1. Mediation Policy Extensions
WebSphere Enterprise Service Bus WebSphere Integration Developer 7.0.0
Mediation Policy Extensions
Brian Hulse: WESB Development
*IBM Confidential*
IBM Software Group Presentation Template

2. Policy Resolution Primitive
Mode1: Module Scope
Module
SCA Module Definition
Delivered in 6.2

3. Mediation Policy 7.0 Extends 6.2 function to allow for:
Attachment of Mediation Policies at Target Service scope
Service
Port
PortType
Binding
BindingOperation
PortTypeOperation
The “more particular” scope overrides the “less particular”
Value for Assertion on Operation would override value for assertion on Service, for example
Intersection of Module and Target Service scopes
Both Module and Target Services policies have to match
Service
Endpoint
Operation

4. Mode 2: Target Service Scope
Policy Resolution Primitive
Mode 2: Target Service Scope
Service
Port
Mediation
Policies
PortType
Binding
PortTypeOperation
BindingOperation
WSDL definition
for target service

5. Mode 3:Intersection Policy Resolution Primitive Mediation Policies
Service
Module
Port
PortType
Binding
PortTypeOperation
Intersected mediation
policies
BindingOperation
WSDL definition
for target service

6. Selecting the Target Service …
If the Target Service mode is selected for the Policy Resolution Primitive, an Endpoint Lookup Primitive MUST be used prior to the PRP. This:
Selects the endpoint for the PRP (and presumably the dynamic endpoint for the flow)
Loads the TargetAddress with repositoryMetadata
This is actually the bsrURI of the port, which is unique for the endpoint selected. This is needed to avoid ambiguity.

7. Selecting the Target Service Operation …
In addition, if Operation level scope is required. The Operation field of the SMO must be populated with the name of the Operation the PRP will extract policy attachments from.
Obviously, if not set, no policy attachments for operation level will be found.

8. The case for Bindings …
WSRR prior to 6.2 did not support Binding or BindingOperation, so if the default connection is used when creating the WSRR definition in the admin console, no policy attachments on these levels will be found. The example below will find these …

9. The case for Bindings …
However, these will only apply if the user has used the WSRR console directly
Using the supplied Business Space widgets there is no way of creating policy attachments at:
Binding
BindingOperation
Any policy attachments at these levels will appear as Endpoint level policies

10. Peer and hierarchical merge …
The processing for multiple policy attachments follows the rules set out in the WS-PolicyAttachment specification.
lower precedence
Peer merge
service
Peer merge
portType
port
binding
higher precedence
Peer merge
bindingOperation
portTypeOperation
Hierarchical merge
NOTE: We do warn customers to avoid this level of complexity as it becomes difficult to predict behaviour.

11. Successful Merge Unsuccessful Merge
If Operation level policy has propB = BBB and Service level policy has propB = YYY
Operation is preferred
So propB = BBB
Unsuccessful Merge
Port level policy has propA = AAA and PortType level policy has propA = XXX
Neither is preferred, so they cannot be combined
The policyError terminal will be fired

12. Evolution of policy administration
Mediation Policy was introduced in WESB 6.2
Policies, Policy Attachments could only be created using the WSRR console directly.
This was prone to error as many of the WESB concepts were on very disparate screens
Business Space widgets in 7.0 allow for:
Creation of new mediation policies
Creation of policy attachments at
Module scope
Target Service scope
Definition of gate conditions
… in one place!

13. Creating a Module Administration space …

14. Module Browser …
Solution Administration template gives two widgets Module Browser Mediation Policy Administration

15. New Policy Attachment …
Groups (Domains) available for module

16. New Policy …

17. Creating a Service Administration space …

18. Service Browser …
Service Administration template gives two widgets Service Browser Mediation Policy Administration

19. Service Browser …
Service
Endpoints
Operations

20. New Policy Attachment (Services) …
All Groups (Domains) for all modules

21. WSDL scope points …
WS-Policy allows for many attachment points in WSDL
Our widgets aggregate some of these attachment points for simplicity
Endpoint scope is an aggregation of:
Port
PortType
Binding
Operation scope is an aggregation of:
BindingOperation
PortTypeOperation
Creating a policy attachment at Endpoint scope is really PortType scope
Creating a policy attachment at Operation scope is really PortTypeOperation scope

22. Policy Servlet …
Business Space widgets talk REST to the Policy Servlet
The Policy Servlet talks to WSRR via its HTTP interface
Business
Space
WPS
WSDLs
REST interface
Policy Attachments
WSRR
Policy
Servlet
Policies
Modules

23. In Service Gateway /headers/SMOHeader/Action is populated
Service Gateway: Service Level Policy
In Service Gateway /headers/SMOHeader/Action is populated
with soapAction

24. Service Gateway: Operation Level Policy