This presentation offers a solution for an enterprise company to modernize their IT operation in this cloud era.

1. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Migrate Oracle WebLogic Applications
onto a Containerized Cloud Data
Center
Jingnan (Jing) Zhou
Technical Director
Oracle Consulting
Confidential – Oracle Internal/Restricted/Highly Restricted
Rob Tanner
Northern Trust Company
Division Manager - Middleware

2. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for
information purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied upon
in making purchasing decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion of Oracle.
Confidential – Oracle Internal/Restricted/Highly Restricted 2

3. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Why Docker?
Our Goals and Challenges
Modern DevOps Model
Migration Path
Demo
1
2
3
4
5
Confidential – Oracle Internal/Restricted/Highly Restricted 3

4. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 4
Founded in 1889, Northern Trust is a global leader in asset servicing, asset management,
and banking for personal and institutional clients
About Us
Wealth
Management
Leading advisor to
the affluent market
■ Individuals
■ Families
■ Family offices
■ Foundations
■ Endowments
■ Privately held
businesses
Corporate &
Institutional Services
Global provider of
investment services for
institutional investors
■ Pensions
■ Sovereign entities
■ Fund managers
■ Foundations &
endowments
■ Insurance companies
Banking
$120 billion
in assets
Asset
Servicing
$6.2 trillion
in AUC
Asset
Management
$946 billion
in AUM

5. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 5
Software Defined Data Center Strategy
Agility Reliability &
Stability
Security Performance &
Experience
Lower TCO
Run IT as a Business
Guiding Principles
Strategic Initiatives
Converged
Platforms
Converged
Teams
Software-
Defined X
Increased
Automation
Cognitive
Infrastructure

6. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Greenfield microservice apps are great...but what
do I do with the remainder of my applications?
Confidential – Oracle Internal/Restricted/Highly Restricted 6

7. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 7
Why Traditional Apps in Docker?
Infrastructure &
Developer Efficiency
Foundation for Hybrid
Cloud
Improved
Security

8. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 8
Faster Deployments with Less Infrastructure
4x Faster Deployments
With 2x Improved Infrastructure
Utilization
Without
Docker
29 days
With
Docker
7 days

9. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Improved Security
• Limited Attack Surface
• Understood and Scanned App BoM - Security Scanning
• Automated patching in build process
• TLS signed images at every stage of build - Docker Notary
• 3rd Party IPS/IDS
Confidential – Oracle Internal/Restricted/Highly Restricted 9

10. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 10
Docker EE provides a single pane of glass for all workloads...including Windows / Linux
heterogeneous stacks
Single Pane of Glass
host host host host host
ASP.NET
web API
WebLogic
front-end
Docker EE
app
Stack

11. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Our Goals
• Lift and Shift as much as possible
– More like Upgrade, Lift and Shift
• Utilize Single Base Image
– Patching efficiency
• Utilize Domains
• Utilize Docker Swarm
• Dynamic Scheduling and Scaling
Confidential – Oracle Internal/Restricted/Highly Restricted 11

12. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Our Challenges
• Ephemeral Containers
– WebLogic traditionally static IP addresses
• Restart or scale admin or managed server
• No more WebLogic Proxy plugin
• Multiple networks presented at container startup with mesh
– Each WebLogic instance could start with different IP/subnet (random)
• Logging
– Many different logs (Access, nohup, app specific, etc.)
Confidential – Oracle Internal/Restricted/Highly Restricted 12

13. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Who am I
• Jingnan (Jing) Zhou, Hands-on Technical Director, Oracle consulting
• Two decades of solution delivery for many Oracle customers
• 50% experience is development
• 50% experience is IT operations
• My unique experience allows me to work on both development and
operations pain points together
Confidential – Oracle Internal/Restricted/Highly Restricted 13

14. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Traditional IT Operational Model
Confidential – Oracle Internal/Restricted/Highly Restricted 14
Computer Infrastructure
System Admin
• Provision bare-metal or virtual machine
• Network services
• System support
Platform Admin
• Provision app environments
• Deploy app
• Monitor app
• All environments
Developer
• Application Developments
• Dev environments
Applications
Application Platforms

15. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Common Challenges
• Applications
• Developer code often works on one environment, fails on other environments because the
environments are not identical
• Production Support
• Both developer and platform administrator often feel helpless when production has performance or
stability issues because developer does not know platform environment and platform administrator
does not have application knowledge
• Product Patch and Upgrade
• Platform administrator often repeats patch or upgrade for tens or hundreds times because the
environments are different
• Environment Provision
• Due to complex approval or change request (CR) process, it takes long time for system administrator
and platform administrator to provision a new environment
Confidential – Oracle Internal/Restricted/Highly Restricted 15

16. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Causes?
Confidential – Oracle Internal/Restricted/Highly Restricted 16
Application Archive
(J2EE EAR/WAR)
built By Developer
Java
Virtual Machine
Supported by
Platform Administrator
Server
Operating System
Supported by
System Administrator
Due to the dependency,
Every one can see the trees, but no one can see the forest !

17. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Solutions: Remove Dependency!
Confidential – Oracle Internal/Restricted/Highly Restricted 17
Single Stack
Docker OS
Developer is the best
candidate to build and
own a container
Container
The most complex problem can be solved by the simplest solution!

18. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Solutions: Build Once, Run Everywhere
Confidential – Oracle Internal/Restricted/Highly Restricted 18
Container Orchestration
IaaS (Bare-metal, VM)
Software Defined Network
Computer Resource
Consumer
Dynamic Computer
Resource distributer
Static Computer
Resource Supplier
Container

19. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Modern DevOps Model
Confidential – Oracle Internal/Restricted/Highly Restricted 19
Container Orchestration
IaaS (Bare-metal, VM)
CI/CD
Developer
DevOps Admin
System Admin
Software Defined Network

20. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Business Benefits
Confidential – Oracle Internal/Restricted/Highly Restricted 20
Agility &
Innovation
Reliability &
Stability
Performance &
Experience
Lower TCO
• Development team is enabled to work with business teams on business agility and innovation
• Development team is fully empowered to maintain quality of their applications
• Operations team can significantly reduce time to provision a new environment from weeks to minutes
• Operations team can significantly reduce operational cost for applying regular security patches from weeks to
hours
• Operations team can significantly increase computer resource utilization
• Containerized application is auto scalable
• Application performance is predictable
• Containerized application is resilient via container orchestration

21. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Migration Path to DevOps Model
• The most critical step: migrate existing applications
– Guiding principle: Lift and Shift as much as possible
– Solutions for WebLogic applications
• Each application has its own domain
• Each WebLogic server has its own dedicated container
• Each domain has at least two servers
– A singleton admin server with shared storage for failover
– 1+ immutable and disposable managed servers
– Admin server manages J2EE resources for managed servers
– Container orchestration manage WebLogic server life cycle as well as scalability and failover
Confidential – Oracle Internal/Restricted/Highly Restricted 21

22. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Containerizing Application Steps
Confidential – Oracle Internal/Restricted/Highly Restricted 22
Application image
by developer
WebLogic base image
by DevOps admin
OS base image
by system admin

23. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Migrate WebLogic to Containerized Platform
Confidential – Oracle Internal/Restricted/Highly Restricted 23
config.xml
Admin Server
OS Sandboxed
(Docker)
System
Platform
Container
Orchestration
Containerized
Applications
DevOps Admin
System Admin
Developer
Software-Defined
Network
Managed Servers

24. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Demo Environments
Confidential – Oracle Internal/Restricted/Highly Restricted 24
Manager Worker1 Worker2
Infrastructure
(3 virtual boxes)
Container Orchestration
(Docker Swarm)
WebLogic
(12.2.1.2. & 12.2.1.3
config.xml
Private Docker
Registry
Overlay Network

25. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Demo Use Cases and Value Proposition
Confidential – Oracle Internal/Restricted/Highly Restricted 25
Fast WebLogic Upgrade
(12.2.1.2->12.2.1.3)
Easy Scale out
(1 ->2 managed servers)
Automatic Failover
( container or VM fails)
NTAC:3NS-20
Reliability &
Stability
Performance &
Experience
Lower TCO

26. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Q&A
Confidential – Oracle Internal/Restricted/Highly Restricted 26NTAC:3NS-20

27. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Log types
Types of logging
• For type I (stdout/stderr)
– will be through docker syslog driver and to ELK
• For type II ( local files written inside container)
– File beat with ( for example say weblogic is writing files to /log directory) /log/*
pattern and pumped to ELK
NTAC:3NS-20