Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Migrate Oracle WebLogic Applications
onto a Containerized Cloud Data
Center
Jingnan (Jing) Zhou
Technical Director
Oracle Consulting
Confidential – Oracle Internal/Restricted/Highly Restricted
Rob Tanner
Northern Trust Company
Division Manager - Middleware
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for
information purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied upon
in making purchasing decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion of Oracle.
Confidential – Oracle Internal/Restricted/Highly Restricted 2
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Why Docker?
Our Goals and Challenges
Modern DevOps Model
Migration Path
Demo
1
2
3
4
5
Confidential – Oracle Internal/Restricted/Highly Restricted 3
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 4
Founded in 1889, Northern Trust is a global leader in asset servicing, asset management,
and banking for personal and institutional clients
About Us
Wealth
Management
Leading advisor to
the affluent market
■ Individuals
■ Families
■ Family offices
■ Foundations
■ Endowments
■ Privately held
businesses
Corporate &
Institutional Services
Global provider of
investment services for
institutional investors
■ Pensions
■ Sovereign entities
■ Fund managers
■ Foundations &
endowments
■ Insurance companies
Banking
$120 billion
in assets
Asset
Servicing
$6.2 trillion
in AUC
Asset
Management
$946 billion
in AUM
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 5
Software Defined Data Center Strategy
Agility Reliability &
Stability
Security Performance &
Experience
Lower TCO
Run IT as a Business
Guiding Principles
Strategic Initiatives
Converged
Platforms
Converged
Teams
Software-
Defined X
Increased
Automation
Cognitive
Infrastructure
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Greenfield microservice apps are great...but what
do I do with the remainder of my applications?
Confidential – Oracle Internal/Restricted/Highly Restricted 6
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 7
Why Traditional Apps in Docker?
Infrastructure &
Developer Efficiency
Foundation for Hybrid
Cloud
Improved
Security
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 8
Faster Deployments with Less Infrastructure
4x Faster Deployments
With 2x Improved Infrastructure
Utilization
Without
Docker
29 days
With
Docker
7 days
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Improved Security
• Limited Attack Surface
• Understood and Scanned App BoM - Security Scanning
• Automated patching in build process
• TLS signed images at every stage of build - Docker Notary
• 3rd Party IPS/IDS
Confidential – Oracle Internal/Restricted/Highly Restricted 9
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 10
Docker EE provides a single pane of glass for all workloads...including Windows / Linux
heterogeneous stacks
Single Pane of Glass
host host host host host
ASP.NET
web API
WebLogic
front-end
Docker EE
app
Stack
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Our Goals
• Lift and Shift as much as possible
– More like Upgrade, Lift and Shift
• Utilize Single Base Image
– Patching efficiency
• Utilize Domains
• Utilize Docker Swarm
• Dynamic Scheduling and Scaling
Confidential – Oracle Internal/Restricted/Highly Restricted 11
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Our Challenges
• Ephemeral Containers
– WebLogic traditionally static IP addresses
• Restart or scale admin or managed server
• No more WebLogic Proxy plugin
• Multiple networks presented at container startup with mesh
– Each WebLogic instance could start with different IP/subnet (random)
• Logging
– Many different logs (Access, nohup, app specific, etc.)
Confidential – Oracle Internal/Restricted/Highly Restricted 12
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Who am I
• Jingnan (Jing) Zhou, Hands-on Technical Director, Oracle consulting
• Two decades of solution delivery for many Oracle customers
• 50% experience is development
• 50% experience is IT operations
• My unique experience allows me to work on both development and
operations pain points together
Confidential – Oracle Internal/Restricted/Highly Restricted 13
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Traditional IT Operational Model
Confidential – Oracle Internal/Restricted/Highly Restricted 14
Computer Infrastructure
System Admin
• Provision bare-metal or virtual machine
• Network services
• System support
Platform Admin
• Provision app environments
• Deploy app
• Monitor app
• All environments
Developer
• Application Developments
• Dev environments
Applications
Application Platforms
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Common Challenges
• Applications
• Developer code often works on one environment, fails on other environments because the
environments are not identical
• Production Support
• Both developer and platform administrator often feel helpless when production has performance or
stability issues because developer does not know platform environment and platform administrator
does not have application knowledge
• Product Patch and Upgrade
• Platform administrator often repeats patch or upgrade for tens or hundreds times because the
environments are different
• Environment Provision
• Due to complex approval or change request (CR) process, it takes long time for system administrator
and platform administrator to provision a new environment
Confidential – Oracle Internal/Restricted/Highly Restricted 15
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Causes?
Confidential – Oracle Internal/Restricted/Highly Restricted 16
Application Archive
(J2EE EAR/WAR)
built By Developer
Java
Virtual Machine
Supported by
Platform Administrator
Server
Operating System
Supported by
System Administrator
Due to the dependency,
Every one can see the trees, but no one can see the forest !
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Solutions: Remove Dependency!
Confidential – Oracle Internal/Restricted/Highly Restricted 17
Single Stack
Docker OS
Developer is the best
candidate to build and
own a container
Container
The most complex problem can be solved by the simplest solution!
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Solutions: Build Once, Run Everywhere
Confidential – Oracle Internal/Restricted/Highly Restricted 18
Container Orchestration
IaaS (Bare-metal, VM)
Software Defined Network
Computer Resource
Consumer
Dynamic Computer
Resource distributer
Static Computer
Resource Supplier
Container
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Modern DevOps Model
Confidential – Oracle Internal/Restricted/Highly Restricted 19
Container Orchestration
IaaS (Bare-metal, VM)
CI/CD
Developer
DevOps Admin
System Admin
Software Defined Network
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Business Benefits
Confidential – Oracle Internal/Restricted/Highly Restricted 20
Agility &
Innovation
Reliability &
Stability
Performance &
Experience
Lower TCO
• Development team is enabled to work with business teams on business agility and innovation
• Development team is fully empowered to maintain quality of their applications
• Operations team can significantly reduce time to provision a new environment from weeks to minutes
• Operations team can significantly reduce operational cost for applying regular security patches from weeks to
hours
• Operations team can significantly increase computer resource utilization
• Containerized application is auto scalable
• Application performance is predictable
• Containerized application is resilient via container orchestration
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Migration Path to DevOps Model
• The most critical step: migrate existing applications
– Guiding principle: Lift and Shift as much as possible
– Solutions for WebLogic applications
• Each application has its own domain
• Each WebLogic server has its own dedicated container
• Each domain has at least two servers
– A singleton admin server with shared storage for failover
– 1+ immutable and disposable managed servers
– Admin server manages J2EE resources for managed servers
– Container orchestration manage WebLogic server life cycle as well as scalability and failover
Confidential – Oracle Internal/Restricted/Highly Restricted 21
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Containerizing Application Steps
Confidential – Oracle Internal/Restricted/Highly Restricted 22
Application image
by developer
WebLogic base image
by DevOps admin
OS base image
by system admin
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Migrate WebLogic to Containerized Platform
Confidential – Oracle Internal/Restricted/Highly Restricted 23
config.xml
Admin Server
OS Sandboxed
(Docker)
System
Platform
Container
Orchestration
Containerized
Applications
DevOps Admin
System Admin
Developer
Software-Defined
Network
Managed Servers
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Demo Environments
Confidential – Oracle Internal/Restricted/Highly Restricted 24
Manager Worker1 Worker2
Infrastructure
(3 virtual boxes)
Container Orchestration
(Docker Swarm)
WebLogic
(12.2.1.2. & 12.2.1.3
config.xml
Private Docker
Registry
Overlay Network
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Demo Use Cases and Value Proposition
Confidential – Oracle Internal/Restricted/Highly Restricted 25
Fast WebLogic Upgrade
(12.2.1.2->12.2.1.3)
Easy Scale out
(1 ->2 managed servers)
Automatic Failover
( container or VM fails)
NTAC:3NS-20
Reliability &
Stability
Performance &
Experience
Lower TCO
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Q&A
Confidential – Oracle Internal/Restricted/Highly Restricted 26NTAC:3NS-20
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Log types
Types of logging
• For type I (stdout/stderr)
– will be through docker syslog driver and to ELK
• For type II ( local files written inside container)
– File beat with ( for example say weblogic is writing files to /log directory) /log/*
pattern and pumped to ELK
NTAC:3NS-20

Migrate Oracle WebLogic Applications onto a Containerized Cloud Data Center

  • 1.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Migrate Oracle WebLogic Applications onto a Containerized Cloud Data Center Jingnan (Jing) Zhou Technical Director Oracle Consulting Confidential – Oracle Internal/Restricted/Highly Restricted Rob Tanner Northern Trust Company Division Manager - Middleware
  • 2.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle. Confidential – Oracle Internal/Restricted/Highly Restricted 2
  • 3.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Program Agenda Why Docker? Our Goals and Challenges Modern DevOps Model Migration Path Demo 1 2 3 4 5 Confidential – Oracle Internal/Restricted/Highly Restricted 3
  • 4.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 4 Founded in 1889, Northern Trust is a global leader in asset servicing, asset management, and banking for personal and institutional clients About Us Wealth Management Leading advisor to the affluent market ■ Individuals ■ Families ■ Family offices ■ Foundations ■ Endowments ■ Privately held businesses Corporate & Institutional Services Global provider of investment services for institutional investors ■ Pensions ■ Sovereign entities ■ Fund managers ■ Foundations & endowments ■ Insurance companies Banking $120 billion in assets Asset Servicing $6.2 trillion in AUC Asset Management $946 billion in AUM
  • 5.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 5 Software Defined Data Center Strategy Agility Reliability & Stability Security Performance & Experience Lower TCO Run IT as a Business Guiding Principles Strategic Initiatives Converged Platforms Converged Teams Software- Defined X Increased Automation Cognitive Infrastructure
  • 6.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Greenfield microservice apps are great...but what do I do with the remainder of my applications? Confidential – Oracle Internal/Restricted/Highly Restricted 6
  • 7.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 7 Why Traditional Apps in Docker? Infrastructure & Developer Efficiency Foundation for Hybrid Cloud Improved Security
  • 8.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 8 Faster Deployments with Less Infrastructure 4x Faster Deployments With 2x Improved Infrastructure Utilization Without Docker 29 days With Docker 7 days
  • 9.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Improved Security • Limited Attack Surface • Understood and Scanned App BoM - Security Scanning • Automated patching in build process • TLS signed images at every stage of build - Docker Notary • 3rd Party IPS/IDS Confidential – Oracle Internal/Restricted/Highly Restricted 9
  • 10.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Confidential – Oracle Internal/Restricted/Highly Restricted 10 Docker EE provides a single pane of glass for all workloads...including Windows / Linux heterogeneous stacks Single Pane of Glass host host host host host ASP.NET web API WebLogic front-end Docker EE app Stack
  • 11.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Our Goals • Lift and Shift as much as possible – More like Upgrade, Lift and Shift • Utilize Single Base Image – Patching efficiency • Utilize Domains • Utilize Docker Swarm • Dynamic Scheduling and Scaling Confidential – Oracle Internal/Restricted/Highly Restricted 11
  • 12.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Our Challenges • Ephemeral Containers – WebLogic traditionally static IP addresses • Restart or scale admin or managed server • No more WebLogic Proxy plugin • Multiple networks presented at container startup with mesh – Each WebLogic instance could start with different IP/subnet (random) • Logging – Many different logs (Access, nohup, app specific, etc.) Confidential – Oracle Internal/Restricted/Highly Restricted 12
  • 13.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Who am I • Jingnan (Jing) Zhou, Hands-on Technical Director, Oracle consulting • Two decades of solution delivery for many Oracle customers • 50% experience is development • 50% experience is IT operations • My unique experience allows me to work on both development and operations pain points together Confidential – Oracle Internal/Restricted/Highly Restricted 13
  • 14.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Traditional IT Operational Model Confidential – Oracle Internal/Restricted/Highly Restricted 14 Computer Infrastructure System Admin • Provision bare-metal or virtual machine • Network services • System support Platform Admin • Provision app environments • Deploy app • Monitor app • All environments Developer • Application Developments • Dev environments Applications Application Platforms
  • 15.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Common Challenges • Applications • Developer code often works on one environment, fails on other environments because the environments are not identical • Production Support • Both developer and platform administrator often feel helpless when production has performance or stability issues because developer does not know platform environment and platform administrator does not have application knowledge • Product Patch and Upgrade • Platform administrator often repeats patch or upgrade for tens or hundreds times because the environments are different • Environment Provision • Due to complex approval or change request (CR) process, it takes long time for system administrator and platform administrator to provision a new environment Confidential – Oracle Internal/Restricted/Highly Restricted 15
  • 16.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Causes? Confidential – Oracle Internal/Restricted/Highly Restricted 16 Application Archive (J2EE EAR/WAR) built By Developer Java Virtual Machine Supported by Platform Administrator Server Operating System Supported by System Administrator Due to the dependency, Every one can see the trees, but no one can see the forest !
  • 17.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Solutions: Remove Dependency! Confidential – Oracle Internal/Restricted/Highly Restricted 17 Single Stack Docker OS Developer is the best candidate to build and own a container Container The most complex problem can be solved by the simplest solution!
  • 18.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Solutions: Build Once, Run Everywhere Confidential – Oracle Internal/Restricted/Highly Restricted 18 Container Orchestration IaaS (Bare-metal, VM) Software Defined Network Computer Resource Consumer Dynamic Computer Resource distributer Static Computer Resource Supplier Container
  • 19.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Modern DevOps Model Confidential – Oracle Internal/Restricted/Highly Restricted 19 Container Orchestration IaaS (Bare-metal, VM) CI/CD Developer DevOps Admin System Admin Software Defined Network
  • 20.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Business Benefits Confidential – Oracle Internal/Restricted/Highly Restricted 20 Agility & Innovation Reliability & Stability Performance & Experience Lower TCO • Development team is enabled to work with business teams on business agility and innovation • Development team is fully empowered to maintain quality of their applications • Operations team can significantly reduce time to provision a new environment from weeks to minutes • Operations team can significantly reduce operational cost for applying regular security patches from weeks to hours • Operations team can significantly increase computer resource utilization • Containerized application is auto scalable • Application performance is predictable • Containerized application is resilient via container orchestration
  • 21.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Migration Path to DevOps Model • The most critical step: migrate existing applications – Guiding principle: Lift and Shift as much as possible – Solutions for WebLogic applications • Each application has its own domain • Each WebLogic server has its own dedicated container • Each domain has at least two servers – A singleton admin server with shared storage for failover – 1+ immutable and disposable managed servers – Admin server manages J2EE resources for managed servers – Container orchestration manage WebLogic server life cycle as well as scalability and failover Confidential – Oracle Internal/Restricted/Highly Restricted 21
  • 22.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Containerizing Application Steps Confidential – Oracle Internal/Restricted/Highly Restricted 22 Application image by developer WebLogic base image by DevOps admin OS base image by system admin
  • 23.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Migrate WebLogic to Containerized Platform Confidential – Oracle Internal/Restricted/Highly Restricted 23 config.xml Admin Server OS Sandboxed (Docker) System Platform Container Orchestration Containerized Applications DevOps Admin System Admin Developer Software-Defined Network Managed Servers
  • 24.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Demo Environments Confidential – Oracle Internal/Restricted/Highly Restricted 24 Manager Worker1 Worker2 Infrastructure (3 virtual boxes) Container Orchestration (Docker Swarm) WebLogic (12.2.1.2. & 12.2.1.3 config.xml Private Docker Registry Overlay Network
  • 25.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Demo Use Cases and Value Proposition Confidential – Oracle Internal/Restricted/Highly Restricted 25 Fast WebLogic Upgrade (12.2.1.2->12.2.1.3) Easy Scale out (1 ->2 managed servers) Automatic Failover ( container or VM fails) NTAC:3NS-20 Reliability & Stability Performance & Experience Lower TCO
  • 26.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Q&A Confidential – Oracle Internal/Restricted/Highly Restricted 26NTAC:3NS-20
  • 27.
    Copyright © 2017,Oracle and/or its affiliates. All rights reserved. | Log types Types of logging • For type I (stdout/stderr) – will be through docker syslog driver and to ELK • For type II ( local files written inside container) – File beat with ( for example say weblogic is writing files to /log directory) /log/* pattern and pumped to ELK NTAC:3NS-20