Mastering BEA WebLogic Server Best Practices for Building and Deploying J2EE Applications

Size: px

Start display at page:

Download "Mastering BEA WebLogic Server Best Practices for Building and Deploying J2EE Applications"

Darcy Simon
6 years ago
Views:

1 Mastering BEA WebLogic Server Best Practices for Building and Deploying J2EE Applications Gregory Nyberg Robert Patrick Paul Bauerschmidt Jeffrey McDaniel Raja Mukherjee

3 Mastering BEA WebLogic Server Best Practices for Building and Deploying J2EE Applications Gregory Nyberg Robert Patrick Paul Bauerschmidt Jeffrey McDaniel Raja Mukherjee

4 Vice President and Executive Publisher: Bob Ipsen Publisher: Joe Wikert Executive Editor: Robert M. Elliott Developmental Editor: Brian McDonald and Emilie Herman Editorial Manager: Kathryn A. Malm Senior Production Editor: Angela Smith Text Design & Composition: Wiley Composition Services This book is printed on acid-free paper. Copyright 2003 by Gregory Nyberg, Robert Patrick, Paul Bauerschmidt, Jeffrey McDaniel, and Raja Mukherjee. All rights reserved. Published by Wiley Publishing, Inc., Indianapolis, Indiana Published simultaneously in Canada No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, (978) , fax (978) Requests to the Publisher for permission should be addressed to the Legal Department, Wiley Publishing, Inc., Crosspoint Blvd., Indianapolis, IN 46256, (317) , fax (317) , permcoordinator@wiley.com. Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their best efforts in preparing this book, they make no representations or warranties with respect to the accuracy or completeness of the contents of this book and specifically disclaim any implied warranties of merchantability or fitness for a particular purpose. No warranty may be created or extended by sales representatives or written sales materials. The advice and strategies contained herein may not be suitable for your situation. You should consult with a professional where appropriate. Neither the publisher nor author shall be liable for any loss of profit or any other commercial damages, including but not limited to special, incidental, consequential, or other damages. For general information on our other products and services please contact our Customer Care Department within the United States at (800) , outside the United States at (317) or fax (317) Trademarks: Wiley, the Wiley Publishing logo and related trade dress are trademarks or registered trademarks of Wiley Publishing, Inc., in the United States and other countries, and may not be used without written permission. BEA WebLogic Server is a trademark of BEA Systems, Inc. J2EE is a trademark of Sun Microsystems, Inc. All other trademarks are the property of their respective owners. Wiley Publishing, Inc., is not associated with any product or vendor mentioned in this book. Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic books. Library of Congress Cataloging-in-Publication Data: ISBN: X Printed in the United States of America

5 To Meredith For her patience, love, and support. Greg To Li Yan For her love, encouragement, and patience over the past five years. Robert

7 Contents Acknowledgments xvii Introduction xix About the Authors xxiii Chapter 1 Building Web Applications in WebLogic 1 Java Servlets and JSP Key Concepts 1 Characteristics of Servlets 2 Servlets Use the Request/Response Model 2 Servlets Are Pure Java Classes 2 Servlets Have a Life Cycle 3 Servlets Allow Multiple Parallel Requests 3 Servlets May Access Request Data 5 Servlets Use Session Tracking 6 Characteristics of JavaServer Pages 8 JSP Is a Scripting Technology 8 JSP Pages Are Converted to Servlets 8 Many Tags and Scripting Elements Are Available 9 All Servlet Capabilities Are Available 10 JSP Response Is Buffered 12 JSP Pages Have Unique Capabilities 13 Web Application Best Practices 14 Ensure Proper Error Handling 14 Use jsp:usebean to Reduce Scriptlet Code 17 Use Custom Tags for Selected Behaviors 20 Custom Tag Key Concepts 21 Custom Tag Use Is Easy Development Is Complex 21 Cache Page Output to Improve Performance 23 v

8 vi Contents Use Servlet Filtering for Common Behaviors 28 Building a Simple SnoopFilter Filter Class 29 Registering SnoopFilter in the web.xml Descriptor File 29 Response Caching Using the CacheFilter 30 Using Custom JSP Base Classes 32 Using Run-Time Expressions in JSP Directives 32 Creating Excel Files Using Servlets and JSP Pages 33 Viewing Generated Servlet Code 36 Programmatic Authentication in Web Applications 37 Chapter Review 38 Chapter 2 Choosing a Web Application Architecture 39 Architecture Key Concepts 39 J2EE Application Tiers 40 Model-View-Controller Architecture 40 Common J2EE Design Patterns 41 Presentation-Tier Architecture Selection 42 Presentation-Tier Requirements 42 Display Requirements 43 Form/Update Requirements 46 Navigation Requirements 51 Building a Presentation-Tier Architecture 54 Other Architecture Considerations 55 Candidate Presentation-Tier Architectures 56 JSP-Centric Architecture 56 Servlet-Centric Architecture 58 Additional Frameworks 60 Chapter Review 61 Chapter 3 Designing an Example J2EE Application 63 Application Requirements 63 Business Domain Models 64 Presentation Requirements 65 Web Application Architecture 68 Presentation Approach 68 Self-Assembly 70 Master Page Assembly 73 Master Page Assembly with Page Display Servlet 75 Business-Tier Interfaces 78 Displaying Bean Attributes on JSP Pages 79 Relationships in Presentation Components 84 Action Classes Load Beans and Forms for Display 85 Action Classes Perform Bean Updates 87 Chapter Review 88 Chapter 4 Building an Example Web Application 89 Overview of Application Components 90 Constructing the Application Skeleton 91

9 Contents vii Constructing the User Site Components 92 Reservation Information Components 92 Core Reservation Process Components 97 Defining Navigation Paths 97 Property Search/Selection Pages 99 Date Selection and Availability Display Pages 107 Reservation Creation Process 118 Targeted Offers Components 121 Construction of Administration Site Components 125 Authorization/Authentication Components 126 Property Maintenance Components 131 Property Main Form 132 Rate Maintenance Pages 138 Availability Maintenance Pages 140 Chapter Review 146 Chapter 5 Packaging and Deploying WebLogic Web Applications 147 Packaging Web Applications 148 Web Application Directory Structure 148 Internal Components 150 Web Application Descriptor Files 151 Standard web.xml Descriptor File 151 Locating EJB Components 156 weblogic.xml Descriptor File 157 Precompiling JSP Components 160 Creating an Exploded Web Application 164 Creating a Web Application Archive File 166 Deploying Web Applications 167 Automatic Deployment 167 WebLogic Deployer Utility and Ant Task 170 WebLogic Console Deployment 173 Creating Required Users and Group for BigRez.com 174 Chapter Review 176 Chapter 6 Building Enterprise JavaBeans in WebLogic Server 177 EJB Technology Overview 177 EJB Component Types 178 Stateless Session Beans 178 Stateful Session Beans 180 Entity Beans 181 Bean-Managed Persistence 185 Container-Managed Persistence 187 Finder Methods 194 Select Methods 196 Home Methods 198 Message-Driven Beans 199 WebLogic Server EJB Container 200 EJB Container Basics 200 EJB Life Cycle in WebLogic Server 201

10 viii Contents General WebLogic Server EJB Features 203 EJB Deployment/Redeployment 203 Dynamic EJB Compiling 203 Referencing Other EJB Components 204 Referencing EJB Components in the Same Application 204 Referencing EJB External Components 206 Calling Components by Reference 206 Session Bean Features 207 Stateful Session EJB Cache Management 207 In-Memory Replication for Stateful Session EJBs 209 Entity Bean Features 211 Concurrency Strategies 211 Exclusive Concurrency Strategy 213 Database Concurrency Strategy 215 Read-Only Concurrency Strategy 218 Optimistic Concurrency Strategy 219 Caching Strategies 223 Caching between Transactions 223 Read-Only Multicast Invalidation 225 Read-Mostly Pattern 226 Combined Caching Support 230 Tuning Strategies 232 Loading Beans During Finder Operations 232 Updating Database after Each Method Invocation 236 Including Updates in Finder Queries 236 Batching Database Operations 238 Controlling Timing of Database Inserts 239 Controlling Lazy Retrieval Using Field Groups 240 Relationship Caching with CMP Entity Beans 244 Additional CMP Features 246 Automatic Primary Key Generation 247 EJB CMP Multiple-Table Mapping Support 249 WebLogic EJB-QL Enhancements 250 Dynamic Query Support 252 Cascade Delete Support 253 Checking for Bean Existence 255 Message-Driven Bean Features 256 Chapter Review 257 Chapter 7 Building an Example EJB Application 259 Business-Tier Requirements 260 Business Logic Requirements 260 Process Encapsulation 260 Validation 261 Object-Relational Mapping Requirements 261 Mapping Simple Classes 262 Mapping Simple Aggregation 262

11 Contents ix Projection Objects and Queries 263 Mapping Associations/Relationships 264 Mapping Inheritance 265 Data Access Requirements 267 Other Business-Tier Requirements 268 Review of Business-Tier Requirements 268 Business-Tier Architecture Options 269 Stateless Services with JDBC 270 Stateless Services with Entity Bean Persistence 272 Stateless Services, Entity Beans, and Direct Interaction 277 Chosen Architecture for bigrez.com 280 EJB Construction Options 281 Manual Construction and Configuration 282 Using WebLogic Builder Utility 283 Using the WebLogic EJBGen Utility 284 Class-Level EJBGen Tags 284 Method-Level EJBGen Tags 286 Invoking the EJBGen Utility 287 Construction of Business-Tier Components 288 Construction of Entity Beans 288 Construction of Session Beans 293 Construction of Message-Driven Beans 294 Chapter Review 295 Chapter 8 Packaging and Deploying WebLogic EJB Applications 297 Creating an EJB Archive File 298 Creating EJB Source Code and Descriptor Files 300 Compiling EJB Components 302 Executing the EJB Compiler 302 Invoking the EJB Compiler Directly 303 Using the WebLogic Application Compiler 303 Using the ejbjar Optional Ant Task 305 Packaging Enterprise Applications 306 Enterprise Application Directory Structure 309 Enterprise Application Descriptor Files 312 Standard application.xml Descriptor File 312 weblogic-application.xml Descriptor File 314 Packaging Utility Archives in Enterprise Applications 316 Creating an Exploded Enterprise Application 318 Creating an Enterprise Application Archive File 320 Deploying EJB Applications 322 Creating Required Services 322 Automatic Deployment 324 WebLogic Console Deployment 325 Chapter Review 327

12 x Contents Chapter 9 Using WebLogic JMS 329 JMS Key Concepts 330 Understanding the Messaging Models 330 Reviewing the JMS 1.0.2b API 331 Connection Factories 331 Connections 331 Destinations 332 Sessions 332 Message Producers and Consumers 333 Messages 336 Upcoming JMS 1.1 Changes 336 The WebLogic JMS Provider 338 Understanding WebLogic JMS Servers 338 Clustering WebLogic JMS 338 Location Transparency 339 Connection Routing, Load Balancing, and Failover 339 Distributed Destinations 340 Migrating JMS Servers 346 Configuring WebLogic JMS 347 Connection Factories 347 Templates 349 Destination Keys 349 Time-to-Deliver Extension 350 Persistent Stores 351 Delivery Overrides, Destination Quotas, and Flow Control 355 WebLogic JMS Application Design 361 Choosing a Destination Type 362 Locating Destinations 362 Choosing the Appropriate Message Type 363 Compressing Large Messages 365 Selecting a Message Acknowledgment Strategy 365 Designing Message Selectors 367 Choosing a Message Expiration Strategy 369 Active Expiration 370 Expiration Policies 371 Handling Poison Messages 372 Redelivery Delay 373 Redelivery Limit and Error Destination 374 Ordered Redelivery 375 Handling Message Ordering Issues 376 Using Transactions 376 Using Multicast Sessions 378 Handling Request/Reply Style Message Exchange 379 WebLogic JMS Programming 382 Using WebLogic JMS with Servlets and EJBs 382 Consuming Asynchronous Messages on the Server 384 Message-Driven Beans 385 Application Design Considerations 388

13 Contents xi External JMS Providers 389 Understanding the Messaging Bridge 390 Using Message-Driven Beans 390 Mapping External JMS Objects to WebLogic JNDI 391 Choosing an Integration Strategy 391 Chapter Review 393 Chapter 10 Using WebLogic Security 395 WebLogic Security Overview 396 WebLogic Security Framework 398 Embedded LDAP Server 398 Default Security Providers 400 Authentication 402 Identity Assertion 404 Authorization and Adjudication 406 Auditing 407 Role Mapping and Credential Mapping 407 Managing Security Provider Configuration 407 Using Compatibility Mode with the RealmAdapter 410 Using External Security Stores 410 Managing External LDAP Authentication 410 Setting Up UNIX-Based Authentication 413 Setting Up Windows Domain Authentication 414 Custom Authentication Providers 415 Setting Up SSL/TLS 416 Reviewing SSL Technology 416 Obtaining X.509 Certificates 418 Configuring One-Way SSL 420 Configuring Two-Way SSL 421 Debugging SSL Problems 425 Writing Security-Aware Java Clients 425 Writing Java Clients That Use JAAS 426 Writing Java Clients That Use SSL 429 RMI Clients 429 Programmatic HTTP Clients 431 Web Services Clients 433 Application Authentication 433 Hostname Verification 433 Trust Managers 434 Managing Application Security 434 Setting Up J2EE Application Security 434 Securing Web Applications 435 Managing EJB Security 440 Securing J2EE CA Resource Adapters 442 Securing Enterprise Applications 442

14 xii Contents Chapter 11 Setting Up WebLogic Application Security 443 Managing Users and Groups 443 Working with Roles and Policies 444 Booting WebLogic Server 448 Chapter Review 449 Administering and Deploying Applications in WebLogic Server 451 WebLogic Architecture Key Concepts 451 Domain Architecture 452 WebLogic Server Architecture 453 Execute Queues and Execute Threads 454 Socket Muxer 458 Listen Ports and Listen Threads 460 Application Container 460 WebLogic Server Clustering Architecture 461 Clustering for Web Applications 462 Clustering for RMI-Based Applications 466 Admin Server 469 Node Manager 471 WebLogic Administration Key Concepts 472 Server States 472 Server Self-Health Monitoring 474 Network Channels 474 Configuring a WebLogic Server Domain 475 Setting Up a New Domain 478 Configuring Servers 483 Configuring the Cluster 486 Configuring Network Channels 487 Setting Up the Node Manager 489 Operating System Configuration 493 Java Virtual Machine Configuration 494 Web Server Plug-in Configuration 494 Configuring Applications for WebLogic Server 499 Configuring Database Resources 500 Configuring JMS Resources 508 Configuring JavaMail Sessions 516 Configuring Execute Queues and Threads 516 Deploying Applications 516 Monitoring WebLogic Server Applications 519 Using the Command-Line Administration Tool 519 Monitoring with the WebLogic Console 521 Programmatic Monitoring with JMX 525 Monitoring via SNMP 529

15 Contents xiii Managing WebLogic Server Applications 533 Troubleshooting Application Issues 534 Versioning Applications 536 Managing Failure Conditions 536 Database Failures 537 Migrating the JTA Service 538 Migrating JMS Servers 538 Migrating the Admin Server 539 Chapter Review 540 Chapter 12 Optimizing WebLogic Server Performance 541 Overview of System Performance 542 Reviewing the Core Principles 542 Tuning a WebLogic Server-Based Application 544 Operating System Tuning 544 Network Tuning 550 Java Virtual Machine Tuning 551 Application Server Tuning 562 Performance Best Practices 567 Designing for Performance 567 Session Façade 568 Value Object 568 Command Pattern 569 Understanding Web Container Best Practices 569 Session Management 569 JavaServer Pages 571 Servlets 572 Understanding EJB Container Best Practices 572 JNDI Lookup Strategies 573 Optimizing Entity Beans 574 Using Appropriate Isolation Levels 576 Taking Advantage of Pass-by-Reference 577 Applying Database Access Best Practices 578 Basic Database Principles 579 Retrieve Columns Explicitly 579 Cache Prepared Statements 580 Transaction Model 580 Commitment Control Level 581 Batch Updates 582 Connection Pools 582 Release JDBC Resources 583 Troubleshooting Performance Problems 584 Preparing for Troubleshooting 584 Bottleneck Identification and Correction 584 Problem Resolution 587 Common Application Server Performance Problems 588

Agile Database Techniques Effective Strategies for the Agile Software Developer. Scott W. Ambler

Agile Database Techniques Effective Strategies for the Agile Software Developer Scott W. Ambler Agile Database Techniques Effective Strategies for the Agile Software Developer Agile Database Techniques