2. Weblogic at CERN now and in the future 13.05.2014 SOUG2 Swiss Oracle User Group Artur Wiecek Infrastructure and Middleware Services CERN IT Department

3. Agenda CERN IT ENVIRONMENT WEBLOGIC FUTURE DEVELOPMENT CONCLUSION 13.05.2014 SOUG3

4. Accelerating Science and Innovation Accelerating Science and Innovation

5. The Mission of CERN  Push back the frontiers of knowledge E.g. the secrets of the Big Bang …what was the matter like within the first moments of the Universe’s existence?  Develop new technologies for accelerators and detectors Information technology - the Web and the GRID Medicine - diagnosis and therapy  Train scientists and engineers of tomorrow  Unite people from different countries and cultures

6. 6 CERN was founded 1954: 12 European States “Science for Peace” “Science for Peace” Today: 21 Member States Member States: Austria, Belgium, Bulgaria, the Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Israel, Italy, the Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, Switzerland and the United Kingdom Candidate for Accession: Romania Associate Member in Pre-Stage to Membership: Serbia Applicant States for Membership or Associate Membership: Brazil, Cyprus, Pakistan, Russia, Slovenia, Turkey, Ukraine Observers to Council: India, Japan, Russia, Turkey, United States of America; European Commission and UNESCO Member States: Austria, Belgium, Bulgaria, the Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Israel, Italy, the Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, Switzerland and the United Kingdom Candidate for Accession: Romania Associate Member in Pre-Stage to Membership: Serbia Applicant States for Membership or Associate Membership: Brazil, Cyprus, Pakistan, Russia, Slovenia, Turkey, Ukraine Observers to Council: India, Japan, Russia, Turkey, United States of America; European Commission and UNESCO ~ 2300 staff ~ 2300 staff ~ 1600 other paid personnel ~ 1600 other paid personnel ~ 10500 users ~ 10500 users Budget (2014) ~1000 MCHF Budget (2014) ~1000 MCHF ~ 2300 staff ~ 2300 staff ~ 1600 other paid personnel ~ 1600 other paid personnel ~ 10500 users ~ 10500 users Budget (2014) ~1000 MCHF Budget (2014) ~1000 MCHF

7. Science is getting more and more global Science is getting more and more global

8. Agenda CERN IT ENVIRONMENT WEBLOGIC FUTURE DEVELOPMENT CONCLUSION 13.05.2014 SOUG8

9. CERN IT culture Specific factors Research/creative environment Technology fashion

10. Role Mission Provide best possible/cost effective environment for deployment of JEE applications Focus Architecture Availability

11. IT as Service Physical infrastructure (HW) Delivers: installed, connected, tested hardware Internal customers only IAAS Delivers: configured VMs/physical CPU, storage Internal & external customers PAAS Delivers: platform services Internal & external customers Special infrastructure (for e.g. Oracle) Special HW SAAS Delivers: complex services, Internal & external customers Meta-service (?) (may be just a SAAS) Manage horizontally to ensure can remove special needs eventually Standard model: where we want to be Databases jee Service infrastructure Storage infrastructure DB/Java on demand App servers

12. Agile infrastructure Virtualisation everywhere OpenStack -> target 100000s Hyper-V, OVM 2.2 -> phasing out KVM is in place, OVM3.3 is in beta….

13. Agenda CERN IT ENVIRONMENT WEBLOGIC FUTURE DEVELOPMENT CONCLUSION 13.05.2014 SOUG13

14. Java app servers@CERN 2 platforms: Tomcat (Java Public Service - JPS) (6 years) Weblogic Areas: Business Side/Administration Engineering Accelerator (ADF) Middleware products (forms, reports) APEX

15. WLS Deployment 1/2 Started 4 years ago RHES 5.x, 6.x, Apache 2.2 Kerberos/SSH node manager CERN CC managed with Puppet Everything is RPM.

16. Java app servers@CERN 2 platforms: Tomcat (Java Public Service - JPS) (6 years) Weblogic Areas: Business Side/Administration Engineering Accelerator (ADF) Middleware products (forms, reports) APEX

17. WLS Deployment 2/2 Weblogic 12.1.1/ Jrockit All customisations in WLST scripts / LDAP Fully certified stack (constantly updated, PSU/CPU) 200 clusters, 2 people

18. Provisioning 13.05.2014 SOUG18 LDAP CONFIGURATION SERVER ADMIN SERVER PUPPET AGENT WLST SCRIPTS MANAGED SERVER PUPPET AGENT WLST SCRIPTS MANAGED SERVER PUPPET AGENT WLST SCRIPTS

19. ADMIN SERVERS Application Deployment 13.05.2014 SOUG19 WLS CLUSTER- 11 SSH WLS SSH GATEWAY WLS CLUSTER- 21 WLS CLUSTER- 31 DOMAIN ADMIN-1 DOMAIN ADMIN-N

20. Typical WLS Cluster 13.05.2014 SOUG20 HTTPD WLS CLUSTER DB app RDBMS SSO LDAP (AD) SAML2 (ADFS) DNS MOD_WLS

21. Patching 13.05.2014 SOUG21 WLS SERVER 1 RPM REPOSITORY BUILD SERVER BASE WLS INSTALLATION APPLY ALL PATCHES BUILD RPM WLS SERVER 2 WLS SERVER 3

22. Monitoring EM 12c Huge progress compare to 11g 1 agent per domain Driven by emcli Issues: status historical data Wily Introscope

23. Major upgrades iAS 10.3.5 - OC4J gone 11g -> 12c migration Weblogic 12.1.1 everywhere Worked fine

24. CERN SSO 24

25. SSO 25 It works! Some figures: ~31000 “signins” per day ~5000 “signouts” The hard work: Workaround the SAML2 & WLS constraints Fit the requirements of the legacy systems WLS does not provide the SLO: CERN saml2slo OpenSource (coming soon, hopefully) Very complicated to put in place/automate

26. SAML2 Issues %20 spaces – wlsproxy servlet Single security per domain RDBMS Security Store Fixed context /saml2 Artefact binding blocked

27. Issues and Concerns Deployment app-1 app-2 after redeployment Broken apps can break admin server & the whole domain (XML parsers) Developers Admin server vs. WLST, not always coherent New WLS installer based on universal installer – scary prospect.

28. Agenda CERN IT ENVIRONMENT WEBLOGIC FUTURE DEVELOPMENT CONCLUSION 13.05.2014 SOUG28

29. Java Services today… Scope Java EE was(J2EE) Clients AIS EDMS CS ACC J2EEPS Deployment Private Public 400 applications 70 servers Technologies Weblogic iAS (OC4J) Tomcat RHEL/SLC Staff 2 FTE SOUG29 13.05.2014

30. Java Services today… SOUG30 REQUESTS CAPACITYCAPACITY 13.05.2014

31. One Platform to Rule Them All Experience DB in Demand Technologies Openstack Puppet SSO IAS->Weblogic Common Setup For all clients … and in the future. SOUG31 13.05.2014

32. SOUG32 Java Platform as a Service On-Demand Provisioning Self Management & Configuration Scalability Security (Systems, Data, SSO) Improved redundancy Higher productivity

33. Agile Infrastructure SOUG33SOUG33 Java PaaS Services Stack Website Java App SSO DB Storage Monitoring DNS Management Web Services Deployement App 13.05.2014

34. SOUG34 Java PaaS Infrastructure Support for any host Openstack VMs Physical Servers and Virtual Machines Machine Pools System configuration managed by Puppet Multiple Java technologies Apache Tomcat Oracle Weblogic Designed to provide other Java environments like JBoss, Glassfish, etc… 13.05.2014

35. SOUG35 Java PaaS User Experience More control for the users Self selection of Software type and versions Self allocation of resources Configuration management (Runtime properties, logging properties, server-side libraries…) SSO Management (ADFS Groups, External/lightweight accounts, …) Applications & configuration versioning Management of Administrators and Authors 13.05.2014

36. SOUG36 Java PaaS Architecture Java MW DB Java MW Manager Create Jobs Daemon Read Jobs Services Repository Register services Managed Host Managed Host Managed Host Managed Host Managed Host Managed Host Managed Host Managed Host Provisioning & Management tools Dispatch Jobs Managed Host Managed Host Deploy Configure Operate CERN Web Services CERN SSO Register website Admins Users DNS LB Configure Operate 13.05.2014

37. SOUG37 Front - End ● Java Web Application ● User Interface: ZK Framework – Java + Jquery + MVC – IT-DB standard ● Data Access: Hibernate – Object Relational Mapping – Easy to use ● Notifications: REST (Jersey) – Simple, easy ● Orchestration: Quartz 13.05.2014

38. SOUG38 Back – End ● On Demand Daemon ● It looks for pending jobs ● jobs & parameters → Execute Command ● It Works! ● Service Configuration Repository (LDAP) ● Container, virtual host, mount points... ● CReate Update Delete (CRUD API) ● Common actions across cloud: ● Start/stop/deploy/undeploy ● Apache configuration (mod_jk, shibboleth management 13.05.2014

39. SOUG39 The Result ● Prototype is working ● https://mysite01.web.cern.ch/mysite01 ● Registration in the CERN Web Services ● Apache Front End configuration ● Creation of the default container ● Deployment of the sample application 13.05.2014

40. Agenda CERN IT ENVIRONMENT WEBLOGIC FUTURE DEVELOPMENT CONCLUSION 13.05.2014 SOUG40

41. Weblogic Challanges WLS Swiss army knife for JEE New remote data centre Change deployment model Do something with Admin server So far so good but Oracle, please, don’t mess it up Developer productivity Keep it simple Fusion?

42. Java Platform Problem: Growing demand/Limited resources Answer: OnDemand model One platform What made it possible? Agile Infrastructure Java technologies Integration with IT services SOUG42 13.05.2014

43. SOUG43 13.05.2014