Explorer Drilldown DEMO Lets Go Back
  28. 28. The Value of SOA Management - Actional Continuous Service Optimization Tying the business and IT contexts together automatically By Infrastructure <ul><li>Which services are where? </li></ul><ul><li>Who uses what services? </li></ul><ul><li>Where are the bottlenecks? </li></ul><ul><li>Impact of change? </li></ul>By Business Criteria <ul><li>How is my business doing? </li></ul><ul><li>Are customers having issues? </li></ul><ul><li>Am I keeping up with demand? </li></ul><ul><li>Am I meeting my commitments? </li></ul>By Business Process <ul><li>What really occurs in ordering? </li></ul><ul><li>How many are in production? </li></ul><ul><li>How long from order to delivery? </li></ul><ul><li>Why has purchasing stalled? </li></ul>
  29. 29. Policy-Driven Security The Problem Security Service Logic Security Service Logic Security Service Logic Authorization Authentication Credential types Encryption Digital signatures Authorization Authentication Credential types Encryption Digital signatures Service Consumers
  30. 30. Policy-Driven Security Actional Solution Actional Policy-driven Security Security Security Security Service Logic Service Logic Service Logic Last-Mile Security Global security policy Project security policy Authorization Authentication Credential types Encryption Digital signatures Service Consumers Security Specialist
  31. 31. Governance Interoperability for Actional Leverage service contracts and approved service catalog Discover services, consumers, and use patterns to report back to registry SOA Operations Continuous Service Optimization Active Policy Enforcement Lifecycle policy enforcement SOA GOVERNANCE
  32. 32. Why Actional? “ &quot;Actional's Web services management platform delivers a comprehensive solution to the unique application management challenges commonly faced in enterprises. This combined solution will help customers to rapidly deploy Web services and immediately capitalize on the benefits across their enterprise.&quot; Dan Lewin, Vice President .NET Business Development at Microsoft Only Actional can automatically detect and control unregistered services Only Actional can provide policy driven security and secure the last mile Only Actional can analyze the root cause of any policy violation, not just IT exceptions Only Actional can apply policy by content, business process, or business criteria, vastly simplifying the alignment of IT with business ROGUE SERVICE CONTROL POLICY DRIVEN SECURITY ROOT-CAUSE ANALYSIS BUSINESS POLICY ENFORCEMENT
  33. 33. Actional SOA Management <ul><li>SOA Operations performance monitoring and alerting, dependency mapping and root cause analysis </li></ul><ul><li>Continuous Service Optimization business insight for decision support and runtime control of business outcomes </li></ul><ul><li>Active Policy Enforcement central creation and management of policies for SOA security and compliance </li></ul>
  34. 34. Summary <ul><li>SOA operations ensures the performance and availability of the end-to-end SOA production environment </li></ul><ul><li>Continuous Service Optimization enables visibility and dynamic optimization of the SOA from a business context </li></ul><ul><li>Active policy enforcement ensures compliance with security and regulatory policies while reducing costs </li></ul>CONTINUOUS SERVICE OPTIMIZATION ACTIVE POLICY ENFORCEMENT SOA OPERATIONS