INNOV-5: Web Services Management and Monitoring

1. INNOV-5: Web Services Management and Monitoring Daniel M. Foody Chief Technology Officer, Sonic

2. What you will take away… • How management is changing • What problems are solved by web services management (WSM) • How WSM applies to challenges you face INNOV-5: Web Service Management and Monitoring

3. Agenda • Web service monitoring challenges • Web service management challenges • Introduction to the Actional™ architecture INNOV-5: Web Service Management and Monitoring

4. Two kinds of monitoring to consider • Infrastructure monitoring • Is it up and running? • What’s the CPU usage? • How many threads are active? • Service monitoring • Who’s using the service? • How is the service being used? • Are we delivering adequate quality of service? INNOV-5: Web Service Management and Monitoring

5. Anatomy of a monitored service Above the water line • All of the consumers (direct and indirect) that depend on the service At the water line • The infrastructure the service is directly built-on. Below the water line • All of the other services this one depends on INNOV-5: Web Service Management and Monitoring

6. Monitoring above the water line: Case study They thought wrong!!! 34 apps used the service “We think there are 5 applications using our service” “We know we gave the WSDL to a couple of groups, but we think they’ve given it out.” INNOV-5: Web Service Management and Monitoring

7. Monitoring above the water line How do you know if consumers are happy? Consumer requires 8 seconds average response time Consumer requires 6 seconds average response time Average response time of service is 5 seconds • You don’t, unless you measure on a per-consumer basis. INNOV-5: Web Service Management and Monitoring

8. Monitoring below the water line Problem resolution is complicated with connected applications • Just because it runs doesn’t mean it works • Problems rarely appear at the root cause • Sporadic failures are very difficult to find Sporadic Situational Performance degradation Time and cost to find cause Business process not completing Outage or availability Type of problem INNOV-5: Web Service Management and Monitoring

9. Monitoring below the water line Knowing what should be happening is not really knowing • There is a significant knowledge gap in production • Different people build apps than operate them • Architecture diagrams are invariable out of date • Operations need accurate maps of actual application topology • For problem resolution, capacity planning, etc. • Automate mapping of application topology • It’s always accurate, always up-to-date INNOV-5: Web Service Management and Monitoring

10. Addressing the challenges with Actional Web Server App Server Presentation App Server Data / Service Database Web Services ESB, MQ Adapter Legacy Application Packaged Application • Automatically discovers and maps out business processes, dependencies, and services • Beyond XML and web services • Synchronous and asynchronous flows • Correlates flows through applications • Non intrusive • No configuration • Based on real activity • Dynamically segments, categorizes, and analyzes messages by business criteria • By customer, region, plant, etc. • Using content and context of messages HTTP EJB JDBC Custom Data Source INNOV-5: Web Service Management and Monitoring

11. Looking from the eyes of IT and Business By Infrastructure By Business Process By Business Criteria • Which services are where? • Who uses what services? • Where are the bottlenecks? • What’s the impact of change? • What really occurs in ordering? • How many are in production? • How long from order to delivery? • Why has purchasing stalled? • How is my business doing? • Are customer having issues? • Am I keeping up with demand? • Am I meeting my commitments? Addressing the challenges with Actional INNOV-5: Web Service Management and Monitoring

12. Monitoring Challenges addressed by Actional Web Server App Server Data / Service App Server Presentation Database Web Services ESB, MQ Adapter Legacy Application Packaged Application • How do I understand behavior and resolve issues? • Usage metering • Service level monitoring • Performance degradations • Activities not completing • Business exceptions • Security attacks • How do I ensure governance at runtime? • Detect rogue services and unexpected service usage • Ensure security, compliance, and other policies are enforced HTTP EJB JDBC Custom Data Source INNOV-5: Web Service Management and Monitoring

13. Agenda • Web service monitoring challenges • Web service management challenges • Introduction to the Actional architecture INNOV-5: Web Service Management and Monitoring

14. Management vs. Monitoring • Monitoring is passive • “Your house is burning down” • Management is active • “We’ve turned the sprinkler system on” • Confusing because most “management” products, for the most part, only monitor INNOV-5: Web Service Management and Monitoring

15. Management Challenges addressed by Actional Web Server “Are my business processes executing as expected for each customer, region, plant, etc.?” App Server Presentation App Server Data / Service “How do I route based on content or context? How do I optimize routing for business value (e.g. reroute gold customers when close to SLA limit)?” Database “How do I ensure security and compliance of my services? How do I achieve interoperability for my web services?” Web Services “How do I handle an overload of traffic, serving the most important uses first?” ESB, MQ Adapter “How do I bring online a new version without disrupting service?” Legacy Application Packaged Application HTTP EJB JDBC Custom Data Source INNOV-5: Web Service Management and Monitoring

16. Highlighting three management challenges • Policy enforcement • Security requirements • Sarbanes-Oxley • EU privacy regulations • HIPAA • Optimizing IT for the business • Give your most important customers the best service • Versioning • Maintenance windows are disappearing • Key goal: Factor these out of the application logic INNOV-5: Web Service Management and Monitoring

17. Policies are driven top-down Content Policies Process Policies Business Policies Audit all messages that are part of a financial process for SOX compliance Alert if the service level for a gold customer is close to the limit Encrypt all personal identities for EU privacy compliance But, policies must eventually be enforced, somewhere, in the infrastructure INNOV-5: Web Service Management and Monitoring

18. Optimizing IT for the business • IT capacity plans so that everyone can be treated equally under peak conditions • Leads to average utilization of 15% • Not everyone should be treated equally! • Different customer/regions/etc. have different value to a business: IT must recognize this INNOV-5: Web Service Management and Monitoring

19. Versioning services without downtime Registry Registry consumer consumer 1 3 Web Service Mgmt Web Service Mgmt Query Change Query Change v1 DB v1 service v2 service v2 DB v1 DB v1 DB v1 service v2 service v2 DB 2 • Services have data. Data needs to migrate. • Before: All requests routed to v1 • Step 1: Reject change and route query to v1 • Step 2: Migrate data from v1 to v2 system • Step 3: Route all requests to v2 INNOV-5: Web Service Management and Monitoring

20. Agenda • Web service monitoring challenges • Web service management challenges • Introduction to the Actional architecture INNOV-5: Web Service Management and Monitoring

21. Looking Glass™ in Action Enterprise Management LookingGlassServer Identity Management Directories Management Layer Services To External Sources Services From External Sources Application Layer INNOV-5: Web Service Management and Monitoring

22. Actional’s Patented “Flow Map” Technology INNOV-5: Web Service Management and Monitoring

23. Looking Glass in Action Customers/ Partners Business Users Developers IT Security Architects IT Operations Business/User Layer Enterprise Management LookingGlassServer Identity Management Directories Management Layer Services To External Sources Services From External Sources Application Layer INNOV-5: Web Service Management and Monitoring

24. Looking Glass in Action Customers/ Partners Business Users Developers IT Security Architects IT Operations Business/User Layer Enterprise Management LookingGlassServer Identity Management Directories Management Layer Services To External Sources Services From External Sources Application Layer INNOV-5: Web Service Management and Monitoring

25. Actional products in the application layer Ghost Agent Visibility • Weightless, non-intrusive (microseconds of latency) • Web services, database, messaging, and more • End-to-end process visibility across applications • Automatic discovery, auditing, alerting, analysis, and reporting of service activity SOAPstation™ Control • Runs standalone or in conjunction with Looking Glass • Policy enforcement (security, compliance, etc.) • Zero downtime service versioning • Adaptive content based routing, load balancing, and proactive fail-over for applications Services To External Sources Services From External Sources Application Layer INNOV-5: Web Service Management and Monitoring

26. In Summary • Factor out quickly-changing requirements • Regulatory compliance, etc. • Be proactive, not reactive • Reactive is no longer an option • Manage top-down • It’s the business stupid! INNOV-5: Web Service Management and Monitoring

27. Questions? • For more information: • See Actional in the Expo • Go to http://www.actional.com INNOV-5: Web Service Management and Monitoring

28. Thank you foryour time INNOV-5: Web Service Management and Monitoring

29. INNOV-5: Web Service Management and Monitoring