IBM WebSphere DataPower SOA Appliance Handbook

Description

Table of Contents

Foreword by Eugene Kuznetsov  xxvii

Foreword by Jerry Cuomo  xxix

Foreword by Kyle Brown  xxxii

Part I: DataPower Introduction

Chapter 1       An Introduction to DataPower SOA Appliances  3

Chapter 2       DataPower Quick Tour and Setup  21

Part II: DataPower Networking

Chapter 3       DataPower as a Network Device  45

Chapter 4       Advanced DataPower Networking  59

Chapter 5       Common DataPower Deployment Patterns  91

Part III: DataPower Services

Chapter 6       Introduction to DataPower Services  111

Chapter 7       Introduction to Services Configuration  125

Chapter 8       XML Firewall  159

Chapter 9       Multi-Protocol Gateway  193

Chapter 10     Web Service Proxy  243

Chapter 11     Proxying Web Applications with DataPower  299

Part IV: Managing DataPower

Chapter 12     Device Administration  323

Chapter 13     Alternate Management Interfaces  345

Chapter 14     Logging and Monitoring  373

Chapter 15     Build and Deploy Techniques  399

Part V: DataPower Security

Chapter 16     AAA  437

Chapter 17     Advanced AAA  477

Chapter 18     DataPower and SSL  507

Chapter 19     Web Services Security  545

Chapter 20     XML Threats  579

Chapter 21     Security Integration with WebSphere Application Server  611

Part VI: DataPower Development

Chapter 22     Introduction to DataPower Development  637

Chapter 23     Programming Within the DataPower Environment  655

Chapter 24     Real World Examples of XSLT Programming  685

Chapter 25     Development Tools  727

Chapter 26     Transforming Non-XML Data  753

Part VII: Problem Determination and Tools

Chapter 27     Problem Determination Using Built-In Tools  785

Chapter 28     Problem Determination Using External Tools  815

Chapter 29     Multiple Device Management Tools  843

Part VIII: Appendixes

Appendix A     DataPower Naming Conventions  863

Appendix B     Deployment Checklist  873

Appendix C     DataPower Evolution  877

Appendix D     Acronyms Glossary  881

Index  885

Back Cover

Expert Guide to Deploying, Using, and Managing DataPower SOA Appliances

IBM® WebSphere® DataPower® appliances can simplify SOA deployment, strengthen SOA security, enhance SOA performance, and dramatically improve SOA return on investment. In this book, a team of IBM's leading experts show how to make the most of DataPower SOA appliances in any IT environment.

The authors present IBM DataPower information and insights that are available nowhere else. Writing for working architects, administrators, and security specialists, they draw extensively on their deep experience helping IBM customers use DataPower technologies to solve challenging system integration problems.

IBM WebSphere DataPower SOA Appliance Handbook begins by introducing the rationale for SOA appliances and explaining how DataPower appliances work from network, security, and Enterprise Service Bus perspectives. Next, the authors walk through DataPower installation and configuration; then they present deep detail on DataPower's role and use as a network device.

Using many real-world examples, the authors systematically introduce the services available on DataPower devices, especially the “big three”: XML Firewall, Web Service Proxy, and Multi-Protocol Gateway. They also present thorough and practical guidance on day-to-day DataPower management, including, monitoring, configuration build and deploy techniques.

Coverage includes

•  Configuring DataPower's network interfaces for common scenarios

•  Implementing DataPower deployment patterns for security gateway, ESB, and Web service management applications

•  Proxying Web applications with DataPower

•  Systematically addressing the security vulnerabilities associated with Web services and XML

•  Integrating security with WebSphere Application Server

•  Mastering DataPower XSLT custom programming

•  Troubleshooting using both built-in and external tools

Author

Bill Hines is a Consulting I/T Specialist with IBM's Software Services for WebSphere organization in the Software Division, working as a mobile consultant out of Hershey, PA (Chocolatetown, USA). He has several years of DataPower experience in both customer engagements and developing and delivering internal DataPower training to the IBM consulting, engineering, support, QA, and technical sales teams. He also has WebSphere Application Server experience dating back to 1998 and across all versions from 2.x to 6.x in areas of specialty including installation, configuration, tuning, dynacache, security, troubleshooting, and design/architecture of enterprise J2EE applications using WebSphere family development tools. He is a co-author of the highly acclaimed IBM Press book IBM WebSphere: Deployment and Advanced Configuration as well as several articles published in WebSphere Technical Journal and developerWorks, and his background includes more than twenty years of information technology experience in many platforms and languages, as well as degrees from New York Institute of Technology and Tulsa Jr. College.

John Rasmussen is a Senior I/T Specialist with IBM Software Services for WebSphere organization, Software Division in Cambridge, MA. John was first introduced to DataPower devices in 2001 while working as an engineer with Fidelity Investments developing XML/XSLT/JAXP applications for Internet-enabled mobile devices. John has been with IBM/DataPower since that time, and has worked as a product development engineer (where he created and developed the original WebGUI Drag and Drop Policy Editor) and as a product specialist assisting many clients in the implementation of DataPower devices. John has an extensive career in software development, including work with McCormack & Dodge/D&B Software and as an independent consultant and independent developer of application software and security systems. John has a degree from the University of Massachusetts at Amherst, and lives in Gloucester, Massachusetts, with his sons Alex and Nick.

Jaime Ryan is a DataPower Specialist for the IBM WebSphere Software Group, currently in Technical Sales for the Western United States. He has worked with all aspects of customer-oriented Services, Sales, and Education for DataPower SOA Appliances at some of IBM's largest and most strategic accounts. He has more than eight years of experience in the creation of high performance Web Services registry, routing, acceleration, BPM, and EAI products. Jaime's background includes a strong focus on Service Oriented Architectures from multiple perspectives: software development, independent consulting, and technical documentation. He received Computer Science and Cognitive Science degrees from the University of California, San Diego, where he met his lovely wife, Danielle.

Simon Kapadia is the Security Lead for IBM Software Services for WebSphere (ISSW) in Europe. He works on designing and implementing large distributed computer systems for IBM customers. Simon holds a Bachelor's degree in English and Drama and a Master's in Computing Science. He has owned a computer since six years of age and has turned a lifelong hobby into a career. Prior to joining IBM, Simon developed software for digital exchanges at Bell Laboratories, managed networks and Web applications at an ISP, and supported and consulted on DCE, DFS, and Encina for Transarc Corporation. You can reach Simon at simon.kapadia@uk.ibm.com or via his public Web site at http://www.kapadia.pl.

Jim Brennan is an IBM I/T Specialist with IBM Software Services for WebSphere. He is a mobile consultant out of Hackettstown, NJ specializing in DataPower administration and configuration. Jim has assisted in developing and delivering internal DataPower education material to IBM consultants and engineers. Jim has also been an application developer working with several different programming languages and platforms ranging from COBOL to Java. Jim has been a J2EE developer for several years specializing in J2EE development for WebSphere Application Server. He also has several years of experience with WebSphere Application Server installation, configuration, troubleshooting, and administration. Jim has more than ten years of I/T experience with a certificate from the Chubb Institute of Technology and also attended Felician College in Lodi, NJ.