Progress Sonic ESB Configuration and Management Guide

More documents

Recommendations

Info

Implementing Trust Zones in Progress Sonic ESB Implementing Trust Zones in Progress Sonic ESB To implement trust zone enforcement in Sonic ESB, you enable Actional instrumentation on ESB containers, add the nodes on which the ESB containers are deployed to a trust zone, and configure appropriate service groups in Actional Intermediary for the web services exposed in ESB. The following is an overview of how to implement trust zones with Sonic ESB: 1. Use 8.0.5 (or higher) versions of the Actional product family (Agent, Server, and Intermediary). 2. Enable Actional instrumentation: ■ Enable Actional instrumentation on ESB 8.5 containers. ■ Do not enable Actional instrumentation on any brokers that Sonic ESB uses for messaging. See “Enable Actional Instrumentation in Sonic ESB” on page 289. 3. Configure Actional Intermediary with appropriate service groups for the web services exposed in Sonic ESB. See “Register a Web Service with Actional Intermediary” on page 292. 4. Configure trust zones appropriately for Sonic ESB and ensure that the agents are provisioned: ■ Disable the Check Caller IP Address setting ■ Enable the Trust Calls within Trust Zones setting See “Define Trust Zones on Actional Server” on page 297. Progress Sonic ESB Configuration and Management Guide 8.5 288
Chapter 12: Using Actional Trust Zones in Sonic ESB Enable Actional Instrumentation in Sonic ESB For each ESB process that will run in a trust zone, you must enable Actional instrumentation on every ESB container that participates in the execution of the ESB process. Sonic ESB performs trust enforcement to check whether a message is trusted before letting a service execute. After service execution, Sonic ESB adds a trust assertion so the message is trusted at subsequent steps in the ESB process. Sonic ESB only adds a trust assertion if the Trust Calls within Trust Zones setting is enabled (see page 299). See the “Instrumenting Sonic ESB” chapter in the Actional Interceptor Guide for more information. Important Instrument only Sonic ESB, not SonicMQ. Do not enable Actional instrumentation on any SonicMQ broker to which an ESB application can connect. If SonicMQ is instrumented, calls from outside the trust zone going directly to SonicMQ are viewed as trusted. This is because after Actional instrumentation is enabled, all entities act as trust assertors and automatically write a trust assertion in messages coming from SonicMQ. This behavior poses a security risk. Enabling trust zones affects flow visualization. All calls come into Sonic ESB through Actional Intermediary, which causes an extra node in the flow If an ESB container is not Actional-instrumented and an incoming message contains an Actional manifest header, Sonic ESB preserves and propagates the header to all messages in the Outbox. The Actional manifest header contains all the information relevant to Actional and by propagating this header Sonic ESB preserves the Actional flow even when the message travels through a non-instrumented Sonic ESB node. This behavior is modified in 8.5 when trust zones are enabled. A non-instrumented ESB container will not propagate the Actional manifest header if a message is received from a trusted node. This prevents a trusted downstream node from falsely trusting a message that arrived from this non-trusted ESB container. 289 Progress Sonic ESB Configuration and Management Guide 8.5
Page 1 and 2:
® ® PROGRESS® SONIC® Sonic ESB
Page 3 and 4:
the redistribution, if any, must in
Page 5 and 6:
the relevant code modules. All Righ
Page 7 and 8:
OF USE, DATA, OR PROFITS; OR BUSINE
Page 9 and 10:
products derived from this software
Page 11 and 12:
Contents Chapter 2: ESB Containers
Page 13 and 14:
Contents Oracle . . . . . . . . . .
Page 15 and 16:
Contents Chapter 12: Using Actional
Page 17 and 18:
Preface About This Guide This guide
Page 19 and 20:
Preface Progress Sonic Documentatio
Page 21 and 22:
Preface 21 Progress Sonic ESB Confi
Page 23 and 24:
23 Progress Sonic ESB Configuration
Page 25 and 26:
Chapter 1: Using Progress Sonic ESB
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Chapter 2: ESB Containers Overview
Page 57 and 58:
Chapter 2: ESB Containers The follo
Page 59 and 60:
Chapter 2: ESB Containers 3. In the
Page 61 and 62:
Chapter 2: ESB Containers ESB Conta
Page 63 and 64:
Chapter 2: ESB Containers Defining
Page 65 and 66:
Chapter 2: ESB Containers ◆ To vi
Page 67 and 68:
Chapter 2: ESB Containers Deploying
Page 69 and 70:
Chapter 2: ESB Containers Adding JA
Page 71 and 72:
Chapter 2: ESB Containers Changing
Page 73 and 74:
Chapter 2: ESB Containers 4. Select
Page 75 and 76:
Chapter 2: ESB Containers Monitorin
Page 77 and 78:
Chapter 2: ESB Containers Metric De
Page 79 and 80:
Chapter 2: ESB Containers 3. Right-
Page 81 and 82:
Chapter 2: ESB Containers The Sonic
Page 83 and 84:
Chapter 2: ESB Containers intercept
Page 85 and 86:
Chapter 2: ESB Containers 4. Select
Page 87 and 88:
Chapter 2: ESB Containers Using Act
Page 89 and 90:
Chapter 2: ESB Containers ◆ To ad
Page 91 and 92:
Chapter 2: ESB Containers 4. Click
Page 93 and 94:
Chapter 3: ESB Endpoints and Connec
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Chapter 4: Configuring Web Services
Page 125 and 126:
Chapter 4: Configuring Web Services
Page 127 and 128:
127 Progress Sonic ESB Configuratio
Page 129 and 130:
Chapter 5: Using the Database Servi
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Chapter 6: Driver Connection Proper
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Page 197 and 198:
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213 and 214:
Page 215 and 216:
Page 217 and 218:
Page 219 and 220:
Chapter 7: SQL Escape Sequences for
Page 221 and 222:
Page 223 and 224:
Page 225 and 226:
Page 227 and 228:
Page 229 and 230:
Chapter 8: Configuring SQL Server W
Page 231 and 232:
Chapter 8: Configuring SQL Server W
Page 233 and 234:
233 Progress Sonic ESB Configuratio
Page 235 and 236:
Chapter 9: Configuring BPEL Service
Page 237 and 238: Chapter 9: Configuring BPEL Service
Page 249 and 250: Chapter 10: Managing BPEL Services
Page 259 and 260: 259 Progress Sonic ESB Configuratio
Page 261 and 262: Chapter 11: Using Actional with Son
Page 287: Chapter 12: Using Actional Trust Zo
Page 291 and 292: Chapter 12: Using Actional Trust Zo
Page 303 and 304: Index ESB 59 for endpoints 105 HTTP
Page 305 and 306: Index instrumentation payload, brok
Page 307: Index shutting down management cont
show all

Progress Sonic ESB Configuration and Management Guide

Create successful ePaper yourself

Delete template?

Save as template?