book

DataPower SOA Appliance Administration, Deployment, and Best Practices

by Gerry Kaplan, Jan Bechtold, Daniel Dickerson, Richard Kinard, Ronnie Mitra, Helio L. P. Mota, David Shute, John Walczyk

June 2011

Intermediate to advanced

300 pages

6h 40m

English

IBM Redbooks

Read now

Unlock full access

Front cover
Contact an IBM Software Services Sales Specialist
Notices
Trademarks
Preface
The team who wrote this bookNow you can become a published author, too!Comments welcomeStay connected to IBM Redbooks
Chapter 1. Securing user access
1.1 Overview1.2 Benefits1.3 Device initialization considerations1.3.1 Setting up the master administrator password1.3.2 Enabling Disaster Recovery Mode1.4 Access control lists1.5 Authentication and credential mapping1.5.1 Locally managed users1.5.2 Locally defined user groups1.5.3 Using local user repository for contingency1.5.4 Pros and cons of using the local user repository1.5.5 RBM policy files1.5.6 Remote authentication servers1.5.7 Single sign-on1.5.8 Login processing summary1.6 Audit logs1.6.1 Obtaining the audit log using CLI1.6.2 Copying the audit log using SOMA1.7 Preferred practices1.8 Troubleshooting
Chapter 2. Networking
2.1 Overview2.2 Benefits2.3 Usage2.3.1 Network interface configuration and routing2.3.2 VLAN sub-interfaces2.3.3 Network settings2.3.4 Host alias, static hosts, and domain name system2.3.5 Routing2.3.6 Load balancing a back-end destination2.3.7 Intelligent Load Distribution2.3.8 Self-Balancing services2.3.9 Load balancer health checking2.3.10 Standby Control and high availability2.4 Preferred practices2.4.1 Avoid using 0.0.0.0 as a listener2.4.2 Separating management traffic2.4.3 Specify port values less than 10,0002.4.4 Persistent timeout consideration2.4.5 Disable chained persistent connections2.4.6 Configure network settings to be portable2.4.7 Multiple default gateways will create multiple default routes2.4.8 Standby Control preferred practices2.4.9 Management interface and default route2.4.10 Enabling â€œNo Delay Ackâ€ to avoid latency with other systems2.4.11 Streaming large messages and flow control2.5 Examples2.5.1 Externalizing endpoints in a metadata document2.5.2 Disabling chained persistent connections for points of a service2.5.3 Port speed mismatch2.5.4 Sample DNS workaround using static host2.5.5 Sample CLI commands to capture DNS server responses2.5.6 Verifying that Rapid Spanning Tree deployed properly for DataPower Standby Control2.5.7 Example of deleting routes2.5.8 Sample XSLT for adding DataPower transaction ID to an HTTP header for outgoing traffic
Chapter 3. Domains
3.1 Application domains3.1.1 The default domain3.1.2 Domain use and benefits3.1.3 Segregating projects and LOBs3.1.4 Number of domains on an appliance3.1.5 Domain resource consumption3.2 Domain structure3.2.1 Local flash-based file system3.2.2 Domain configuration files3.2.3 Domain logging3.2.4 Domain monitoring3.2.5 Shared resources3.3 Domain persistence3.3.1 Saving configuration changes3.3.2 Imported domain configurations3.4 Usage considerations3.4.1 Cross-domain file visibility3.4.2 Domain names3.4.3 Restarting and resetting domains3.4.4 Quiescing3.4.5 Cleaning up orphaned objects3.4.6 Isolating the domain network interface3.4.7 Deleting domains3.5 Preferred practices3.6 Further reading
Chapter 4. Simple Network Management Protocol monitoring
4.1 Appliance monitoring4.2 DataPower monitoring fundamentals4.3 Enabling statistics4.4 SNMP monitoring4.4.1 SNMP protocol messages4.4.2 Management information base (MIB) structure4.4.3 SNMP traps4.4.4 DataPower status providers4.4.5 SNMP security4.4.6 Configuring SNMP using the WebGUI4.4.7 Generating traps with SNMP log targets4.5 Monitoring via the XML management interface4.5.1 Requesting device status and metrics4.6 Appliance monitoring values4.6.1 General device health and activity monitors4.6.2 Interface utilization statistics4.6.3 Other network status providers4.7 SNMP traps4.8 Certificate monitoring considerations4.9 Preferred practices and considerations
Chapter 5. IBM Tivoli Monitoring
5.1 IBM Tivoli Monitoring environment architecture5.1.1 Tivoli Management Services components5.1.2 IBM Tivoli Composite Application Manager5.1.3 IBM Tivoli Composite Application Manager for SOA5.2 Monitoring DataPower appliances5.2.1 Monitoring DataPower application-level traffic5.2.2 Monitoring hardware metrics and resource use5.2.3 IBM Tivoli Composite Application Manager for SOA DataPower agent comparisons5.3 Tivoli Composite Application Manager for SOA architecture5.3.1 IBM Tivoli Composite Application Manager for SOA agents5.4 Monitoring DataPower service objects5.4.1 Customizing for Multi-Protocol Gateway traffic monitoring5.4.2 Using latency logs for transaction monitoring5.5 Tivoli Composite Application Manager for SOA deployment scenarios5.5.1 Minimal deployment5.5.2 Multiple location, single agent deployment5.5.3 Multiple location, multi-agent deployment5.5.4 Large multiple location deployment with health monitoring5.5.5 Complete IBM Tivoli Composite Application Manager for SOA enterprise architecture5.6 IBM Tivoli Composite Application Manager for SOA and DataPowerâ€™s built-in SLM
Chapter 6. Logging
6.1 Overview6.1.1 Message process logging6.1.2 Publish and subscribe system6.1.3 Log targets and log categories6.1.4 Storing log messages6.1.5 Email pager6.1.6 Audit logging6.2 Benefits6.3 Usage6.4 Event logging6.4.1 Create custom log categories6.4.2 Create log targets6.4.3 Create log message generators6.5 Transaction logging6.5.1 Log action6.5.2 Results action6.6 Usage considerations6.7 Preferred practices6.7.1 Set log priority levels higher in production environments6.7.2 Use the default domain for device-wide logging6.7.3 Suppress repeated log messages6.7.4 Employ a load balancer for critical log targets6.7.5 Select the appropriate syslog server6.7.6 Test production logging capacity before deployment6.7.7 Plan for confidentiality6.7.8 Manage multiple-log target feedback loops

Chapter 7. B2B configuration and administration
7.1 Introduction to B2B appliances7.2 B2B appliance benefits7.3 Preferred practices7.3.1 Capacity planning7.4 Use cases7.4.1 Active/passive high availability use case7.4.2 XB60 active/active high availability use case
Chapter 8. Development life cycle
8.1 Organizational structure8.2 Software development life cycle8.2.1 Sequential life-cycle model8.2.2 Iterative life-cycle model8.2.3 Choosing a life-cycle model8.3 DataPower life-cycle stages8.3.1 Physical installation8.3.2 Solution design8.3.3 Operational design8.3.4 Development8.3.5 Testing8.3.6 Deployment
Chapter 9. Configuration management and deployment
9.1 Configuration management9.1.1 Revision control9.1.2 Parallel development9.2 Deployment9.2.1 Upgrading an existing implementation9.2.2 Managing environment-specific values9.2.3 Handling public key infrastructure material9.2.4 Checkpointing configurations for backing out changes9.2.5 Hot deployment9.3 Preferred practices
Chapter 10. Appliance management and automation
10.1 Task automation10.1.1 The case for automation10.1.2 The case against automation10.2 Security considerations for automation10.3 XML management interface10.3.1 Authentication10.3.2 Appliance Management Protocol (AMP)10.3.3 SOAP Management Interface (SOMA)10.3.4 WSDM and WS-Management10.4 WebSphere Appliance Management Toolkit API10.4.1 Usage10.4.2 WebSphere Appliance Management Toolkit advantages10.4.3 Disadvantages10.5 Command-line interface automation10.5.1 Authentication10.5.2 Range of commands10.5.3 Usage10.5.4 Advantages of using the CLI10.5.5 Disadvantages of using the CLI10.6 WebSphere Application Server Network Deployment Appliance Manager Version 710.6.1 Advantages of using the WebSphere Application Server ND Appliance Manager10.6.2 Disadvantages of the WebSphere Application Server ND Appliance Manager10.7 IBM WebSphere Appliance Management Center10.8 Summary
Appendix A. Custom Role-Based Management authentication and credential mapping
Authentication phaseCredential mapping phaseExample: Multiple LDAP group membershipDevelopment considerations
Appendix B. Additional material
Locating the Web materialUsing the Web material
Related publications
IBM Redbooks publicationsOther publicationsOnline resourcesHelp from IBM
Back cover

Overview

This IBM® Redbooks® publication focuses on operational and managerial aspects for DataPower® appliance deployments.

DataPower appliances provide functionality that crosses both functional and organizational boundaries, which introduces unique management and operational challenges. For example, a DataPower appliance can provide network functionality, such as load balancing, and at the same time, provide enterprise service bus (ESB) capabilities, such as transformation and intelligent content-based routing.

This IBM Redbooks publication provides guidance at both a general and technical level for individuals who are responsible for planning, installation, development, and deployment. It is not intended to be a "how-to" guide, but rather to help educate you about the various options and methodologies that apply to DataPower appliances. In addition, many chapters provide a list of suggestions.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

DataPower SOA Appliance Service Planning, Implementation, and Best Practices

Publisher Resources

ISBN: 0738435708Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills