7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
1/42
IBM Software Group
WebSphereSupport Technical Exchange
CICS Web Services Part !
"eplo#$ent
%igel Willia$s
Certifie& IT Specialist' IBM "esign Center( Montpellier
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
2/42
IBM Software Group
WebSphereSupport Technical Exchange of )
*gen&a
+verview of CICS Web services runti$e
Ma,or &eplo#$ent consi&erations an& best practice
Securit#
Wor-loa& Manage$ent an& *vailabilit#
Perfor$ance
Custo$er case stu
CICS version &ifferences
Note:this WSTE Webcast is a follow.on fro$ the Webcast of n& *ugust /CICS
Web Services Part 0! "evelop$ent1!
http!22www3ib$3co$2support2&ocview3wss4ui&5swg670889:
http://www.ibm.com/support/docview.wss?uid=swg27016658http://www.ibm.com/support/docview.wss?uid=swg27016658http://www.ibm.com/support/docview.wss?uid=swg27016658http://www.ibm.com/support/docview.wss?uid=swg270166587/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
3/42
IBM Software Group
WebSphereSupport Technical Exchange ; of )
M http!22www3re&boo-s3ib$3co$2abstracts2sg)60))3ht$l4+pen
"evelop$ent http!22www3re&boo-s3ib$3co$2abstracts2sg)6083ht$l4+pen
Exa$ples http!22www.703ib$3co$2support2&ocview3wss4ui&5swg)7766)
?nowle&ge Collection http!22www.703ib$3co$2support2&ocview3wss4ui&5swg6707976
http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v3r2/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v4r1/index.jsphttp://www.redbooks.ibm.com/abstracts/sg245466.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247206.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247687.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247658.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247144.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247126.html?Openhttp://www-01.ibm.com/support/docview.wss?uid=swg24020774http://www-01.ibm.com/support/docview.wss?uid=swg27010507http://www-01.ibm.com/support/docview.wss?uid=swg27010507http://www-01.ibm.com/support/docview.wss?uid=swg24020774http://www.redbooks.ibm.com/abstracts/sg247126.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247144.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247658.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247687.html?Openhttp://www.redbooks.ibm.com/abstracts/sg247206.html?Openhttp://www.redbooks.ibm.com/abstracts/sg245466.html?Openhttp://publib.boulder.ibm.com/infocenter/cicsts/v4r1/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v3r2/index.jsphttp://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
4/42
IBM Software Group
WebSphereSupport Technical Exchange ) of )
T#pical CICS Web services scenariosCICS TS
Web ServiceRequester
@WebSphere(
WPS( WMB(
"ataPower( 3
%ET( other A
CICS
Web
Services
support
Integration
logic
"ata
access
Business unction
DI
Business
logic
B
Other/Any (Service Provider
CICS TS
CICSWeb
Services
support
ro$ CICS Progra$
Business
logic
B
Other/Any(Service Requester
Web Service
Provider
@WebSphere(
WPS( WMB(
"ataPower( 3
%ET( other A
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
5/42
IBM Software Group
WebSphereSupport Technical Exchange 9 of )
CICS Web services overview
Client
A
CICS Web support
WebSphere MD Trigger Monitor
Pipeline
CICS or custo$ &ata $apping
CICS TS
S+*P
DB
Prox#
ro$ CICS TS ;30 a CICS application can be Web service provi&er or consu$er
FTTP or MD transport
=unti$e
S+*P envelope re$ove& b# a $essage han&ler in the Web services pipeline
Co$$area or container built b# &ata $apperH "evelop$ent using CICS supplie& utilities or =ational "eveloper for S#ste$ @="
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
6/42
IBM Software Group
WebSphereSupport Technical Exchange 8 of )
Securit# planning consi&erations
Fow to authenticate Fow to pass securit# cre&entials @in $essage or in transport la#er Whether i&entit# assertion is reKuire& Fow to ensure confi&entialit# an& &ata integrit#
CICS TS
Web
Service
=eKuester
CICS
Web
Servicessupport
Business
logic
DB
WebS!here
A!!"ic#tion Server
LNOQO
I
*pp
WS.Securit#2
WS.Trust
*uthentication4
S+*P2FTTPS
Confi&entialit#
an& Integrit#
*uthoriation
*lice
*uthentication
CICS supplie&
securit# han&ler
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
7/42
IBM Software Group
WebSphereSupport Technical Exchange 6 of )
Securit# best practice
Transport securit# alone @e3g SS>2T>S $a# be sufficient insi$ple environ$ents @point to point
2T>S
WS3R stan&ar&s can be use& for $ore a&vance& reKuire$ents
WS.Securit# enables $essage.level authentication( &ata integrit# an& encr#ption
CICS supports WS.Securit# A b# interoperating with a Securit# To-en Service @STS suchas Tivoli e&erate& I&entit# Manager @TIM
Consi&er using WebSphere "ataPower for internet solutions! JM> vali&ation
Protection against JM> "%S attac-s
+ffloa& of expensive operations @e3g JM> &igital signature processing
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
8/42
IBM Software Group
WebSphereSupport Technical Exchange : of )
2+S
"B
S#splex"istributor
MDShare&Dueue
W+= *+=
CICS CICS
ExistingBusiness>ogic
CWJ%
C?TI
Inboun& S+*PPipeline @CPIF
W>M an& *vailabilit# consi&erations
Fow to wor-loa& $anage service reKuests Fow to set the pipeline transaction i&
Fow to process Web service reKuests across a CICSplex Fow to ensure service availabilit#
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
9/42
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
10/42
IBM Software Group
WebSphereSupport Technical Exchange 07 of )
Perfor$ance consi&erations
Pi!e"ine CP$ co%! #rison
0.00
0.50
1.00
1.50
2.00
2.50
3.00
3.50
Old pipeline New P ipeline
AOR CP ms per Request
IGOR CP ms per Request
&' (' )' *' +'
Extern al Tra nsaction =ate @tran s2secon&
Throughput
'
+'
&''
&+'
(''
CP using persistentconnections or SS> session i&
reuse
When using WS.Securit# .
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
12/42
IBM Software Group
WebSphereSupport Technical Exchange 0 of )
Custo$er case stu
Pro.ect sco!e-
"eter$ine the best infrastructurebearing in $in& the security( 0or1"o#d%#n#,e%entan& sc#"#bi"ityreKuire$ents
arge car insurer @:U $illion policies
Service #v#i"#bi"ity is !#r#%ount
http!22www3ib$3co$2software2htp2cics2tserver2v;2librar#2in&ex3ht$l
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
13/42
IBM Software Group
WebSphereSupport Technical Exchange 0; of )
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
14/42
IBM Software Group
WebSphereSupport Technical Exchange 0) of )
Teste& configuration
W*S 2+S
Partners(Java/.NET)
Web Services Clients
Front office(Java/.NET) Browser
Web services Servlets
EJB ServicesCICS
CICS !!lications
Web services
SS
S#ste$
Co$$on access point
I&entit# $apping
S"P/#TTPSS"P/#TTPS
*u&iting
I&entit# assertion
S"P/
#TTPS
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
15/42
IBM Software Group
WebSphereSupport Technical Exchange 09 of )
Wor-loa& $anage$ent of inboun& service reKuests
CICS router for inboun& reKuests -nown as
/Inboun& Gatewa# +wning =egion1 @I6OR
>ocation of service en&point V base& on br#nd
host na$es
IG+= runs CICS 0r#!!erprogra$ @/$eet in the
$i&&le1 approach
Establishes transaction context @bran& specific
transaction i& an& user i&entit#
S=SP
x#3pssc3fr
WASorDP
CICSI6OR
378CICS&
ABCCICS&
abc3pssc3fr
B
B
S+*P2
FTTPS
>I%?A
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
16/42
IBM Software Group
WebSphereSupport Technical Exchange 08 of )
Wor-loa& $anage$ent of outboun& service reKuests
Business logic progra$ lin-s to service
reKuester progra$ in /+utboun& Gatewa#
+wning =egion1 @O6OR =uns CICS Web service reKuester progra$
which uses EJEC CICS I%+?E
WEBSE=ICE *PI to call service provi&er
378CICS&
ABCCICS&
SP
S=CICS
O6OR
B
BWAS
orDP
>I%?
>I%?
S+*P2
FTTPSA
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
17/42
IBM Software Group
WebSphereSupport Technical Exchange 06 of )
=esource &efinitions
WEBSERVICE
URIMAP
CICS TS V3.1TCPIPSERVICE
TABCCWXN
ServiceRequester
URIMAPmatching
CSOL
Pipei!e
"#!$ers
"#!$ers
"#!$ers
SOAP request
$#t# %#ppi!&
PIPELINE
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
18/42
IBM Software Group
WebSphereSupport Technical Exchange 0: of )
S+*P reKuest $essage
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
19/42
IBM Software Group
WebSphereSupport Technical Exchange 0 of )
S+*P response $essage
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
20/42
IBM Software Group
WebSphereSupport Technical Exchange 7 of )
TCPIPSE=ICE &efinitionCEDA DEFine TCpipservice( TCPIPABC)
TCpipservice : TCPIPABCGROup : WSIGOR
DEscription ==> TCPIPSERICE FOR BRA!D ABC"r# ==> DF$WBAD%POrtnu#&er ==>20002 '**+*ST,tus ==> Open Open - C.ose/PROtoco. ==> $ttp Iiop - $ttp - Eci -
"ser TR,ns,ction ==> CW%!
B,c0.o1 ==> 2222* 2+344TS5pre6i7 ==>Ip,//ress ==>SOc0etc.ose ==> 000030 !o - 2382222 ($$99SS)9,7/,t,.en ==> 2222+3 +*383
SEC"RIT;SS. ==> Clientauth ;es - !o - C.ient,ut En,&.e/ En,&.e/ Dis,&.e/
"SA1e ==> Pipe.ine Server C.ient
Pipe.ine
"!IERSA RESO"RCE IDE!TIFIER
SC HTTPS $TTP $TTPS$OST ==> abc.pssc.fr(o?er C,se) ==>
PAt< ==> /Accounts/AccountTransfer
ASSOCIATED CICS RESO"RCES
TCpipservice ==> TCPIPABC TR,ns,ction ==>
TABC PIpie.ine ==> PIPEHIGH We&service ==>AcntTrn
Fost #bc-!ssc-9r specifies the host co$ponent of the
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
22/42
IBM Software Group
WebSphereSupport Technical Exchange of )
Service part of high value pipeline configuration fileserviceX
ter$inalYhan&lerX
cicsYsoapY030Yhan&lerX
hea&erprogra$X
progra$Yna$eXSRST$ID2progra$Yna$eX
na$espaceXhttp!22&ocs3oasis.open3org2wss277)2702oasis.
77)70.wss.wssecurit#.secext.0373xs&2na$espaceX localna$eXSecurity2localna$eX
$an&ator#Xtrue2$an&ator#X
2hea&erprogra$X
2cicsYsoapY030Yhan&lerX
2ter$inalYhan&lerX2serviceX
Note:In this PoC we use& a custo$.written securit# han&ler3 ro$ CICS TS ;3 wereco$$en& to use the CICS supplie& securit# han&ler3
IBM S ft G
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
23/42
IBM Software Group
WebSphereSupport Technical Exchange ; of )
CICS pipeline configuration for I" assertion @CICS TS ;3
wsseYhan&lerX
&fhwsseYconfiguration version5Z0ZX
;#uthentic#tion trust
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
24/42
IBM Software Group
WebSphereSupport Technical Exchange ) of )
*uthoriation chec-ing for *ccount Transfer service
CE9T I!@"IRE TAST,s(2222+'') Tr,(CE9T) F,c(C*T!) Run Ter Pri( 3** )
St,(TO) "se(!IGE3 ) "o?(C242F33FD+AEAA2)
T,s(2222++2) Tr,(TABC) Sus T,s Pri( 22' )
St,(" ) "se(ABCBA!") "o?(C242F+*DFACC2) $t
(RCB!OTI)T,s(2222++') Tr,(TABC) Sus T,s Pri( 22' )
St,(" ) "se(ABC#S$) "o?(C242F+*E23A4FD) $t
(IRI!)
T*S? ;;7 runs with user I" *BCB=*%" @tr#ns!ort idT*S? ;;0 runs with user I" *BC
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
25/42
IBM Software Group
WebSphereSupport Technical Exchange 9 of )
Figh availabilit# configuration
CICS AOR
Br#nd #bcCICS
I6OR
CICS AOR
Br#nd #bcCICS AOR
Br#nd #bc
CICS AOR
Br#nd #bcCICS AOR
Br#nd ?y4
DB
@IPA #ddress
Br#nd ?y4
@IPA #ddress
Br#nd #bc
Service Requester
DB
D#t# Sh#rin,
C
CICS AOR
Br#nd #bcCICS
I6OR
CICS AOR
Br#nd #bcCICS AOR
Br#nd #bc
CICS AOR
Br#nd #bcCICS AOR
Br#nd ?y4
DB
@IPA #ddress
Br#nd ?y4
@IPA #ddress
Br#nd #bc
SOAP/5TTPS
in1 in1
PAR& PAR
CICS router for inboun& reKuests -nown
as /Inboun& Gatewa# +wning
=egion1 @I6OR
[\]^ ` d[d `j` `k`m
CICS router for outboun& reKuests
-nown as /+utboun& Gatewa#
+wning =egion1 @O6OR
WebS!hereA!!"ic#tion Server
IBM Soft are Gro p
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
26/42
IBM Software Group
WebSphereSupport Technical Exchange 8 of )
Service 5it R#te $ser o#d
Figh availabilit# test scenario
IBM Software Group
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
27/42
IBM Software Group
WebSphereSupport Technical Exchange 6 of )
Scalabilit# tests
7
77
)77
877
:77
0777
077
)77 977 877
Nu%ber o9 $sers
Req
uests!erSecond
7377
07377
7377
;7377
)7377
97377
87377
67377
:7377
)77377 977377 877377
Nu%ber o9 $sers
Res!o
nseTi%e(%s
B=*%"*BC *verage response ti$e
T*BC *verage response ti$e
WebS!here Res!onse Ti%e
CICS Res!onse Ti%e
These tests were perfor$e& with service reKuester application &eplo#e& in WebSphere
*pplication Server for 2+S an& service provi&er application &eplo#e& in CICS
"ela# of 97 $s co&e& in CICS business logic progra$
Short $essages!=eKuest 0? ( =esponse ;3;?
Note:these tests perfor$e& with CICS TS ;30 on a S#ste$
IBM Software Group
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
28/42
IBM Software Group
WebSphereSupport Technical Exchange : of )
Changing the nu$ber of ele$ents @inboun&
CICS as service provi&er
7377
0377
377
;377
)377
9377
8377
6377
07 97 077 77
Nu%ber o9 e"e%ents
c!%s
!erservice
=eKuestCo$plex
Web service perfor$ance &epen&s on the length an& co$plexit# of the $essageEach ele$ent @custo$er recor& in this test contains 07 sub.ele$entsTotal length of the 07 ele$ent $essage is ;3;?Total length of 77 ele$ent $essage is 8:? 7 x Msg Sie ; x CP 37( WS.Trust
Wor1"o#d %#n#,e%ent #nd #v#i"#bi"ity
PIPE>I%E resource has a new =ESPW*IT attribute that &eter$ines how $an#
secon&s CICS service reKuester shoul& wait
Security Perfor$ance of CICS supplie& securit# han&ler is $uch i$prove& when using
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
38/42
IBM Software Group
WebSphereSupport Technical Exchange ;: of )
CICS TS )30 vs CICS TS ;3
2ore s!eci9ic#tions WS.*&&ressing
Wor1"o#d %#n#,e%ent #nd #v#i"#bi"ity Web services wor-loa&s can benefit fro$ i$prove$ents in CICSPlex SM
na$ic wor-loa& $anage$ent
Security
* client $o&e
S#ste$ Services @JM>SS parser
Internal test! 09 of CP< offloa&e& to **P
IBM Software Group
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
39/42
p
WebSphereSupport Technical Exchange ; of )
Su$$ar#
CICS provi&es a robust an& scalable Web services infrastructure
Web services enable secure interoperabilit# with internal
s#ste$s an& external business partners
Man# of IBMs largest custo$ers are using CICS Web services
to&a#
Chec- out the CICS Infor$ation Center an& the $an# ITS+
=e&boo-s for $ore infor$ation on &eplo#ing CICS Web services
IBM Software Group
7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
40/42
p
WebSphereSupport Technical Exchange )7 of )
*&&itional Pro&uct =esources
CICS Transaction Server Support Web page!http!22www3ib$3co$2software2htp2cics2tserver2support2
CICS eature& &ocu$ents!http!22www3ib$3co$2support2&ocview3wss4rs507:;qui&5swg677877
Sign up to receive technical support e$ails!http!22www3ib$3co$2software2support2einfo3ht$l
ollow IBMYCICS support news on Twitter!http!22www3ib$3co$2support2&ocview3wss4rs507:;qui&5swg0;:)09
Webcasts for CICS an& +MEG*M+%!
http!22www3ib$3co$2support2&ocview3wss4rs507:;qui&5swg6776)) IBM E&ucation *ssistant $o&ules!
http!22publib3boul&er3ib$3co$2infocenter2ie&uasst2stgv0r72in&ex3,sp
IBM Software Group
http://www.ibm.com/software/htp/cics/tserver/support/http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/software/support/einfo.htmlhttp://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27007244http://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsphttp://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsphttp://www.ibm.com/support/docview.wss?rs=1083&uid=swg27007244http://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/support/docview.wss?rs=1083&uid=swg21384915http://www.ibm.com/software/support/einfo.htmlhttp://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/support/docview.wss?rs=1083&uid=swg27006900http://www.ibm.com/software/htp/cics/tserver/support/7/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
41/42
p
WebSphereSupport Technical Exchange )0 of )
oin WebSphere Support Technical Exchange on aceboo-
Sta# up.to.up&ate onupco$ing webcastsessions
Suggest future topics
Suggest progra$i$prove$ents
%etwor- with other pro&uctusers
*n& MoreA
Beco%e # 9#n no0E
htt!://000-9#ceboo1-co%/!#,es/WebS!hereFSu!!ortFTechnic#"F?ch#n,e/&&G)+H&*&G
IBM Software Group
http://www.facebook.com/pages/WebSphere-Support-Technical-Exchange/121293581419http://www.facebook.com/pages/WebSphere-Support-Technical-Exchange/1212935814197/21/2019 WSTE 09292009 CICSWebServicesPart2Deployment Williams
42/42
p
Duestions an& *nswers
Top Related