WSTE 09292009 CICSWebServicesPart2Deployment Williams

7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams

1/42

IBM Software Group

WebSphereSupport Technical Exchange

CICS Web Services Part !

"eplo#$ent

%igel Willia$s

Certifie& IT Specialist' IBM "esign Center( Montpellier


2/42

IBM Software Group

WebSphereSupport Technical Exchange of )

*gen&a

+verview of CICS Web services runti$e

Ma,or &eplo#$ent consi&erations an& best practice

Securit#

Wor-loa& Manage$ent an& *vailabilit#

Perfor$ance

Custo$er case stu

CICS version &ifferences

Note:this WSTE Webcast is a follow.on fro$ the Webcast of n& *ugust /CICS

Web Services Part 0! "evelop$ent1!

http!22www3ib$3co$2support2&ocview3wss4ui&5swg670889:
http://www.ibm.com/support/docview.wss?uid=swg27016658http://www.ibm.com/support/docview.wss?uid=swg27016658http://www.ibm.com/support/docview.wss?uid=swg27016658http://www.ibm.com/support/docview.wss?uid=swg27016658


3/42

IBM Software Group

WebSphereSupport Technical Exchange ; of )

M http!22www3re&boo-s3ib$3co$2abstracts2sg)60))3ht$l4+pen

"evelop$ent http!22www3re&boo-s3ib$3co$2abstracts2sg)6083ht$l4+pen

Exa$ples http!22www.703ib$3co$2support2&ocview3wss4ui&5swg)7766)

?nowle&ge Collection http!22www.703ib$3co$2support2&ocview3wss4ui&5swg6707976
http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v3r2/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v4r1/index.jsphttp://www.redbooks.ibm.com/abstracts/sg245466.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247206.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247687.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247658.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247144.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247126.html?Openhttp://www-01.ibm.com/support/docview.wss?uid=swg24020774http://www-01.ibm.com/support/docview.wss?uid=swg27010507http://www-01.ibm.com/support/docview.wss?uid=swg27010507http://www-01.ibm.com/support/docview.wss?uid=swg24020774http://www.redbooks.ibm.com/abstracts/sg247126.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247144.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247658.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247687.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247206.html?Openhttp://www.redbooks.ibm.com/abstracts/sg245466.html?Openhttp://publib.boulder.ibm.com/infocenter/cicsts/v4r1/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v3r2/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp


4/42

IBM Software Group

WebSphereSupport Technical Exchange ) of )

T#pical CICS Web services scenariosCICS TS

Web ServiceRequester

@WebSphere(

WPS( WMB(

"ataPower( 3

%ET( other A

CICS

Web

Services

support

Integration

logic

"ata

access

Business unction

DI

Business

logic

B

Other/Any (Service Provider

CICS TS

CICSWeb

Services

support

ro$ CICS Progra$

Business

logic

B

Other/Any(Service Requester

Web Service

Provider

@WebSphere(

WPS( WMB(

"ataPower( 3

%ET( other A


5/42

IBM Software Group

WebSphereSupport Technical Exchange 9 of )

CICS Web services overview

Client

A

CICS Web support

WebSphere MD Trigger Monitor

Pipeline

CICS or custo$ &ata $apping

CICS TS

S+*P

DB

Prox#

ro$ CICS TS ;30 a CICS application can be Web service provi&er or consu$er

FTTP or MD transport

=unti$e

S+*P envelope re$ove& b# a $essage han&ler in the Web services pipeline

Co$$area or container built b# &ata $apperH "evelop$ent using CICS supplie& utilities or =ational "eveloper for S#ste$ @="


6/42

IBM Software Group


Securit# planning consi&erations

Fow to authenticate Fow to pass securit# cre&entials @in $essage or in transport la#er Whether i&entit# assertion is reKuire& Fow to ensure confi&entialit# an& &ata integrit#

CICS TS

Web

Service

=eKuester

CICS

Web

Servicessupport

Business

logic

DB

WebS!here

A!!"ic#tion Server

LNOQO

I

*pp

WS.Securit#2

WS.Trust

*uthentication4

S+*P2FTTPS

Confi&entialit#

an& Integrit#

*uthoriation

*lice

*uthentication

CICS supplie&

securit# han&ler


7/42

IBM Software Group


Securit# best practice

Transport securit# alone @e3g SS>2T>S $a# be sufficient insi$ple environ$ents @point to point

2T>S

WS3R stan&ar&s can be use& for $ore a&vance& reKuire$ents

WS.Securit# enables $essage.level authentication( &ata integrit# an& encr#ption

CICS supports WS.Securit# A b# interoperating with a Securit# To-en Service @STS suchas Tivoli e&erate& I&entit# Manager @TIM

Consi&er using WebSphere "ataPower for internet solutions! JM> vali&ation

Protection against JM> "%S attac-s

+ffloa& of expensive operations @e3g JM> &igital signature processing


8/42

IBM Software Group

WebSphereSupport Technical Exchange : of )

2+S

"B

S#splex"istributor

MDShare&Dueue

W+= *+=

CICS CICS

ExistingBusiness>ogic

CWJ%

C?TI

Inboun& S+*PPipeline @CPIF

W>M an& *vailabilit# consi&erations

Fow to wor-loa& $anage service reKuests Fow to set the pipeline transaction i&

Fow to process Web service reKuests across a CICSplex Fow to ensure service availabilit#


9/42


10/42

IBM Software Group


Perfor$ance consi&erations

Pi!e"ine CP$ co%! #rison

0.00

0.50

1.00

1.50

2.00

2.50

3.00

3.50

Old pipeline New P ipeline

AOR CP ms per Request

IGOR CP ms per Request

&' (' )' *' +'

Extern al Tra nsaction =ate @tran s2secon&

Throughput

'

+'

&''

&+'

(''

CP using persistentconnections or SS> session i&

reuse

When using WS.Securit# .


12/42

IBM Software Group


Custo$er case stu

Pro.ect sco!e-

"eter$ine the best infrastructurebearing in $in& the security( 0or1"o#d%#n#,e%entan& sc#"#bi"ityreKuire$ents

arge car insurer @:U $illion policies

Service #v#i"#bi"ity is !#r#%ount

http!22www3ib$3co$2software2htp2cics2tserver2v;2librar#2in&ex3ht$l


13/42

IBM Software Group

WebSphereSupport Technical Exchange 0; of )


14/42

IBM Software Group

WebSphereSupport Technical Exchange 0) of )

Teste& configuration

W*S 2+S

Partners(Java/.NET)

Web Services Clients

Front office(Java/.NET) Browser

Web services Servlets

EJB ServicesCICS

CICS !!lications

Web services

SS

S#ste$

Co$$on access point

I&entit# $apping

S"P/#TTPSS"P/#TTPS

*u&iting

I&entit# assertion

S"P/

#TTPS


15/42

IBM Software Group


Wor-loa& $anage$ent of inboun& service reKuests

CICS router for inboun& reKuests -nown as

/Inboun& Gatewa# +wning =egion1 @I6OR

>ocation of service en&point V base& on br#nd

host na$es

IG+= runs CICS 0r#!!erprogra$ @/$eet in the

$i&&le1 approach

Establishes transaction context @bran& specific

transaction i& an& user i&entit#

S=SP

x#3pssc3fr

WASorDP

CICSI6OR

378CICS&

ABCCICS&

abc3pssc3fr

B

B

S+*P2

FTTPS

>I%?A


16/42

IBM Software Group


Wor-loa& $anage$ent of outboun& service reKuests

Business logic progra$ lin-s to service

reKuester progra$ in /+utboun& Gatewa#

+wning =egion1 @O6OR =uns CICS Web service reKuester progra$

which uses EJEC CICS I%+?E

WEBSE=ICE *PI to call service provi&er

378CICS&

ABCCICS&

SP

S=CICS

O6OR

B

BWAS

orDP

>I%?

>I%?

S+*P2

FTTPSA


17/42

IBM Software Group


=esource &efinitions

WEBSERVICE

URIMAP

CICS TS V3.1TCPIPSERVICE

TABCCWXN

ServiceRequester

URIMAPmatching

CSOL

Pipei!e

"#!$ers

"#!$ers

"#!$ers

SOAP request

$#t# %#ppi!&

PIPELINE


18/42

IBM Software Group

WebSphereSupport Technical Exchange 0: of )

S+*P reKuest $essage


19/42

IBM Software Group


S+*P response $essage


20/42

IBM Software Group


TCPIPSE=ICE &efinitionCEDA DEFine TCpipservice( TCPIPABC)

TCpipservice : TCPIPABCGROup : WSIGOR

DEscription ==> TCPIPSERICE FOR BRA!D ABC"r# ==> DF$WBAD%POrtnu#&er ==>20002 '**+*ST,tus ==> Open Open - C.ose/PROtoco. ==> $ttp Iiop - $ttp - Eci -

"ser TR,ns,ction ==> CW%!

B,c0.o1 ==> 2222* 2+344TS5pre6i7 ==>Ip,//ress ==>SOc0etc.ose ==> 000030 !o - 2382222 ($$99SS)9,7/,t,.en ==> 2222+3 +*383

SEC"RIT;SS. ==> Clientauth ;es - !o - C.ient,ut En,&.e/ En,&.e/ Dis,&.e/

"SA1e ==> Pipe.ine Server C.ient

Pipe.ine

"!IERSA RESO"RCE IDE!TIFIER

SC HTTPS $TTP $TTPS$OST ==> abc.pssc.fr(o?er C,se) ==>

PAt< ==> /Accounts/AccountTransfer

ASSOCIATED CICS RESO"RCES

TCpipservice ==> TCPIPABC TR,ns,ction ==>

TABC PIpie.ine ==> PIPEHIGH We&service ==>AcntTrn

Fost #bc-!ssc-9r specifies the host co$ponent of the


22/42

IBM Software Group

WebSphereSupport Technical Exchange of )

Service part of high value pipeline configuration fileserviceX

ter$inalYhan&lerX

cicsYsoapY030Yhan&lerX

hea&erprogra$X

progra$Yna$eXSRST$ID2progra$Yna$eX

na$espaceXhttp!22&ocs3oasis.open3org2wss277)2702oasis.

77)70.wss.wssecurit#.secext.0373xs&2na$espaceX localna$eXSecurity2localna$eX

$an&ator#Xtrue2$an&ator#X

2hea&erprogra$X

2cicsYsoapY030Yhan&lerX

2ter$inalYhan&lerX2serviceX

Note:In this PoC we use& a custo$.written securit# han&ler3 ro$ CICS TS ;3 wereco$$en& to use the CICS supplie& securit# han&ler3

IBM S ft G


23/42

IBM Software Group


CICS pipeline configuration for I" assertion @CICS TS ;3

wsseYhan&lerX

&fhwsseYconfiguration version5Z0ZX

;#uthentic#tion trust


24/42

IBM Software Group

WebSphereSupport Technical Exchange ) of )

*uthoriation chec-ing for *ccount Transfer service

CE9T I!@"IRE TAST,s(2222+'') Tr,(CE9T) F,c(C*T!) Run Ter Pri( 3** )

St,(TO) "se(!IGE3 ) "o?(C242F33FD+AEAA2)

T,s(2222++2) Tr,(TABC) Sus T,s Pri( 22' )

St,(" ) "se(ABCBA!") "o?(C242F+*DFACC2) $t

(RCB!OTI)T,s(2222++') Tr,(TABC) Sus T,s Pri( 22' )

St,(" ) "se(ABC#S$) "o?(C242F+*E23A4FD) $t

(IRI!)

T*S? ;;7 runs with user I" *BCB=*%" @tr#ns!ort idT*S? ;;0 runs with user I" *BC


25/42

IBM Software Group


Figh availabilit# configuration

CICS AOR

Br#nd #bcCICS

I6OR

CICS AOR

Br#nd #bcCICS AOR

Br#nd #bc

CICS AOR

Br#nd #bcCICS AOR

Br#nd ?y4

DB

@IPA #ddress

Br#nd ?y4

@IPA #ddress

Br#nd #bc

Service Requester

DB

D#t# Sh#rin,

C

CICS AOR

Br#nd #bcCICS

I6OR

CICS AOR

Br#nd #bcCICS AOR

Br#nd #bc

CICS AOR

Br#nd #bcCICS AOR

Br#nd ?y4

DB

@IPA #ddress

Br#nd ?y4

@IPA #ddress

Br#nd #bc

SOAP/5TTPS

in1 in1

PAR& PAR

CICS router for inboun& reKuests -nown

as /Inboun& Gatewa# +wning

=egion1 @I6OR

[\]^ ` d[d `j` `k`m

CICS router for outboun& reKuests

-nown as /+utboun& Gatewa#

+wning =egion1 @O6OR

WebS!hereA!!"ic#tion Server

IBM Soft are Gro p


26/42

IBM Software Group


Service 5it R#te $ser o#d

Figh availabilit# test scenario

IBM Software Group


27/42

IBM Software Group


Scalabilit# tests

7

77

)77

877

:77

0777

077

)77 977 877

Nu%ber o9 $sers

Req

uests!erSecond

7377

07377

7377

;7377

)7377

97377

87377

67377

:7377

)77377 977377 877377

Nu%ber o9 $sers

Res!o

nseTi%e(%s

B=*%"*BC *verage response ti$e

T*BC *verage response ti$e

WebS!here Res!onse Ti%e

CICS Res!onse Ti%e

These tests were perfor$e& with service reKuester application &eplo#e& in WebSphere

*pplication Server for 2+S an& service provi&er application &eplo#e& in CICS

"ela# of 97 $s co&e& in CICS business logic progra$

Short $essages!=eKuest 0? ( =esponse ;3;?

Note:these tests perfor$e& with CICS TS ;30 on a S#ste$

IBM Software Group


28/42

IBM Software Group

WebSphereSupport Technical Exchange : of )

Changing the nu$ber of ele$ents @inboun&

CICS as service provi&er

7377

0377

377

;377

)377

9377

8377

6377

07 97 077 77

Nu%ber o9 e"e%ents

c!%s

!erservice

=eKuestCo$plex

Web service perfor$ance &epen&s on the length an& co$plexit# of the $essageEach ele$ent @custo$er recor& in this test contains 07 sub.ele$entsTotal length of the 07 ele$ent $essage is ;3;?Total length of 77 ele$ent $essage is 8:? 7 x Msg Sie ; x CP 37( WS.Trust

Wor1"o#d %#n#,e%ent #nd #v#i"#bi"ity

PIPE>I%E resource has a new =ESPW*IT attribute that &eter$ines how $an#

secon&s CICS service reKuester shoul& wait

Security Perfor$ance of CICS supplie& securit# han&ler is $uch i$prove& when using


38/42

IBM Software Group

WebSphereSupport Technical Exchange ;: of )

CICS TS )30 vs CICS TS ;3

2ore s!eci9ic#tions WS.*&&ressing

Wor1"o#d %#n#,e%ent #nd #v#i"#bi"ity Web services wor-loa&s can benefit fro$ i$prove$ents in CICSPlex SM

na$ic wor-loa& $anage$ent

Security

* client $o&e

S#ste$ Services @JM>SS parser

Internal test! 09 of CP< offloa&e& to **P

IBM Software Group


39/42

p


Su$$ar#

CICS provi&es a robust an& scalable Web services infrastructure

Web services enable secure interoperabilit# with internal

s#ste$s an& external business partners

Man# of IBMs largest custo$ers are using CICS Web services

to&a#

Chec- out the CICS Infor$ation Center an& the $an# ITS+

=e&boo-s for $ore infor$ation on &eplo#ing CICS Web services

IBM Software Group


40/42

p

WebSphereSupport Technical Exchange )7 of )

*&&itional Pro&uct =esources

CICS Transaction Server Support Web page!http!22www3ib$3co$2software2htp2cics2tserver2support2

CICS eature& &ocu$ents!http!22www3ib$3co$2support2&ocview3wss4rs507:;qui&5swg677877

Sign up to receive technical support e$ails!http!22www3ib$3co$2software2support2einfo3ht$l

ollow IBMYCICS support news on Twitter!http!22www3ib$3co$2support2&ocview3wss4rs507:;qui&5swg0;:)09

Webcasts for CICS an& +MEG*M+%!

http!22www3ib$3co$2support2&ocview3wss4rs507:;qui&5swg6776)) IBM E&ucation *ssistant $o&ules!

http!22publib3boul&er3ib$3co$2infocenter2ie&uasst2stgv0r72in&ex3,sp

IBM Software Group
http://www.ibm.com/software/htp/cics/tserver/support/http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/software/support/einfo.htmlhttp://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27007244http://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsphttp://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsphttp://www.ibm.com/support/docview.wss?rs=1083&uid=swg27007244http://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/software/support/einfo.htmlhttp://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/software/htp/cics/tserver/support/


41/42

p

WebSphereSupport Technical Exchange )0 of )

oin WebSphere Support Technical Exchange on aceboo-

Sta# up.to.up&ate onupco$ing webcastsessions

Suggest future topics

Suggest progra$i$prove$ents

%etwor- with other pro&uctusers

*n& MoreA

Beco%e # 9#n no0E

htt!://000-9#ceboo1-co%/!#,es/WebS!hereFSu!!ortFTechnic#"F?ch#n,e/&&G)+H&*&G

IBM Software Group
http://www.facebook.com/pages/WebSphere-Support-Technical-Exchange/121293581419http://www.facebook.com/pages/WebSphere-Support-Technical-Exchange/121293581419


42/42

p

Duestions an& *nswers

WSTE 09292009 CICSWebServicesPart2Deployment Williams

Documents

Transcript of WSTE 09292009 CICSWebServicesPart2Deployment Williams