Download Report

Advanced Integration Patterns
using IIB and Data Power
Architectural Patterns and Best Practices
Joe Arokiaraj
Bharath Raminenni
Gus Fort
Integration Architect
Miracle Software Systems, Inc.
Integration Architect
Miracle Software Systems, Inc.
Automotive Industry Leader
Agenda
•  Miracle Software Systems, Inc.
•  Integration Design Patterns
•  OAuth Authorization
•  Data Power Integration with WSRR
•  Managing Data Power with WAMC
•  Industry Use Case Scenario
•  The Conclusion
•  Question and Answers
Miracle Software Systems, Inc. is a global
systems integrator specializing in ERP/B2B/
BPM. With over 1500 employees globally,
Miracle is a Premier IBM Business Partner and
an expert at Systems Integration.
For more information
www.miraclesoft.com
Miracle Software Systems, Inc.
●  Global Systems Integrator for 20 Years
●  Premier IBM Partner for 13 years(Since 2002)
●  Combined power of,
○  IBM AIM (BPM + SOA Connectivity) and
○  Smarter Commerce (B2B + B2C eCommerce + EMM)
●  Past Impact Customer Sessions: McKesson, Avery Denison,
University of Michigan Health Systems, Group Health Co-op
●  Global Delivery Centers across USA, UK, India, Singapore and
Australia
●  Top Ranked Premium Partners for IBM and SAP
Miracle Software: IBM Competencies
SOA Connectivity &
Integration + BPM
B2B Integration
Commerce & Portal
Solution
Enterprise
Marketing
Management
•  IBM Integration Broker (IIB), WebSphere ESB (WESB)
•  IBM Business Process Manager & Process Center
(WLE)
•  DataPower and Cast Iron
•  Sterling B2B Integrator (Gentran – GIS/SI), WTX,
Partner Gateway
•  MFT: Connect Direct, Control Center, File Gateway
•  DataPower XB62 B2B Appliance, XI52, XS40
•  WebSphere Commerce: B2B & B2C Extended Sites
•  Precision Marketing, SEO, Social and Mobile Commerce
•  WCS RAPID Integration Framework with ERP and CRM
•  WebSphere Portal and Order Management
•  UNICA
•  TEALEAF
•  COREMETRICS
IndustryVerticals
Manufacturing
and Automotive
Energy and
Utilities
Logistics and
Supply Chain
Healthcare and
Pharmacy
Retail
Industry
Banking and
Insurance
TechnologySpace
Business Process
Management
SOA, Connectivity
and Middleware
Cloud Integration
and API-M
Enterprise Mobility
and Social
Data, ETL and
Analytics
Quality Assurance
and Testing
File Transfer and
B2B/EDI
Digital Experience
and Commerce
MiracleExpertise
Global Delivery
Centers
Premier IBM
Business Partner
Deep Industry
Understanding
Industry Proven
Methodologies
Team with Certified
Professionals
Accelerators and
Frameworks
SourcingModels
Project Outsourcing/Managed Services
Transfer Control,
Accountability
and Risk of
Business Function
Continue to retain
complete control
over the Business
Function
Delivery through
Hybrid Model with
On-Site and OffShore Model
On-Demand Out-Tasking
Transfer certain
tasks to within a
Business Function
to our teams
You retain control
over the overall
delivery of the
Business Function
Staff Augmentation
Skill Augmentation for Right-Sizing
Strategy
Specific Skilled Resources to supplement
your personnel quickly and efficiently
Retain complete control, accountability
and risk of Business Function
DataPower-as-a-Security Gateway
1.External party makes web
service request(HTTP with xml
Payload).
2. Verify Signature.
3.Decrypt and Validate
4.Access Identify Management
System.(TIM,LDAP)
5.Authenticate and Authorize
6.Insert Security
Token(SAML,LTPA)
7.Send request to Integration
Layer
8. Transform XML
9. Switch Protocol(eg. HTTP
to MQ)
DMZ
XG45
Security Layer
Trusted
Domain
10. Route based on Content
Request Message
Response Message
Partner
Integration Layer
XI52
17.Send Response Back
16.Encrypt and Sign
15. Filter Response
14 Send to Security Layer
13.Transform XML
12. Switch Protocol(eg. HTTP
to MQ)
11. Aggregate Response
BackEnd
Applica
tions
OAuth 2.0
•  Passwords are vulnerable
•  Any one could obtain your credentials and gain access to your
resources
•  Resource owner has to share his password with the entity that
needs access and if a password is changed, the entity no longer has
access to the resource •  OAuth framework
•  Authorization framework allows you(resource owner) to share your
resources with a third party application without actually sharing
your credentials with the third party application
•  OAuth resource owner grants a third party client (or application)
access to his or her resources by first authenticating with the
authorization service
•  OAuth authorization service issues an access token which is shared
with the third party client (or application) instead of actual
credentials
OAuth 2.0 with Data Power
WSRR
Service registry
•  Central catalog for services within an organization
•  Provides important governance and registration functions, enabling an
organization to keep track of what stage its services are in, who is using
them, and policies and other metadata associated with them
Value proposition with DataPower and WSRR
integration
•  Allows the creation of Web Service Proxy based upon a WSDL stored in
WSRR instead of a static file
•  If the WSDL is updated in WSRR, then the Web Service Proxy synchronizing
with that particular WSDL will also be updated the next time WebSphere
DataPower synchronizes with WSRR
•  Reduces the overhead of notifying the consumer every time there is a
change in WSDL or related artifacts
•  By extending the built-in integration between WSRR and WebSphere
DataPower, it is possible to configure a Web Service Proxy to dynamically
choose an endpoint at run time based on meta data stored in WSRR
Integration with WSRR
WSRR
4. Configure dynamic routing
using the DataPower
“route” action
3. Use the WSRR
Subscription object
in MPG or WSP
▪ 
Select WSRR endpoint
lookup routing control
file (style sheet)
▪ 
Configure parameters
Service
Provider A
REST
MQ
1.  Configure DataPower
WSRR Server Object
▪ 
DataPower queries
WSRR via the SOAP
API
▪ 
Support for WAS
security and SSL
2. Configure DataPower WSRR
Subscription Object
▪ 
Subscribe to WSRR Concept
or WSDL objects
▪ 
Support for polling and
manual updates
▪ 
Configurable update
interval
Service
Provider B
Management with WAMC
Web application which provides multi-box operational management for
WebSphere DataPower SOA appliances
•  Centralized firmware management
•  Disaster recovery
•  Configuration life cycle deployment
Web application which provides multi-box operational management for
WebSphere DataPower SOA appliances
• 
• 
• 
• 
• 
Perform a secure backup of a set of appliances
Upgrade firmware to take advantage of new features
Create an application domain for a new project
Migrate an application to production
Update a service within an application domain
Flexible appliance and domain operations
•  Filters allow the user to quickly view appliances, domains or services
•  Selections may be made for all or some appliances in a filtered view
•  When one or more objects is selected, only actions that may be applied to all of
the selected objects are available
•  An appliance may be managed by more than one instance of the WebSphere
Appliance Management Center
WAMC UI
WAMC UI Tabs
•  Appliances
•  Has a list of appliances
•  Name, Host Name, Appliance Type, Model, Firmware and Status
•  Filters can be applied on the list
•  Domains
•  View domains available in the selected Appliance from Appliances tab
•  Shows the Name of domain, Appliance and Status of Domain
•  Filter can be applied on the list
•  Services
•  List contains the Services available in the domain
•  List has Name of Service, Type (MPG,WSP), Domain, Appliance and Status of the
Service
•  Filter can be applied on the list
•  Repository
•  Add Firmware Image to repository
•  Firmware from repository can be deployed to the selected Appliances from the
list
•  History
•  History of actions performed.
•  Deployment status.
National Auto Leader
Data Power and IIB as Integration Solution
Internet
DMZ
Trusted Domain
Point Of Sale
(POS)
External
Partner
LTPA
XG45
XI52
SOAP
SAML
WebSphere
eXtreme Scale
IIB/Broker
BAPI/RFC
Monitoring
DMZ
Trusted Domain
CA Wily
Internet
Memory/CPU
External
Partner
XG45
XI52
IIB/Broker
Transactional data
Data
Collect
or
ITCAM
Transactional data
Data
Collect
or
Solarwin
ds
O/S and Application
level Status
Humana Service Bus Architecture
An instance of the “Humana Service Bus” represents the foundational enterprise-standard technology
stack for building pattern-based integration solutions at Humana. Strategically, it is comprised of
vendor-provided products with Humana-specific configurations, customizations, and technology
processes bolted on.
WSRR
Human
a
Service
Bus
Instanc
e
Cloud Services
Integration
API
Management
DataPower
IBM Integration
Bus (IIB)
MQ
Shared
infrastructure
(multi-tenant with
logical segregation,
physical segregation
is possible where
needed)
Bringing the Capabilities Together
From Strategy to Implementation
Strategy/Principle
Contextual
Principles are guiding statements of direction and truths, while
strategies are long-term plans of action designed to achieve particular
architectural goals
Loosely
Coupled
Components
Domain Strategy/Principle
Conceptual
Logical
Integration
Strategy
Represent statements of direction and truths(Strategies and Principles)
for each of the 6 technology domains.
Architecture Patterns
Represent the highest level of abstraction and express the
fundamental structure of information systems
Data – Most
Valuable
Asset
Application
Integration
Data
Integration
Design Patterns
A lower level abstraction that expands on
architectural views
Physical
Standards
Specification of Humana’s adopted
technical and product standards
Implementation Guidelines
Provides guidance for patterns in the context
of Humana’s Technology environment
Messaging
Technology
Standards :
JMS
JMS
Messaging
Balancing
Product
Standards :
IBM MQ
IBM MQ
Messaging
ETL
Use Case #1 – Enterprise Logging
Enterprise Logging is to provide strategic logging and log analysis capabilities for application
events, business events, and integration platform events, enabling improved ways of
understanding the health of our applications, operations, and business processes.
Use Case #2 – Geo-Coding
Geocoding service is the process of converting address into geographic
coordinates (like latitude 37.423021 and longitude -122.083739).
Use Case #3 – Pub Sub Accelerator
•  Pub Sub Accelerator will provide an enterprise wise dynamic data
routing capabilities using IBM Integration Bus
•  The solution provides a capability of near real time dynamic publishing
to subscribers using the topic with additional governance.
Thank you for visiting our session. For more
information, please visit our booth(D2) on the
Solution EXPO floor (or) if you have any questions
feel free to interact with our personnel and they
would be more than happy to help you out.
For more information
www.miraclesoft.com