Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a...

31
‘Star Jedi’ font downloaded from http://www.dafont.com/star-jedi.font 1

Transcript of Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a...

Page 1: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

‘Star Jedi’ font downloaded from http://www.dafont.com/star-jedi.font

1

Page 2: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

2

Page 3: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

3

Page 4: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

4

Page 5: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

5

Page 6: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Enhanced Networking = higher packet per second (PPS) performance, lower network jitter, lower latencies

• Enabled by default on Windows Server 2012 R2 AMI’s

6

Page 7: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Changes to Esri’s ArcGIS Server Cloud Builder warranted the move from EC2-Classic to VPC

• VPC = Virtual Private Cloud. ‘Logically isolated’ section of AWS cloud; more control over networking environment

7

Page 8: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Network ACL = Network Access Control List• Acts like a firewall; provides interface to control incoming and outgoing

traffic• We had some initial difficulty getting the Network ACL rules ‘right’

• Windows Updates would not install• Issues with map services registered with ArcGIS Online:

• Data access / drawing on the map• Configuring layer searches within Web Map settings

8

Page 9: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Following the Network ACL documentation, opened a wider range of ports for the Network ACL

9

Page 10: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• ‘Final’ Network ACL rules:• Web (80, 443) from ‘anywhere’• Remote Desktop from City of Novi / City Hall• ArcGIS Server traffic (6080/6443) inside subnet• Ephemeral port ranges (different in / out)• ArcGIS License Manager (27000-27009) from City of Novi / City Hall

10

Page 11: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Wanted to use secure ‘HTTPS’ services in updated web apps• Acquire an SSL certificate• Configure SSL settings on AGS Server, Elastic Load Balancer

• Encountered a few issues:• HTTP Protocol settings were reverting back to HTTP only following a server

restart• Unable to store credentials to for secure services in ArcGIS Online

11

Page 12: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Did not upload an SSL certificate through CloudBuilder when the 10.3.1 site was created (not yet acquired)

• SSL configuration for ArcGIS Server done in three steps• Import certificate into ArcGIS Server. Once successful…• Edit machine properties to use the imported certificate.• Update the security information for the site to use HTTP and HTTPS - or –

HTTPS only

12

Page 13: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Did not upload an SSL certificate through CloudBuilder when the 10.3.1 site was created (not yet acquired)

• After purchasing the SSL certificate, ArcGIS Server and the ELB needed to be configured and updated

• AWS > edit ELB Listeners to add a listener for HTTPS• Choose to upload an SSL certificate to AWS for use on ELB’s

13

Page 14: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Did not upload an SSL certificate through CloudBuilder when the 10.3.1 site was created

• AWS > edit ELB listeners to add HTTPS• Choose to upload a new SSL certificate to AWS for use on ELB’s

• Left the Certificate Chain section blank (in my defense, it says Optional)

14

Page 15: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Everything appeared to be OK with the SSL until we tried registering the services with ArcGIS Online…

• Enter a URL for a secure (https) service > option to save the credentials for the service was not available

• Not there AT ALL• Would have prompted for service credentials each time a map is loaded…would

not work for public-facing applications

15

Page 16: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Research > found blog post from SSP Innovations• Referenced incomplete certificate chain, inability to store credentials when

registering services in ArcGIS Online

• Tried process again, this time adding the Certificate Chain information• Tested > Worked!

16

Page 17: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Takeaway: If you want to use an SSL certificate on your ELB, the Certificate Chain parameter is not optional!

17

Page 18: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Registering HTTPS services in ArcGIS Online, noticed issues with services not being available

• Publishing services > registering in ArcGIS Online using ‘https’ endpoint > services would not be available following a server restart

• Troubleshooting > determined that HTTP protocol settings in AGS Server reverting to ‘HTTP Only’ following server restart

• Worked with Esri support and discovered that this is/was a bug in the 10.3.1 AMI’s

• Checked 4/25/16 > ‘Version Fixed’ is still N/A, interested to hear if users who have upgraded to 10.4 are experiencing the same issues

18

Page 19: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Production data stored in Novi’s internal ArcGIS Server / ArcSDE Environment• Using 1-way geodatabase replication to transfer data changes from the internal

geodatabase to the geodatabase (SQL Express) in AWS• A second one-way replication transfers data from SQL Express to a file

geodatabase• This was done to work-around the connection limits for a Workgroup

geodatabase (10 concurrent connections)• ArcGIS Server services (HTTPS) are registered with ArcGIS Online• Applications configured using ArcGIS Online / Web AppBuilder, shared with public

• Links to applications placed on Novi’s Map Gallery page on City web site

19

Page 20: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

Steps we complete on the Amazon Cloud:

1. Copy standalone feature classes or sync enterprise geodatabase2. Custom print services with the City’s templates3. Generate cache for aerials4. Set up address locator with Novi’s data

All of these content elements become web services accessible through the REST endpoint and registered with ArcGIS Online.

20

Page 21: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Migrated existing caches from original Amazon Cloud server to new server• Only needed to produce a cache for 2015 imagery• MrSID images copied directly to cloud

• Utilized original ArcMap documents to re-create new map services• Preserved symbology, labels, scale thresholds, etc.

• New services include March Board of Review Residential Sales, Trash Hauling Inventory, 2015 imagery

• A few data sources are in a file geodatabase as they are only updated once per year

• Additional services include GeoData service and a custom print service

21

Page 22: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

In order to publish a new interactive mapping website, we first laid the foundation of a new Amazon Cloud instance, set up security, and published web services.

The secure web services were registered with the City of Novi’s ArcGIS Online for Organization account.

22

Page 23: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

23

Page 24: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Use fields as the pop-up title• Configure attributes:

• Enter field name alias• Change number formatting: decimal places & 1000 separator

• Build custom pop-up• Font size, style - WYSIWYG• Create link to online BS&A information to pass parcel number to Access My

Gov

24

Page 25: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Branding only available on some templates such as Launchpad, Foldable, or Tab theme

• Preview on other screen sizes

25

Page 26: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

• Configured in ArcGIS Online Organizational account

26

Page 27: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

27

Page 28: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

28

Page 29: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

29

Page 30: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

30

Page 31: Star Jedi font downloaded from ... · • This was done to work-around the connection limits for a Workgroup geodatabase (10 concurrent connections) • ArcGIS Server services (HTTPS)

31