2. 2
Subash Chaturanga
Senior Software Engineer
!
•Works with the Platform Technologies team
and focuses on WSO2 Governance Registry.
•Committer of the Apache Software
Foundation
3. 3
About WSO2
๏ Global enterprise, founded in
2005 by acknowledged leaders
in XML, web services
technologies, standards and
open source
๏ Provides only open source
platform-as-a-service for private,
public and hybrid cloud
deployments
๏ All WSO2 products are 100% open
source and released under the
Apache License Version 2.0.
๏ Is an Active Member of OASIS,
Cloud Security Alliance, OSGi
Alliance, AMQP Working Group,
OpenID Foundation and W3C.
๏ Driven by Innovation
๏ Launched first open source
API Management solution in
2012
๏ Launched App Factory in 2Q
2013
๏ Launched Enterprise Store
and first open source Mobile
solution in 4Q 2013
5. 5
What We’ll Learn Today
• SOA governance principles
• What are governance strategies ?
• How WSO2 platform is built to easily achieve
various governance strategies.
• How to Build governance strategies on WSO2
platform.
6. 6
The WSO2 Platform and how
Governance Registry is
positioned
7. 7
SOA Governance Principles
• Assist in the prioritisation and decision-making
for the design, deployment, and execution of a
governance policy.
• Promote the alignment of business and IT
• Conform the organisation’s governance
• Coordinate provider and consumer
• Governance stakeholders should be
identified and define responsibilities.
• Tailor the defined governance process
8. 7
SOA Governance Principles
• Concrete SOA principles would ensure
• Service re-use
• Proper Service Description
• Harvesting existing services
• Monitoring services
• Secure services
• Policy enforcement to services
• Comply the enterprise architecture ensures
the long term organisation goals.
9. 7
What are SOA Governance
strategies ?
• The strategies that ensure the defined enterprise
governance principles.
• In other words, different methodologies we use to
build governance solutions to achieve governance
principles.
10. 8
How WSO2 Platform is built for
proper SOA governance
11. 7
How WSO2 Platform is built for
proper SOA governance
• WSO2 have a 20+ products that represents the
entire SOA stack
• Each product meant to serve a particular
functionality.
• Integration is the way to go..
• Provides loosely coupled integration and enhance
maintainability and reliability.
12. 7
How WSO2 Platform is built for
proper SOA governance
• All WSO2 products keeps meta data in their embedded
repository.
• Embedded repository can be shared across cluster/s.
• Federate metadata
• Have pre built unified metadata models within WSO2.
• Once integrated, a service update in App Factory will on
the fly affected on G-Reg, Api Manager etc.
13. 7
How WSO2 Platform is built for
proper SOA governance
• No web service calls in-between integrated services.
• Everything happens through JDBC federated
metadata repository.
• Caching/Indexing implemented for better
performance
14. 7
How WSO2 Platform is built for
proper SOA governance
• Metadata Federation - Shared Configuration
15. 7
How WSO2 Platform is built for
proper SOA governance
• Metadata Federation - Shared Governance
16. 7
How WSO2 Platform is built for
proper SOA governance
• Metadata Federation - Hybrid Model
17. 7
How to build Governance
Strategies with WSO2 platform
• Two major SOA Governance types;
• Design time
• Runtime
18. 7
How to build Governance
Strategies with WSO2 platform
• Design Time Governance
• Primarily supported by WSO2 App Factory
and WSO2 Governance Registry
19. 7
How to build Governance
Strategies with WSO2 platform
• WSO2 App Factory(AF) for design time governance
• WSO2 AF, will enable multiple project teams to
collaboratively create, run and manage enterprise
applications.
• More focused on the DevOps aspect of the
evolution of a selected set of application types.
• Pre defined application lifecycle management.
• Can develop, test, deploy to production and retire
applications with a single click.
!
20. 7
How to build Governance
Strategies with WSO2 platform
• WSO2 Governance Registry
• Is the core governance and repository product
• Has a complete design time governance platform
• Can be customised to any governance
requirement with its various extension points.
• Very flexible and customisable lifecycle
management.
• Eventing/Notification/Subscriptions
• Has variety of connectors to outside as
APIs(WS/Atom/REST)
• Easily integrated in to WSO2 AS, AM, IS, ESB,
ES, BAM, CEP.
21. 7
How to build Governance
Strategies with WSO2 platform
Lifecycle Management
• WSO2 Governance Registry has an extensible
architecture to support LCM.
• The default LCM allows users to promote, demote
lifecycle states of a given resource. Furthermore, it
can be configured to use checklists as well.
• Users can develop their own lifecycle through
simple configuration.
– Custom states, Check Lists, Validators
– Scripting support
22. 7
How to build Governance
Strategies with WSO2 platform
Lifecycle Management Cont..
23. 7
How to build Governance
Strategies with WSO2 platform
Lifecycle Management Cont..
– Lifecycle Operation Validators
– Lifecycle Transition Executors
– Lifecycle Transition User Interfaces
– Lifecycle Transition Scripts
– Lifecycle Approvals
24. 7
How to build Governance
Strategies with WSO2 platform
Searching..
• Tag Search
– Can search only the resources that contain the tag
you are searching.
!
• Advanced Search
– Search using resource name, created date range,
updated date range, tags, comments, property name,
property value.
!
• Content Search
– Using Apache Lucene and Apache Solr
25. 7
How to build Governance
Strategies with WSO2 platform
Searching Cont…
• Activities Search
– Can filter and read activities that were done on the
resource repository.
26. 7
How to build Governance
Strategies with WSO2 platform
• Runtime Governance
• Can be achieved using as a combination
of either WSO2 G-Reg or set of
products in conjunction with WSO2 G-Reg.
• Examples;
• G-Reg and API Manager
• G-Reg and BAM
• G-Reg and CEP
27. 7
How to build Governance
Strategies with WSO2 platform
• G-Reg and API Manager
• A properly evolved service in G-Reg under
a development lifecycle can be normalised
in to an API in the API Manager.
28. 7
How to build Governance
Strategies with WSO2 platform
• G-Reg and AS.
• Service Discovery
• G-Reg operates as a WS-Discovery proxy
and store discovered services and associated
metadata with any WS-Discovery compliant
web services server.
29. 7
How to build Governance
Strategies with WSO2 platform
• G-Reg and AS continued …
• WSO2 App Server View
• WSO2 G-Reg view
30. 7
How to build Governance
Strategies with WSO2 platform
• G-Reg and BAM .. (Monitoring)
• Publish registry operations to BAM
Cassandra and BAM dashboards reads
analysed data.
31. 7
How to build Governance
Strategies with WSO2 platform
• Policy Enforcement with Complex Event Processing Server
• There will be SLA/policy defined and stored in G-Reg.
• App Server will publish service consumer stats to CEP.
• CEP will listen to runtime traffic of AS and take real
time decisions based on SLA.
32. 7
How to build Governance
Strategies with WSO2 platform
• WSO2 ESB and G-Reg
• WSO2 G-Reg have first class support for ESB asset
models
• Proxy services/Sequences/Endpoints
• No need to share DB
• Once simply integrated to ESB, G-Reg will populate
governance meta models for ESB proxy services/
sequences/endpoints and build associations in
between.
• Very useful for impact analysis
33. 7
WSO2 Enterprise Store
• WSO2 ES will be the universal asset store for WSO2
platform.
• Various WSO2 Meta models will be shared across
integrated platform and WSO2 ES will be the one stop
place for everything.
• G-Reg will comes with embedded store where it enables
WSO2 platform to have API store as well as a Service
store.
• Ensure the service/api provider and consumer relationship.
• Enables service/api reusability.
• Custom user interfaces for store view.
• Lifecycle management @store