September 2015 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Release 2 Deployment Guide
2015 Brocade Communications Systems, Inc. All Rights Reserved. ADX, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, HyperEdge, ICX, MLX, MyBrocade, OpenScript, The Effortless Network, VCS, VDX, Vplane, and Vyatta are registered trademarks, and Fabric Vision and vadx, vtm, vwaf, and SD are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names mentioned may be trademarks of others. Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government. The authors and Brocade Communications Systems, Inc. assume no liability or responsibility to any person or entity with respect to the accuracy of this document or any loss, cost, liability, or damages arising from the information contained herein or the computer programs that accompany it. The product described by this document may contain open source software covered by the GNU General Public License or other open source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit http://www.brocade.com/support/oscd. Page 2 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
Contents Preface... 5 About This Guide... 5 Audience... 5 Contacting Brocade... 5 Internet... 5 Technical Support... 5 Professional Services... 5 Chapter 1: Solution Overview... 6 Virtual Traffic Manager Overview... 6 Performance... 6 Reliability and scalability... 6 Advanced scripting and application intelligence... 6 Application acceleration... 7 Application-layer security... 7 Oracle Enterprise Manager... 7 Chapter 2: Oracle Enterprise Manager Cloud Control 12c Architecture... 7 Oracle Management Agent... 8 Oracle Management Service... 8 Oracle Management Repository... 9 Oracle Management Plug-ins... 9 Enterprise Manager Cloud Control Console... 9 Chapter 3: Deploying Traffic Manager for Oracle Enterprise Manager... 9 Requirements... 9 Oracle Enterprise Manager Pre-Configuration... 10 Configure vtm for Oracle Enterprise Manager... 12 Create Traffic IP Group... 12 Create Pool... 13 Create Monitor... 13 Create Virtual Server... 14 SSL Decryption... 15 Configure Session Persistence... 15 Configuration Summary... 15 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 3
Oracle Enterprise Manager Post-Configuration... 16 Chapter 4: Monitoring... 18 Chapter 5: Conclusion... 18 Page 4 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
Preface Welcome to the Brocade Virtual Traffic Manager (vtm) and Oracle Enterprise Manager 12c Release 2 Deployment Guide. Read this preface for an overview of the information provided in this guide and contact information. This preface includes the following sections: About This Guide Contacting Brocade About This Guide The Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Release 2 Deployment guide describes optimization of Oracle Management Services in the Enterprise Manager architecture. Audience This guide is written for network operations professionals, server administrators and DevOps professionals familiar with administering and managing Application Delivery Controllers (ADCs), Servers and Applications. You must also be familiar with: Oracle Enterprise Manager Brocade Virtual Traffic Manager For more details on the Brocade vadc product family, see: http://www.brocade.com/vadc Contacting Brocade This section describes how to contact departments within Brocade. Internet You can learn about Brocade products through the company Web site: http://www.brocade.com. Technical Support If you have problems installing, using, or replacing Brocade products, contact Brocade Support or your channel partner who provides support. To contact Brocade Support, see http://www.brocade.com/en/support.html. Professional Services Brocade Global Services has the expertise to help organizations build scalable, and efficient cloud infrastructures. Leveraging 15 years of expertise in storage, networking, and virtualization, Brocade Global Services delivers worldclass professional services, technical support, and education services, enabling organizations to maximize their Brocade investments, accelerate new technology deployments, and optimize the performance of networking infrastructures. Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 5
Chapter 1: Solution Overview This chapter includes the following sections: Oracle Enterprise Manager Virtual Traffic Manager Overview Oracle Enterprise Manager Virtual Traffic Manager Overview Brocade Virtual Traffic Manager (vtm) is a software-based application delivery controller (ADC) designed to deliver faster and more reliable access to public web sites and private applications. vtm frees applications from the constraints of legacy, proprietary, hardware-based load balancers, which enables them to run on any physical, virtual, or cloud environment. With vadc products from Brocade, organizations can: Make applications more reliable with local and global load balancing Scale application servers by up to 3x by offloading TCP and SSL connection overhead Accelerate applications by up to 4x by using web content optimization (WCO) Secure applications from the latest application attacks, including SQL injection, XSS, CSRF, and more Control applications effectively with built-in application intelligence and full-featured scripting engine Virtual Traffic Manager offers much more than basic load balancing. It controls and optimizes end-user services by inspecting, transforming, prioritizing, and routing application traffic. The powerful TrafficScript engine facilitates the implementation of traffic management policies that are unique to an application by allowing organizations to build custom functionality or to leverage existing features in Virtual Traffic Manager in a specialized way. With vtm, organizations can deliver: Performance Improve application performance for users by offloading encryption and compression from the web server by dynamic caching and reducing the number of TCP sessions on the application. Reliability and scalability Increase application reliability by load balancing traffic across web and application servers, balancing load across multiple data centers (private or public clouds), monitoring the response time of servers in real-time to decide the fastest way to deliver a service, protecting against traffic surges, and by managing the bandwidth and rate of requests used by different classes of traffic. Advanced scripting and application intelligence Manage application delivery more easily with fine-grained control of users and services using TrafficScript, an easy-touse scripting language that can parse any user transaction, and take specific, real-time action based on user, application, request, or more. Development teams use TrafficScript to enable a point of control in distributed applications, while operations teams use it to quickly respond to changing business requirements or problems within an application before developers can fix it. Page 6 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
Application acceleration Dramatically accelerate web-based applications and websites in real-time with optional web content optimization (WCO) functionality. It dynamically groups activities for fewer long distance round trips, resamples and sprites images to reduce bandwidth, and minifies JavaScript and combines style sheets to give the best possible response time for loading a web page on any browser or device. Application-layer security Enhance application security by filtering out errors in web requests, and protecting against external threats, with the option of a comprehensive Layer 7 firewall to defend against deliberate attacks. Oracle Enterprise Manager Oracle Enterprise Manager is Oracle's integrated enterprise information technology (IT) management product line, which provides the industry's only complete, integrated, and business-driven enterprise cloud management solution. Oracle Enterprise Manager creates business value from IT by leveraging the built-in management capabilities of the Oracle stack for traditional and cloud environments, enabling customers to achieve unprecedented efficiency gains while dramatically increasing service levels. The key capabilities of Enterprise Manager include: A complete cloud lifecycle management solution enabling you to quickly set up, manage, and support enterprise clouds and traditional Oracle IT environments from applications to disk. Maximum return on IT management investment through the best solutions for intelligent management of the Oracle stack and engineered systems with real-time integration of Oracle's knowledge base with each customer environment. Best service levels for traditional and cloud applications through business-driven application management. Chapter 2: Oracle Enterprise Manager Cloud Control 12c Architecture Although Enterprise Manager Cloud Control is viewed as a single entity, it is built with the following components: Oracle Management Agent Oracle Management Service Oracle Management Repository Oracle Management Plug-ins Enterprise Manager Cloud Control Console The below diagram shows a sample Enterprise Manager Cloud Control architecture and illustrates how these core components fit into the architecture. Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 7
Figure 2-1 Sample Enterprise Manager Cloud Control Architecture The load balancer and the multiple Oracle Management Services are depicted only to indicate how a sample Enterprise Manager Cloud Control architecture would look in a large organization. They are not a prerequisite or a requirement for an Enterprise Manager System installation. If you do not have a load balancer, then the Management Agents communicate directly with the Oracle Management Services. The following sections describe the core components of Enterprise Manager Cloud Control: Oracle Management Agent Oracle Management Agent (Management Agent) is an integral software component that is deployed on each monitored host. It is responsible for monitoring all of the targets running on those hosts, communicating that information to the middle-tier Oracle Management Service, and managing and maintaining the hosts and its targets. Oracle Management Service Oracle Management Service is a Web-based application that orchestrates with the Management Agents and the Management Plug-ins to discover targets, monitor and manage those targets, and store the collected information in a repository for future reference and analysis. Oracle Management Service also renders the user interface for Enterprise Manager Cloud Control. Oracle Management Services is deployed to the Oracle middleware home (middleware home), which is the parent directory that contains the Oracle WebLogic Server home, the Oracle Management Service home, the Management Agent home, the plug-in home, the Java Development Kit (JDK), the Oracle Management Service instance base directory, the Oracle Web tier directory, the Oracle common directory, and other relevant configuration files and directories. While deploying the Oracle Management Service, the Enterprise Manager Cloud Control Installation Wizard installs Oracle WebLogic Server if it does not already exist in your environment. As a result, an Oracle WebLogic Server administration console is also installed. Page 8 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
Oracle Management Repository The Oracle Management Repository (Management Repository) is a storage location where all of the information collected by the Management Agent is stored. It consists of objects such as database jobs, packages, procedures, views, and tablespaces. Technically, the Oracle Management Service uploads the monitoring data it receives from the Management Agents to the Management Repository. The Management Repository then organizes the data so that it can be retrieved by the Oracle Management Service and displayed in the Enterprise Manager Cloud Control console. Because data is stored in the Management Repository, it can be shared between any numbers of administrators accessing the Enterprise Manager Cloud Control. At the time of installation, the Enterprise Manager Cloud Control Installation Wizard configures the Management Repository in your existing, certified database. The wizard, however, does not install a new database. Oracle Management Plug-ins The core Enterprise Manager Cloud Control features for managing and monitoring Oracle technologies, such as Oracle Database, Oracle Fusion Middleware, and Oracle Fusion Applications, are now provided through components known as plug-ins that can be downloaded and deployed using the new Self Update feature. This new pluggable framework enables Cloud Control to be updated with management support for the latest Oracle product releases, without having to wait for the next Cloud Control release to provide such functionality. For example, when a new version of Oracle Database is released, you can simply download and deploy the latest Oracle Database plug-in, which will include management support for the latest release. Enterprise Manager Cloud Control Console The Enterprise Manager Cloud Control console is the user interface that you see after you install Enterprise Manager Cloud Control. With the help of the console, you can monitor and administer your entire computing environment from one location on the network. All the systems and services including enterprise application systems, databases, hosts, middleware application servers, listeners, and so on, are easily managed from one central location. Chapter 3: Deploying Traffic Manager for Oracle Enterprise Manager This chapter describes the process for deploying Virtual Traffic Manager to optimize Oracle Enterprise Manager management service. It includes the following sections: Requirements Oracle Enterprise Manager Pre-Configuration Configure vtm for Oracle Enterprise Manager Oracle Enterprise Manager Post-Configuration Requirements Brocade Virtual Traffic Manager (10.1 or later) Oracle Enterprise Manager (12c) Note: This deployment guide was certified while the product was with Riverbed and for 9.x or earlier versions of the Traffic Manager. Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 9
Oracle Enterprise Manager Pre-Configuration The following are the general prerequisites for Oracle Enterprise Manager Integration with vtm: 1. An existing Oracle Management Service (OMS) up and running with an Oracle Management Agent running on that host. 2. The additional Oracle Management Service host should have the Oracle Management Agent installed and running. 3. Please note the following port numbers while configuring the Oracle Management Service. These are required for setting up the Traffic Manager: Component Name Enterprise Manager Upload OMS Agent Registration Enterprise Manager Upload OMS Secure Upload Enterprise Manager Central Console OMS Unsecure Console Enterprise Manager Central Console OMS Secure Console Port Number 4889 4900 7788 7799 Page 10 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
After the installation of initial or the primary OMS, verify the configuration details. This can be done using the emctl command as follows: $ emctl status oms -details Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password: Console Server Host HTTP Console Port HTTPS Console Port HTTP Upload Port HTTPS Upload Port EM Instance Home OMS Log Directory Location OMS is not configured with SLB or virtual hostname Agent Upload is locked. OMS Console is locked. Active CA ID: 1 WLS Domain Information Domain Name : GCDomain Admin Server Host: oms1.mycompany.com Managed Server Information Managed Server Instance Name: EMGC_OMS1 Managed Server Instance Host: oms1.mycompany.com WebTier is Up Oracle Management Server is Up The OMS application includes browser-oms traffic and agent-oms traffic. Both of them can be configured to use either HTTP or HTTPS. It is recommended to used HTTPS for both kinds of traffic. The above output shows Agent Upload and OMS Console ports are already locked and therefore using HTTPS. It also shows no SLB or virtual hostname has been configured. The console and upload url shows that the application is directly accessed through the physical host that OMS was installed on (oms1.mycompany.com). Also check for the repository connect-string used by OMS to connect to the database server as follows: $ emctl config oms -list_repos_details Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. Repository Connect Descriptor : (DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=oemdb.mycompany.com)(PORT=152 1)))(CONNECT_ DATA=(SID=oemdb))) Repository User : SYSMAN Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 11
Configure vtm for Oracle Enterprise Manager This section contains step by step instructions on configuring Traffic Manager for Oracle Enterprise Manager. One Virtual Server and their corresponding sets of Pools are created per component (port) of the Enterprise Manager, as described in the section above: Component Procedure Description Virtual Traffic Manager (once per service) Create Traffic IP Group for Oracle Enterprise Manager Create Pool for each service Select a Monitor for the Pool Create Virtual Server for each service SSL decryption Configure Session Persistence A single Traffic IP Group must be created For details, see Create Traffic IP Group A Pool needs to have a set of servers to load-balance. Enter the hostname or IP address of the node along with the TCP/UDP port For details, see Create Pool Select a health monitor for the pool. For details, see Create Monitor Create and associate the Virtual Server to the server pool. For details, see Create Virtual Server Configure SSL Decryption to enable SSL offloads. For details, see SSL Decryption Configure SSL Decryption to enable SSL offloads. For details, see Configure Session Persistence Create Traffic IP Group A Traffic IP Group (also known as a Virtual IP) will need to be created on which the Virtual server will be listening on. To create a new Traffic IP Group: 1. Navigate to Services->Traffic IP Groups and scroll down to Create a new Traffic IP Group. 2. Fill in the fields as follows: Name: A descriptive name for the E-business application IP Addresses: An IP Address that is mapped to FQDN of the application such as oms.mycompany.com 3. Click Create Traffic Group. Page 12 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
Create Pool A Pool has to be created for each application managed by the Traffic Manager. Use the following table for defining pool member ports. Component Name Enterprise Manager Upload OMS Agent Registration Enterprise Manager Upload OMS Secure Upload Enterprise Manager Central Console OMS Unsecure Console Enterprise Manager Central Console OMS Secure Console Pool Port 4889 4900 7788 7799 To create a new Pool: 1. Navigate to Services->Pools and scroll down to Create a new Pool. 2. Fill in the fields as follows: Pool Name: A descriptive name for the pool. Nodes: hostname:port or ipaddress:port Monitor: Leave the default for now 3. In the next screen, click on Load Balancing. 4. Under Algorithm, select Least Connections. 5. Click on the Update button to apply changes. Repeat the steps above for each component of the Enterprise Manager. Create Monitor The following sections detail the steps to create these health monitor. Note: Advanced external monitors can be written in any language of choice and be associated with the pool. The HTTP monitor is used for port 8000 for the Oracle applications. 1. Navigate to Catalogs->Monitors. 2. Scroll down to Create new monitor. 3. Give the new monitor a descriptive name. 4. Set the type to HTTP monitor and the scope to Node. 5. Click Create Monitor to create the monitor. 6. Change Path: to / 7. Change body_regex to.* Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 13
8. Scroll down to Apply Changes and click the Update button. 9. Navigate to Services->Pools and select the pool that the monitor will be attached to. 10. Scroll down and click Health Monitoring. 11. Add the appropriate health monitor. Repeat the steps above for each component of the Enterprise Manager. Create Virtual Server Create a Virtual server per component. Use the following table to select Protocol and Ports. Component Name Protocol Port Number Enterprise Manager Upload OMS Agent Registration HTTP 4889 Enterprise Manager Upload OMS Secure Upload Generic Client First 4900 Enterprise Manager Central Console OMS Unsecure Console Enterprise Manager Central Console OMS Secure Console HTTP 7788 HTTP 443 To create a new Virtual Server: 1. Navigate to Services->Virtual Servers and scroll down to Create a new Virtual Server. 2. Enter the following: Virtual Server Name: A descriptive name for the Virtual Server Protocol: <protocol> Port: <port> Default Traffic Pool: Select the pool created for Exchange HTTP Service in the previous step 3. Click on Create Virtual Server. 4. In the next screen, under Listening on, select Traffic IP Groups, and check the appropriate Traffic IP Group that was created earlier. 5. Set Enabled: to Yes. 6. Click on the Update button to apply changes. Repeat the steps above for each component of the Enterprise Manager. Page 14 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
SSL Decryption In order to perform SSL decryption, the certificate and the private key used for the Virtual Server created in the previous step must be imported into the Traffic Manager. 1. Navigate to the Catalogs->SSL->SSL Certificates catalog. 2. Click on Import Certificate to import the appropriate certificate. After importing the certificate, enable SSL decryption on the Virtual Server created: 1. Navigate to Services->Virtual Servers and select the virtual server that will be performing SSL decryption. 2. Scroll down and click on SSL Decryption. 3. Set ssl_decrypt to Yes. 4. Select the certificate imported in the previous step. 5. Scroll down to the bottom of the page and click Update. Configure Session Persistence This section details the steps to configure session persistence. Create a new session persistence class. A session persistence class only needs to be created once per type of persistence. For the Oracle Enterprise Manager application IP-based Persistence should be used. The appropriate persistence class will need to be created. 1. Navigate to Catalogs Persistence. 2. Scroll down and create a new Session Persistence class. 3. Set the type to IP-based Persistence. Attach the session persistence class to the pool. 1. Navigate to Services Pools and select the pool created above. 2. Scroll down and click on Session Persistence. 3. Choose the appropriate Session Persistence class. Repeat the above attachment steps for each pool. Configuration Summary By accessing the Services Config Summary on the webgui a complete snapshot of all the configured services is provided. This is very useful table to glance through to get a good understanding of how the services are configured. Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 15
Oracle Enterprise Manager Post-Configuration After the Traffic Manager has been setup, we need to re-secure the OMS using the Traffic Manager hostname. Enter the following on the OMS servers. This section assumes the $ emctl secure oms -sysman_pwd <sysman_pwd> -reg_pwd <agent_reg_password> -host oms.example.com -secure_port 4900 -slb_port 4900 -slb_console_port 443 -console -lock_upload -lock_console Following the above command, the OMS has to be restarted and check for OMS configuration details as follows: $ emctl status oms -details Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : Console Server Host HTTP Console Port HTTPS Console Port HTTP Upload Port HTTPS Upload Port EM Instance Home OMS Log Directory Location : oms1.mycompany.com : 7788 : 7799 : 4889 : 4900 : /u01/app/oracle/middleware/gc_inst/em/emgc_oms1 : /u01/app/oracle/middleware/gc_inst/em/emgc_oms1/sysman/log SLB or virtual hostname: oms.mycompany.com HTTPS SLB Upload Port : 4900 HTTPS SLB Console Port : 443 Agent Upload is locked. OMS Console is locked. Active CA ID: 1 Console URL: https://oms.mycompany.com:443/em Upload URL: https://oms.mycompany.com:4900/empbs/upload WLS Domain Information Page 16 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide
Domain Name : GCDomain Admin Server Host: oms1.mycompany.com Managed Server Information Managed Server Instance Name: EMGC_OMS1 Managed Server Instance Host: oms1.mycompany.com WebTier is Up Oracle Management Server is Up The above output shows the console and upload URLs are now referring to the Traffic Manager (oms.mycompany.com) rather than the physical hosts. And the output also shows the SLB or virtual name as the Traffic Manager. Following this the agent configuration also has to be changed as it was configured against the physical host name of the primary OMS server. Please refer to the following output: $ $AGENT_HOME/bin/emctl status agent Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. ------------------- -------------------------------------------- Agent Version : 12.1.0.2.0 OMS Version : 12.1.0.2.0 Protocol Version : 12.1.0.1.0 Agent Home : /u01/app/oracle/agent12c/agent_inst Agent Binaries : /u01/app/oracle/agent12c/core/12.1.0.2.0 Agent Process ID : 1128 Parent Process ID : 1076 Agent URL: https://oms1.mycompany.com:3872/emd/main/ Repository URL: https://oms1.mycompany.com:4900/empbs/upload Started at Started by user Last Reload Last successful upload Last attempted upload Total Megabytes of XML files uploaded so far Number of XML files pending upload Size of XML files pending upload(mb) Available disk space on upload filesystem Collection Status Heartbeat Status Last attempted heartbeat to OMS Last successful heartbeat to OMS Next scheduled heartbeat to OMS ----------------------------------------------------- ---------- Agent is Running and Ready Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Page 17
Secure the agent with the Traffic Manager host name as follows: emctl secure agent emdwalletsrcurl https://oms.mycompany.com:4900/em The final step is to inform the clients that they can now connect to Cloud Control from their browsers using the SLB rather than the physical OMS: https://oms.mycompany.com/em MCLI should also be reconfigured to connect via the SLB at this point. This is done with the following command: emcli setup -url=https://oms.mycompany.com/em -username=sysman Chapter 4: Monitoring The Virtual Traffic Manager has some great tools to assist in managing and monitoring application traffic. These can be accessed via the web UI of the device, via the Activity Tab. Real-time graphs can be used to show the traffic passing through the vtm in a very granular way; monitoring can be down to an individual node or for an entire deployment. Chapter 5: Conclusion This document briefly discusses how to configure Traffic Manager to load balance traffic to a farm of Oracle Enterprise Manager servers. Traffic Manager is able to manage traffic in a wide variety of ways, to improve the performance, security, reliability and integrity. Please refer to the product documentation on the Brocade Community Forums (http://community.brocade.com) for examples of how Brocade Virtual Traffic Manager can be deployed to meet a range of service hosting problems. Page 18 Brocade Virtual Traffic Manager and Oracle Enterprise Manager 12c Deployment Guide