GemStone/J 3.0 Objects Across the Enterprise Paul Chambers Chief Technical Officer (Europe)

Scalable Enterprise Architectures GemStone/J Overview GemStone/J Architecture Fundamentals GemStone/J Service Activator Web Integration Architecture Security Architecture Architectural Issues

GemStone/J Overview

An integrated Java Application Server Designed for 3 tier transactional Java applications built with components Java VM and runtime with significant value added Implicit Java object persistence For application control and meta-data For shared data caches For extending relational and mainframe data Integrates middleware and component technologies such as J2EE, EJB and CORBA Supports development and deployment of large, complex business applications in Java What is GemStone/J

GemStone/J Usage Architecture Browsers or Java clients GemStone/J CORBA JDBC CORBADistributed JavaBeans Web Server Web Browser (HTML) HTTP (Various) Legacy 3 tier Java applications Complex object models Rapidly changing applications Distributed architectures Integration of multiple technologies

GemStone/J Architecture Fundamentals

GemStone/J 3.0 Architecture Service Activator Persistent Cache Architecture Java 2 Enterprise Services Scaling Management Naming Messaging Security Transactions Collections Data Connect Object Transaction Monitor CORBA ORB GS/J VM Persistent Cache J2EE Component Models EJB Java Server Pages Java Servlets GemStone/J 3.0

External Data Servers Clients CORBA Client (Java, C++, etc.) CORBA Client (Java, C++, etc.) ORB GemStone/J Garbage Collector Transactio n Monitor Shared Object Cache ORB Java JDBC Service Activator IIOP Web Browser Web Browser Java Client Java ClientBeansBeans HTTP (TCP/IP) Java Gem Java JavaV M Bean s JDBC Web Browser or Java VM Web Service Extents Transaction Log GemStone/J VMs Web Server IIOP GemStone/J System Architecture

GemStone/J 3.0 Java and CORBA Standards JTS JTA* COS OTS OTS recovery XA JDK 1.2 APIs JSA JCA JCE SSL X.509 JMAPI* JDMK* SNMP* CORBA 2.3 IIOP JMS* JDK 1.2 “Java Compatible™” certified Runs any 100% Pure Java™ app. JVMDI debugger interface Sun.tools.debug Complete EJB 1.0 container and server Session and Entity beans Container and Bean- managed persistence JDBC 1.0 JDBC 2.0* JDBC XA* * Planned for future release as specifications become complete CORBA location forwarding CORBA / EJB service activation Service Activator Business Applications Enterprise Services & APIs Scaling Management Naming Messaging Security Transactions Collections Data Connect Object Transaction Monitor Enterprise JavaBeans Containers ORB GS/J VM Persistent Cache JDNI COS Naming Service JDK 1.2 Collections

GemStone/J Java VM Java 1.2 certified “Java Compatible ™ ” Server-optimized VM Robust and reliable Large object domains Scalable shared memory architecture Multiple concurrent GS/J transactions Sun HotSpot technology licensed and being integrated for later release

Persistent Cache Architecture Shared Object Memory Java Virtual Machines Object Repository

Persistent Cache Architecture (PCA™) Provides fault-tolerant object cache of relational data for increased performance Supports large object domains up to 2 billion objects Provides automatic EJB persistence Scalable implementation of Java 1.2 collection interfaces Dynamic growth to millions of elements High-performance sorted collections and maps Classes for multiple-writer concurrent update

Integrated All Java CORBA Implementation CORBA 2.3 ORB Load-balanced service activation Persistent Name Service COS Naming Service and JNDI interfaces IDL generation for CORBA client access to EJBs IDL compiler OTS implementation (GemStone/J OTM)

GemStone/J OTM Implements CORBA Object Transaction Service (OTS) standard Integrated recovery mechanism Logging for 2-phase distributed transaction support JTS interface OTS 1.1 Synchronization interface Provides transaction support for EJBs Integrates with other OTS implementations Provides cache coherency between persistent cache and relational database

Complete Enterprise JavaBeans 1.0 Server Session and Entity Beans Container-managed persistence and Bean-managed persistence Tunable load-balanced EJB activation mechanisms Declarative and client-initiated distributed transactions through GemStone/J OTM Java, CORBA and Web clients can create and invoke EJBs Java 1.2 security APIs tightly integrated

GemStone/J 3.0 The EJB Container A context within which to run Beans Containers exist within EJB servers Manage Pools of Beans Bean lifecycles Interfaces between clients and beans Manages state (bean managed) Threads for beans Communication to EJB server for lower-level services EJB Container Enterprise JavaBeans Container

GemStone/J 3.0 Application Server Security RDB Connect. Mainfrm. Conn State Mgmt Rsrc Mgmt Dist-Tx’l VMs ORB Object Pers. Java Services Tx Services GemStone/J 3.0 The EJB Server Low-level infrastructure to manage containers Services provided by server Distributed, transactional VMs ORB Java object persistence Java services Security RDB connectivity Mainframe connectivity State management Resource management Enterprise JavaBeans Container

GemStone/J OTM OTS Coordinator EJBs OTS Resource GS/J Session Pool Transaction Log Persistent Cache OTS Coordinator RDBMS GS/J VMs Other Transactional System OTS Resource JDBC Pool Recovery Coordinator

RDB Mainframe Service Activator Handles growth of application (new features, upgrades) Handles coordinated business transactions across many different data sources and business processes. Routers/Firewall Web Server GemStone/J Application Server Internet Commerce Platform Components, Workflow, EAI EJB Container Java 2 Security Servlet Engine Object Transaction Monitor Java 2 Services Service Activator CORBA ORB Persistent Cache GS/J VM

GemStone/J Service Activator: Central to Scalability Dynamically activated service objects EJB Session and Entity beans CORBA server objects GemStone/J sessions Pooled resources VMs, including multiple machines GemStone/J sessions JDBC connections Service object instances Configurable, tunable operation Location of services in VMs Size and dynamics of pools Loading of VMs Integrated Java security

GemStone/J Service Activator RDBMS Clients EJBs CORBA objects Service Activator GemStone/J VM pools CORBA services object pools GemStone/J session pools JDBC connection pools

Multi-Machine Architecture RDBMS Clients Persistent Cache Server 2 Server 1 Shared Object Cache GemStone/J VM Pool Service Activator Clients

Web Integration Architecture

RDB Mainframe Servlet Engine Handles Growth of users (Internet access) Handles growth of application (new features, upgrades) Routers/Firewall Web Server GemStone/J Application Server Business Process Engine EJB Container Java 2 Security Servlet Engine Object Transaction Monitor Java 2 Services Service Activator CORBA ORB Persistent Cache GS/J VM GemStone/J Application Server Internet Commerce Platform Components, Workflow, EAI EJB Container Java 2 Security Servlet Engine Object Transaction Monitor Java 2 Services Service Activator CORBA ORB Persistent Cache GS/J VM

J2EE Component Models Today EJB 1.0 Today Full EJB 1.0 Server and Container capabilities integrated Session and Entity beans DD Utilities IDE DD and JAR file support Java Server Pages and Servlets Today Integrated Servlet engine Comprehensive load balancing Connectivity to standard Web servers Access to all GemStone/J services VM Servlet Engine Enterprise JavaBeans Container Java Server Pages Servlets EJB

User Scaling Routers/Firewall Web Server GemStone/J 3.0 Application Server Servlet Engine Servlet engine integrated. Supports all major Web servers Standard security supported Web servers Netscape Microsoft IIS Apache VM SE VM SE VM SE GemStone/J VMs

Integrated Web Scalability RDBMS Web Clients GemStone/J Netscape Microsoft IIS Apache RDBMS Web Servers Connection Pooling Cached Relational Data Shared Session State Persistent Objects (EJBs) Persistent Cache Load Balancing VM SE VM SE DNS Round-Robin

Scalable Web Architecture Servlet engine integrated (JSP, Java Servlet API) Supports all major Web servers and operating systems (Netscape, Microsoft IIS, Apache) Standard security in the Web architecture Web integration partners Service Activator Persistent Cache Architecture Java 2 Enterprise Services Scalin g Managem ent Naming Messaging Security Transacti ons Collections Data Connect Object Transaction Monitor CORBA ORB GS/J VM Persistent Cache J2EE Component Models EJB Java Server Pages Java Servlets GemStone/J 3.0 VM SE VM SE VM SE GemStone/J VMs

Application Scaling Provides comprehensive load balancing Distributed HTTP session state Web server to GS/J load balancing Server-side JDBC connection pools Provides access to all GS/J coordinated transaction services JDBC, EJB, CORBA, PCA, OTM, Pooling mechanisms VM SE Application Servlet Servlet Engine GsSession Application Servlet Session Multiplexer JDBC Pooling EJBs CORBA OTM PCA GemStone/J VM

Web client HTTP / DNS RR GS/J VMs GS/J Repository Web Server TCP Web Server The web servers are load- balanced at the internal DNS agent. The servlet engines are load balanced in a round-robin fashion at the web server. Application Servlet Servlet Engine GsSession Application Servlet Session Multiplexer Application Servlet Servlet Engine GsSession Application Servlet Session Multiplexer Application Servlet Servlet Engine GsSession Application Servlet Session Multiplexer Application Servlet Engine GsSession Application Servlet Session Multiplexer * HttpSession State * Business logic/Objects Third Tier Data

GemStone/J Security Architecture

Strong Security Reduces Risks Authentication: Authorization & Containment: Secure Communication: Security Administration: Who is accessing your data Restrictions Private exchange Control over system Secure Comm UserName { Permissionname_of_resource UserName { Permissionname_of_resource ACL

GemStone/J Security End-to-end Enterprise Java Security Authentication embedded in all communications Standard X.509 digital certificates Public Key Infrastructure supported Authorization built into EJB server, ORB, name services, system processes, administrative components Access Control Lists for secure resources User-, method-, code-level containment, based on industry standards, EJB, and Java 2 NA and International SSL 3.0 is supported Console tool and utilities for configuring security UserName { Permissionname_of_resource UserName { Permissionname_of_resource ACL

Strong Security Requires Thorough Integration AUTHENTICATION Passwords Keys Digital Signatures Message Digests Certificates (x.509) LDAP AUTHORIZATION Permissions - User - Resources - Code Containment - Sandbox - ACL - Domains - Firewalls Auditing - Error Logging - Error Reporting Non-Repudiation - Transaction logging and reporting Admin Tools - Add/modify users - Add/mod permissions - Manage certificates - Configure - Audit SECURE COMM SSL Confidentiality - Encryption - Keys SECURITY ADMINISTRATION UserName { Permissionname_of_resource UserName { Permissionname_of_resource ACL Secure Comm

Comprehensive Security in GemStone/J GemStone/J 3.0 System Resources System Administration UserName { Permissionname_of_resource UserName { Permissionname_of_resource ACL Secure Comm

Security in the Web architecture Basic and X509 authentication SSL support in all communications Firewall support SSL FIREWALL VM SE Web Clients VM SE RDBMS SSL Web Servers GemStone/J 3.0

Architectural Issues in the near future Architectural Patterns that realize scalability preserve cache coherency preserve component & object models incorporate Web, CORBA, RMI & JMS mechanisms Component to object mapping or EJB to RDB mapping