Mediation Policy Extensions WebSphere Enterprise Service Bus 7.0.0 WebSphere Integration Developer 7.0.0 Mediation Policy Extensions Brian Hulse: WESB Development *IBM Confidential* IBM Software Group Presentation Template

Policy Resolution Primitive Mode1: Module Scope Module SCA Module Definition Delivered in 6.2

Mediation Policy 7.0 Extends 6.2 function to allow for: Attachment of Mediation Policies at Target Service scope Service Port PortType Binding BindingOperation PortTypeOperation The “more particular” scope overrides the “less particular” Value for Assertion on Operation would override value for assertion on Service, for example Intersection of Module and Target Service scopes Both Module and Target Services policies have to match Service Endpoint Operation

Mode 2: Target Service Scope Policy Resolution Primitive Mode 2: Target Service Scope Service Port Mediation Policies PortType Binding PortTypeOperation BindingOperation WSDL definition for target service

Mode 3:Intersection Policy Resolution Primitive Mediation Policies Service Module Port PortType Binding PortTypeOperation Intersected mediation policies BindingOperation WSDL definition for target service

Selecting the Target Service … If the Target Service mode is selected for the Policy Resolution Primitive, an Endpoint Lookup Primitive MUST be used prior to the PRP. This: Selects the endpoint for the PRP (and presumably the dynamic endpoint for the flow) Loads the TargetAddress with repositoryMetadata This is actually the bsrURI of the port, which is unique for the endpoint selected. This is needed to avoid ambiguity.

Selecting the Target Service Operation … In addition, if Operation level scope is required. The Operation field of the SMO must be populated with the name of the Operation the PRP will extract policy attachments from. Obviously, if not set, no policy attachments for operation level will be found.

The case for Bindings … WSRR prior to 6.2 did not support Binding or BindingOperation, so if the default connection is used when creating the WSRR definition in the admin console, no policy attachments on these levels will be found. The example below will find these …

The case for Bindings … However, these will only apply if the user has used the WSRR console directly Using the supplied Business Space widgets there is no way of creating policy attachments at: Binding BindingOperation Any policy attachments at these levels will appear as Endpoint level policies

Peer and hierarchical merge … The processing for multiple policy attachments follows the rules set out in the WS-PolicyAttachment specification. lower precedence Peer merge service Peer merge portType port binding higher precedence Peer merge bindingOperation portTypeOperation Hierarchical merge NOTE: We do warn customers to avoid this level of complexity as it becomes difficult to predict behaviour.

Successful Merge Unsuccessful Merge If Operation level policy has propB = BBB and Service level policy has propB = YYY Operation is preferred So propB = BBB Unsuccessful Merge Port level policy has propA = AAA and PortType level policy has propA = XXX Neither is preferred, so they cannot be combined The policyError terminal will be fired

Evolution of policy administration Mediation Policy was introduced in WESB 6.2 Policies, Policy Attachments could only be created using the WSRR console directly. This was prone to error as many of the WESB concepts were on very disparate screens Business Space widgets in 7.0 allow for: Creation of new mediation policies Creation of policy attachments at Module scope Target Service scope Definition of gate conditions … in one place!

Creating a Module Administration space …

Module Browser … Solution Administration template gives two widgets Module Browser Mediation Policy Administration

New Policy Attachment … Groups (Domains) available for module

New Policy …

Creating a Service Administration space …

Service Browser … Service Administration template gives two widgets Service Browser Mediation Policy Administration

Service Browser … Service Endpoints Operations

New Policy Attachment (Services) … All Groups (Domains) for all modules

WSDL scope points … WS-Policy allows for many attachment points in WSDL Our widgets aggregate some of these attachment points for simplicity Endpoint scope is an aggregation of: Port PortType Binding Operation scope is an aggregation of: BindingOperation PortTypeOperation Creating a policy attachment at Endpoint scope is really PortType scope Creating a policy attachment at Operation scope is really PortTypeOperation scope

Policy Servlet … Business Space widgets talk REST to the Policy Servlet The Policy Servlet talks to WSRR via its HTTP interface Business Space WPS WSDLs REST interface Policy Attachments WSRR Policy Servlet Policies Modules

In Service Gateway /headers/SMOHeader/Action is populated Service Gateway: Service Level Policy http://www.ibm.com/developerworks/websphere/library/techarticles/1001_hulse/1001_hulse.html In Service Gateway /headers/SMOHeader/Action is populated with soapAction

Service Gateway: Operation Level Policy