6 Deployment Best Practices and Miscellaneous Topics

This chapter describes the best practices and procedures that may be used while deploying Oracle Service Bus. It is targeted towards deployers or administrators who plan out the deployment and topology rather than developers who write automated scripts or programs for deployment.

For more information, see Appendix A, "Using the Deployment APIs." To write the scripts or programs, developers can refer to the Oracle Fusion Middleware Java API Reference for Oracle Service Bus.

This chapter contains the following sections:

6.1 Deployment Topologies

The following sections describe typical deployment topologies.

6.1.1 Development and QA Systems

There may be multiple development systems for a given production system. For example, each department for an enterprise ESB production system might have a separate project with a development system for that project's team. The development system typically has a QA system associated with it. The two systems are related one is to one.

6.1.2 Stage and Production Systems

Typically, there is a stage system associated with the production system. These two systems are related one is to one. The stage system mirrors the production system as much as possible. Typically, the relationship of the development system (or QA system) to production systems (or stage systems) is many is to one.

6.1.3 Shared Projects

In more complex deployment topologies (a development system for each department in a large organization) corporate-wide standards like schemas, transformation and shared services may be in a shared project. This scenario can be handled by having a separate development system for the shared project and providing a read-only copy of the shared project in each departmental development system. When any shared resource changes, all the departmental systems are updated by importing and exporting the required resources.

When deploying resources into a stage system or a production system, the shared project along with all the impacted departmental projects should be deployed together to avoid any semantic errors that might cause the deployment to fail.

Sometimes, a shared project may be shared across multiple production systems. For example, when there are separate production systems for each department that are interconnected into a corporate ESB network, corporate-wide assets like schemas may be shared across all the production systems.

Figure 6-1 Complex Topology

Description of Figure 6-1 follows
Description of "Figure 6-1 Complex Topology"

6.2 Types of Deployment

The typical unit of deployment is called a project. There are two types of project deployment:

  • Complete - The entire project is deployed

  • Incremental - Only changes to the project since the last deployment or some explicitly selected subset of resources are deployed.

    Incremental deployment is additive - only new and updated resources are deployed on the target system. Note that any resource that is deleted in the project is not deleted from the target system. However, deleted project resources are also deleted from the target system during a complete project deployment.

    Note:

    This behavior may be customized at import time. For example, alert destinations are defined in the production system by the production system operator, but these alerts do not exist in the development system. In such a scenario, you may not want to delete these alert destinations when you do a complete deployment of the project.

This document focuses on these basic types of deployment. Use cases involving shared projects are extensions of the basic use cases. In addition, this document also focuses on the use cases where export and import of resources is automated by scripts or programs.

6.3 Deployment Roles

Export, import and environmental customizations may be done by a deployer, operator or Administrator depending on the system and depending on the enterprise's policy.

Export from the development system is typically done by a deployer. The Administrator, operator, or deployer may be responsible for exporting and importing resources from the stage system to the production system.

Exporting and importing resources can be done using Oracle Service Bus Administration Console or using a script or program (which can be written by a developer).

If an operator is responsible for exporting resources from a system, a pre-defined automated script or program can be executed to export either the complete project or specific resources in the project. Similarly, if an operator is responsible for importing resources into a system, a pre-defined automated script or program can be executed to do the import.

6.4 Customization Files

An Administrator uses customization files to make changes to environment values as well as to change references within resources. Customization files can include customizations for all the environment values found in the selected resources, including complex environment values types defined inside the EnvValueTypesclass. In addition, it includes a reference customization type for changing resource references inside resources with dependencies.

The customization schema (Customization.xsd) which describes the customization types is available at the following location in your Oracle Service Bus installation:

OSB_ORACLE_HOME\modules\com.bea.common.configfwk_version.jar

You can create sample customization files from Oracle Service Bus Administration Console. The scope of a customization file can be a project or individual resources in a project. For more information, see "Creating Customization Files" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

The created sample customization file may be used as a starting point for making desired modifications by specifying the actual values for an environment during the export or import process.

6.4.1 Substituting Environment Values

As part of deployment, environment values in resources in source systems must be changed as part of the export process or the import process to reflect the values that are application in the target system.

Environment values are certain pre-defined fields in the configuration data whose values are very likely to change when you move your configuration from one domain to another (for example, from test to production). Environment values represent entities such as URLs, URIs, file and directory names, server names, emails, and such. Also, environment values can be found in Alert Destinations, proxy services, business services, SMTP Server and JNDI Provider resources, and UDDI Registry entries.

Certain environment values are complex XML objects that cannot be found and replaced using the Find and Replace option from Oracle Service Bus Administration Console. However, you can still set these environment values directly by using the ALSBConfigurationMBean from a script. For detailed information about ALSBConfigurationMBean, see the Oracle Fusion Middleware Java API Reference for Oracle Service Bus. In addition to setting them through the API, you can set complex type environment values using customization files.

Customization files are XML files and you can open these files in any editor and substitute the required environment values. In addition, you can search for specific environment values (that are not complex XML types) in Oracle Service Bus Administration Console or in a customization file and replace them with the new values. You can fine-tune the scope of the search by filtering these environment values based on variable type or project. For more information, see "Finding and Replacing Environment Values" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

Note:

After you substitute the environment values, you must execute these customization files. For more information, see "Executing Customization Files" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

You can substitute environment values as part of the import or export process.

6.5 Exporting Resources

The exporter needs to know if incremental deployment is feasible. If so, a developer can write a script that can find all resources that have been changed or created after a specific time frame (for example, after the last deployment) and export them.

If the exporter uses Oracle Service Bus Administration Console for exporting only selected resources (for incremental deployment), the exporter can look at the last modified timestamp of the resources and select the only those resources that need to be exported. For more information, see "Exporting Resources" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

6.5.1 Customizing Resources During Export

You can customize resources (including substituting environment values) while importing or exporting resources. When you export resources:

  1. Start a session.

  2. Customize the resources and execute the customization file.

  3. Export the required resources.

  4. Discard the session to ensure that the original values are retained at the source system. Since the exported file contains the updated values, these values are reflected at the target system.

6.6 Importing Resources

You can import resources from Oracle Service Bus Administration Console or using a script. For information about importing resources using the Oracle Service Bus Administration, see "Importing Resources" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

When a script is used, the script stages the import JAR. It then obtains a deployment plan from the system for the staged import JAR. The deployment plan should contain all resources in the project and if these resources should be created, deleted, updated or left untouched in the target system. The deployment plan is typically customized by the script to not overlay resources that are environment specific (like service account) or overlay or delete operator controlled resources.

6.6.1 Customizing Resources During Import

You can customize resources (including substituting environment values) while importing or exporting resources. When you import resources:

  1. Start a session.

  2. Import the required resources.

  3. Customize the resources and execute the customization files.

  4. Activate the session.

On import, you can preserve environment variables and ensure that only environment values of resources that are created on import are customized by the customization file.

6.6.2 Importing Operational Values

There are two types of operational values in Oracle Service Bus, global Operational Settings and operational values and alerts for proxy and business services. Global Operational Settings is a resource located under the System project folder. The global Operational Settings resource can be exported like any other resource. On import, this resource can only be updated; it cannot be created or deleted.

On import, you can preserve the operational values in the target system by selecting the Preserve Operational Values option in Oracle Service Bus Administration Console.

Note:

Sometimes, operators define alert destinations for SLA alerts. Such resources are operator controlled and should not be overlaid or deleted during deployment.

6.6.3 Importing Access Control Policies

Typically the access control policies in each environment are different. In this case the user ensures the access policies are not lost during import by specifying the option to not overlay access control policies during import. However, sometimes the correct access control policies are set in the staging environment and apply to the production environment. In such cases, the access control policies are imported/exported along with the service.

6.6.4 Deploying Oracle WebLogic Server Artifacts

Ideally, deployment should fail if Oracle WebLogic Server artifacts required for completing the configuration are missing.

While some are checked during import, others are not checked (for example, request queue for a business service) and a runtime error occurs.

The best practice is to have the deployment script retrieve environment values for deployed services and alert destinations and check with Oracle WebLogic Server to see if the specified resource exists in Oracle WebLogic Server. If not the deployment fails and the administrator has to define these resources before the script is re-executed by the operator.

A more limited alternative is to import the artifacts into a session and look for semantic errors. Semantic errors occur if Oracle Service Bus checks for the existence of a Oracle WebLogic Server resource at design time.

6.7 Migrating Global Resources

Global resources include the UDDI Registry, JNDI Provider, and SMTP Server resources. These resources typically have different values in testing environments from those that will be used in staging or production environments. When you migrate a deployment from a test environment to a production environment, use one of the following strategies:

  1. Create new global resources on the production domain with the same names as in the test environment. Alternatively, import these resources directly from the test environment for the first time, and then customize them (rather than spend time creating them manually).

    Sometimes, there might be cases where the name of the same environment resource (like an SMTP server) is different across environments. This can be handled by the import script by mapping the reference to such a resource as part of the import process.

  2. When exporting artifacts from the test environment, exclude the global resources. Then simply import the config.jar file. If there are any resources in the config.jar file that references Alert Destinations, JNDI providers, or SMTP providers, these references will simply snap into place when the import is complete.

    To avoid overwriting credentials on the target system, select the option to preserve credentials on import.

  3. Alternatively, export all the artifacts (including the global resources), but exclude the global resources when importing the config.jar file.

6.8 Summary of Basic Deployment Best Practices

This is a summary of basic, recommended best practices for deployment of Oracle Service Bus resources.

  • Avoid project renames. If projects need to be renamed, do so concurrently across development, QA, stage and production systems before the next deployment.

  • Operations on environment specific resources are best filtered out at import time. Administrators may define these resources (referenced in the import file) in the target system before starting the import process. Alternatively, new environment-specific resources may be deployed and customized for the environment after the import.

  • Operational resources controlled by the operator should not be impacted by the import. A naming convention or a dedicated folder could be used to identify such resources during import.

  • When the customization file contains the customizations of all project resources in a single file, apply customizations only to resources that are imported. An alternative is to preserve environment values on import and only apply customizations to resources that are added during import.

  • At export-time, the exporter needs to know if resources have been deleted, renamed, or moved; and if there have been project reorganizations of artifacts since the last export. If yes, complete deployment should be done. If no, the exporter can select only those resources that need to be exported and an incremental deployment can be done.

  • Use an appropriate strategy for migrating global resources such as UDDI registries, JNDI providers, and SMTP servers between environments.

6.9 UDDI

There are special considerations to factor in when working with services deployed in UDDI registries. This section provides information about the proxy services and business services that are published to or imported from UDDI. The use of UDDI production registries complicates import into the production system and special care has to be taken.

6.9.1 UDDI Deployment Topologies

Based on your environment, you can have any of the following UDDI deployment topologies:

6.9.1.1 Development-Only Registry

The simplest deployment of UDDI is having a single development (design) time registry where the resources are both published and discovered. This registry is used for governance using approval control. However, you can also have separate design time publish registry and discovery registry. After the design time publish registry is approved, it can be promoted to the discovery registry.

6.9.1.2 Production-Only Registry

In this production time registry topology, a single production UDDI registry contains all the production business services and proxy services, and their locations (URL). The production registry can be used to discover all production services. However, you can also have separate production time publish registry and discovery registry. After the production time publish registry is approved, it can be promoted to the production discovery registry.

A key reason for having a production registry is dynamic endpoint management. You can change the business service location in the UDDI registry and have it automatically reflected in the Oracle Service Bus production system by enabling automatic synchronization of resources. For more information, see "Auto-Synchronization of Services With UDDI" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

Typically, proxy services are automatically published to the publish registry. If the approval step in UDDI results in a reject of the service, the UDDI approver manually notifies the developer and the developer has to make the appropriate changes and re-export the services through the stage and production systems. For more information, see "Using Auto Publish" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

Production business services are imported from the production discovery registry. Automatic synchronization of the resources can be enabled to ensure that changes in the UDDI registry are automatically updated in Oracle Service Bus. However, when you manually import business services from the production registry into the development registry, you must change the environment values to conform to the values in the development system. The development business service is not automatically synchronized with the UDDI registry because the development environment values would most probably be different from the production registry.

6.9.1.3 Development and Production Registry

An alternative approach is to have a separate development and production UDDI registry. In this topology, the approval step can take place in the development registry. So, the extra development UDDI registry ensures that approvals are done earlier in the cycle.

Figure 6-2 Complex Topology - UDDI

Description of Figure 6-2 follows
Description of "Figure 6-2 Complex Topology - UDDI"

6.9.1.4 Registry Per Individual Domain

Sometimes, the proxy service does a dynamic search of the UDDI registry with a POJO callout to select the service meeting the desired search criteria and retrieve the URL for dynamic routing. In this scenario, a dummy service is defined in Oracle Service Bus with a dummy URL and the URL is dynamically replaced with the actual value after the lookup. In this scenario, a UDDI registry is needed for each environment. Also, the dummy business service in Oracle Service Bus is not linked to any UDDI service.

There is an impact on performance and availability in this scenario. So, the preferred approach is to enable automatic synchronization of a business service into Oracle Service Bus with a routing table XQuery resource that can be used for dynamic routing. For more information, see "Using Dynamic Routing" in the Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus.

6.9.2 Summary of UDDI Deployment Best Practices

This is a summary of recommended best practices for working with services deployed in UDDI registries.

  • Organize business services associated with a particular UDDI registry in a specific folder to make it easy to identify these resources during import.

  • Use the same UDDI server resource name in all systems using that UDDI registry. When there is a separate development and production UDDI registry, use the same resource name for the development and production instances of the UDDI registry. This ensures that references to the server by services are automatically resolved during import.

  • Preserve the same service key across the two registries when you use a development and production UDDI registry.

    Typically, the automatic publish option is enabled for production proxy services and the automatic synchronization option is enabled for business services. When the service is manually imported from the UDDI registry into the development system, the service still has information about the UDDI key of the source registry and a reference to the registry resource. The development service is imported into stage or QA systems in the normal way. The service in the stage and QA systems also has the UDDI key and registry reference to the source registry of the service. So, ignore any UDDI-related status messages in these systems that prompt you that the service is out of sync or that the service should to be deleted.

    The same service in development and production may not have the same keys when two registries are used. However, the recommended approach is to preserve the same keys.

  • Create a new UDDI service with the new shape when the shape of a business service changes.

6.9.3 Importing and Exporting Resources Between Multiple Systems

You can import or export UDDI related resources available in Oracle Service Bus from one system to another system. This section provides information you need to take into account in the various UDDI deployment topologies. In all topologies, all systems have the same UDDI registry resources configured. However, auto synchronization is not enabled in the stage and QA systems.

There are a few factors to consider when a production UDDI registry is used:

  • UDDI contains only a subset of the information for a service. So, some part of the information related to the service comes to the production system through the normal import export process while other parts of the service information comes into the production system from synchronization with the UDDI registry. This information has to be carefully managed during import.

  • Ideally, when a service comes into the development system from a design time UDDI registry, there has to be some way to identify an equivalent service in the production UDDI registry. This ensures that at import time, the information from that service can be merged into the equivalent service in the production UDDI registry.

6.9.3.1 Development-Only Registry

In this scenario, when you move one system to another system, you need to do the following:

  1. Detach the business service from the UDDI registry.

  2. Disable the auto publish option for the proxy service. You can do this using the MBean API or do this from Oracle Service Bus Administration Console while configuring the proxy service.

  3. If required, make any changes to the service.

  4. Manually export the resource from the current system to a JAR and import it to the next system.

6.9.3.2 Production-Only and Development and Production Registry

When importing resources into the production system, there can be any one of the following scenarios:

  • Importing a new service into a system, and the UDDI key of the service in the import JAR and the UDDI registry are the same.

  • Importing a new service into a system, and the UDDI key of the service in the import JAR and the UDDI registry are the different.

  • Importing an existing service into a system

Importing a new service into a production system, and the UDDI key of the service in the import JAR and the UDDI registry are the same

In this scenario, import the service into the system and do one of the following:

  • Use the import script to explicitly force a UDDI re-synchronization of the service in the current session with an API call.

  • Mark the imported service for background re-synchronization by Oracle Service Bus.

    The disadvantage of this option is that UDDI-related service fields may be incorrect until you complete the re-synchronization. However, if auto synchronization is enabled, this is a small interval.

Importing a new service into a production system, and the UDDI key of the service in the import JAR and the UDDI registry are the different

In this scenario, import the service into the system and do one of the following:

  • In an import script, the user explicitly forces a UDDI resync of the service in the current session with an API call. The service is shown as "sync pending" after the session is activated.

  • Mark the service for deletion because the matching UDDI service was not found in the UDDI registry. Customize the resource appropriately and then execute the customization file. Later, use Oracle Service Bus Administration Console to detach the service from the UDDI registry.

    The disadvantage of this approach is that besides UDDI, the production environment values must also be present in the customization file.

    After detaching the service from the registry, you can download the UDDI-related information from the UDDI registry and then enable automatic synchronization, if required.

Importing an existing service into a production system

In this scenario, do one of the following:

  • Overlay the production UDDI service during import when a UDDI registry (or identical UDDI registries - in terms of service key) is used. You can then force a UDDI re-synchronization of the service in the current session with an API call.

  • Use the import script to skip importing this service to the production system. This is the only option if the UDDI production keys are different.

    However, when you skip importing the service, non-UDDI sourced data in the service may be wrong. So, you must directly update such information in the production service definition instead of importing the latest service.

6.10 Deploying Into Virtualized Environments

This section describes the high-level process for deploying an Oracle Service Bus configuration into an Oracle virtualized environment (Oracle VM) using Oracle Virtual Assembly Builder.

Before you begin, install and configure Oracle Virtual Assembly Builder, as described in the Oracle Virtual Assembly Builder Installation Guide and the Oracle Virtual Assembly Builder User's Guide. Install and configure Oracle VM as described in Oracle VM Manager Installation Guide and Oracle VM Server Installation Guide.

Make sure your installation includes the following components:

  • Oracle Virtual Assembly Builder Studio

  • Oracle Virtual Assembly Builder Deployer

  • Oracle VM Manager

  • Oracle VM Server

The following Service Bus deployment topologies are supported in virtual environments:

  • Admin-only topology

  • Admin + Managed Server topology

  • Cluster topology

In addition, the following Service Bus and SOA Suite domain topology is supported in virtual environments:

  • Admin Server, Service Bus Managed Server, and SOA Suite Managed Server

Service Bus deployment topologies are described in Section 1.2, "Oracle Service Bus Deployment Topology." For cluster topologies, configure the hosts with static IP addresses to prevent name lookup failures.

To deploy an Oracle Service Bus configuration into a virtualized environment using Oracle Virtual Assembly Builder:

  1. Create or deploy a Service Bus configuration on a WebLogic Server with Service Bus domain.

  2. Enable configuration file archiving on the Service Bus domain.

    For more information, see "Archive configuration files" in the Oracle WebLogic Server Administration Console online help.

  3. Configure the desired Oracle WebLogic Server aspects of the domain using the Oracle WebLogic Server Administration Console.

    For example, create and configure required data sources. Perform testing to ensure proper configurations.

  4. Export and back up the configuration.

  5. Delete the Service Bus configuration from the domain. Do not simply undeploy it. You must delete it.

  6. Configure the truststore on WebLogic Server.

    Note:

    Currently, the only supported truststore type is Demo Identity and Demo Trust. If the truststore on WebLogic Server is Custom Identity or Custom Trust, it must be reverted to Demo Identity and Demo Trust before introspection, and then the right keystore or truststore type must be reconfigured after each deployment.

  7. Remove any temporary files with forward or backslashes in their names from the Service Bus domain directory.

  8. Do one of the following:

  9. Export any Service Bus projects that currently exist on the base domain. Once the export is complete, delete any Service Bus projects and resources (such as UDDI Registry, JNDI Provider, SMTP Server, and Proxy Server resources).

    For instructions on exporting and deleting Service Bus components, see Oracle Fusion Middleware Developer's Guide for Oracle Service Bus (for using Eclipse) or Oracle Fusion Middleware Administrator's Guide for Oracle Service Bus (for using the Service Bus console).

  10. Using the WebLogic Server introspection plug-in with the Oracle Virtual Assembly Builder CLI commands or Assembly Builder Studio, create a new WebLogic Server assembly out of the Service Bus domain (the domain from which you deleted the Service Bus configuration).

    For instructions on working with the command-line interface and Assembly Builder Studio, see the Oracle Virtual Assembly Builder User's Guide.

  11. If you are using the command-line interface, perform the following steps to create the assembly:

    • Use the introspectWLS command to obtain the domain information.

    • Use the createAssembly command to create an empty assembly.

    • Use the addToAssembly command to add the introspected assembly to the new assembly.

    • Use the createExternalResources command to map external references to an external resource endpoint.

    • If you want to introspect OHS for a cluster topology, use the connectEndpoints command to create an endpoint connection between Oracle HTTP Server (OHS) and WLS.

  12. Using Oracle Virtual Assembly Builder, create the deployment template, upload the assembly archive, register the archive with the Oracle VM, and deploy the assembly. During this process, you may need to link to external resources such as databases and authentication providers.

    For instructions on performing these steps, see the Oracle Virtual Assembly Builder User's Guide.

  13. When the assembly is deployed, manually deploy the Service Bus configuration on the deployed WebLogic Server assembly in the virtual environment.

    Note:

    The WebLogic Server instance in the virtual environment may be listening only on the virtual machine's IP address rather than localhost. If that is the case, you may need to modify URIs that use localhost in your Service Bus configuration.

  14. If needed, import the Service Bus projects you exported earlier and recreate any required resources.