cagrid 2.0

Download caGrid 2.0

Post on 25-Jan-2016




0 download

Embed Size (px)


caGrid 2.0. December 2013. What is caGrid 2.0???. Provides a patch for caGrid 1.x to support SHA2 OSGi implementation of WSRF on the new technical stack. Provides foundation of migrating caGrid 1.x services to new technical stack. caGrid 1.x Services migrated to new technical stack - PowerPoint PPT Presentation


Presentation Title Placed Here

caGrid 2.0

December 2013

What is caGrid 2.0???Provides a patch for caGrid 1.x to support SHA2OSGi implementation of WSRF on the new technical stack.Provides foundation of migrating caGrid 1.x services to new technical stack.caGrid 1.x Services migrated to new technical stackNot all services were migrated.Secure services that need to support two endpoints in the same JVM were migrated.Services that were not migrated will be migrated as part of caGrid 2.1 or deprecated.2caGrid 2.0 Technical StackJava 7SpringOSGi A module system and service platform for the Java programming language that implements a complete and dynamic component modelApache Camelis a rule-based routing and mediation engine which provides a Java object-based implementation of the Enterprise Integration Patterns using an API (or declarative Java Domain Specific Language) to configure routing and mediation rules.Apache Service MixOSGi powered Enterprise Service Bus (ESB)Apache CXF Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI.3caGrid 2.x Service Support4ServicecaGrid 2.0caGrid 2.1RetiredAuthentication ServiceXCredential Delegation ServiceXXDorianXXGrid GrouperXXGrid Trust Service (GTS)XXSyncGTSXGlobal Model Exchange (GME)XXIndex ServiceXMetadata Model ServiceXFederated Query Processor (FQP)XTaverna WorkflowXIdentifiersXWhat caGrid 2.x is NotGAARDS UIGAARDS UI has not been migrated, existing GAARDS UI is backwards compatible.IntroduceIntroduce has not been migrated.We plan to develop Maven Archetypes that will create service skeletons for new projectsClient APIcaGrid 1.x java client APIs were not migrated.caGrid 1.x java clients will continue to work.New client APIs can be generated using Apache CXF.5Moving to caGrid 2.0Existing 1.x grid services with SHA-1 host certificates will continue to work normally. When their host certificates expire, they will need to replace a single JAR file in their service when they install a SHA-2 host certificate.Development teams using Introduce may continue to, and will have to swap in a replacement JAR after service generation to support SHA-2.Development teams who wish to build WS or Rest web services that interact with caGrid 2.0 may do so in the tool of their choice (e.g. Eclipse, IntelliJ). Given the state of languages and tools to natively support this, no tooling is provided to support this development.6caGrid Capabilities used by CBIIT ProjectsAdvertisement & Discovery MetadataQuerySecuritycaDSRcaTissueC3DCTRPEVSNBIAcaB2BConsumerConsumerNCTN NavigatorAuthenticationcaArray7Information may be incomplete or incorrect, to be verifiedcaGrid Deployment8

GeneratescaGrid 1.x ServicesupportsAdvertisement & DiscoveryMetadataQuerySecuritySHA-1 Host Certificates (SHA-2 with a patch)Deploy to eitherJBoss 4.0.5Tomcat 5.5Additional upgrade needed: Due to limitations in Globus 4.0.3, JBoss 4.0.5 or Tomcat 5.5 is the latest supported version.

Both JBoss 4.0.5 and Tomcat 5.5 are falling off Tech Stack. Additional upgrade to move patched services away from Globus is needed.(Absence of) Tooling for caGrid 2.0Given the evolution of software development tooling since caGrid 1.0 was released, we do not envision providing tooling (e.g. Introduce 2.0):Java language now supports native annotations to build (for instance) REST interfacescaGrid 2.0 SOA web services are backwards compatible to Globus, but are not Globus services, meaning that its possible to build clients and services in other languages that interoperate with the standards and dont require the client JARs for all interactionsMany capabilities were not brought forward into 2.0 (e.g. data services, metadata) but are supported through backwards compatibility.9Migration Path for Tools/Sub-projectscaGrid Transfer Service Introduce extension developed to support out-of-band data transmission, overcoming a limitation of Axis 1.2 used by GlobusWill continue to work through backwards compatibilityNew, modern options are available if using the caGrid 2.0 approach, but one will not be prescribed10What does Application Development for Grid 2.0 look like?11Uses Java/ Eclipse to buildSOA Web ServiceimplementsAdvertisement & DiscoveryQuery (e.g. secure REST Interface, not CQL data service)caGrid Security / PKI w/ SHA-2Deploy toContainer of ChoiceDevelopmentTeamDocumentationGuidesCheckout and build caGrid 2.0Patching a caGrid 1.4 servicePatching a caGrid 1.4 distributionObtaining SHA2 Host CredentialCreate Trust Fabric Certificate AuthorityCore Service guidesDeveloperAdministratorService upgrade guides - CookbooksProvides best practices and example implementationsProvides framework to start your implementationsMaven ArchetypesBuilds project skeleton based on provided settingsFill in your business logicDeploy your serviceCookbooksDevelop a caGrid 2.0 Analytical Service (REST, SOAP)Develop a caGrid 2.0 Secure Analytical Service (SOAP)Migrate a caGrid 1.4 Analytical Service to caGrid 2.0 (SOAP)

13Secure Analytical ServiceThis tutorial walks you through the steps of creating and using a secure analytical service using caGrid 2.x. This tutorial focuses on fine-grained service-level permissions using Grid Grouper to enable secure photo sharing use case

14Analytical RESTful serviceThis tutorial illustrates how to create caGrid 2.x analytical RESTful service following the best practices mentioned. First, you will create a stock quoting service with operations. Then you will deploy generated service to test it with a client program. 15Analytical SOAP serviceThis tutorial illustrates how to create caGrid 2.x analytical SOAP service following the best practices mentioned. First, you will create a stock quoting service with operations. Then you will deploy generated service to test it with a client program. 16Upgrade caGrid 1.4 Analytical SOAP serviceThis tutorial illustrates how to upgrade an existing caGrid 1.4 analytical SOAP service to caGrid 2.0 analytical SOAP service. You will deploy generated service to test it with a client program.

17Backup Slides18What caGrid 1.x Users must do to use caGrid 2.0Services and Clients do not need to do anything:caGrid 2.0 services are backwards compatible with caGrid 1.x clients and servicesOnce the Production Grid is upgraded, services will advertise as they always have19What caGrid 1.4 Services must do to support SHA-2They need not do anything until their SHA-1 certificate expires. When it does:Shutdown the container (JBoss or Tomcat)Patch your caGrid 1.4 service to support SHA-2 Launch the GAARDS-UIChange your target grid to use the SHA-2 endpointRenew their existing host certificateSHA-1 certificates are replaced with a SHA-2 certificatesReplace the deployed SHA-1 cert with new SHA-2 certRestart the service


View more