DataPower SOA Appliance Administration, Deployment, …

1 SOA ApplianceAdministration, Deployment, and Best PracticesGerry KaplanJan BechtoldDaniel DickersonRichard KinardRonnie MitraHelio L. P. MotaDavid ShuteJohn WalczykDemonstrates user administration and role-based managementExplains network configuration, monitoring, and loggingDescribes Appliance and configuration managementFront coverDataPower SOA Appliance administration , deployment , and Best PracticesJune 2011 International Technical Support OrganizationSG24-7901-00 Copyright International Business Machines Corporation 2011. All rights to Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADPS chedule Contract with IBM Edition (June 2011)This edition applies to DataPower firmware version Note: Before using this information and the product it supports, read the information in Notices on page xiii.

2 Contact an IBM Software Services Sales Specialist iiiContact an IBM Software Services Sales SpecialistOur highly skilled consultants make it easy for you to design, build, test and deploy solutions, helping you build a smarter and more efficient business. Our worldwide network of services specialists wants you to have it all! Implementation, migration, architecture and design services: IBM Software Services has the right fit for you. We also deliver just-in-time, customized workshops and education tailored for your business needs. You have the knowledge, now reach out to the experts who can help you extend and realize the a WebSphere services solution that fits your needs, contact an IBM Software Services Sales Specialist: architectural knowledge, skills, research and development.

3 That's IBM Software Services for WebSphere. Start SMALL, Start BIG, .. JUST STARTiv DataPower SOA Appliance administration , deployment , and Best Practices Copyright IBM Corp. 2011. All rights an IBM Software Services Sales Specialist.. iiiNotices .. xiiiTrademarks .. xivPreface .. xvThe team who wrote this book .. xvNow you can become a published author, too! .. xviiiComments welcome .. xviiiStay connected to IBM Redbooks .. xixChapter 1. Securing user access.. Overview .. Benefits .. Device initialization considerations .. Setting up the master administrator password .. Enabling Disaster Recovery Mode .. Access control lists.

4 Authentication and credential mapping .. Locally managed users .. Locally defined user groups .. Using local user repository for contingency .. Pros and cons of using the local user repository .. RBM policy files.. Remote authentication servers .. Single sign-on .. Login processing summary .. Audit logs.. Obtaining the audit log using CLI .. Copying the audit log using SOMA .. Preferred practices .. Troubleshooting.. 27 Chapter 2. Networking .. Overview .. Benefits .. Usage .. Network interface configuration and routing .. VLAN sub-interfaces .. 36vi DataPower SOA Appliance administration , deployment , and Best Network settings.

5 Host alias, static hosts, and domain name system .. Routing .. Load balancing a back-end destination.. Intelligent Load Distribution .. Self-Balancing services .. Load balancer health checking .. Standby Control and high availability .. Preferred practices .. Avoid using as a listener .. Separating management traffic .. Specify port values less than 10,000 .. Persistent timeout consideration .. Disable chained persistent connections .. Configure network settings to be portable.. Multiple default gateways will create multiple default routes.. Standby Control preferred practices .. Management interface and default route.

6 Enabling No Delay Ack to avoid latency with other systems .. Streaming large messages and flow control .. Examples.. Externalizing endpoints in a metadata document .. Disabling chained persistent connections for points of a service .. Port speed mismatch .. Sample DNS workaround using static host .. Sample CLI commands to capture DNS server responses.. Verifying that Rapid Spanning Tree deployed properly for DataPower Standby Control .. Example of deleting routes .. Sample XSLT for adding DataPower transaction ID to an HTTP header for outgoing traffic .. 58 Chapter 3. Domains.. Application domains .. The default domain.

7 Domain use and benefits .. Segregating projects and LOBs .. Number of domains on an Appliance .. Domain resource consumption .. Domain structure .. Local flash-based file system .. Domain configuration files .. Domain logging .. 68 Contents Domain monitoring .. Shared resources .. Domain persistence.. Saving configuration changes .. Imported domain configurations .. Usage considerations .. Cross-domain file visibility .. Domain names .. Restarting and resetting domains .. Quiescing .. Cleaning up orphaned objects .. Isolating the domain network interface .. Deleting domains .. Preferred practices.

8 Further reading .. 78 Chapter 4. Simple Network Management Protocol monitoring.. Appliance monitoring .. DataPower monitoring fundamentals .. Enabling statistics .. SNMP monitoring .. SNMP protocol messages.. Management information base (MIB) structure .. SNMP traps .. DataPower status providers .. SNMP security .. Configuring SNMP using the WebGUI .. Generating traps with SNMP log targets .. Monitoring via the XML management interface .. Requesting device status and metrics .. Appliance monitoring values .. General device health and activity monitors .. Interface utilization statistics .. Other network status providers.

9 SNMP traps .. Certificate monitoring considerations .. Preferred practices and considerations .. 129 Chapter 5. IBM Tivoli Monitoring.. IBM Tivoli Monitoring environment architecture .. Tivoli Management Services components .. IBM Tivoli Composite Application Manager .. IBM Tivoli Composite Application Manager for SOA.. 135viii DataPower SOA Appliance administration , deployment , and Best Monitoring DataPower appliances .. Monitoring DataPower application-level traffic .. Monitoring hardware metrics and resource use .. IBM Tivoli Composite Application Manager for SOA DataPower agent comparisons .. Tivoli Composite Application Manager for SOA architecture.

10 IBM Tivoli Composite Application Manager for SOA agents .. Monitoring DataPower service objects .. Customizing for Multi-Protocol Gateway traffic monitoring .. Using latency logs for transaction monitoring .. Tivoli Composite Application Manager for SOA deployment scenarios . Minimal deployment .. Multiple location, single agent deployment .. Multiple location, multi-agent deployment .. Large multiple location deployment with health monitoring.. Complete IBM Tivoli Composite Application Manager for SOA enterprise architecture .. IBM Tivoli Composite Application Manager for SOA and DataPower s built-in SLM .. 160 Chapter 6.