Introduction to ArcGIS Server 10.1 - Architecture and Services Amr Wahba awahba@esri.com
Agenda Architecture Features Publishing Security Cloud
Powerful GIS capabilities Delivered as Web services To help people solve real problems ArcGIS Server
ArcGIS for Server 10.1 Enhancing the Architecture and Adding Capabilities Improved Performance Easy Install/Admin Simple Service Creation Native 64 Bit Strong Linux Highly Scalable 5x Web Services REST SOAP OGC Find Addresses Clip &Ship Drive-time Polygons Editing Analysis 10x 50x Imagery Map Caching Queries GP Search Mapping Identify 2x GIS Server
Linux or Windows 64-bit only! No Post Install No DCOM Installation One user to run it Very quick one to manage it
ArcGIS for Server 10.1 Architecture ArcGIS Server 10.1 is a pure GIS Web Services Server. All communication for using and administering occurs via http GIS Servers live within an ArcGIS Site: a logical grouping of servers that simplifies administration ArcGIS Site ArcGIS Server User GIS Server http:6080 Manager This is the user that can administer ArcGIS Server. Not a Windows/Linux use (unless you want to) ArcGIS Primary Site Administrator New web browser based management console. You do not need a separate web server to run this ArcGIS Server processes run under this user Server Directories & Configuration Store Two folders that store key information needed for your server to run. Make sure the ArcGIS Server user has Read/Write access and that folders can be accessed from all GIS Servers ArcGIS for Server 10.1 is a pure GIS Web Services Server.
Development Configuration While all GIS Services will be functional, this configuration is not recommended for production or public facing servers because your administrative end-points are easily accessible ArcGIS Site http:6080 Server Directories & Configuration Store GIS Server Manager A typical Development deployment consists of a single machine.
Single-Machine Production With Web Adaptor Expose your services through port 80 Easily block access to your Manager and REST Admin end points Use through port 80 Administer through port 6080 Take advantage of your Web Server features Logging, ISAPI filters, Security etc DMZ http:80 Web Adaptor The Web Adaptor is an Esri component that runs within a third party Application Server (IIS or Java Application Server) ArcGIS Site http:6080 Server Directories & Configuration Store GIS Server Manager A typical production configuration will front the GIS Server tier with a Web Adaptor. Generally, the Web Adaptor sits in a dedicated Web Server machine
Multi-Machine Production With Web Adaptor & Firewall The Web Adaptor, balances load across all GIS Servers in the Site (round-robin only) DMZ http:80 Web Adaptor ArcGIS Site http:6080 http:6080 GIS Server Manager Tcp: 4000 to 4003 (Internal ArcGIS Site traffic only) GIS Server Manager Server Directories & Configuration Store Your Server dirs and Config Store must Be reachable by all GIS Servers within a Site An ArcGIS Site can contain more than one machine. The site centralizes the Administration of your GIS Servers (logs, publishing etc)
Multi-Machine Production High Availability with Web Adaptor Web Farm http:80 Web Adaptor Web Adaptor ArcGIS Site GIS Server http:6080 http:6080 GIS Server Server Directories & Configuration Store You will want to store Servers Dirs and Config Store in a redundant storage tier Redundant Web Adaptors can be configured to support HA configurations
10.1 is a pure GIS Web Services Server Http for using and administering the server (and ONLY http! ) 10.1 will be the LAST release of the Web ADFs New REST Admin Stateless Web Services Web Services Web Services 10 10.1 Local Connections (DCOM) Local Connections (DCOM) Used for Administering and using Services Non-pooled services NOT supported DCOM NOT supported
On-the-Fly Symbology Server WMS WCS WFS KML Standards Support HTML JSON WPS REST WMTS Server Web printing
Demo ArcGIS for Server 10.1
Publishing - Sharing as Services Professional to Everyone Make it easier to share GIS resources - Unified sharing experience - Comprehensive Analysis - Sharing to servers in the cloud and to ArcGIS Online ArcGIS Server
Service Definition (.sd) New file format for publishing in 10.1 - Replaces.msd - For all services (Map, Geoprocessing, etc.) Contains everything required to create a service: - GIS-Resource (Map, Globe, etc.) - embeddable fonts (if needed) - Service Configuration - Data (if it needs to be copied to the server) Uploaded to the server when publishing Can be saved and published later - Using Catalog or Server Manager
Sharing as Services ArcGIS Server Cloud ArcGIS Online Desktop ArcGIS Server On-Premises
Hosted Mapping on ArcGIS Online Desktop ArcGIS Online Feature Service Map Data Publishing Tiled Map Service Web Map Service Configuration Service Definition
Hosted Mapping on ArcGIS Online Sharing the easy way - No Server to buy, install or maintain - Scales automatically - No Firewall or IT issues Limitations - Only Tiled Map and Feature Service supported - Data is private to each service When to use - Public facing services - Desktop Users
Sharing as Services ArcGIS Server in the Cloud ArcGIS Server Cloud ArcGIS Online Desktop ArcGIS Server On-Premises
ArcGIS Server in the Cloud ArcGIS Server in the Cloud Desktop Map Data Publishing Map Service ArcGIS Server EC2 Service Configuration Service Definition
ArcGIS Server in the Cloud Improvements in 10.1 - Simple publishing with copying of data - Comprehensive Analysis When to use - Public facing services - Need the full functionality of ArcGIS Server
Sharing as Services ArcGIS Server On Premises ArcGIS Server Cloud ArcGIS Online Desktop ArcGIS Server On-Premises
ArcGIS Server in the Enterprise Desktop ArcGIS Server On-Premises Ella Data Stores Map Service Configuration Service Definition File (.sd) Publishing Map Service ArcGIS Server References Enterprise Geodatabase Ella
ArcGIS Server in the Enterprise Improvements in 10.1 - Successful publishing to shared data - Comprehensive Analysis - Simple publishing with copying of data When to use - Need the full functionality of ArcGIS Server - Want full control over all hard and software - Want to publish services on live, shared data
Demo ArcGIS for Server Publishing
Security Architecture at 10.0 GIS Services Service Authorization Data Tier Enterprise Geodatabase LAN GIS Tier SOM SOC SOC LAN DCOM Internal Web Tier ArcGIS Web IIS HTTPS External Web Tier IIS Reverse proxy HTTPS Application Tier custom code for ArcGIS tokens SQL Server users & roles Windows security store Proxy Page ArcGIS tokens Internal Network DMZ Web
Security Architectural transition GIS Services Service Authorization Data Tier Enterprise Geodatabase LAN GIS Tier GIS SOM Servers SOC Built-in store SOC LAN DCOM Internal Web Tier ArcGIS Web IIS HTTPS Web External Tier Web Tier IIS IIS Reverse Web Adaptor proxy HTTPS Application Tier custom Wizard code builder for ArcGIS tokens SQL Server users & roles ArcGIS Server Site Windows security store Proxy Page Identity manager ArcGIS tokens Internal Network DMZ Web
Default 10.1 security configuration GIS Services Service Authorization Data Tier Enterprise Geodatabase LAN GIS Tier GIS Servers Built-in store HTTPS Web Tier IIS Web Adaptor HTTPS Application Tier Wizard builder Identity manager ArcGIS Server Site Internal Network DMZ Web
Simpler to secure your services Built-in, LDAP, Active Directory and Custom Identity Stores Security Disable Admin Access SSL made simple Users, Admins and Publishers
What Architecture is Right for Me? Capability Security Store Authentication Tier Authentication Method Single Sign On Active Directory Web Tier (IIS) Integrated Windows (IIS) Public/Private Services Enterprise Users & Roles Encryption (HTTPS) Optional Any GIS Tier ArcGIS Tokens Recommended Active Directory, LDAP Any Any Recommended Web Editing Any Any Any Recommended Mobile Applications Any Any Any Recommended SharePoint Any Any Any Recommended Enterprise Users & Built In Roles Active Directory, LDAP Any Any Recommended Linux LDAP, Built-In Any Any Recommended ArcGIS Online Any Any Any Recommended
Demo ArcGIS for Server Security
Cloud Computing Categories Software As A Service (SaaS) Web Browser (ex: YouTube, ArcGIS online) Platform As A Service (PaaS) Framework API (ex: Azure, ArcGIS online web services) Infrastructure As A Service (IaaS) Web Services API (ex: Amazon)
Leveraging the Cloud Public Cloud Private Cloud LESS MORE Security & Control
Leveraging the Cloud Public Cloud Hybrid Private Cloud LESS Security & Control MORE
Cloud Flavors Public Cloud Hybrid Private Cloud Off-Premise On-Premise Appliance s/w stack
Conceptual Overview of the Cloud Infrastructure-as-a-Service (IaaS) Your Server Room Amazon EC2
Amazon Machine Images (AMIs) A virtual image that works in the Amazon Cloud A cookie-cutter approach for configuring servers OS + Software + Data ESRI provided AMIs 10.0 ArcGIS Server 10 AMI Windows 2008 64 bit ArcGIS Server GIS Services Microsoft SQL Server Express (ArcSDE enabled) ArcGIS Desktop 100Gb of storage (optional) Enterprise Geodatabase AMI Windows 2008 64 bit PostgreSQL 8.3.0 (ArcSDE enabled) 100Gb of storage (optional)
ArcGIS for Server on AWS AMIs 10.1 ArcGIS Server 10.1 AMI Windows 2008 R2 64 bit ArcGIS Server GIS Services Microsoft SQL Server Express or Microsoft SQL Server Standard - ArcSDE enabled (Optional) ArcGIS Desktop 100Gb of storage (optional) Enterprise Geodatabase AMI (Created Automatically) Windows 2008 R2 64 bit Microsoft SQL Server Standard (ArcSDE enabled) 100Gb of storage (optional) ArcGIS Server 10.1 AMI Ubuntu 64 bit ArcGIS Server GIS Services 100Gb of storage (optional) Postgres SQL - ArcSDE enabled (Optional) Enterprise Geodatabase AMI Ubuntu 64 bit PostgreSQL (ArcSDE enabled) 100Gb of storage (optional)
Advantages of the Cloud Infrastructure-as-a-Service (IaaS) Robust hardware and network infrastructure Elastic deployments Fast and inexpensive prototyping Easy short-term or emergency deployments Ease of setting up a public-facing site isolated from your own network
How do I work with ArcGIS Server on AWS? ArcGIS Server Cloud Builder on Amazon Web Services AWS Management Console Amazon EC2 API Tools Other Third Party Tools - Elastic Fox, O2 Amazon EC Browser
Getting data to your site Remote Desktop into instance and copy data OR Copy data automatically when publishing a service (New at 10.1)
ArcGIS Cloud Builder for Amazon Web Services
Case 1: Architecture Port 80 Administer Services ELB ArcGIS 10.1 for Desktop & Cloud Builder Port 6080 ArcGIS for Server Min servers = 1 Max servers = 2
Questions