36
PaaS + – the modular cloud OSGi PaaS + Building a modular and secure cloud platform with OSGi

OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

Embed Size (px)

DESCRIPTION

This talks gives an introduction to our open PaaS+ Cloud Platform for modular OSGi applications based on OpenShift [1]. Extending OpenShift by an OSGi service framework results in a modular and scalable Java PaaS (Platform as a Service) that features a modular build and deployment mechanism and helps to speed up application development while also making it more robust. The platform comes with a build in Apache Karaf server runtime enhanced by OSGi enabled base services such as Authentication, Rules Engine, Business Process Engine, Polyglot Persistence, Search and Indexing and an integrated OBR. These services are available through a consistent API and are orchestrated by the integrated OSGi framework. We will show how the OSGi PaaS+ platform supports application developers in the complete application lifecycle from development to production to achieve a faster time to market. It will also cover an example of a domain specific API in the healthcare sector, where special requirements on data security during storage and transfer will be met to secure sensitive data in the cloud. With sight on the healthcare and other sectors handling sensitive data, the cloud is challenged with special requirements on data security during storage and transfer. Thus leading to the need to address customer concerns respecting privacy in much more detail than in other areas. We will also describe how to extend the platform for other domains. The OSGi PaaS+ platform is based on research results from the TRESOR - Trusted Ecosystem for Standardized and Open cloud-based Resources – project to provide an open ecosystem for cloud applications for the health care sector [2]. TRESOR is part of the Trusted Cloud initiative [3], funded by the German Federal Ministry of Economics and Technology. Bio: Alexander is the head of development of medisite Systemhaus GmbH and responsible for the development of the the PaaS+ cloud platform the clinical information system m.life and software architect for the TRESOR Project. He has 15 years of work experience in medical Software development as team leader and software architect. Expert for Software Architecture, OSGi, Java and Java EE. Alexander has been a speaker at several conferences including EclipseCon Europe and the OpenShift Community Day.

Citation preview

Page 1: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

PaaS+ – the modular cloud

OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 2: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

2

Agenda

• Who we are

• Steps towards PaaS+

• The PaaS+ OSGi platform

• Cooking in the cloud with OSGi

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 3: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

3

Today‘s speakers

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Torsten Frank

CEO & Founder

Physician

15+ years experience in business and product development

Healthcare IT expert

Qualified medical device consultant

Alexander Grzesik

Head of software development,Chief Software Architect

Java Expert

15+ years experience in software development

Validator for computer validation (GAMP 5)

Page 4: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

4

medisite & Cloudyle

• Specialized for over 10 years in the development of software focused on the healthcare market.

• Our products m.life® and m.care® are comprehensive healthcare solutions.

• Expanded to the cloud with the spin-off Cloudyle, with offices in Berlin, Hannover, Germany and soon in the US.

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 5: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

5

Steps towards PaaS+

• Project TRESOR, funded by the German Federal Ministry of Economics and Technology as a part of the programme “Trusted Cloud”. www.trusted-cloud.de

• TRESOR: Trusted Ecosystem for Standardized and Open cloud-based Resources.

• PaaS+ OSGi platform for health care use cases. Our partners are i.e:Deutsche Telekom (T-Systems), Technical University Berlin, German Heart Institute Berlin.

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

TRESOR is funded by the German Federal Ministry of Economics and Technology by resolution of the German Federal Parliament.

Page 6: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

6

Cloudyle PaaS+

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Economic

SecureReliable

Flexible

Provides an Enterprise Platform-as-a-Service solution that is:

Scalable

Elastic

High available

Data security

Encryption

Certification

Use of standards

OSGi modularization

Development tools

Cost efficient

Cost transparent

On-Demand use

Page 7: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

7

Platform Overview

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Networking

Storage

Servers

Virtualization

O/S

Middleware

Runtime

Framework

Data

Applications

Networking

Storage

Servers

Virtualization

O/S

Middleware

Runtime

Framework

Data

Applications

Networking

Storage

Servers

Virtualization

O/S

Middleware

Runtime

Framework

Data

Applications

Networking

Storage

Servers

Virtualization

O/S

Middleware

Runtime

Framework

Data

Applications

Networking

Storage

Servers

Virtualization

O/S

Middleware

Runtime

Framework

Data

Applications

Clie

nt

Man

age

s

Clie

nt

Man

age

s

Clie

nt

Man

age

s

Clie

nt

Man

age

s

Pro

vide

r Man

ages in

Clo

ud

Pro

vide

r Man

ages in

Clo

ud

Pro

vide

r Man

ages in

Clo

ud

TraditionalOn-Premises

Infrastructureas a Service

Platformas a Service

CLOUDYLE PaaS+ =Platformas a Service+ OSGi Framework+ Enterprise API+ Data Security

Softwareas a Service

Customization, higher costs; slower time to market

Standardization, lower costs; faster time to market

Page 8: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

8

The PaaS+ OSGi Platform

• OpenShift base technology

• Cartridges

• Scaling

• Cloudyle PaaS+ cartridges

• OSGi Server Runtime

• Enterprise APIs

• Build & Deployment

• Provisioning

• Online Early Access

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 9: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

9

OpenShift base technology

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 10: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

10

Supported Technologies

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 11: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

11

Cartridges

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Web console

Eclipse IDE

Cmd line

Fedora/RHELFedora/RHEL

Brokers Node Node

KarafMongoDB

Page 12: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

12

Scaling

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

HA-Proxy

Postgres

Java

Code

Java

Code

Java

Code

Page 13: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

13

Cloudyle PaaS+ cartridges

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 14: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

14

Cooking in the cloud with OSGi

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 15: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

15

PaaS+ Building Blocks

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

PaaS+ Core

ComponentManagement

Dependencies

Enterprise Integration

Configuration

Security

Provisioning

Page 16: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

16

PaaS+ OSGi Runtime

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 17: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

17

PaaS+ Enterprise APIs

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

fast

• APIs for common use cases

• Additional frameworks

easy

• Simplified use

• Easy deployment

smart

• Additional features

• Modular

Page 18: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

18

PaaS+ OSGi Enterprise Services

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Report Service

PersistenceService

Preference Service

User Manage-

ment

CatalogService

ProcessEngine

Security

Index andQuery

GUI Frame-work

NoSQLPersistence

Aries JPA+

based on

uses

uses

uses uses

uses

authorizes

plugs into

Page 19: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

19

OSGi-Service: Persistence

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

• Forked from Aries JPA• JPA 2.1 Support• CustomPersistence Properties• Available on Github

• Cancellation Support• Database Audit Trail• Plugable Extensions• Typesafe query

• NoSQL Support• Composite Persistence Units

Page 20: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

20

Composite Persistence Unit

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 21: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

21

OSGi-Service: Preferences

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 22: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

22

OSGi-Service: Business Process Engine

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 23: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

23

OSGi-Service: User Management

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 24: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

24

OSGi-Service: Indexing and Query

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 25: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

25

Vaadin Web Apps

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 26: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

26

Modular GUI

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Module 1 Module 2 Module 3

GUI Application

Module Registry

Here!

Take me!

Hello!

Page 27: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

27

Apache Shiro OSGi integration

Authentication

Authorization

Security annotations

Blueprint extension

Bundle security e

OSGi-Service: Security

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 28: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

28

OSGi-Service: Catalog and Reporting

Report Service Report creation with Jasper Reports

Dynamic reporting

Export to different formats: Pdf, XML, Html

Catalog Service Generic catalogs

Predefined catalog structures

Custom catalog structures (coming soon)

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 29: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

29

Deployment, Build, Provisioning

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 30: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

30

Cloud Provisioning

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Application Application Application Application

Page 31: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

31

Deployment Process

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Develop

PushManage

Control

Page 32: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

32

PaaS+ Cloud Build Process

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Code

•Add rootpom.xml

Git Push

•Deploybinaries

•Deploysource

Build

•Mavenbuild withroot pom

•Buildpublishesartifacts

Deploy

•Artifactsaredeployedon application

Page 33: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

33

OSGi PaaS+ overall picture

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

OSGi Enterprise Runtime

Bundle repository

Bundle Build Service

Management &Monitoring

Security

JPA/Eclipse LinkApache Felix OSGi Java API 3rd Party Bundles

Business Applications and Services

elasticsearch

Integration Engine

KMIP Keymanagement

Enterprise OSGi

Encryption

PersistenceQuery

Catalog

Configuration

Indexing

Process Engine

Reporting Object MappingUser

Managementmidpoint IDM

Notification

Aries Blueprint

Domain Service A Domain Service B Domain Service C Domain Service D

UI Module ManagementVaadin Web Framework UI Components

Page 34: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

34

Coming soon...

More gears and gear sizes

Scalable applications

Scalable Karaf

IDM cartridge

Server side encryption

Dynamic GUI module framework

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 35: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

35

See you tomorrow:

Cloudyle OSGi PaaS+ Hands On

Take your bundles to the cloud

THURSDAY, JUNE 12, 2014

13:45-14:35

South Tower – Room Actors

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

Page 36: OSGi PaaS+ building a modular and secure cloud platform with OSGi - A Grzesik

36

PaaS+: Early Access - sign up today!

OSGi DevCon 2014 New York, NY June 11 to 13 OSGi PaaS+ Building a modular and secure cloud platform with OSGi

http://www.cloudyle.com