Implementing Interoperable SOA in Your Enterprise

Size: px

Start display at page:

Download "Implementing Interoperable SOA in Your Enterprise"

Naomi Stanley
6 years ago
Views:

1 TS-8882 Implementing Interoperable SOA in Your Enterprise Kevin Wittkopf Solutions Architect Microsoft Mohammad Akif Senior Architect Microsoft JavaOne SM Conference Session TS-8882

2 Learn strategies for designing and building a hybrid SOA in your enterprise that spans Java technology and.net 2007 JavaOne SM Conference Session TS

3 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

4 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

5 Java Technology/.NET Interoperability Current Scenarios.NET clients interacting with Java Platform, Enterprise Edition (Java EE platform) Server/Services.NET thick client (Winforms, Windows Presentation Foundation) Sharepoint portal apps Microsoft Office clients (Outlook, Word, Excel).NET and Java EE platform sharing resources Database, message queue, EAI Server-to-server interactions EAI Java EE platform and.net Enterprise apps integration SOA Java EE platform and.net Services orchestration.net client invoking Java desktop applications Mixed UI Swing/SWT + WinForms/WPF, etc. Java desktop applications invoking.net 2007 JavaOne SM Conference Session TS

6 Java Technology/.NET Interoperability SOA The Emerging Scenario Service Oriented Architecture (SOA) Widespread move toward SOA Services implemented in both Java EE platform and.net Standards-based, platform neutral mechanisms to describe, deploy, aggregate, and orchestrate services to enable rapid and flexible creation of interoperable enterprise applications XML, XSD WSDL, SOAP, WS-* standards Wrap various data and process IP assets to use within SOA.NET and Java EE platform services most common SOA Platforms (Services, Orchestration, Messaging, etc.): Java Business Integration (JBI)/Java Specification Request (JSR)- 208 SeeBeyond, ServiceMix, etc. WCF+Windows/IIS/COM+/BizTalk/etc JavaOne SM Conference Session TS

7 Interoperability Dimensions SOA Requirements Exchanging data (call, return) Serialization wire format Description types, structure Security integrity and confidentiality Procedural invoking (remote) functions Function description contract (name/parameters) Service, message, data Invocation Where/how address, binding (transport, policy) Calling patterns synch/async, one-way, duplex, etc Security authentication and authorization Performance large payloads, binary data Dynamic location, transport type, etc Reliability durable, once and only once delivery Transacted two-phase commit across orchestration 2007 JavaOne SM Conference Session TS

8 Exchanging Data Data integrity and confidentiality Integrity Non-repudiation ensure that it has not been changed Digitally signed Confidentiality Encrypted symmetric, asymmetric Different encryption algorithms (AES128/256, SHA1, etc.) Approaches Transport-level (e.g. HTTPS, SSL/TLS) point-to-point Message-based (payload signed/encrypted) Security tokens Identity username/password, Kerberos, X.509, SAML 2007 JavaOne SM Conference Session TS

9 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

10 SOA Core Tenants Boundaries are explicit Developers opt-in to consuming, exposing, and defining public-facing service façade Services are autonomous Services and consumers are independently versioned, deployed, operated, and secured Share schema and contract, not class Compatibility based on policy Data never includes behavior; Objects with data and behavior are a local phenomenon Capabilities and requirements represented by a unique public name; Used to establish service suitability 2007 JavaOne SM Conference Session TS

11 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

12 2007 JavaOne SM Conference Session TS

13 2007 JavaOne SM Conference Session TS

14 2007 JavaOne SM Conference Session TS

15 2007 JavaOne SM Conference Session TS

16 What is an ESB? 2007 JavaOne SM Conference Session TS

17 Hello handsome JavaOne SM Conference Session TS

18 Complex Data Types Beyond the Hello World example Presentation Tier Business Tier Resource Tier Client Full Name Company JSPs Name Servlets Address Swing/AWT Hello World Work Tel Daniel Ingitaraj Microsoft POJOs Database Microsoft EJBs Corp (India) Pvt Ltd Prestige Takt 23 Kasturba Road Cross Bangalore Message Queue India Fax ASP.NET Serviced SmartClient Components Last Updated 4 Jan 2003, 11:23.37am Broker 2007 JavaOne SM Conference Session TS

19 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

20 Point to Point Interoperability XML Web Services Support in Microsoft products Microsoft.NET Framework Part of the framework ASP.NET ( ASMX ) Compliant with the WS-I Basic Profile 1.0/1.1 Create Web services in any.net language C#, C++, Visual Basic.NET, J#, COBOL, etc (28 in total) Microsoft Web Services Enhancements (WSE) Free add-on to ASMX capabilities Adds WS-Security, WS-SecureConversation, WS-Trust, WS-Policy, WS-Addressing Versions: 2.0 SP3 and 3.0 Windows Communications Foundation (WCF, Indigo ) Next generation distributed computing Unified programming model, pluggable architecture, WS-*, SRT Part of.net 3.0 Frameworks (formerly WinFx) Windows Vista, XP and Win2003 server 2007 JavaOne SM Conference Session TS

21 Web Services Interoperability Web Services Interoperability Org. (WS-I) ISVs, SIs and enterprise customers Vertically lead enterprise customers Goal to deliver resources, samples and tools WS-I Basic Profiles Basic Profile 1.0: SOAP 1.1, WSDL 1.1, UDDI 2.0, XML 1.0, XSD 1.0 Basic Profile 1.1 now supported by WSE/WCF WS Basic Security Profile JavaOne SM Conference Session TS

22 Messaging WS-* Protocols Industry Adoption SOAP/WSDL MTOM Security WS-Security WS- SecureConv WS-Trust WS-Fed Assurances WS-RM WS-AT Devices WS-D DPWS Apache (WSO2) Apache (WSO2) Apache (WSO2) BEA Systems Inc. A Amazon BEA Systems Inc. A BEA Systems Inc. A Brother Industries BEA Systems Inc. Cape Clear Software Inc. Canon Inc. ebay Inc. Epson Corp. Fuji-Xerox Google gsoap HP IBM Corp. Intel Corp. Iona JBoss Inc. Microsoft Novell Oracle Ricoh Co. SAP Sun Microsystems, Inc. Xerox Corp. BMC (OpenNetwork) A A A Canon Inc. Cape Clear Software Inc. Computer Associates (Netegrity) A A gsoap IBM Corp. (DataPower) IONA Technologies JBoss Inc. Layer 7 Technologies Inc. A A Mercury (Systinet) Microsoft Nokia Novell A Oracle RSA Security Inc. Ping Identity Corp. A SAP Sonic Software Sun Microsystems, Inc. Tibco Software, Inc. Verisign Inc A A A WebMethods Inc. Choreology Ltd IBM Corp. IONA Technologies JBoss Inc. (Arjuna) Mercury (Systinet) Microsoft Oracle SAP Sonic Software Sun Microsystems Inc. Tibco Software, Inc. Canon Inc. Epson Corp. Exceptional Innovation Fuji-Xerox Co. gsoap HP Intel Corp. Lexmark International, Inc. A Microsoft Peerless Systems Corp. Schneider Electric SA Toshiba WebMethods Inc. A Xerox Corp. Released Product Public Interop A Co-Author 2007 JavaOne SM Conference Session TS

23 WS-* Protocols Industry Adoption (Cont.) Metadata MEX WS-P Apache (WSO2) UDDI BEA Systems Inc. Computer Associates A gsoap IBM Corp. JBoss Inc. Layer 7 Technologies Mercury (Systinet) Microsoft Novell Oracle SAP A Sun Microsystems, Inc. Sonic Software WebMethods Inc. A System Mgmt AMD Inc. WS-Man Computer Associates A Dell Inc. gsoap Intel Corp. Mercury (Systinet) A Microsoft Oracle SAP Sonic Software A Sun Microsystems, Inc. WEBM Solutions, Inc. A WS-XFer / Enum Microsoft Corporation. All rights reserved. The information contained in this document represents the current view at the time of publication and is subject to change. A Released Product Public Interop Co-Author 2007 JavaOne SM Conference Session TS

24 Provider Model in.net Controls Controls Login LoginStatus LoginView Other Login Controls Membership API Membership MembershipUser Membership Providers SqlMembershipProvider Other Membership Providers Membership Data SQL Server Other Data Stores 2007 JavaOne SM Conference Session TS

25 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

26 Reliable Messaging 2007 JavaOne SM Conference Session TS

27 Reliable Messaging Synchronous/asynchronous WS-Addressing support for endpoints, callbacks WSE and WCF both support WS-Addressing Reliable messaging WS-ReliableMessaging guaranteed, once only delivery WCF supports WS-RM 2007 JavaOne SM Conference Session TS

28 Point to Point Web Services Authentication Point-to-Point Authentication Model Symmetric or asymmetric signing/encryption Various identity tokens uname/passwd, kerberos, x.509 Problematic for SOA Authentication across pairs of services within orchestration Asymmetric operations expensive Heterogeneous services support different authentication methods Brokered Authentication Model Use common authentication across a group of applications (or services, in SOA) A commonly trusted 3rd party that issues interoperable tokens Security Token Service (STS) WS-Trust, WS-SecureConversation Tokens can be Kerberos, SAML, etc. WCF STS using SAML 1.1 tokens included with Windows (.NET 3.0) SDK WSE Quickstart SAML STS for WSE3 Federated Model WS-Federation 2007 JavaOne SM Conference Session TS

29 Brokered Authentication 2007 JavaOne SM Conference Session TS

30 Project Tango 2007 JavaOne SM Conference Session TS

31 Project Tango 2007 JavaOne SM Conference Session TS

32 DEMO Secure Reliable-Messaging between.net and JEE (Glassfish/WSIT) 2007 JavaOne SM Conference Session TS

33 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

34 Windows Communications Foundation WCF Service defined by ABC : Address where is the service? Binding how do I talk to the service? (transport, format, security) Contract what can the service do for me? (types, messages) Contract-based programming model Service contract, message contract, data contract Supports bindings Combinations of ABC for different requirements/constraints Predefined bindings, can create custom bindings Dynamic use different bindings with same service, for different environments, deployments, etc. Interoperable bindings: BasicHttpBinding WS Basic Profile 1.1 Customize other system bindings 2007 JavaOne SM Conference Session TS

Windows Communications Foundation Predefined bindings http://windowssdk.msdn.

35 Windows Communications Foundation Predefined bindings JavaOne SM Conference Session TS

36 Transactions Across Boundaries Transactions WS-AtomicTransactions demarcate transactions WS-Coordination flow transaction context WCF supports both of these protocols.net 3.0 includes a new System.Transactions namespace to support user-defined, distributed transactions across transactional resources (DTC-based) WCF WS-* protocols supported: WSDL 1.1, MTOM, WS-Policy, WS-PolicyAttachment WS-Security, WS-Addressing, WS-Trust/WS-SecureConversation WS-ReliableMessaging WS-AtomicTransactions, WS-Coordination JavaOne SM Conference Session TS

37 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

38 2007 JavaOne SM Conference Session TS

39 2007 JavaOne SM Conference Session TS

40 Remember me 2007 JavaOne SM Conference Session TS

41 2007 JavaOne SM Conference Session TS

42 2007 JavaOne SM Conference Session TS

43 Kewl! 2007 JavaOne SM Conference Session TS

44 2007 JavaOne SM Conference Session TS

45 2007 JavaOne SM Conference Session TS

46 2007 JavaOne SM Conference Session TS

47 2007 JavaOne SM Conference Session TS

48 Agenda Interoperability context and scenarios SOA tenants Challenges in realizing interoperable SOA Solution choices and strategies Key SOA features (discussion and demonstrations) Reliable messaging Propagating security credentials Production and consumption of services Transactional behaviour across platform and technology boundaries Key takeaways Next steps and resources Conclusion 2007 JavaOne SM Conference Session TS

49 2007 JavaOne SM Conference Session TS

50 2007 JavaOne SM Conference Session TS

51 Resources Mohammads Blog: WCF Interoperability and Integration: J+N Java technology and.net default.mspx 2007 JavaOne SM Conference Session TS

52 Q&A 2007 JavaOne SM Conference Session TS

53 TS-8882 Implementing Interoperable SOA in Your Enterprise Kevin Wittkopf Solutions Architect Microsoft Mohammad Akif Senior Architect Microsoft JavaOne SM Conference Session TS-8882

Web Services and the Devices Profile

Web Services and the Devices Profile Christopher Kurt Director, Connected Systems Strategy Microsoft Corporation christopher.kurt@microsoft.com What are Web Services? Software talking to Software Services