Guide CICS 4 Février Aymeric Affouard IBM Advanced Technical Skill IBM Client Center Montpellier

Transcription

1 Guide CICS 4 Février 2016 Aymeric Affouard IBM Advanced Technical Skill IBM Client Center Montpellier aymeric.affouard@fr.ibm.com

2 Agenda 1. Création d une API via z/os Connect EE pour l application CICS Catalog Manager 2. Exposition de cette API via une API Gateway 3. Exemple d applications Bluemix et Mobile qui vont utiliser cette API 4. Et pour la Sécurité de bout en bout? 2

3 CICS Catalog Manager application COBOL based CICS application (EGUI) VSAM File Separate Presentation Logic and Business Logic Callable Interface COMMAREA 3

4 Office Supplies Web application (running in Bluemix) 4 and address validation features are added using Bluemix services. These features do not currently exist in the CICS application.

5 Demos architecture DataPower : 1. Secure Gateway Client 2. AAA 3. API Gateway API z Systems mongodb API SG 3A API z/os API CICS LDAP 5

6 CICS 3270 Application : Catalog Manager EGUI 3270 Client z/os DFH0XGUI CICS DFH0XCMN Inquire Catalog Inquiry item Place Order VSAM File (EXMPCAT) 6

7 Catalog Manager API z/os Connect EE V2.0 z/os CICS GET or POST https/json catalog API GET /items?startitemid GET /items/{itemid} POST /orders Services inquirecatalog inquiresingle placeorder Inquire Catalog DFH0XCMN Inquire item Place Order VSAM File (EXMPCAT) API HTTP verb URL List catalog GET Get details of item GET Order item POST 7

8 RESTful API 1. URI : Uniform Resource Identifier to determine the resource(s) to operate upon http(s)://<host>:<port>/<path>/<path-parameters>?<query-parameters> 2. Uses the HTTP verbs (below) to indicate the nature of an operation Create Read Update Delete HTTP POST HTTP GET HTTP PUT HTTP DELETE 3. Payload/Body (in JSON) { "ca_order_request": { "ca_quantity_req": 1, "ca_item_ref_number": 10 } } 8

9 Plan API and services z/os Connect EE V2.0 API Definition 6 GET /items?startitemid=<value> GET /items/{itemid} POST /orders This will be generated using the z/os Connect EE V2.0 API Editor in Eclipse z/os Connect EE V2.0 Service Definitions 3 Service for Inquire Catalog invokeuri="/inquirecatalog" servicename="inquirecatalog" Service for Inquire Single invokeuri="/inquiresingle" servicename="inquiresingle" Service for Place Order invokeuri="/placeorder" servicename="placeorder" Data transformation information zosconnectdataxform WOLA Information registername="cicsreg" servicename="dfh0xcmn" 5 4 CICS Program DFH0XCMN 1 Inquire Catalog DFH0XCP3 2 Inquire Single DFH0XCP4 Place Order DFH0XCP5 1. CICS program named in WOLA servicename 2. CICS copybooks used to create data transformation wsbind files (JSON to COMMAREA) 3. Service definitions 4. CICS region named in WOLA registername 5. Specifies location of wsbind files 6. API we want to construct with the API Editor

10 Les solutions Linux on z Enterprise Big Data and Analytics Hybrid Cloud Enterprise Open Source Industry Solutions Extremophil e Computing Systems of Record Systems of Insight Pattern-Enabled Infrastructure as a Service Flexibility & Choice with Enterprise- Grade Security & Uptime Industry-Specific Applications with Unmatched Performance & Reliability Extreme Scalability, Uptime, & Security Extreme Scalability A single MongoDB node scales up to 2TBs with 460,000 reads / writes per second without sharding vrealize Cloud Manager Extreme Uptime Best-in-class uptime engineering: Faulttolerant memory, spare processor cores in reserve, system-wide error detection and correction, optional earthquake resistance 10 Extreme Security Best-in-class security with fully checked hardware and memory for data integrity, hardwareprotected secure key cryptography, secure highly-available centralized key repository and management

11 API-enabled services z/os Connect EE V2.0 CICS z/os GET or POST https/json catalog API GET /items?startitemid GET /items/{itemid} POST /orders Services inquirecatalog inquiresingle placeorder DFH0XCMN Inquire Catalog Inquire item Place Order Create Read Update Delete VSAM File (EXMPCAT) Linux on z Mongo DB HTTP POST HTTP GET HTTP PUT CRUD HTTP DELETE https/json images API GET /api/images?filter={ "where" : {"reference": "{itemid}"}} GET /api/pictures/{itemid}?field=thu mbnail images thumbnails 11

12 API Management 12

13 API organizations Developer Organizations Cloud Management Console API Provider Organizations Developer portal API Manager Gateway Server StrongLoop mongodb User Application z/os Connect CICS 13

14 Démonstration Bluemix 14

15 IBM Bluemix Bluemix is an implementation of IBM s Open Cloud Architecture, leveraging Cloud Foundry to enable developers to rapidly build, deploy, and manage their cloud applications, while tapping a growing ecosystem of available services and runtime frameworks. IBM will provide services and runtimes into the ecosystem based on our extensive software portfolio.

16 Secure Gateway Service in Bluemix Bluemix On Premise App App Secure Gateway F W Secure Gateway Client (Docker Cont., DataPower) F W Destination Hostname:Port

17 Demos architecture DataPower : 1. Secure Gateway Client 2. AAA 3. API Gateway API z Systems mongodb API SG 3A API z/os API CICS LDAP 17

18 End to End Security Mainframe LTPA token Bluemix userid/pwd HTTPS/JSON SSL IDG HTTPS/JSON Identity in token SSL z/os Connect COMMAREA mapped identity z/os CICS LDAP RACF 1. User logs into mobile app using "distributed" user ID and password 2. IDG authenticates user in LDAP, forwards ID in LTPA token to z/os Connect 3. z/os Connect validates LTPA token and maps distributed user ID to RACF user ID (1:1 mapping for employees, many:1 mapping for customers) 4. RACF user ID is used for authorization checking 5. RACF user ID passed to CICS over WOLA, CICS checks user authority 18

19 O=mop,C=fr Mapping OU=employees UID=JeanLeclerc EMPLOY1 UID=AliceNevers EMPLOY2 UID=MarieDupond OU=customers UID=PierreDuclos CUSTOM OU=partner1 UID=ArthurLeroy PARTNE1 UID=JulieLaforest UID=RoryWilliams OU=partner2 PARTNE2 UID=RoseMoubinou DN: UID=JeanLeclerc,OU=employees,O=mop,C=fr 19

20 z/os Connect EE Guides z/os Connect EE V2.0 Getting Started Guide Step by step guide to install z/os Connect EE and create APIs available here API created from CICS Catalog Manager application Eclipse project provided to customers with guide z/os Connect EE V2.0 Performance Study Performance measurements for z/os Connect EE V2.0 available here Focuses on the API mapping feature Based on very simple API with varying message lengths 20

21 Collateral Redpapers etc. 21

22 Transforming z Systems for the Mobile, Digital & API Economy Fuel innovation Reach new markets Build your APIs April IBM Montpellier The API economy plays a central role in contemporary Cloud, Mobile and Web applications By 2018, some 68% mobile apps will be built on APIs The API Economy will become a $2.2 trillion market by 2018, analysts estimate 70% of business transactions in enterprises today touch IBM z Systems These significant business opportunities are tempered by technical challenges including integration, security and cost-effective delivery, at the speed-of-digital Join IBM world experts at this 3-day client event, exploring topics including: The evolution to the API economy What makes a good API? Best practices for the API world Create world-class APIs for speedy access to core business logic Secure, govern and enhance APIs to reach new markets Consumers of APIs in practice: Mobile, Cloud and Internet of Things (IoT) To register for this event, please contact Colette Lambert-Geyer (clambertg@fr.ibm.com)

23 z Systems Mobile support offerings by IBM Montpellier 1 Technical Awareness F.van der Wal N Williams Multi-client workshop z Systems in a mobile world covering: Business implications and benefits of mobility Challenges and solutions for successfully delivering mobile solutions with z Systems Integration, security, performance and the recently announced Mobile Workload Pricing (MWP) A.Affouard Agenda tailored to fit IMT requirements 2 Live demos and hands-on access Industry mobile demos based on Smarter Banking and Intelligent Operation Center showcases Access to mobile demos on ztec including IBM MobileFirst Platform Server on Linux for z Systems S. Faure Y. Kindelberger 3 Design workshops Workshop focused on mobile enablement and enterprise modernization, including End to end architecture and infrastructure Secure mobile integration Tagging and tracking of mobile transactions (requirement for MWP) Agenda tailored to fit individual customer requirements P.Bruschet O.Boehler 4 PoC, zmax performance studies & benchmarks Functional tests involving Worklight and other zmobile SWG products Analysis of customer performance data and recommendations on implementing MWP Sizing, performance, scalability, availability tests proving zmobile solutions

24 What makes a good API? Quick to learn, easy to use, and aimed at specific use cases Focused on a resource not a procedure or method URI should be intuitive Be stateless Explicit use of HTTP verbs To create a resource on the server, use POST To retrieve a resource, use GET To change the state of a resource or to update it, use PUT To remove or delete a resource, use DELETE Simple message payload, no redundant data 24