oracle http server · oracle http server – overview oracle http server offers well integrated,...

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |

Oracle HTTP Server Overview, Roadmap

Frances Zhao-Perez Sriram Natarajan Cloud Application Foundation Product Management June , 2014

Oracle Confidential – Internal

2


Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

Oracle Confidential – Internal 3


Web Tier and Oracle Traffic Director Agenda

1

2

3

Web Tier Portfolio – Big Picture, Overview , State of Union

HTTP Server – Overview, Differentiators, Positioning

Roadmap



Development - Deployment View Dev: Iterative Deployment, Continuous Integration, Platform-as-a-Service


HTTP (REST)

Web Sockets

SSE

Data Access

Change Notification

Databases

Client

*.html

*.js

*.css

Application Server

HTTP Workload Manager

Container Services

Business Application Logic Hard

war

e Lo

ad B

alan

cer


Development – Deployment View DevOps: Availability, Reliability, Scalability


HTTP (REST)

Web Sockets

SSE

Data Access

Change Notification

Databases

Client

*.html

*.js

*.css

Application Server HTTP

Workload Manager

Container Services

Business Application Logic

Hard

war

e Lo

ad B

alan

cer

Application Server HTTP

Workload Manager

Container Services

Business Application Logic

Ora

cle

Web

Tie

r

Web Tier Value Proposition 9 Outside Network Admin, Within Application aware Administrator

9 Reverse Proxy – Application Context aware URL Rewrite/Redirect

9 Static Content Serving capabilities

9 Web Application Firewall between Web Tier and App Tier

9 Primarily front-ends external Traffic


Web Tier – Product Overview, State of Union Overview State of Union • Internet facing scalable server software • Product Portfolio includes

– HTTP Server – Web Server with forward/reverse proxy – WebLogic Server Plug-In – Reverse Proxy Plug-In

• Available for Web Servers such as IIS, Apache, iPlanet – Web Cache – Reverse Proxy Cache Server – iPlanet Web Server – Web Server with reverse proxy – iPlanet Web Proxy Server – Forward Proxy Cache Server

• Licensable as – Standalone (Web Tier SKU) – Free with any WebLogic License !

• Need to be on the same processor with WebLogic

• Strategic Investments (Commodity) – HTTP Server (OHS) – WebLogic Server Plug-In (WLS Plug-In)

• Discontinued Investments – iPlanet Web Server – iPlanet Web Proxy Server – Web Cache – Recommendation:

• Migrate to HTTP Server (OHS) or Traffic Director (OTD) – Leverage Migration documents from Oracle Support

• 1584495.1 and 1536893.1

• Web Tier Statement of Direction from Oracle Support

– 1576588.1


https://mosemp.us.oracle.com/epmos/faces/DocumentDisplay?_afrLoop=324952821775877&id=1584495.1&displayIndex=1&_afrWindowMode=0&_adf.ctrl-state=x95byx54v_81

https://mosemp.us.oracle.com/epmos/faces/SearchDocDisplay?_adf.ctrl-state=x95byx54v_4&_afrLoop=324994086254192

https://mosemp.us.oracle.com/epmos/faces/DocumentDisplay?id=1576588.1


Web Tier – Support Lifecycle Quick Snapshot of Support Dates for Web Tier products


Release GA Date Premiere Support Ends

Extended Support Ends Sustaining Support Ends

Java System Web Server 6.1.x Aug 2003 August 2015 Not Available Indefinite

Java System Web Server 7.x Jan 2007 March 2014 March 2017 Indefinite

Oracle iPlanet Web Server 7.0.x Jul 2010 March 2017 Not Available Indefinite

Oracle iPlanet Web Proxy 4.0.x Jul 2010 March 2017 Not Available Indefinite

Oracle HTTP Server 11g Jun 2009 Dec 2018 Dec 2012 Indefinite

Oracle HTTP Server 12.1.2 Jun 2013 Dec 2018 Dec 2012 Indefinite


Oracle HTTP Server – Overview

Oracle HTTP Server offers well integrated, reliable server software to front-end Fusion Middleware and Enterprise Business Applications (on commodity platforms)

• Standards Based – Based on open source Apache

HTTP Server • Ideal to front-end FMW 11g,

12cR1 applications – Serves static / dynamic

content (CGI / FastCGI) – Includes WebLogic Web

Server Plug-In – Front-end WLS Clusters

• Oracle Integration – Certified with FMW, Business

and Fusion Applications – EM Support for unified

Admin.

• Minimized learning curve for our customers – Based on widely used Apache

HTTP Server

• Consistent Administration – Unified end-to-end SSL library

for simplified administration / patching

• Integration with Oracle Ecosystem

• Robust 3rd party plugins – RSA’s WebAgent , CA’s

SiteMinder for Single Sign-On


Positioning Overview Differentiators


Oracle HTTP Server – Support Policy, Patching Overview • Fully Supported

– Base Apache, All Modules included in OHS

• Not Supported – Any modules not part of OHS

• Customer can continue to use 3rd party (open source) Apache modules – Any OHS issue need to be reproducible

without this module

• Security Updates – Included via CPU, PSU

• CPU is released every quarter and PSU is released once a year

• Bug Fixes – Included via PSU –Customer can get immediate relief

through SR • Version Updates – Included Feature Release –Backward Compatible modules

updated via CPU, PSU



Oracle HTTP Server 12cR1 – What’s New What’s New in OHS 12.1.2 – Based on Apache 2.2.26 – New Administration Infrastructure! – Consistent Management with

WebLogic Management Framework

– SSL Improvements (TLS 1.1+,FIPS support)

– Simplified configuration for Single Sign-on through Oracle Access Manager • Built-In Web Gate 11gR1PS2 Plug-In

What’s New in OHS 12.1.3 – Based on Apache 2.2.26+ – Stability Improvements to WebLogic

Management Framework – SSL Cipher Enhancements – WebSocket Proxy Support

• Front-end WebLogic 12cR1 WebSocket Apps.



Oracle HTTP Server 12cR1 – Administration Options


WebLogic Server Domain Standalone Domain


Oracle HTTP Server 12c – Administration Option 1 WebLogic Server Domain – Administration through WLST, FMWControl

• Domain Provisioning – Through Config Wizard (UI), FMWControl (UI), WLST (CLI)

• Domain Administration – Config administration through Config Wizard (UI), FMWControl (UI), WLST (CLI)

– Server Lifecycle through FMWControl (UI), Node Manager, WLST (CLI)

– Administer OHS 12c on multiple machines • Homogenous Configurations • Leverages WLST ‘pack’ , ‘unpack’ interfaces.

• Dependencies – WLS + JRF collocated for FMWControl (UI)

– Database for production deployment • Simplified solution available for non-production env.



Oracle HTTP Server – Administration Option 2 Standalone Domain – Self Managed with minimal admin through WLST

• Domain Provisioning – Through WLS Config Wizard (UI based)

• Domain Administration – Server Lifecycle (through Node Manager)

– Config Administration (through Config Wizard)

– Manual file edits supported (Apache httpd.conf syntax)

• Dependencies – No additional dependencies



Oracle HTTP Server – Enhancement Summary • Administration – Consistent lifecycle administration – Automation with WLST

• Enables secure deployment • Single Sign-On with Oracle Access Mgmt • Support open source application firewall

(ModSecurity module) – Detect, deny requests with application level

vulnerabilities – Pre-built rules available from OWASP

• Consistent SSL interface for end-to-end SSL policies / maintenance. (Oracle SSL module)

• Extensions to vanilla Apache HTTPd – Watchdog support (through Oracle Mgmt. framework)

– Performance monitoring (through DMS)

– Consistent logging, troubleshooting (through ODL) • Track request from one-hop-to-another, Improved Log rotation

• Enhanced Support – Fully Supported

• All bundled Apache HTTPd modules • Any included Oracle Modules

– OHS 11gR1 (Apache 2.2 based) – PS – Dec 2018, ES – Dec 2021

– OHS 12.1.2 (Apache 2.2 based) – PS – Jul 2016, ES – Jul 2019


https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project


Oracle HTTP Server – Key Takeaways

• Strategic Investment for Oracle –Foundation for Oracle FMW products, applications on commodity

hardware

• Based on Open Standards, Open Source – Apache HTTPd Server • Significant differentiators –Solid Foundation, Consistent end-to-end administration experience

• Server Lifecycle, Log Management, Audit Controls, Consistent SSL Administration

–Administration and Monitoring through EM Cloud Control –Enterprise grade support life for open source offering!



Web Tier Product Portfolio - References • Web Tier in Oracle Technology Network

• OHS 12c – Technical White Paper

• Installing OHS 12c

• Understanding OHS 12c Domain Configuration

• Managing OHS through WebLogic Server Domain

• Managing OHS through Standalone Domain

• Understanding OHS 12c File Layout

• Configuring Single Sign-On using Oracle Access Manager within OHS 12c


http://www.oracle.com/technetwork/middleware/webtier/overview/index.html

http://www.oracle.com/technetwork/middleware/webtier/learnmore/ohs12c-technical-paper-2209482.pdf







http://docs.oracle.com/middleware/1213/core/WTINS/planning.htm#A1002275516

http://docs.oracle.com/middleware/1213/core/WTINS/install_gui.htm#i1082009

http://docs.oracle.com/middleware/1213/core/WTINS/install_gui.htm#i1082009





http://docs.oracle.com/middleware/1213/core/WTINS/colocated_domain.htm#WTINS280




http://docs.oracle.com/middleware/1213/core/WTINS/standalone_domain.htm#WTINS333

http://docs.oracle.com/middleware/1213/core/WTINS/dir_structure.htm#WTINS996


http://docs.oracle.com/middleware/1213/core/WTINS/webgate.htm#WTINS870




oracle http server · oracle http server – overview oracle http server offers well integrated,...

Documents