SOA Governance Strategies 
Subash Chaturanga 
Lead, WSO2 Governance Registry
2 
Subash Chaturanga 
Senior Software Engineer 
! 
•Works with the Platform Technologies team 
and focuses on WSO2 Governance Registry. 
•Committer of the Apache Software 
Foundation
3 
About WSO2 
๏ Global enterprise, founded in 
2005 by acknowledged leaders 
in XML, web services 
technologies, standards and 
open source 
๏ Provides only open source 
platform-as-a-service for private, 
public and hybrid cloud 
deployments 
๏ All WSO2 products are 100% open 
source and released under the 
Apache License Version 2.0. 
๏ Is an Active Member of OASIS, 
Cloud Security Alliance, OSGi 
Alliance, AMQP Working Group, 
OpenID Foundation and W3C. 
๏ Driven by Innovation 
๏ Launched first open source 
API Management solution in 
2012 
๏ Launched App Factory in 2Q 
2013 
๏ Launched Enterprise Store 
and first open source Mobile 
solution in 4Q 2013
4 
What WSO2 delivers
5 
What We’ll Learn Today 
• SOA governance principles 
• What are governance strategies ? 
• How WSO2 platform is built to easily achieve 
various governance strategies. 
• How to Build governance strategies on WSO2 
platform.
6 
The WSO2 Platform and how 
Governance Registry is 
positioned
7 
SOA Governance Principles 
• Assist in the prioritisation and decision-making 
for the design, deployment, and execution of a 
governance policy. 
• Promote the alignment of business and IT 
• Conform the organisation’s governance 
• Coordinate provider and consumer 
• Governance stakeholders should be 
identified and define responsibilities. 
• Tailor the defined governance process
7 
SOA Governance Principles 
• Concrete SOA principles would ensure 
• Service re-use 
• Proper Service Description 
• Harvesting existing services 
• Monitoring services 
• Secure services 
• Policy enforcement to services 
• Comply the enterprise architecture ensures 
the long term organisation goals.
7 
What are SOA Governance 
strategies ? 
• The strategies that ensure the defined enterprise 
governance principles. 
• In other words, different methodologies we use to 
build governance solutions to achieve governance 
principles.
8 
How WSO2 Platform is built for 
proper SOA governance
7 
How WSO2 Platform is built for 
proper SOA governance 
• WSO2 have a 20+ products that represents the 
entire SOA stack 
• Each product meant to serve a particular 
functionality. 
• Integration is the way to go.. 
• Provides loosely coupled integration and enhance 
maintainability and reliability.
7 
How WSO2 Platform is built for 
proper SOA governance 
• All WSO2 products keeps meta data in their embedded 
repository. 
• Embedded repository can be shared across cluster/s. 
• Federate metadata 
• Have pre built unified metadata models within WSO2. 
• Once integrated, a service update in App Factory will on 
the fly affected on G-Reg, Api Manager etc.
7 
How WSO2 Platform is built for 
proper SOA governance 
• No web service calls in-between integrated services. 
• Everything happens through JDBC federated 
metadata repository. 
• Caching/Indexing implemented for better 
performance
7 
How WSO2 Platform is built for 
proper SOA governance 
• Metadata Federation - Shared Configuration
7 
How WSO2 Platform is built for 
proper SOA governance 
• Metadata Federation - Shared Governance
7 
How WSO2 Platform is built for 
proper SOA governance 
• Metadata Federation - Hybrid Model
7 
How to build Governance 
Strategies with WSO2 platform 
• Two major SOA Governance types; 
• Design time 
• Runtime
7 
How to build Governance 
Strategies with WSO2 platform 
• Design Time Governance 
• Primarily supported by WSO2 App Factory 
and WSO2 Governance Registry
7 
How to build Governance 
Strategies with WSO2 platform 
• WSO2 App Factory(AF) for design time governance 
• WSO2 AF, will enable multiple project teams to 
collaboratively create, run and manage enterprise 
applications. 
• More focused on the DevOps aspect of the 
evolution of a selected set of application types. 
• Pre defined application lifecycle management. 
• Can develop, test, deploy to production and retire 
applications with a single click. 
!
7 
How to build Governance 
Strategies with WSO2 platform 
• WSO2 Governance Registry 
• Is the core governance and repository product 
• Has a complete design time governance platform 
• Can be customised to any governance 
requirement with its various extension points. 
• Very flexible and customisable lifecycle 
management. 
• Eventing/Notification/Subscriptions 
• Has variety of connectors to outside as 
APIs(WS/Atom/REST) 
• Easily integrated in to WSO2 AS, AM, IS, ESB, 
ES, BAM, CEP.
7 
How to build Governance 
Strategies with WSO2 platform 
Lifecycle Management 
• WSO2 Governance Registry has an extensible 
architecture to support LCM. 
• The default LCM allows users to promote, demote 
lifecycle states of a given resource. Furthermore, it 
can be configured to use checklists as well. 
• Users can develop their own lifecycle through 
simple configuration. 
– Custom states, Check Lists, Validators 
– Scripting support
7 
How to build Governance 
Strategies with WSO2 platform 
Lifecycle Management Cont..
7 
How to build Governance 
Strategies with WSO2 platform 
Lifecycle Management Cont.. 
– Lifecycle Operation Validators 
– Lifecycle Transition Executors 
– Lifecycle Transition User Interfaces 
– Lifecycle Transition Scripts 
– Lifecycle Approvals
7 
How to build Governance 
Strategies with WSO2 platform 
Searching.. 
• Tag Search 
– Can search only the resources that contain the tag 
you are searching. 
! 
• Advanced Search 
– Search using resource name, created date range, 
updated date range, tags, comments, property name, 
property value. 
! 
• Content Search 
– Using Apache Lucene and Apache Solr
7 
How to build Governance 
Strategies with WSO2 platform 
Searching Cont… 
• Activities Search 
– Can filter and read activities that were done on the 
resource repository.
7 
How to build Governance 
Strategies with WSO2 platform 
• Runtime Governance 
• Can be achieved using as a combination 
of either WSO2 G-Reg or set of 
products in conjunction with WSO2 G-Reg. 
• Examples; 
• G-Reg and API Manager 
• G-Reg and BAM 
• G-Reg and CEP
7 
How to build Governance 
Strategies with WSO2 platform 
• G-Reg and API Manager 
• A properly evolved service in G-Reg under 
a development lifecycle can be normalised 
in to an API in the API Manager.
7 
How to build Governance 
Strategies with WSO2 platform 
• G-Reg and AS. 
• Service Discovery 
• G-Reg operates as a WS-Discovery proxy 
and store discovered services and associated 
metadata with any WS-Discovery compliant 
web services server.
7 
How to build Governance 
Strategies with WSO2 platform 
• G-Reg and AS continued … 
• WSO2 App Server View 
• WSO2 G-Reg view
7 
How to build Governance 
Strategies with WSO2 platform 
• G-Reg and BAM .. (Monitoring) 
• Publish registry operations to BAM 
Cassandra and BAM dashboards reads 
analysed data.
7 
How to build Governance 
Strategies with WSO2 platform 
• Policy Enforcement with Complex Event Processing Server 
• There will be SLA/policy defined and stored in G-Reg. 
• App Server will publish service consumer stats to CEP. 
• CEP will listen to runtime traffic of AS and take real 
time decisions based on SLA.
7 
How to build Governance 
Strategies with WSO2 platform 
• WSO2 ESB and G-Reg 
• WSO2 G-Reg have first class support for ESB asset 
models 
• Proxy services/Sequences/Endpoints 
• No need to share DB 
• Once simply integrated to ESB, G-Reg will populate 
governance meta models for ESB proxy services/ 
sequences/endpoints and build associations in 
between. 
• Very useful for impact analysis
7 
WSO2 Enterprise Store 
• WSO2 ES will be the universal asset store for WSO2 
platform. 
• Various WSO2 Meta models will be shared across 
integrated platform and WSO2 ES will be the one stop 
place for everything. 
• G-Reg will comes with embedded store where it enables 
WSO2 platform to have API store as well as a Service 
store. 
• Ensure the service/api provider and consumer relationship. 
• Enables service/api reusability. 
• Custom user interfaces for store view. 
• Lifecycle management @store
66 
QUESTIONS ?
5 
Business Model
Contact us !

SOA Governance Strategies

  • 1.
    SOA Governance Strategies Subash Chaturanga Lead, WSO2 Governance Registry
  • 2.
    2 Subash Chaturanga Senior Software Engineer ! •Works with the Platform Technologies team and focuses on WSO2 Governance Registry. •Committer of the Apache Software Foundation
  • 3.
    3 About WSO2 ๏ Global enterprise, founded in 2005 by acknowledged leaders in XML, web services technologies, standards and open source ๏ Provides only open source platform-as-a-service for private, public and hybrid cloud deployments ๏ All WSO2 products are 100% open source and released under the Apache License Version 2.0. ๏ Is an Active Member of OASIS, Cloud Security Alliance, OSGi Alliance, AMQP Working Group, OpenID Foundation and W3C. ๏ Driven by Innovation ๏ Launched first open source API Management solution in 2012 ๏ Launched App Factory in 2Q 2013 ๏ Launched Enterprise Store and first open source Mobile solution in 4Q 2013
  • 4.
    4 What WSO2delivers
  • 5.
    5 What We’llLearn Today • SOA governance principles • What are governance strategies ? • How WSO2 platform is built to easily achieve various governance strategies. • How to Build governance strategies on WSO2 platform.
  • 6.
    6 The WSO2Platform and how Governance Registry is positioned
  • 7.
    7 SOA GovernancePrinciples • Assist in the prioritisation and decision-making for the design, deployment, and execution of a governance policy. • Promote the alignment of business and IT • Conform the organisation’s governance • Coordinate provider and consumer • Governance stakeholders should be identified and define responsibilities. • Tailor the defined governance process
  • 8.
    7 SOA GovernancePrinciples • Concrete SOA principles would ensure • Service re-use • Proper Service Description • Harvesting existing services • Monitoring services • Secure services • Policy enforcement to services • Comply the enterprise architecture ensures the long term organisation goals.
  • 9.
    7 What areSOA Governance strategies ? • The strategies that ensure the defined enterprise governance principles. • In other words, different methodologies we use to build governance solutions to achieve governance principles.
  • 10.
    8 How WSO2Platform is built for proper SOA governance
  • 11.
    7 How WSO2Platform is built for proper SOA governance • WSO2 have a 20+ products that represents the entire SOA stack • Each product meant to serve a particular functionality. • Integration is the way to go.. • Provides loosely coupled integration and enhance maintainability and reliability.
  • 12.
    7 How WSO2Platform is built for proper SOA governance • All WSO2 products keeps meta data in their embedded repository. • Embedded repository can be shared across cluster/s. • Federate metadata • Have pre built unified metadata models within WSO2. • Once integrated, a service update in App Factory will on the fly affected on G-Reg, Api Manager etc.
  • 13.
    7 How WSO2Platform is built for proper SOA governance • No web service calls in-between integrated services. • Everything happens through JDBC federated metadata repository. • Caching/Indexing implemented for better performance
  • 14.
    7 How WSO2Platform is built for proper SOA governance • Metadata Federation - Shared Configuration
  • 15.
    7 How WSO2Platform is built for proper SOA governance • Metadata Federation - Shared Governance
  • 16.
    7 How WSO2Platform is built for proper SOA governance • Metadata Federation - Hybrid Model
  • 17.
    7 How tobuild Governance Strategies with WSO2 platform • Two major SOA Governance types; • Design time • Runtime
  • 18.
    7 How tobuild Governance Strategies with WSO2 platform • Design Time Governance • Primarily supported by WSO2 App Factory and WSO2 Governance Registry
  • 19.
    7 How tobuild Governance Strategies with WSO2 platform • WSO2 App Factory(AF) for design time governance • WSO2 AF, will enable multiple project teams to collaboratively create, run and manage enterprise applications. • More focused on the DevOps aspect of the evolution of a selected set of application types. • Pre defined application lifecycle management. • Can develop, test, deploy to production and retire applications with a single click. !
  • 20.
    7 How tobuild Governance Strategies with WSO2 platform • WSO2 Governance Registry • Is the core governance and repository product • Has a complete design time governance platform • Can be customised to any governance requirement with its various extension points. • Very flexible and customisable lifecycle management. • Eventing/Notification/Subscriptions • Has variety of connectors to outside as APIs(WS/Atom/REST) • Easily integrated in to WSO2 AS, AM, IS, ESB, ES, BAM, CEP.
  • 21.
    7 How tobuild Governance Strategies with WSO2 platform Lifecycle Management • WSO2 Governance Registry has an extensible architecture to support LCM. • The default LCM allows users to promote, demote lifecycle states of a given resource. Furthermore, it can be configured to use checklists as well. • Users can develop their own lifecycle through simple configuration. – Custom states, Check Lists, Validators – Scripting support
  • 22.
    7 How tobuild Governance Strategies with WSO2 platform Lifecycle Management Cont..
  • 23.
    7 How tobuild Governance Strategies with WSO2 platform Lifecycle Management Cont.. – Lifecycle Operation Validators – Lifecycle Transition Executors – Lifecycle Transition User Interfaces – Lifecycle Transition Scripts – Lifecycle Approvals
  • 24.
    7 How tobuild Governance Strategies with WSO2 platform Searching.. • Tag Search – Can search only the resources that contain the tag you are searching. ! • Advanced Search – Search using resource name, created date range, updated date range, tags, comments, property name, property value. ! • Content Search – Using Apache Lucene and Apache Solr
  • 25.
    7 How tobuild Governance Strategies with WSO2 platform Searching Cont… • Activities Search – Can filter and read activities that were done on the resource repository.
  • 26.
    7 How tobuild Governance Strategies with WSO2 platform • Runtime Governance • Can be achieved using as a combination of either WSO2 G-Reg or set of products in conjunction with WSO2 G-Reg. • Examples; • G-Reg and API Manager • G-Reg and BAM • G-Reg and CEP
  • 27.
    7 How tobuild Governance Strategies with WSO2 platform • G-Reg and API Manager • A properly evolved service in G-Reg under a development lifecycle can be normalised in to an API in the API Manager.
  • 28.
    7 How tobuild Governance Strategies with WSO2 platform • G-Reg and AS. • Service Discovery • G-Reg operates as a WS-Discovery proxy and store discovered services and associated metadata with any WS-Discovery compliant web services server.
  • 29.
    7 How tobuild Governance Strategies with WSO2 platform • G-Reg and AS continued … • WSO2 App Server View • WSO2 G-Reg view
  • 30.
    7 How tobuild Governance Strategies with WSO2 platform • G-Reg and BAM .. (Monitoring) • Publish registry operations to BAM Cassandra and BAM dashboards reads analysed data.
  • 31.
    7 How tobuild Governance Strategies with WSO2 platform • Policy Enforcement with Complex Event Processing Server • There will be SLA/policy defined and stored in G-Reg. • App Server will publish service consumer stats to CEP. • CEP will listen to runtime traffic of AS and take real time decisions based on SLA.
  • 32.
    7 How tobuild Governance Strategies with WSO2 platform • WSO2 ESB and G-Reg • WSO2 G-Reg have first class support for ESB asset models • Proxy services/Sequences/Endpoints • No need to share DB • Once simply integrated to ESB, G-Reg will populate governance meta models for ESB proxy services/ sequences/endpoints and build associations in between. • Very useful for impact analysis
  • 33.
    7 WSO2 EnterpriseStore • WSO2 ES will be the universal asset store for WSO2 platform. • Various WSO2 Meta models will be shared across integrated platform and WSO2 ES will be the one stop place for everything. • G-Reg will comes with embedded store where it enables WSO2 platform to have API store as well as a Service store. • Ensure the service/api provider and consumer relationship. • Enables service/api reusability. • Custom user interfaces for store view. • Lifecycle management @store
  • 34.
  • 35.
  • 36.