Expert Guide to Deploying, Using, and Managing DataPower SOA Appliances
IBM® WebSphere® DataPower® appliances can simplify SOA deployment, strengthen SOA security, enhance SOA performance, and dramatically improve SOA return on investment. In this book, a team of IBMs leading experts show how to make the most of DataPower SOA appliances in any IT environment.
The authors present IBM DataPower information and insights that are available nowhere else. Writing for working architects, administrators, and security specialists, they draw extensively on their deep experience helping IBM customers use DataPower technologies to solve challenging system integration problems.
IBM WebSphere DataPower SOA Appliance Handbook begins by introducing the rationale for SOA appliances and explaining how DataPower appliances work from network, security, and Enterprise Service Bus perspectives. Next, the authors walk through DataPower installation and configuration; then they present deep detail on DataPowers role and use as a network device.
Using many real-world examples, the authors systematically introduce the services available on DataPower devices, especially the big three: XML Firewall, Web Service Proxy, and Multi-Protocol Gateway. They also present thorough and practical guidance on day-to-day DataPower management, including, monitoring, configuration build and deploy techniques.
Coverage includes
Configuring DataPowers network interfaces for common scenarios
Implementing DataPower deployment patterns for security gateway, ESB, and Web service management applications
Proxying Web applications with DataPower
Systematically addressing the security vulnerabilities associated with Web services and XML
Integrating security with WebSphere Application Server
Mastering DataPower XSLT custom programming
Troubleshooting using both built-in and external tools
Foreword by Eugene Kuznetsov xxvii
Foreword by Jerry Cuomo xxix
Foreword by Kyle Brown xxxii
Part I: DataPower Introduction
Chapter 1 An Introduction to DataPower SOA Appliances 3
Chapter 2 DataPower Quick Tour and Setup 21
Part II: DataPower Networking
Chapter 3 DataPower as a Network Device 45
Chapter 4 Advanced DataPower Networking 59
Chapter 5 Common DataPower Deployment Patterns 91
Part III: DataPower Services
Chapter 6 Introduction to DataPower Services 111
Chapter 7 Introduction to Services Configuration 125
Chapter 8 XML Firewall 159
Chapter 9 Multi-Protocol Gateway 193
Chapter 10 Web Service Proxy 243
Chapter 11 Proxying Web Applications with DataPower 299
Part IV: Managing DataPower
Chapter 12 Device Administration 323
Chapter 13 Alternate Management Interfaces 345
Chapter 14 Logging and Monitoring 373
Chapter 15 Build and Deploy Techniques 399
Part V: DataPower Security
Chapter 16 AAA 437
Chapter 17 Advanced AAA 477
Chapter 18 DataPower and SSL 507
Chapter 19 Web Services Security 545
Chapter 20 XML Threats 579
Chapter 21 Security Integration with WebSphere Application Server 611
Part VI: DataPower Development
Chapter 22 Introduction to DataPower Development 637
Chapter 23 Programming Within the DataPower Environment 655
Chapter 24 Real World Examples of XSLT Programming 685
Chapter 25 Development Tools 727
Chapter 26 Transforming Non-XML Data 753
Part VII: Problem Determination and Tools
Chapter 27 Problem Determination Using Built-In Tools 785
Chapter 28 Problem Determination Using External Tools 815
Chapter 29 Multiple Device Management Tools 843
Part VIII: Appendixes
Appendix A DataPower Naming Conventions 863
Appendix B Deployment Checklist 873
Appendix C DataPower Evolution 877
Appendix D Acronyms Glossary 881
Index 885
Bill Hines is a Consulting I/T Specialist with IBMs Software Services for WebSphere organization in the Software Division, working as a mobile consultant out of Hershey, PA (Chocolatetown, USA). He has several years of DataPower experience in both customer engagements and developing and delivering internal DataPower training to the IBM consulting, engineering, support, QA, and technical sales teams. He also has WebSphere Application Server experience dating back to 1998 and across all versions from 2.x to 6.x in areas of specialty including installation, configuration, tuning, dynacache, security, troubleshooting, and design/architecture of enterprise J2EE applications using WebSphere family development tools. He is a co-author of the highly acclaimed IBM Press book IBM WebSphere: Deployment and Advanced Configuration as well as several articles published in WebSphere Technical Journal and developerWorks, and his background includes more than twenty years of information technology experience in many platforms and languages, as well as degrees from New York Institute of Technology and Tulsa Jr. College.
John Rasmussen is a Senior I/T Specialist with IBM Software Services for WebSphere organization, Software Division in Cambridge, MA. John was first introduced to DataPower devices in 2001 while working as an engineer with Fidelity Investments developing XML/XSLT/JAXP applications for Internet-enabled mobile devices. John has been with IBM/DataPower since that time, and has worked as a product development engineer (where he created and developed the original WebGUI Drag and Drop Policy Editor) and as a product specialist assisting many clients in the implementation of DataPower devices. John has an extensive career in software development, including work with McCormack & Dodge/D&B Software and as an independent consultant and independent developer of application software and security systems. John has a degree from the University of Massachusetts at Amherst, and lives in Gloucester, Massachusetts, with his sons Alex and Nick.
Jaime Ryan is a DataPower Specialist for the IBM WebSphere Software Group, currently in Technical Sales for the Western United States. He has worked with all aspects of customer-oriented Services, Sales, and Education for DataPower SOA Appliances at some of IBMs largest and most strategic accounts. He has more than eight years of experience in the creation of high performance Web Services registry, routing, acceleration, BPM, and EAI products. Jaimes background includes a strong focus on Service Oriented Architectures from multiple perspectives: software development, independent consulting, and technical documentation. He received Computer Science and Cognitive Science degrees from the University of California, San Diego, where he met his lovely wife, Danielle.
Simon Kapadia is the Security Lead for IBM Software Services for WebSphere (ISSW) in Europe. He works on designing and implementing large distributed computer systems for IBM customers. Simon holds a Bachelors degree in English and Drama and a Masters in Computing Science. He has owned a computer since six years of age and has turned a lifelong hobby into a career. Prior to joining IBM, Simon developed software for digital exchanges at Bell Laboratories, managed networks and Web applications at an ISP, and supported and consulted on DCE, DFS, and Encina for Transarc Corporation. You can reach Simon at simon.kapadia@uk.ibm.com or via his public Web site at http://www.kapadia.pl.
Jim Brennan is an IBM I/T Specialist with IBM Software Services for WebSphere. He is a mobile consultant out of Hackettstown, NJ specializing in DataPower administration and configuration. Jim has assisted in developing and delivering internal DataPower education material to IBM consultants and engineers. Jim has also been an application developer working with several different programming languages and platforms ranging from COBOL to Java. Jim has been a J2EE developer for several years specializing in J2EE development for WebSphere Application Server. He also has several years of experience with WebSphere Application Server installation, configuration, troubleshooting, and administration. Jim has more than ten years of I/T experience with a certificate from the Chubb Institute of Technology and also attended Felician College in Lodi, NJ.
