Star Jedi font downloaded from

Transcription

1 Star Jedi font downloaded from 1

2 2

3 3

4 4

5 5

6 Enhanced Networking = higher packet per second (PPS) performance, lower network jitter, lower latencies Enabled by default on Windows Server 2012 R2 AMI s 6

7 Changes to Esri s ArcGIS Server Cloud Builder warranted the move from EC2-Classic to VPC VPC = Virtual Private Cloud. Logically isolated section of AWS cloud; more control over networking environment 7

8 Network ACL = Network Access Control List Acts like a firewall; provides interface to control incoming and outgoing traffic We had some initial difficulty getting the Network ACL rules right Windows Updates would not install Issues with map services registered with ArcGIS Online: Data access / drawing on the map Configuring layer searches within Web Map settings 8

9 Following the Network ACL documentation, opened a wider range of ports for the Network ACL 9

10 Final Network ACL rules: Web (80, 443) from anywhere Remote Desktop from City of Novi / City Hall ArcGIS Server traffic (6080/6443) inside subnet Ephemeral port ranges (different in / out) ArcGIS License Manager ( ) from City of Novi / City Hall 10

11 Wanted to use secure HTTPS services in updated web apps Acquire an SSL certificate Configure SSL settings on AGS Server, Elastic Load Balancer Encountered a few issues: HTTP Protocol settings were reverting back to HTTP only following a server restart Unable to store credentials to for secure services in ArcGIS Online 11

12 Did not upload an SSL certificate through CloudBuilder when the site was created (not yet acquired) SSL configuration for ArcGIS Server done in three steps Import certificate into ArcGIS Server. Once successful Edit machine properties to use the imported certificate. Update the security information for the site to use HTTP and HTTPS - or HTTPS only 12

13 Did not upload an SSL certificate through CloudBuilder when the site was created (not yet acquired) After purchasing the SSL certificate, ArcGIS Server and the ELB needed to be configured and updated AWS > edit ELB Listeners to add a listener for HTTPS Choose to upload an SSL certificate to AWS for use on ELB s 13

14 Did not upload an SSL certificate through CloudBuilder when the site was created AWS > edit ELB listeners to add HTTPS Choose to upload a new SSL certificate to AWS for use on ELB s Left the Certificate Chain section blank (in my defense, it says Optional) 14

15 Everything appeared to be OK with the SSL until we tried registering the services with ArcGIS Online Enter a URL for a secure (https) service > option to save the credentials for the service was not available Not there AT ALL Would have prompted for service credentials each time a map is loaded would not work for public-facing applications 15

16 Research > found blog post from SSP Innovations Referenced incomplete certificate chain, inability to store credentials when registering services in ArcGIS Online Tried process again, this time adding the Certificate Chain information Tested > Worked! 16

17 Takeaway: If you want to use an SSL certificate on your ELB, the Certificate Chain parameter is not optional! 17

18 Registering HTTPS services in ArcGIS Online, noticed issues with services not being available Publishing services > registering in ArcGIS Online using https endpoint > services would not be available following a server restart Troubleshooting > determined that HTTP protocol settings in AGS Server reverting to HTTP Only following server restart Worked with Esri support and discovered that this is/was a bug in the AMI s Checked 4/25/16 > Version Fixed is still N/A, interested to hear if users who have upgraded to 10.4 are experiencing the same issues 18

19 Production data stored in Novi s internal ArcGIS Server / ArcSDE Environment Using 1-way geodatabase replication to transfer data changes from the internal geodatabase to the geodatabase (SQL Express) in AWS A second one-way replication transfers data from SQL Express to a file geodatabase This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) ArcGIS Server services (HTTPS) are registered with ArcGIS Online Applications configured using ArcGIS Online / Web AppBuilder, shared with public Links to applications placed on Novi s Map Gallery page on City web site 19

20 Steps we complete on the Amazon Cloud: 1. Copy standalone feature classes or sync enterprise geodatabase 2. Custom print services with the City s templates 3. Generate cache for aerials 4. Set up address locator with Novi s data All of these content elements become web services accessible through the REST endpoint and registered with ArcGIS Online. 20

21 Migrated existing caches from original Amazon Cloud server to new server Only needed to produce a cache for 2015 imagery MrSID images copied directly to cloud Utilized original ArcMap documents to re-create new map services Preserved symbology, labels, scale thresholds, etc. New services include March Board of Review Residential Sales, Trash Hauling Inventory, 2015 imagery A few data sources are in a file geodatabase as they are only updated once per year Additional services include GeoData service and a custom print service 21

22 In order to publish a new interactive mapping website, we first laid the foundation of a new Amazon Cloud instance, set up security, and published web services. The secure web services were registered with the City of Novi s ArcGIS Online for Organization account. 22

23 23

24 Use fields as the pop-up title Configure attributes: Enter field name alias Change number formatting: decimal places & 1000 separator Build custom pop-up Font size, style - WYSIWYG Create link to online BS&A information to pass parcel number to Access My Gov 24

25 Branding only available on some templates such as Launchpad, Foldable, or Tab theme Preview on other screen sizes 25

26 Configured in ArcGIS Online Organizational account 26

27 27

28 28

29 29

30 30

31 31