What is the recommended architecture for OWSM

We are currently trying to completely the architecture documentation for a new SOA suite project within our company. Unfortunately we are struggling with the architecture design around the OWSM with regards to security. We are proposing to have 2 instances of the SOA suite sat on a VM ware cluster but this cluster is hosts some very sensitive data.
Obviously any externally facing web serivces should have the OWSM manager sat in front of. But if we host the OWSM on the same SOA suite instance will this provide enough security for us? Does any one have any ideas about this or should?
Do we need to host the OWSM on an alternative server to make it securer?

Hi,
Seems like what you are trying to accomplish will be possible.
But still for web services being accessed from outside, it is seen/preferable that a OWSM sits in a DMZ kind of environment. where every request is being intercepted by the WSM before entering into the internal SOA environment.
thanks

Similar Messages

  • What is the recommended way for persisting JMS messages?

    What is the recommended way for persisting JMS messages?. As per the IMQ admin documentation , using the default built-in persistence type which is through unix flat files is much efficient and faster, compared to the database persistence .
    Tried setting up the jdbc stuff for database persistence on iAS 6.5 . I am getting the following
    error .
    [24/Apr/2002:16:09:20 PDT] [B1060]: Loading persistent data...
    [24/Apr/2002:16:09:21 PDT] Using plugged in persistent store: database connection
    url=jdbc:oracle:thin:@dbatool.mygazoo.com:1521:qa1 brokerid=ias01
    [24/Apr/2002:16:09:23 PDT] [B1039]: Broker "jmqbroker" ready.
    [24/Apr/2002:16:11:56 PDT] ERROR [B4012]: Failed to persist interest
    SystemManager%3ASystemManagerEngine%2BiMQ+Destination%0AgetName%28%29%3A%09%09SM_Response%0AClass%3A%09%09%09com.sun.messaging.Topic%0AgetVERSION%28%29%3A%09%092.0%0AisReadonly%28%29%3A%09%09false%0AgetProperties%28%29%3A%09%7BJMQDestinationName%3DSM_Response%2C+JMQDestinationDescription%3DA+Description+for+the+Destination+Object%7D:
    java.sql.SQLException: ORA-01401: inserted value too large for column
    [24/Apr/2002:16:11:56 PDT] WARNING [B2009]: Creation of consumer SM_Response to destination 1
    failed:com.sun.messaging.jmq.jmsserver.util.BrokerException: Failed to persist interest
    SystemManager%3ASystemManagerEngine%2BiMQ+Destination%0AgetName%28%29%3A%09%09SM_Response%0AClass%3A%09%09%09com.sun.messaging.Topic%0AgetVERSION%28%29%3A%09%092.0%0AisReadonly%28%29%3A%09%09false%0AgetProperties%28%29%3A%09%7BJMQDestinationName%3DSM_Response%2C+JMQDestinationDescription%3DA+Description+for+the+Destination+Object%7D:
    java.sql.SQLException: ORA-01401: inserted value too large for column
    Any thoughts?

    From the output, you are using imq 2.0. In that release
    the key used to persist a durable subscriber in the database
    table has a limit of 100 characters. The output shows that
    your value is:
    SystemManager%3ASystemManagerEngine%2BiMQ+Destination%0AgetName%28%29%3A%09%09SM_Res
    ponse%0AClass%3A%09%09%09com.sun.messaging.Topic%0AgetVERSION%28%29%3A%09%092.0%0Ais
    Readonly%28%29%3A%09%09false%0AgetProperties%28%29%3A%09%7BJMQDestinationName%3DSM_R
    esponse%2C+JMQDestinationDescription%3DA+Description+for+the+Destination+Object%7D:
    which is much longer than 100 characters.
    You might want to shorten the string you use for the
    durable name.
    And yes, the default file-based persistence store is
    more efficient when compared to the plugged-in persistence
    through a database.

  • What's the recommended setting for "Process memory usage" ("process virtual" in UI) for a 64-bit host on a 64-bit OS?

    Hi gurus
    In resource based throttling, what's the recommended setting for "Process memory usage" ("process virtual" in the resource based throttling tab of the UI) for a 64-bit host
    on a 64-bit Windows OS?
    According to MS (http://msdn.microsoft.com/en-us/library/ee308808(v=bts.10).aspx):
    "By default, the
    Process memory usage throttling threshold is set to 25. If this value is exceeded and the BizTalk process memory usage is more than 300 MB, a throttling condition may occur. On a 32-bit
    server, you can increase the Process memory usage value to 50. On a 64-bit server, you can increase this value to 100. This allows for more memory consumption by the BizTalk process before throttling
    occurs."
    Does this mean that 100 is the recommended setting for a 64-bit host on a 64-bit Windows?
    Thanks
    Michael Brandt Lassen

    Hi Michael,
    Recommended setting is the default setting which is 25 .dot.
    If your situation is abnormal and you see message delivery throttling state to “4” when the following performance counters are high or if you expect any of you integration
    process could have impact on following counters, then you can consider the suggestion by Microsoft. Don’t change the default setting.
    High process memory
    Process memory usage (MB)
    Process memory usage threshold (MB)
    You can see these counters under “BizTalk:MessageAgent”
    You can gauge these performance counter and its maximum values if have done any regression/performance testing in your test servers. If you have seen these counters having
    high values and causing throttling, then you can update the Process memory usage.
    Or unexpectedly you’re process high throughput messages in production which is causing these counters to go high and cause throttling, then up can update the Process memory
    usage.
    The above two cases where I know my expected process usage (by doing performance testing) or suddenly my production server processing has gone high due to unexpected business
    hike (or any reasons) which caused throttling, then do changes to default throttling setting.
    Just changing the default setting without actual reason could have adverse effect where you end up allocating 
    more processing capacities but the actual message processing message usage ever is low means you end up investing in underutilised resources.
    Regards,
    M.R.Ashwin Prabhu
    If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

  • What is the recommended version for ITS?

    HI Experts,
    what is the recommended versions for ITS?
    We have SAP R/3 4.6c and WAS 6.40 ................what will be the recommened versions ITS for the above said SAP R/3 4.6c and WAS 6.40 combination...........
    and also furnish the list of all versions of SAP R/3 ,WAS and ITS........
    Higher points will be rewarded for useful inputs........
    Thanks in Advance,
    Shakthi

    ITS 6.20 gets well with 4.7.. There was ITS 6.4 also released but there were some issues.. you can check the ITS release note from
    https://service.sap.com/notes for more info.
    Hope this helps
    rgds

  • What is the correct architecture for retrieving several complex decision reports

    The project that I am currently working on is required to save decision reports for several complex outputs.  These outputs are needed for each person entity contained in the request. All of the person entities are joined via relationships and the more people that are sent in the request, the more complex the decision reports become.
    We are using the determinations server and it is called as a web service.
    The determinations server starts having performance issues when the requests contain 6 people entities and times out when the number of people get to around 10.
    Checking the response size for a 10 person request with the complex decision reports yields a response size of around 40mb.
    What is the correct architecture to still have the traceability of what happened by having a copy of the decision report for each run without impacting system performance?

    Has anyone else encountered this issue?

  • What are the recommended specs for Spiceworks Network Monitor

    What are the recommended disk size and memory for Network Monitor?
    This topic first appeared in the Spiceworks Community

    Thanks for the response Ralph but I am looking for a more personal experience someone may have managing 200+ Macs via the OS X server and what their specs are.

  • What is the best architecture for such app ?

    Each user will have independent block with info.
    For example
    - picture with info
    - timetable
    - favorite books
    He can show or hide each block.
    Some block can be obsolete in the future.
    Another block can be added in the future.
    First idea is put every info in user table.
    public class User
        public int UserId {get;set;}
        public string UserName {get;set;}
        //First block info
        public byte[] Image {get;set;}
        public string Deskription {get;set;}
        public bool IsInfoEnabled {get;set;}
        //Second block info
        public int TimeTableId
        public int TimeTableName
        public bool IsTimeTableNameEnabled {get;set;}
    So I get table which will be growing up in width ( i mean columns ).
    But I don't like to delete columns from these big table.
    That's why I decided to move all content block to separate table.
    Second idea :
    public class User
        public int UserId {get;set;}
        public string UserName {get;set;}
        public int InfoBlockId {get;set;}
        public int TimeTableBlockId {get;set;}
    public class InfoBlock
        public int InfoBlockId {get;set;}
        public byte[] Image {get;set;}
        public string Deskription {get;set;}
        public bool IsInfoEnabled {get;set;}
    public class TimeTableBlock
        public int TimeTableBlockId {get;set;}
    In second way scalability is better, but I will get more queries through numerous tables.
    What is the best way ? If you have your additional idea share it!
    My .NET Blog with projects and feedback.
    Since May 30, 2014 I am waiting for Microsoft fix
    these 2 bug. If you know how to speed them up, please help

    As your question is about architecture..
    The first question is: Do you want to follow a Code-First or Database-First design.
    Then you may choose the appropriate forum. From your post, I guess, it's Code-First. So take your wording as an outline. Thus you need a User class and blocks. As blocks can have different types, we need some polymorphism here. Thus it could be an IBlock.
    So that your concrete types derive from it:
    Instead of an interface it could be also an abstract base class:

  • WHAT ARE THE RECOMMENDED CERTIFICATIONS FOR A SOFTWARE DEVELOPER?

    HI FRIENDS COULD SOME ONE HELP ME OUT WITH THE LIST OF RECOMMENDED CERTIFICATION FOR A PROGRAMMER. TO GIVE YOU AN IDEA OF MY WORKING PLATFORM. I WORK IN C/C++ AS FRONTEND WITH UNIX AS BACKEND. I ALSO DEAL WITH UML AT TIMES. SO DO PLEASE HELP ME OUT TO SPOT THE EXACT CERTIFICATION WHICH WOULD HELP ME IN MY CARRIER.
    Edited by: user11087237 on 20 Apr, 2009 9:43 PM

    You can get an OCP (Advanced PL/SQL) by completing 1z0-146. You have in practice to get PLSQL OCA first.
    You can also get OCP via a forms route instead .... 1z0-141. What I am trying to say is Oracle has a number of products other than sql* Forms, and forms may be in decline, so if you are not already familiar with forms that may not be the best place to put efforts.
    What I was trying to say that is possilbly that effot getting to know apex (application express) may be better than time spent trying to ge to grips with and certifiying in Forms. (Though as far as I am aware there is no apex certification).
    i feel that you suggest me something other than oca /ocp certification. if i am right do please clear me out . and for your information i have worked in sql & plsql for quite a good time.In summary
    I am suggesting you seriously consider Oracle PL/SQL Developer Certified Associate(OCA) and Oracle Advanced PL/SQL Developer Certified Professional (OCP).
    However the case for studying for (Oracle Forms Developer Certified Professional (OCP)) is perhaps less clear cut if you have not aleady got forms experience, and that for you effort may be better spent elsewhere, possilby even in non certified study (jdeveloper, application express, oracle designer ... )
    Rgds - bigdelboy
    Hope that is less unambiguous.

  • What is the recommended practice for bundling JRE with Java Application?

    Hello,
    I am using a software called Advanced Installer to create a Windows installer (.msi file).
    This .msi file contains :
    - a .exe file which is a wrapper for a .jar file (a Java Swing program),
    - and a directory for the JRE.
    I read an article on the web which recommended bundling the JRE with the Java program. And
    this is what I am doing. And my understanding is that if the user's system does not already
    have the JRE installed, the bundled JRE would allow my Java Swing program to run.
    However, when I tried to install my .msi file on a system that did not already have the JRE,
    my Java Swing program would not start. After installing the JRE on this system, my Java
    Swing program started and ran fine.
    Do I really need both JREs, one bundled with my Java Swing application and one installed at the
    system's location for my Java Swing program to start and run?
    Another question I have is that if every application would bundle its own JRE, there could be many
    copies/possibly versions of the JRE on the system, is this acceptable? What is the common or
    recommended practice?
    Thank you for your help.
    Akino.

    I'm sure why it didn't work. That is how I bundle the JRE. The only disadvantage about bundling is the size of the installer file will be pretty large. In my opinion, relying on a public version is not a good idea if you have no control of the target box. The user might, for some reason, decide to uninstall java or upgrade to a new incompatible version and your app. may stop working. I'm sure many on here will disagree with this though.
    I always use the marner .exe wrapper:
    http://www.megaupload.com/?d=FYZAVM77
    and inno installer:
    http://www.jrsoftware.org/isinfo.php
    They're both free to use and I've had no problems with them. Another wrapper is Javaround:
    http://sourceforge.net/project/showfiles.php?group_id=234356

  • KMDF Driver. What are the recommended limits for buffer size when calling WdfCommonBufferCreate

    Hi,
    I have a customer who wants to really stress-test his PCIe hardware. His idea is to declare two 8 GB buffers alternately filled by application software and fetched by scatter/gather DMA in the hardware (Transfer to PCIe card). If I calculate this through,
    this is a maximum of 2M scatter/gather elements per buffer or 32 MByte, assuming S/G element is 16 bytes. i.e. 64 MByte logically contiguous memory as a common buffer for storing the S/G lists. The test system will have plenty of memory, 32 G upwards.
    Still don't think I am likely to get a 64MByte common buffer from the system or even two disjunct 32 Mbyte buffers. If I look at poolmon on my server, the current size for NP is only 86M
    So I expect the driver will have to handle multiple calls to EvtProgramDma, each covering just part of the 8G to be transferred.
    Still I have two questions:
    1) Are there any recommendations, house numbers from experience etc. regarding what is a usable maximum size I can reliably get for a common buffer with a call to WdfCommonBufferCreate (percentage of NP pool?, absolute number? ...). The common buffer is
    for storing the S/G elements for the HW DMA controller
    2) If I just declare a huge array of SCATTER_GATHER_ELEMENT[4M] or 2x huge arrays SCATTER_GATHER_ELEMENT[2M] in the device context (to be managed later by WdfMemoryCreatePreallocated() etc.) , will windows refuse to load the driver because the driver footprint
    is too large?
    We are talking about Windows 7/x64
    Thanks,
    Charles

    Don,
    thanks for your reply. The card is always physically present in the test system which means I could load the driver at boot time, but it would have to be after PCIe enumeration of course.
    So far I have always managed to avoid writing a boot-start driver, my main objection being for "purist" reasons. I understand the MS documentation to mean that boot-start is really only intended for devices that are required to boot the system
    (disk, console, keyboard, maybe network ....). I am aware of the advantage of boot-start though, a much higher probability of getting contiguous memory in larger chunks. This driver however is definitely not relevant for system start. The add-in card is essentially
    a high performance source of test data and only runs when a SW application has been started.
    The card does have high performance scatter/gather DMA support also 64-bit addressing capability.
    I do wish Microsoft would issue some guidelines regarding realistic sizing of common buffers, it would make my discussion easier. Yes, I could write a test driver and measure it out but I don't really have time for that. Microsoft surely have test/application
    teams for figuring these things out.
    Charles

  • What is the recommended upgrade for OSX 10.6.8 and what should I watch out for with the upgrade?

    I would like to know whether there is a recommended upgrade for OSX 10.6.8.  Is it Mountain Lion?  Is there anything I should watch out for in case I do the upgrade?  My computer is not working optimally and now my external drive (My Passport, 1TB) is not recognized by my computer.  Thanks!

    You should try to get your computer working before you upgrade.
    Check that your computer is compatible with Mountain Lion/Mavericks/Yosemite.
    To check the model number hold down the option/alt key, go to the Apple menu and select System Information.
    MacBook Pro (Mid/Late 2007 or newer) model number 3,1 or higher
    Your Mac needs:
    OS X v10.6.8 or OS X Lion already installed
    2 GB or more of memory (More is better - 4 GB minimum seems to be the consensus)
    8 GB or more of available space
    Check to make sure your applications are compatible. PowerPC applications are no longer supported after 10.6.      
    Application Compatibility
    Applications Compatibility (2)
    Do a backup before installing.

  • What's the recommended format for shooting video thats going on websites

    I'm basically looking to do video for websites. Since computer screens are displaying progressively. Is shooting (Progressive Frame Rates) always the better option for shooting video. This is if your only final destination is going to be the internet ?
    Also, is streaming always the better route ? If you can afford a personal server, isnt streaming the best method of posting multiple video clips ?
    Thanks - Appreciate all replies

    Just one more note to add to the good ones already here: Make sure your source material is as good as it can possibly be. Maybe I'm the weirdo, but in my experience scaling down and compressing video for Web delivery exaggerates rather than hiding shortcomings in the source material. Most of my content is delivered over the Web, but I shoot everything in high-definition with aggressively contrasty lighting and deeply crushed blacks. You might think it wouldn't matter, since it's all getting downscaled and compressed for distribution anyway, but at least to my eyes, material that's shot in high resolution (and yes, at 23.976) with a lot of in-camera contrast compresses better. You end up with fewer subtle areas of mostly-the-same luminance, like in the backgrounds, and that's where Internet compression really falls apart. By keeping everything in sharp contrast, and especially by underlighting your backgrounds and really crushing your blacks, I feel you give the encoder a little advantage and let it produce a better result.
    But that might just be me.

  • What is the recommended capacity for an external FW audio hard drive?

    For a home studio recording mostly guitars and vocals

    also make sure to get a Firewire drive running at 7200rpm not 5400rpm.
    1TB drives are much cheaper these days, so I recommend spending the extra cash on 750GB or 1TB or above.
    JG

  • What Are the Recommended Guidelines for Importing HTML into InDesign?

    I would like to introduce an html document into an InDesign project - is that even possible?
    I'm not an MS Word user, but am running Open Office, should that be required in addition to having the entirety of the Extended CS6 Design-Web suite.
    Thank you very much for any replies.
    Kind regards,
    Kelly

    Hi Petteri,
    Thanks for answering.
    The final format would be destined for the printer who would prefer the file to be from InDesign.
    I'm aware of the quality differences between images intended for print and those for the web.
    The short version of the idea is to take the tabular (i.e., ugly) data generated from one program and edit it into something more attractive while also making the folks at the print shop happy. WTides (or some other derived flavor of XTides) can generate plain text or html tables. The html can be templated so that there is a minimal amount of post editing required. The images in the html tags can be high resolution images of the various symbols; e.g., moon phases, etc.
    Thank you again for any suggestions.
    Kelly

  • What is the recommended procedure for upgrading the OS?

    I'm a creative cloud subscriber and am about to perform an upgrade from Win 7 to Win 8. Has this scenario been tested? Should I deactivate and/or uninstall my Adobe products before the upgrade, and then reinstall after? Will this be considered a 'new' computer, and cost me another install?
    Let me know if there is any documentation available for 'best-practices' when upgrading an OS with Adobe products installed.
    Thank you.

    The only thing would be an adapter, for example World Travel Adapter Kit from the Apple Store.
    The power supply will accept the 240V input in Europe.

Maybe you are looking for

  • Remotely add and remove Instances from different pages

    Similar to my other post, I have a form that has multiple pages, one being a calculator (OA_CALC) that shows every variable for calculation; the second (OA_PG1), customer facing showing only pertinent information. So both tables should add/remove and

  • Can we rename Oracle username & tablespace name in 11g R2

    - We have Oracle tablespace name "TULIP" - We have Oracle username "TULIP" Default tablespace for use TULIP is TULIP. - Now can we rename tablespace TULIP to TULIP_NEW ? - Now can we rename username TULIP to TULIP_NEW ? Can this be done online when t

  • GetInputStream problem

    I am new to JAVA and am working on a simple socket connection class to read an HTTP post. But am having a problem with it looping. The while statement doesn't seem to recognize when there is no more input. My understanding is that a null value should

  • Safari-- Numbers Search Bug

    Switching back and forth between Safari and Numbers I noticed that occasionally if there was something I had recently searched for in the Safari search box, the first word of that search would appear in the find/replace search box in Numbers. Is ther

  • How to configure port to connect switch SG300 to 3com switch

    Hello, I need help. I have my network with severals SG300 switches. I have one of them like my core switch working in layer 3 mode. With 2 vlans and vlan interfaces to each vlan. Everything is working ok. But now i have to connect one 3com unmanage s