Introduction to ArcGIS Server Architecture and Services. Amr Wahba

Transcription

1 Introduction to ArcGIS Server Architecture and Services Amr Wahba awahba@esri.com

2 Agenda Architecture Features Publishing Security Cloud

3 Powerful GIS capabilities Delivered as Web services To help people solve real problems ArcGIS Server

4 ArcGIS for Server 10.1 Enhancing the Architecture and Adding Capabilities Improved Performance Easy Install/Admin Simple Service Creation Native 64 Bit Strong Linux Highly Scalable 5x Web Services REST SOAP OGC Find Addresses Clip &Ship Drive-time Polygons Editing Analysis 10x 50x Imagery Map Caching Queries GP Search Mapping Identify 2x GIS Server

5 Linux or Windows 64-bit only! No Post Install No DCOM Installation One user to run it Very quick one to manage it

6 ArcGIS for Server 10.1 Architecture ArcGIS Server 10.1 is a pure GIS Web Services Server. All communication for using and administering occurs via http GIS Servers live within an ArcGIS Site: a logical grouping of servers that simplifies administration ArcGIS Site ArcGIS Server User GIS Server Manager This is the user that can administer ArcGIS Server. Not a Windows/Linux use (unless you want to) ArcGIS Primary Site Administrator New web browser based management console. You do not need a separate web server to run this ArcGIS Server processes run under this user Server Directories & Configuration Store Two folders that store key information needed for your server to run. Make sure the ArcGIS Server user has Read/Write access and that folders can be accessed from all GIS Servers ArcGIS for Server 10.1 is a pure GIS Web Services Server.

7 Development Configuration While all GIS Services will be functional, this configuration is not recommended for production or public facing servers because your administrative end-points are easily accessible ArcGIS Site Server Directories & Configuration Store GIS Server Manager A typical Development deployment consists of a single machine.

8 Single-Machine Production With Web Adaptor Expose your services through port 80 Easily block access to your Manager and REST Admin end points Use through port 80 Administer through port 6080 Take advantage of your Web Server features Logging, ISAPI filters, Security etc DMZ Web Adaptor The Web Adaptor is an Esri component that runs within a third party Application Server (IIS or Java Application Server) ArcGIS Site Server Directories & Configuration Store GIS Server Manager A typical production configuration will front the GIS Server tier with a Web Adaptor. Generally, the Web Adaptor sits in a dedicated Web Server machine

9 Multi-Machine Production With Web Adaptor & Firewall The Web Adaptor, balances load across all GIS Servers in the Site (round-robin only) DMZ Web Adaptor ArcGIS Site GIS Server Manager Tcp: 4000 to 4003 (Internal ArcGIS Site traffic only) GIS Server Manager Server Directories & Configuration Store Your Server dirs and Config Store must Be reachable by all GIS Servers within a Site An ArcGIS Site can contain more than one machine. The site centralizes the Administration of your GIS Servers (logs, publishing etc)

10 Multi-Machine Production High Availability with Web Adaptor Web Farm Web Adaptor Web Adaptor ArcGIS Site GIS Server GIS Server Server Directories & Configuration Store You will want to store Servers Dirs and Config Store in a redundant storage tier Redundant Web Adaptors can be configured to support HA configurations

11 10.1 is a pure GIS Web Services Server Http for using and administering the server (and ONLY http! ) 10.1 will be the LAST release of the Web ADFs New REST Admin Stateless Web Services Web Services Web Services Local Connections (DCOM) Local Connections (DCOM) Used for Administering and using Services Non-pooled services NOT supported DCOM NOT supported

12 On-the-Fly Symbology Server WMS WCS WFS KML Standards Support HTML JSON WPS REST WMTS Server Web printing

13 Demo ArcGIS for Server 10.1

14 Publishing - Sharing as Services Professional to Everyone Make it easier to share GIS resources - Unified sharing experience - Comprehensive Analysis - Sharing to servers in the cloud and to ArcGIS Online ArcGIS Server

15 Service Definition (.sd) New file format for publishing in Replaces.msd - For all services (Map, Geoprocessing, etc.) Contains everything required to create a service: - GIS-Resource (Map, Globe, etc.) - embeddable fonts (if needed) - Service Configuration - Data (if it needs to be copied to the server) Uploaded to the server when publishing Can be saved and published later - Using Catalog or Server Manager

16 Sharing as Services ArcGIS Server Cloud ArcGIS Online Desktop ArcGIS Server On-Premises

17 Hosted Mapping on ArcGIS Online Desktop ArcGIS Online Feature Service Map Data Publishing Tiled Map Service Web Map Service Configuration Service Definition

18 Hosted Mapping on ArcGIS Online Sharing the easy way - No Server to buy, install or maintain - Scales automatically - No Firewall or IT issues Limitations - Only Tiled Map and Feature Service supported - Data is private to each service When to use - Public facing services - Desktop Users

19 Sharing as Services ArcGIS Server in the Cloud ArcGIS Server Cloud ArcGIS Online Desktop ArcGIS Server On-Premises

20 ArcGIS Server in the Cloud ArcGIS Server in the Cloud Desktop Map Data Publishing Map Service ArcGIS Server EC2 Service Configuration Service Definition

21 ArcGIS Server in the Cloud Improvements in Simple publishing with copying of data - Comprehensive Analysis When to use - Public facing services - Need the full functionality of ArcGIS Server

22 Sharing as Services ArcGIS Server On Premises ArcGIS Server Cloud ArcGIS Online Desktop ArcGIS Server On-Premises

23 ArcGIS Server in the Enterprise Desktop ArcGIS Server On-Premises Ella Data Stores Map Service Configuration Service Definition File (.sd) Publishing Map Service ArcGIS Server References Enterprise Geodatabase Ella

24 ArcGIS Server in the Enterprise Improvements in Successful publishing to shared data - Comprehensive Analysis - Simple publishing with copying of data When to use - Need the full functionality of ArcGIS Server - Want full control over all hard and software - Want to publish services on live, shared data

25 Demo ArcGIS for Server Publishing

26 Security Architecture at 10.0 GIS Services Service Authorization Data Tier Enterprise Geodatabase LAN GIS Tier SOM SOC SOC LAN DCOM Internal Web Tier ArcGIS Web IIS HTTPS External Web Tier IIS Reverse proxy HTTPS Application Tier custom code for ArcGIS tokens SQL Server users & roles Windows security store Proxy Page ArcGIS tokens Internal Network DMZ Web

27 Security Architectural transition GIS Services Service Authorization Data Tier Enterprise Geodatabase LAN GIS Tier GIS SOM Servers SOC Built-in store SOC LAN DCOM Internal Web Tier ArcGIS Web IIS HTTPS Web External Tier Web Tier IIS IIS Reverse Web Adaptor proxy HTTPS Application Tier custom Wizard code builder for ArcGIS tokens SQL Server users & roles ArcGIS Server Site Windows security store Proxy Page Identity manager ArcGIS tokens Internal Network DMZ Web

28 Default 10.1 security configuration GIS Services Service Authorization Data Tier Enterprise Geodatabase LAN GIS Tier GIS Servers Built-in store HTTPS Web Tier IIS Web Adaptor HTTPS Application Tier Wizard builder Identity manager ArcGIS Server Site Internal Network DMZ Web

29 Simpler to secure your services Built-in, LDAP, Active Directory and Custom Identity Stores Security Disable Admin Access SSL made simple Users, Admins and Publishers

30 What Architecture is Right for Me? Capability Security Store Authentication Tier Authentication Method Single Sign On Active Directory Web Tier (IIS) Integrated Windows (IIS) Public/Private Services Enterprise Users & Roles Encryption (HTTPS) Optional Any GIS Tier ArcGIS Tokens Recommended Active Directory, LDAP Any Any Recommended Web Editing Any Any Any Recommended Mobile Applications Any Any Any Recommended SharePoint Any Any Any Recommended Enterprise Users & Built In Roles Active Directory, LDAP Any Any Recommended Linux LDAP, Built-In Any Any Recommended ArcGIS Online Any Any Any Recommended

31 Demo ArcGIS for Server Security

32 Cloud Computing Categories Software As A Service (SaaS) Web Browser (ex: YouTube, ArcGIS online) Platform As A Service (PaaS) Framework API (ex: Azure, ArcGIS online web services) Infrastructure As A Service (IaaS) Web Services API (ex: Amazon)

33 Leveraging the Cloud Public Cloud Private Cloud LESS MORE Security & Control

34 Leveraging the Cloud Public Cloud Hybrid Private Cloud LESS Security & Control MORE

35 Cloud Flavors Public Cloud Hybrid Private Cloud Off-Premise On-Premise Appliance s/w stack

36 Conceptual Overview of the Cloud Infrastructure-as-a-Service (IaaS) Your Server Room Amazon EC2

37 Amazon Machine Images (AMIs) A virtual image that works in the Amazon Cloud A cookie-cutter approach for configuring servers OS + Software + Data ESRI provided AMIs 10.0 ArcGIS Server 10 AMI Windows bit ArcGIS Server GIS Services Microsoft SQL Server Express (ArcSDE enabled) ArcGIS Desktop 100Gb of storage (optional) Enterprise Geodatabase AMI Windows bit PostgreSQL (ArcSDE enabled) 100Gb of storage (optional)

38 ArcGIS for Server on AWS AMIs 10.1 ArcGIS Server 10.1 AMI Windows 2008 R2 64 bit ArcGIS Server GIS Services Microsoft SQL Server Express or Microsoft SQL Server Standard - ArcSDE enabled (Optional) ArcGIS Desktop 100Gb of storage (optional) Enterprise Geodatabase AMI (Created Automatically) Windows 2008 R2 64 bit Microsoft SQL Server Standard (ArcSDE enabled) 100Gb of storage (optional) ArcGIS Server 10.1 AMI Ubuntu 64 bit ArcGIS Server GIS Services 100Gb of storage (optional) Postgres SQL - ArcSDE enabled (Optional) Enterprise Geodatabase AMI Ubuntu 64 bit PostgreSQL (ArcSDE enabled) 100Gb of storage (optional)

39 Advantages of the Cloud Infrastructure-as-a-Service (IaaS) Robust hardware and network infrastructure Elastic deployments Fast and inexpensive prototyping Easy short-term or emergency deployments Ease of setting up a public-facing site isolated from your own network

40 How do I work with ArcGIS Server on AWS? ArcGIS Server Cloud Builder on Amazon Web Services AWS Management Console Amazon EC2 API Tools Other Third Party Tools - Elastic Fox, O2 Amazon EC Browser

41 Getting data to your site Remote Desktop into instance and copy data OR Copy data automatically when publishing a service (New at 10.1)

42 ArcGIS Cloud Builder for Amazon Web Services

43 Case 1: Architecture Port 80 Administer Services ELB ArcGIS 10.1 for Desktop & Cloud Builder Port 6080 ArcGIS for Server Min servers = 1 Max servers = 2

44 Questions

45