4SRA Deployment | Sun Microsystems 2005Q1 manual

A Typical Portal Server Installation

Figure 1-4shows a Portal Server deployment with SRA services. See Chapter 2, “Portal Server Secure Remote Access Architecture” for details.

Figure 1-4SRA Deployment

Gateway

Client

Proxylet

Netlet

Rewriter

Proxy

Netlet

Proxy

Portal

Server

Web

Server

Host

Application

Host

Application

Chapter 1 Portal Server Architecture 35

Image 35

Sun Microsystems 2005Q1 manual 4SRA Deployment

Contents

2005Q1 Portal Server Deployment Planning GuidePage Contents Portal Server Secure Remote Access Architecture Creating Your Portal Design Portal Server 6 2005Q1 Deployment Planning Guide Appendix E Portal Deployment Worksheets 167 Portal Server 6 2005Q1 Deployment Planning Guide List of Figures Portal Server 6 2005Q1 Deployment Planning Guide List of Tables Portal Server 6 2005Q1 Deployment Planning Guide Before You Read This Book Who Should Read This Book Preface Chapter How This Book Is Organized Typographical Conventions Conventions Used in This BookTypographic Conventions Books in This Documentation Set Related Documentation Other Server Documentation Other Portal Server Documentation Accessing Sun Resources Online Sun Welcomes Your Comments Page Portal Server Architecture What is a Portal? Collaborative Portals Types of Portals Business Intelligence Portals Portal Server Capabilities Sun Java System Portal Server Portal Sever in Open Mode Secure Remote Access 1Portal Server in Open Mode Portal Server in Secure Mode Firewall Gateway Internet Portal Server Deployment Components Security, Encryption, and Authentication Portal Server Architecture Identity Management Software Categories Portal Server Software DeploymentSoftware Packaging Compatibility With Java Software Typical Portal Server Installation DMZ 4SRA Deployment Page SRA Gateway Portal Server Secure Remote Access Architecture Multiple Portal Server Instances Multiple Gateway Instances Gateway and SSL Support Proxy ConfigurationGateway and Http Basic Authentication Gateway Access Control Static and Dynamic Port Applications Using Accelerators with the GatewayNetlet Gateway Logging Netlet Split Tunneling Netlet and Application Integration Components Netlet ProxyNetFile Validating Credentials Initialization Special Operations Access ControlSecurity NetFile and Multithreading Rewriter Rewriter Proxy Proxylet Proxylet Portal Server 6 2005Q1 Deployment Planning Guide Business Objectives Business Objectives Technical Goals Identity Management Mapping Portal Server Features to Your Business Needs1Identity Management Features and Benefits SSO SRA 2SRA Features and Benefits Search Engine 3Search Features and Benefits Aggregation and Integration Search Features and Benefits4Personalization Features and Benefits Personalization Understanding User Behaviors and Patterns 5Aggregation Features and Benefits Understanding User Behaviors and Patterns Pre-Deployment Considerations Determine Your Tuning Goals Establish Performance Methodology Portal Sizing Tips See Portal Sizing on Portal Sizing Peak Numbers Establish Baseline Sizing Figures Concurrent Users Average Time Between Page Requests Search Engine Factors Average Session Time TIP Portal Desktop Configuration Transaction Time Hardware and ApplicationsBack-End Servers Workload Conditions Customize the Baseline Sizing Figures Application Server Requirements Validate Baseline Sizing FiguresLdap Transaction Numbers Refine Baseline Sizing Figures Validate Your Final Figures SRA Sizing Identifying Gateway Key Performance Requirements Session Characteristics Netlet Usage Characteristics Configuration Advanced Gateway Settings Secure Portal Pilot Measured Numbers SRA Gateway and SSL Hardware AcceleratorsScalability SRA and Sun Enterprise Midframe Line SRA Sizing Portal Server 6 2005Q1 Deployment Planning Guide Portal Design Approach Creating Your Portal Design Overview of High-Level Portal Design Logical Portal Architecture Overview of Low-Level Portal Design Portal Design Approach Horizontal Scaling Portal Server and ScalabilityVertical Scaling Portal Server and High Availability Achieving High Availability for Portal Server System AvailabilityDegrees of High Availability Portal Server System Communication Links HTTPs Portal Server System Communication Links 2Portal Server Building Module Architecture Working with Portal Server Building Modules Best Effort Building Modules and High Availability Scenarios Portal Server High Availability Scenarios 3Best Effort Scenario Best Effort No Single Point of Failure Example No Single Point of Failure Working with Portal Server Building Modules Working with Portal Server Building Modules 5Transparent Failover Example Scenario Transparent Failover Deployment Guidelines Deploying Your Building Module SolutionBuilding Module Constraints Search Engine Structure Directory Server Requirements Designing Portal Use Case Scenarios Elements of Portal Use Cases Use Case Authenticate Portal User Example Use Case Authenticate Portal User Securing the Operating Environment Designing Portal Security Strategies Unix User Installation Using Platform Security Limiting Access Control Using a Demilitarized Zone DMZ Portal Server and Access Manager on Different Nodes SDK 7Two Portal Servers and One Access Manager 8One Portal Server and Two Access Managers 9Two Portal Servers and Two Access Managers Restart amserver services Designing SRA Deployment Scenarios 10Basic SRA Configuration Basic SRA Configuration 11Disable Netlet Disable Netlet 12 Proxylet Proxylet NetFile Gateway Netlet and Rewriter Proxies NetFile Proxies on Separate Nodes Netlet and Rewriter Proxies on Separate Nodes 16Two Gateways and Netlet Proxy Using Two Gateways and Netlet Proxy Accelerator Using an Accelerator Host Netlet with 3rd Party Proxy Reverse Proxy 19Using a Reverse Proxy in Front of the Gateway Designing for Localization Content and Design Implementation Integrating Applications Placement of Static Portal ContentCreating a Custom Access Manager Service Integration Design Independent Software Vendors Integrating Microsoft Exchange Identity and Directory Structure Design Portal Desktop Design Implementing Single Sign-On Working with Providers Choosing and Implementing the Correct Aggregration Strategy String name=url value=file//path/filename Client Support Page Moving to a Production Environment Monitoring and TuningProduction Environment Documenting the Portal Memory Consumption and Garbage Collection Monitoring Portal Server CPU Utilization Thread Usage Access Manager Cache and Sessions Portal Usage Information Table A-1Portal Server Directories Installed Product LayoutDirectories Installed for Portal Server Table A-2Portal Server, SRA Directories Directories Installed for SRA Etc/opt/SUNWps Configuration FilesPage Table B-1Performance Analysis Tools Analysis Tools Count MpstatAgrep Socket connection What to Look For Iostat Netstat -I hme0 Netstat Netstat -sP tcp Output Consider the following Table B-3TCP/IP Options Tuning Parameters for /etc/systemEtc/system Options Max Page Introduction to Application Server Support in Portal Server Portal Server and Application Servers Portal Server on an Application Server Cluster Overview of BEA WebLogic Server Clusters Overview of Application Server Enterprise Edition Installdir/config/domainname/startWeblogic.sh Overview of IBM WebSphere Application Server Page Unix Processes Troubleshooting Your Portal DeploymentTroubleshooting Portal Server Working with the Display Profile Recovering the Search DatabaseLog Files To Extract the Display Profile High CPU Utilization for Portal Server Instance Debugging the Gateway Troubleshooting SRA SRA Introduction to shooter Gctool.pl Shooter.sh GWDump.class SRA Log FilesMemfoot.sh Uniq.pl Netlet Table E-1General Questions Portal Deployment WorksheetsPortal Assessment Worksheets Table E-2Organizational Questions Table E-4Content Management Questions Table E-3Business Service-level Expectations Questions Table E-7Architecture Questions Table E-5User Management and Security QuestionsTable E-6Business Intelligence Questions Table E-8 Portal Design Task List Design Task List 2 Table E-8 Develop and Integrate Design Task List 3 Table E-8Design Task List 4 Sun Java System Portal Server, Sun Design Task List 5 Deployment Production Design Task List 6 Design Task List 7 Page Table F-1Comparison of Solaris and Linux Path Names Limitations Using LinuxPortal Server on the Linux Platform Comparison of Solaris and Linux Path NamesPage Glossary Portal Server 6 2005Q1 Deployment Planning Guide Index Etc/system tuning parameters 150 /opt/SUNWps directory Section B Dpadmin command Dp-org.xml file Dp-providers.xml file Gctool.pl tool Memfoot.sh script Psdp.dtd file Section Q SRA Section W Section Portal Server 6 2005Q1 Deployment Planning Guide