Professional Documents
Culture Documents
MQ02 - DataPowerMQFTEManagedFileTransfer - Sri
MQ02 - DataPowerMQFTEManagedFileTransfer - Sri
MQ02 - DataPowerMQFTEManagedFileTransfer - Sri
Introduction
MQ FTE Overview
DataPower File handling Overview
File transfer scenarios with DataPower / MQ FTE
DataPower MQ FTE Configuration
Branches
Regional Offices
Regional
Head Office Locations
Subsidiaries
Stores
Accounting Sales
Warehouses
Inventory
Orders
People
– From IT Staff to Business staff and even Security Personnel
– Using a combination of email, fax, phone, mail, memory
keys…
4
© 2011 IBM Corporation
Shortcomings of Basic FTP
Limited Limited
Reliability Security
Unreliable delivery – Lacking Often usernames and
checkpoint restart – Files can passwords are sent with file –
be lost as plain text!
Transfers can terminate Privacy, authentication and
without notification or any encryption often not be
record – corrupt or partial available
files can be accidentally used Non-repudiation often lacking
File data can be unusable
after transfer – lack of
Character Set conversion
5
© 2011 IBM Corporation
What is Managed File Transfer?
Reliable, controlled, auditable movement of files
Reliable Automatic resumption of interrupted transfers. No partial file data left lying around
Any file size Imposes no practical limits on file sizes. Efficient regardless of file size
Integrated Integrates well with applications that typically perform file processing
6
© 2011 IBM Corporation
Agenda
Introduction
MQ FTE Overview
DataPower File handling Overview
File transfer scenarios with DataPower / MQ FTE
DataPower MQ FTE Configuration
……
A B C X Y Z
Auditable Full logging and auditing of file transfers + archive audit data to a database
Secure Protects file data in transit using SSL. Provides end-to-end encryption using AMS
Automated Providing scheduling and file watching capabilities for event-driven transfers
Integrated Integrates with MB, WSRR, ITCAMs for Apps, DataPower + Connect:Direct
Cost Effective Reuses investment in WebSphere MQ. Wide range of support ( inc. z/OS and IBM i)
8
© 2011 IBM Corporation
A consolidated transport for both files and messages
9
© 2011 IBM Corporation
Components of a typical WMQ FTE network
Agents
– The endpoints for managed file Agent Agent Agent
transfer operations
Commands
– Send instructions to agents
Log database
WebSphere MQ
– A historical record of file transfers “Coordination”
Queue Manager
Coordination queue manager
– Gathers together file transfer
events
Commands Log
Database
10
© 2011 IBM Corporation
Components of a typical WMQ FTE network
Agents
11
© 2011 IBM Corporation
Notes on:
Agents
NOTES
FTE agent processes define the end-points for file transfer. That is to say that if you
want to move files off a machine, or onto a machine – that machine would typically
need to be running an agent process
Agent processes are long running MQ applications that oversee the process of moving
file data in a managed way. Each agent monitors a ‘command’ queue waiting for
messages which instruct it to carry out work, for example file transfers
The FTE agent process needs connectivity to an MQ queue manager to do useful
work. It can connect either directly to a queue manager running on the same system,
or as an MQ client using an embedded version of the MQ client library (which is kept
completely separate to any other MQ client libraries that may or may not already have
been installed onto the system)*
– Each agent requires its own set of MQ queues – which means that an
agent is tied to the queue manager where these queues are defined
– However – one queue manager can support multiple agents
* Note: availability of direct (bindings) connectivity or MQ client based connectivity is dependent on the version of MQ
FTE in use
• WebSphere MQ File Transfer Edition on z/OS does not support the MQ client style of connectivity
• File Transfer Edition on distributed platforms has a ‘server’ and ‘client’ offering. The agent component of the ‘client’ offering is
restricted to only supporting MQ client style connectivity. The agent component of the ‘server’ offering may be used either
connectivity options
12
© 2011 IBM Corporation
Example usage of agent monitoring + program execution
13
© 2011 IBM Corporation
Notes on:
Monitoring & Program Execution
NOTES
Resource monitors work in two stages:
1. Poll a resource (in this case the file system – but as we’ll see later the ‘resource’ can also
be an MQ queue) and identify that a condition has been met (perhaps the appearance of a
file matching a particular pattern)
2. Perform an action (which can include starting a managed file transfer, or running a script),
optionally propagating information about the resource (for example the name of the file
triggered on) into the action
As shown on the previous slide, resource monitors are typically used to provide integration with
an existing system without needing to make changes to the system
Another function of FTE, used for integration with existing systems is the ability to execute
programs or scripts both on the source or destination systems for a file transfer. This can be
used to:
– Start a program, on the source system, which generates the file data to be transferred prior
to performing the managed file transfer
– Start, or notify, a program on the destination system when the file data has been
transferred – allowing it to process the data without having to poll
14
© 2011 IBM Corporation
Components of a typical WMQ FTE network
Commands
15
© 2011 IBM Corporation
Notes on:
Commands
NOTES
“Commands” is the name we have given to anything which instructs the FTE agent.
As described on the previous slide, there are a wide range of command
implementations including graphical and non-graphical command-line based
commands
Commands instruct the FTE agent by sending it messages. The messages
themselves use a documented format which can easily be incorporated into your own
applications
The commands that are supplied with FTE can connect either as an MQ client (again
based on embedded client libraries) or directly to a queue manager located on the
same system
16
© 2011 IBM Corporation
Components of a typical WMQ FTE network
Log Database
Commands Log
Queryable via Web Gateway Database
– Also a documented interface
17
© 2011 IBM Corporation
Notes on:
Log Database
NOTES
File Transfer Edition can record a historical account of file transfers to a database
using the ‘database logger’ component.
– This component is available to run as a stand alone process or as a JEE
application
18
© 2011 IBM Corporation
Components of a typical WMQ FTE network
Coordination Queue Manager
MQ v7 publish / subscribe
– Allows multiple log databases,
command installs
– Commands Log
Documented interface
Database
19
© 2011 IBM Corporation
Notes on:
Coordination queue manager
NOTES
The coordination queue manager is used as the gathering point for all the information
about file transfers taking place between a collection of FTE agents
The queue manager uses publish/subscribe (so it must be MQ version 7) to distribute
this information to “interested parties” which typically include:
– The WebSphere MQ Explorer plug-in, which provides a graphical overview of FTE
activity
– The database logger component, which archives the information to a database
– Some of the command line utilities which are part of the FTE product
The format used to publish information is documented and can be used to develop 3rd
party applications which process this data
Although there is only a single ‘coordination’ queue manager for a given collection of
agents it does not represent a point of failure:
– MQ stores and forwards messages to the coordination queue manager when it is
available – so if the coordination queue manager is temporarily unavailable no log
data is lost
– The ‘coordination’ queue manager can be made highly available using standard
HA techniques such as MQ multi-instance queue manager or via a HA product
such as PowerHA
20
© 2011 IBM Corporation
WebSphere MQ File Transfer Edition Tools
Examples:
fteCreateTransfer Starts a new file transfer from the command line
fteStartAgent Starts a File Transfer agent from the command line
fteStopAgent Stops a File Transfer agent in a controlled way
fteShowAgentDetails Displays the details of a particular File Transfer agent
fteShowAgents Displays the status of all known Transfer agents
Introduction
MQ FTE Overview
DataPower File handling Overview
File transfer scenarios with DataPower / MQ FTE
DataPower MQ FTE Configuration
Wholesalers Affiliates
Retailer
Internal
Employees
B2C
B2B
Connectivity
WebSphere Cast Iron Cloud Integration
WebSphere DataPower B2B Appliance
Management WebSphere DataPower Integration
Application Manager for Smart Business
IBM CloudBurst
Rational Power Appliance Express
Rational Power Appliance Workgroup
Rational Power Appliance Enterprise
Service Manager for Smart Business
Smart Business Appliance
Virtual Desktop for Smart Business
WebSphere CloudBurst Appliance
Security
Storage
InfoSphere Guardium Real-time Database Monitoring and Security
Information Archive
Proventia Management SiteProtector System
SAN Volume Controller
Proventia Network Enterprise Scanner
Scale Out Network Attached Storage
Proventia Network Multi-Function Security
System Storage Productivity Center
Security Network Active Bypass
Real Time Compression Appliance
Security Network Intrusion Prevention System
WebSphere DataPower XML Security Gateway
SIMPLE
PURPOSE BUILT
WORKHORSE
Simple architecture:
– microcode firmware + purpose-built hardware
32
© 2011 IBM Corporation
WebSphere DataPower XI52 and XB62 Appliances (9005)
• 2U high density rackmount design Far more memory than ever before
– Memory aggregation at the domain level
• New customer-replaceable Ethernet modules
(announced for firmware 4.01)
with far more ports than the current generation
(4) Enhanced hardware diagnostics
– Two 10 Gbps ports
– Eight 1 Gbps ports Customizable intrusion detection
RAID
RAIDmirroring
mirroring
and
andstriping
striping
across
acrossfourfour
drives
drives
8 81-Gigabit
1-Gigabit 2 210-Gigabit
10-Gigabit
Ethernet
EthernetNICs
NICs Ethernet
EthernetNICs
NICs
33
© 2011 IBM Corporation
DataPower Devices
DataPower appliances have been the best selling The
WebSphere product since the DataPower company
acquisition in 2005
“Russian Doll”
Guiding philosophy is to take rote, repeatable integration
tasks and lock them down in the appliance form factor,
including
Applications
1 Web Gateway
Security policy enforcement
SLA policy enforcement
Web Application Firewall 2.1 ESB
Integration Gateway functions +
Routing
Web Apps 2 Integration Gateway
Devices Database connectivity
System z
Web Gateway functions + more...
Any-to-any transformation
Protocol Bridging 2.2 Service Enablement
ESB functions +
Rapid web service façade creation
Partner Apps 3 B2B Gateway
Integration Gateway functions +
Partner Management
Enhanced qualities of service
35
© 2011 IBM Corporation
Web Gateway
Internal App
36
© 2011 IBM Corporation
Integration
Gateway
37
© 2011 IBM Corporation
B2B Gateway ebMS /
WebSphere MQ FTE
Applications
WebSphere Transformation
WebSphere Extender / Trading Manager
Partner
DataPower XB60
Introduction
MQ FTE Overview
DataPower File handling Overview
File transfer scenarios with DataPower / MQ FTE
DataPower MQ FTE Configuration
Browser
XB60 (Admin)
Server
Multi-Protocol
Gateway 3
Server WS MQ
2 Service
WS MQ
1 B2B Agent02
Internet Gateway Agent01 4b
4a Service
WAN
Data
Store
Profile
Mgmt
Data
Store
XB60
MQ Explorer
FTE Viewer 5
Transaction 6
Viewer Application
Browser
(Partner view)
Browser
(LOB User) © 2011 IBM Corporation
Message Segmentation for Large Files
...
... ... ... ... ...
...
If the payload of the received message is too big, the message payload will be segmented
into smaller pieces before forwarding to the queue
1. MQFTE source agent receives the transfer and sends the file to the destination agent which shares queues
with DataPower
2. Destination agent places file data as one or more messages in a group.
3. MQFTE front-side handler consumes message(s) from the queue, reassemble the message if there is more
than one segments, and sends the data to the external partner
Introduction
MQ FTE Overview
DataPower File handling Overview
File transfer scenarios with DataPower / MQ FTE
DataPower MQ FTE Configuration
...
MQ queue : FTE2DP
Appliance
Network
...
MQ queue : FTE2DP
Appliance
Network
MQFTE Source Agent can optionally configure the following metadata when integrating
with XB60.
When set, B2B Gateway will use these information to match the right partner profile
settings.
...
MQ queue : FTE2DP
Appliance
Network
1. MQFTE source agent receives the transfer and sends the file to the destination agent which shares queues
with DataPower
2. Destination agent places file data as one or more messages in a group.
3. MQFTE front-side handler consumes message(s) from the queue
4. Error happens in transaction processing and MQFTE front-side handler rolls the transfer back and. Go back
to step 1 to retry the transfer.
5. If the number of retries reaches the “backout threshold”, then MQFTE front-side handler will send the
transfer to the “backout queue”.
Network
Appliance
MQ queue
...
Network
Appliance
MQ queue
dpmqfte://FTEWA/?
RequestQueue=DP2FTE&DestAgent
=APC&
Agent Network Agent DestQM=QMPC&DestFile=testcompl
ete.xml
...
Mandatory
– DestAgent : the destination agent in MQFTE network that will ultimately receive the file
– DestQM : the destination queue manager the source agent should send the messages to
– DestFile : the filename to use when the destination agent need to store the received
messages into file.
– Unique filename is supported.
Optional
– SenderID : the business ID of sender (e.g. external partner )
– ReceiverID : the business ID of receiver (e.g. internal partner)
– ContentType : the content type of the message payload
Example :
– dpmqfte://QM_Demo/?
RequestQueue=Q_in&DestAgent=Kai&DestQM=dummyQM&DestFile=dummyPath
Network
agent="${DPMQFTEDestinationAgent}"
Appliance
QMgr="${DPMQFTEDestinationQM}"
MQ queue
<file>c:\temp\$
{DPMQFTEDestinationFile}</file>
Agent Network Agent
MQ queue
4 MQFTE Logger
1. Outbound gateway sends a B2B message to 3. FTE consumes the group of messages and uses the
information present in the first message in the group to
inbound gateway
route the data to a back end system, where it is written
2. The DataPower appliance writes data to an MQ as a file
queue as one or more messages in a group. The 4. B2B Viewer of the outbound gateway retrieve the
message ID assigned to the first message in the transaction metadata from the MQFTE Logger
group becomes the Integration ID. Other information Database
can be passed in the RFH 2 header of the first
message
A new column to store the integration ID which could be used to correlate a B2B Transaction
with a backend transaction
For MQFTE integration, the integration ID maps to the “transfer ID” of MQFTE network
For inbound, the integration-ID is the Message ID of first message we sent to the shared
queue
For outbound, the integration-ID is the Message ID of the first message we received from the
shared queue
A pop-up to display the MQFTE metadata when the integration-id is clicked ( for MQFTE-
related transaction only)
Depending on weather the transaction is inbound or outbound, the popup window will show
different metadata
Integration between the B2B appliance and backend application is over WebSphere MQ
instead of a shared file system.
Files transferred between the B2B appliance and MQ FTE can be correlated using the
integration ID from MQ; this ID can also be seen in the B2B Viewer.
The combined B2B messaging flow through the B2B appliance and file transfer flow through
MQ FTE can be viewed through the B2B Viewer on the appliance. This provides the user
with an end-to-end view of the file transfer.
File transfers can be set up to occur at specified times or dates, or repeated at specified
intervals. File transfers can also be triggered by a range of system events, such as new files
or updated files.