Upload
others
View
55
Download
0
Embed Size (px)
Citation preview
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server Overview, Roadmap
Frances Zhao-Perez Sriram Natarajan Cloud Application Foundation Product Management June , 2014
Oracle Confidential – Internal
2
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.
Oracle Confidential – Internal 3
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Web Tier and Oracle Traffic Director Agenda
1
2
3
Web Tier Portfolio – Big Picture, Overview , State of Union
HTTP Server – Overview, Differentiators, Positioning
Roadmap
Oracle Confidential – Internal 4
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Development - Deployment View Dev: Iterative Deployment, Continuous Integration, Platform-as-a-Service
Oracle Confidential – Internal 5
HTTP (REST)
Web Sockets
SSE
Data Access
Change Notification
Databases
Client
*.html
*.js
*.css
Application Server
HTTP Workload Manager
Container Services
Business Application Logic Hard
war
e Lo
ad B
alan
cer
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Development – Deployment View DevOps: Availability, Reliability, Scalability
Oracle Confidential – Internal 6
HTTP (REST)
Web Sockets
SSE
Data Access
Change Notification
Databases
Client
*.html
*.js
*.css
Application Server HTTP
Workload Manager
Container Services
Business Application Logic
Hard
war
e Lo
ad B
alan
cer
Application Server HTTP
Workload Manager
Container Services
Business Application Logic
Ora
cle
Web
Tie
r
Web Tier Value Proposition 9 Outside Network Admin, Within Application aware Administrator
9 Reverse Proxy – Application Context aware URL Rewrite/Redirect
9 Static Content Serving capabilities
9 Web Application Firewall between Web Tier and App Tier
9 Primarily front-ends external Traffic
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Web Tier – Product Overview, State of Union Overview State of Union • Internet facing scalable server software • Product Portfolio includes
– HTTP Server – Web Server with forward/reverse proxy – WebLogic Server Plug-In – Reverse Proxy Plug-In
• Available for Web Servers such as IIS, Apache, iPlanet – Web Cache – Reverse Proxy Cache Server – iPlanet Web Server – Web Server with reverse proxy – iPlanet Web Proxy Server – Forward Proxy Cache Server
• Licensable as – Standalone (Web Tier SKU) – Free with any WebLogic License !
• Need to be on the same processor with WebLogic
• Strategic Investments (Commodity) – HTTP Server (OHS) – WebLogic Server Plug-In (WLS Plug-In)
• Discontinued Investments – iPlanet Web Server – iPlanet Web Proxy Server – Web Cache – Recommendation:
• Migrate to HTTP Server (OHS) or Traffic Director (OTD) – Leverage Migration documents from Oracle Support
• 1584495.1 and 1536893.1
• Web Tier Statement of Direction from Oracle Support
– 1576588.1
Oracle Confidential – Internal 7
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Web Tier – Support Lifecycle Quick Snapshot of Support Dates for Web Tier products
Oracle Confidential – Internal 8
Release GA Date Premiere Support Ends
Extended Support Ends Sustaining Support Ends
Java System Web Server 6.1.x Aug 2003 August 2015 Not Available Indefinite
Java System Web Server 7.x Jan 2007 March 2014 March 2017 Indefinite
Oracle iPlanet Web Server 7.0.x Jul 2010 March 2017 Not Available Indefinite
Oracle iPlanet Web Proxy 4.0.x Jul 2010 March 2017 Not Available Indefinite
Oracle HTTP Server 11g Jun 2009 Dec 2018 Dec 2012 Indefinite
Oracle HTTP Server 12.1.2 Jun 2013 Dec 2018 Dec 2012 Indefinite
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server – Overview
Oracle HTTP Server offers well integrated, reliable server software to front-end Fusion Middleware and Enterprise Business Applications (on commodity platforms)
• Standards Based – Based on open source Apache
HTTP Server • Ideal to front-end FMW 11g,
12cR1 applications – Serves static / dynamic
content (CGI / FastCGI) – Includes WebLogic Web
Server Plug-In – Front-end WLS Clusters
• Oracle Integration – Certified with FMW, Business
and Fusion Applications – EM Support for unified
Admin.
• Minimized learning curve for our customers – Based on widely used Apache
HTTP Server
• Consistent Administration – Unified end-to-end SSL library
for simplified administration / patching
• Integration with Oracle Ecosystem
• Robust 3rd party plugins – RSA’s WebAgent , CA’s
SiteMinder for Single Sign-On
Oracle Confidential – Internal 9
Positioning Overview Differentiators
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server – Support Policy, Patching Overview • Fully Supported
– Base Apache, All Modules included in OHS
• Not Supported – Any modules not part of OHS
• Customer can continue to use 3rd party (open source) Apache modules – Any OHS issue need to be reproducible
without this module
• Security Updates – Included via CPU, PSU
• CPU is released every quarter and PSU is released once a year
• Bug Fixes – Included via PSU –Customer can get immediate relief
through SR • Version Updates – Included Feature Release –Backward Compatible modules
updated via CPU, PSU
Oracle Confidential – Internal 10
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server 12cR1 – What’s New What’s New in OHS 12.1.2 – Based on Apache 2.2.26 – New Administration Infrastructure! – Consistent Management with
WebLogic Management Framework
– SSL Improvements (TLS 1.1+,FIPS support)
– Simplified configuration for Single Sign-on through Oracle Access Manager • Built-In Web Gate 11gR1PS2 Plug-In
What’s New in OHS 12.1.3 – Based on Apache 2.2.26+ – Stability Improvements to WebLogic
Management Framework – SSL Cipher Enhancements – WebSocket Proxy Support
• Front-end WebLogic 12cR1 WebSocket Apps.
Oracle Confidential – Internal 11
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server 12cR1 – Administration Options
Oracle Confidential – Internal 12
WebLogic Server Domain Standalone Domain
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server 12c – Administration Option 1 WebLogic Server Domain – Administration through WLST, FMWControl
• Domain Provisioning – Through Config Wizard (UI), FMWControl (UI), WLST (CLI)
• Domain Administration – Config administration through Config Wizard (UI), FMWControl (UI), WLST (CLI)
– Server Lifecycle through FMWControl (UI), Node Manager, WLST (CLI)
– Administer OHS 12c on multiple machines • Homogenous Configurations • Leverages WLST ‘pack’ , ‘unpack’ interfaces.
• Dependencies – WLS + JRF collocated for FMWControl (UI)
– Database for production deployment • Simplified solution available for non-production env.
Oracle Confidential – Internal 13
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server – Administration Option 2 Standalone Domain – Self Managed with minimal admin through WLST
• Domain Provisioning – Through WLS Config Wizard (UI based)
• Domain Administration – Server Lifecycle (through Node Manager)
– Config Administration (through Config Wizard)
– Manual file edits supported (Apache httpd.conf syntax)
• Dependencies – No additional dependencies
Oracle Confidential – Internal 14
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server – Enhancement Summary • Administration – Consistent lifecycle administration – Automation with WLST
• Enables secure deployment • Single Sign-On with Oracle Access Mgmt • Support open source application firewall
(ModSecurity module) – Detect, deny requests with application level
vulnerabilities – Pre-built rules available from OWASP
• Consistent SSL interface for end-to-end SSL policies / maintenance. (Oracle SSL module)
• Extensions to vanilla Apache HTTPd – Watchdog support (through Oracle Mgmt. framework)
– Performance monitoring (through DMS)
– Consistent logging, troubleshooting (through ODL) • Track request from one-hop-to-another, Improved Log rotation
• Enhanced Support – Fully Supported
• All bundled Apache HTTPd modules • Any included Oracle Modules
– OHS 11gR1 (Apache 2.2 based) – PS – Dec 2018, ES – Dec 2021
– OHS 12.1.2 (Apache 2.2 based) – PS – Jul 2016, ES – Jul 2019
Oracle Confidential – Internal 15
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle HTTP Server – Key Takeaways
• Strategic Investment for Oracle –Foundation for Oracle FMW products, applications on commodity
hardware
• Based on Open Standards, Open Source – Apache HTTPd Server • Significant differentiators –Solid Foundation, Consistent end-to-end administration experience
• Server Lifecycle, Log Management, Audit Controls, Consistent SSL Administration
–Administration and Monitoring through EM Cloud Control –Enterprise grade support life for open source offering!
Oracle Confidential – Internal 16
Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |
Web Tier Product Portfolio - References • Web Tier in Oracle Technology Network
• OHS 12c – Technical White Paper
• Installing OHS 12c
• Understanding OHS 12c Domain Configuration
• Managing OHS through WebLogic Server Domain
• Managing OHS through Standalone Domain
• Understanding OHS 12c File Layout
• Configuring Single Sign-On using Oracle Access Manager within OHS 12c
Oracle Confidential – Internal 18