Domain Partitions and Multitenancy in Oracle WebLogic Server 12c - Why It's Useful

Raastech, Inc.2201 Cooperative Way, Suite 600Herndon, VA 20171+1-703-884-2223info@raastech.com

Domain Partitions & Multitenancy in Oracle WebLogic Server 12c

Why It’s Useful

Thursday, May 18, 20172:45 - 3:45pm

Session 9LL10AB

Agenda

1. Introduction

2. Overview of Oracle WebLogic Server

3. Introducing Multitenancy

4. WebLogic Multitenancy Concepts

5. Isolation

6. Oracle Traffic Director

7. Porting Domains

8. Extending to Oracle Java Cloud Service

9. Managing Downtime

10. Summary

About Me

▪ Ahmed Aboulnaga @Ahmed_Aboulnaga

▪ 18+ years Oracle experience

▪ Oracle ACE, OCE, OCA

▪ Author, Blogger, Presenter, Tweeter

About Raastech

▪ Small systems integrator founded in 2009

▪ Headquartered in the Washington DC area

▪ Specializes in Oracle Fusion Middleware

▪ Oracle Gold Partner

▪ Oracle SOA Specialized

▪ Application servers (i.e., middleware) reside between the frontend

and the backend

▪ The mostly (but not always) host and execute web application code

and web services

Middleware

Oracle WebLogic Server

▪ Acquired from BEA in 2008

▪ Industry’s leading Java Enterprise Edition (Java EE) Application server

▪ Replaced Oracle Application Server

▪ Required for almost all Oracle Fusion Middleware products

▪ Provides a standard set of APIs for creating distributed Java

applications that can access a wide variety of services such as

▪ JMS, JDBC, RMI, Web Services, XML, EJB etc.

Current Releases

▪ Current release:

▪ Oracle WebLogic Server 12c R2 (12.2.1.2)

▪ Previous releases:

▪ Oracle WebLogic Server 12c (12.1.2 and 12.1.3)

▪ Oracle WebLogic Server 11g (10.3.5 and 10.3.6)

Oracle Marketing Speak – WebLogic Server

▪ “New features for lowering cost of operations, improving performance,

enhancing scalability”

▪ “Provides flexibility between on-premise and third-party clouds”

▪ “Increases developer productivity with mobile application

development and maven support”

▪ “Optimized for Oracle Exalogic Elastic Cloud”

▪ “Provides extreme cloud performance, scalability, and elasticity,

unmatched integration with Oracle’s Database 12c including multi-

tenant database support”

Understanding Oracle Fusion Middleware

▪ “Oracle Fusion Middleware” is a misleading term

▪ Used to describe middleware products such as:

▪ Business Intelligence (e.g., OBIEE)

▪ Integration (e.g., SOA Suite, OSB)

▪ WebCenter (e.g., WebCenter Content and Portal)

▪ Identity Management (e.g., Oracle Access Manager)

▪ Monitoring (e.g., OEM Cloud Control)

▪ But many times used (erroneously) to describe a single product:

▪ WebLogic Server

▪ WebLogic Server is the core foundation of all Oracle Fusion

Middleware products (and applications)

WebLogic Server: Foundation for Fusion Middleware

Docker Containers

▪ Light, extremely quick startup, increased density, portableA

Physical Server

Host OS

Hypervisor

Guest OS

bin/lib bin/libA

Physical Server

Host OS

Docker Engine

bin/lib bin/lib

bin/lib

Oracle Database Multitenancy

▪ PDB = Pluggable Database

▪ Portable, increased density, isolated

▪ DBA’s love it

Server

bin/lib bin/libbin/lib

Server

bin/lib

PDB PDB PDB

WebLogic Server Multitenancy

▪ Same concept exactly, but at the WebLogic level

▪ WebLogic Server multitenancy is achieved via domain partitions

Domain

Server

bin/lib bin/libbin/lib

Domain Domain

Server

bin/lib

Domain

Partition Partition Partition

Oracle Marketing Speak – Domain Partitions

▪ Consolidate “microcontainers onto an efficient, shared platform”

▪ “Improves your time to market”

▪ “Simplifies movement of workloads to and from the cloud”

▪ “Enables up to 3x hardware consolidation”

▪ “Reduces operating expenses by up to 25%”

Convincing Oracle Marketing Speak

▪ “Increased density”

▪ “Tenant isolation”

▪ “Simplified management”

WebLogic Domain Partitions

▪ New to Oracle WebLogic Server 12.2.1

▪ Think virtualization or multitenancy in WebLogic Server, similar to

pluggable databases in the Oracle Database

▪ Every domain can have 1 or more partitions, each containing its own

apps and resources

New in 12.2.1

▪ Domain Partitions

▪ Resource Groups

▪ Resource Group Templates

▪ Other new features include:

▪ Zero Down Time (ZDT) patching

▪ Via automatic orchestration, retries/rolls back on failure

▪ WebLogic multitenant live partition migration

▪ Move from one cluster to another

▪ Coherence persistence

▪ Cache data persisted to durable storage

Introducing WebLogic Domain Partitions

WebLogic Domain APP

AdminServer

BookingApp

WebLogic Domain ORD

AdminServer

OrderMgmt

WebLogic Domain NEW

AdminServer

OrderReports

JMS JDBC

Partition APP

BookingApp

JMS JDBC

Partition ORD

OrderMgmt

OrderReports

JMS JDBC

Domain Partitions

▪ A WebLogic microcontainer

▪ Can create 1 or more partitions

▪ Each partition has its own apps and resources

▪ Can start/stop each partition independently

▪ Each partition can have different security realms

▪ Can assign a different administrator for each partition

Domain Partitions Isolation Boundaries

▪ Applications and their data

▪ JNDI

▪ Security

▪ Runtime MBeans

▪ Work Managers

▪ Logging

Resource Groups

▪ Resource Group = collection of Java EE apps and resources

▪ Examples of resources:

▪ Deployments

▪ Services (JDBC, messaging, persistent stores, etc.)

▪ Targets

▪ Can override resources to customize settings

Resource Groups – Creating

▪ Navigate to Environment > Resource Groups

Resource Groups – Configuring Services

Resource Group Templates

▪ Basically templates of Resource Groups

▪ Overrides:

▪ Can create “overrides” for the resources defined in the resource group

template

▪ Example: JDBC connection information

Targeting

▪ In Pre-12.2.1, applications and resources are targeted to a managed

server or cluster

▪ Resources and applications are grouped into resource groups

▪ The resource group is targeted to a virtual target

Virtual Targets

▪ A virtual target is targeted either to a cluster or a managed server

▪ Each has its own URL mapping

▪ Each has its own separate HTTP server

▪ Which helps avoid context path clashes

http://devhost:8001/PartitionAPP/BookingApp

http://devhost:8001/PartitionORD/OrderManagement

Virtual Targets – Creating

WebLogic Domain Partitions

WebLogic Domain APP

AdminServer

WebLogic Domain NEW

AdminServer

JMS JDBC

Partition APP

JMS JDBC

Resource Group

Virtual Target

JMS JDBC

MS1 MS2

Some New Terminology

Term Explanation

MicrocontainerGeneral term that defines encapsulated applications and resources, resources are isolated

Domain Partition –or–Partition

A WebLogic concept, a microcontainer, a runtime slice of the WebLogic Domain

Virtual TargetDefines where a partition runs, either on a managed server or a cluster

Resource GroupCreated within a partition, groups resources, targeted to a virtual target

RCM Resource Consumption Management

How to Enable Isolation

▪ Though a shared domain, partitions must provide for:

▪ Runtime isolation

▪ Security isolation

▪ Administrative isolation

▪ Data isolation

▪ Configure Resource Consumption Managers and Partition Work

Managers

Isolation Types

Isolation Type Explanation

RuntimePolicies allow for usage of heap, CPU time, and open file descriptors

Security Each partition can have a separate security realm

Administrative Each partition can be managed by different administrators

DataEach partition has its own dedicated data source, JMS configuration, and Coherence runtime cache

Resource Consumption Management (RCM)

▪ Helps provide runtime isolation and protection

▪ Set the following JVM arguments to enable WebLogic RCM

-XX:+UnlockCommercialFeatures -XX:+ResourceManagement -XX:+UseG1GC

Triggers

▪ A static constraint for the allowed usage for a resource

▪ Can create boundaries for:

▪ HeapRetained

▪ CpuUtilization

▪ FileOpen

▪ If constraint exceeded, an action is performed:

▪ Notify - obvious

▪ Slow - through work manager settings

▪ Fail - reject requests

▪ Shutdown - stop partition

<resource-manager><heap-retained>

<trigger><name>UpThere_4GB</name><value>4096</value><action>notify</action>

</trigger><trigger>

<name>UpThere_6GB</name><value>6144</value><action>slow</action>

</trigger><trigger>

<name>UpThere_8GB</name><value>8192</value><action>shutdown</action>

</trigger>..

config.xml

Partition 1

8.9 GB

Partition 3

Trigger Example (heap-retained)

Partition 2

3.7 GB

Total 30 GB JVM

6.1 GB

Oracle Traffic Director (OTD)

▪ Is a software load balancer

▪ Optional

▪ Separately licensed

▪ WebLogic Server typically fronted by OTD or hardware load balancer

▪ You must set the WebLogic Plug-in Enabled in the WLS Admin Console

http://www.ateam-oracle.com/wls-plugin-enabled/

Oracle Traffic Director (OTD)

▪ Supports an Active-Active or Active-Passive architecture

▪ Highly recommended on Exalogic

▪ When a server is added to a cluster, traffic is automatically routed to

the new managed server

▪ When a partition is created/imported, traffic routing is automatically

added to OTD configuration

Export a Domain

▪ Can export 11g and 12c domains

▪ Export a domain:

exportDomainForPartition.sh /tmp /u01/mw/user_projects/domains/raastech

▪ Output files are:

raastech-attributes.json

raastech.zip

Import a Domain to a Partition

▪ Run these command to import the domain to a partition:

$MW_HOME/oracle_common/common/bin/wlst.sh

connect('weblogic', 'welcome1', 'http://newhost:7001');

importPartition('/tmp/raastech.zip', 'raastech', true, none);

startPartitionWait(cmo.lookupPartition("raastech"));

Confirm Application

▪ Note URI prefix

▪ Application URL on old domain:

http://devhost:8001/BookingApp

▪ Application URL on new domain partition:

http://devhost:8001/raastech/BookingApp

Introducing the Oracle Java Cloud Service (JCS)

▪ Simply… WebLogic Server on the cloud

▪ Requires the Oracle Database Cloud Service

Migrating to Oracle JCS

1. Migrate the Database

2. Configure the Oracle JCS Environment

3. Migrate the Application

Configure the Oracle JCS Environment

1. Navigate to the Oracle JCS Console

2. Launch the AdminConsole

3. Create data sources, work managers, messaging resources,

cluster, etc.

AppToCloud Healthcheck

▪ Validates on-premise domain and applications prior to moving them

to Oracle JCS

a2c-healthcheck.sh

-oh /u01/app/fmw

-adminUrl t3://devhost:7001

-adminUser weblogic

-outputDir /tmp

AppToCloud Export

▪ Exports on-premise domain and applications in preparation to move

them to the Oracle JCS storage container

a2c-export.sh

-oh /u01/app/fmw

-domainDir /u01/user_projects/domain/raastech

-archiveFile raastech.zip

-cloudStorageContainer Storage-Me/MyContainer

-cloudStorageUser myuser

AppToCloud Import

▪ Create an Oracle JCS instance with AppToCloud

1. Click Create Service

2. Select Java Cloud Service – AppToCloud

▪ Import application to service instance

1. Click AppToCloud Import

Gotchas

▪ Can only be performed on a new and unmodified service instance

▪ Copy AppToCloud JSON to Oracle Storage Cloud Service

▪ Create service instance with AppToCloud option

▪ Manually configure properties

Ways to Reduce Downtime

▪ Application:

▪ Redeploy apps

▪ Side-by-side deployment using versions (at a max of 1 previous version)

▪ Infrastructure:

▪ Rolling restarts

▪ Rolling Java patching

▪ Rolling Oracle Home patching

▪ Zero Down Time patching (ZDT)

Thoughts on WebLogic Partitions

▪ Is it really needed?

▪ Would you prefer 2 domains -or- 1 domain with 2 partitions?

▪ Patching considerations

▪ Must upgrade all apps simultaneously

▪ Segregation considerations

▪ Not performance, but rather binaries

Good Stuff

▪ Consolidation of environments

▪ Consolidate smaller or less used apps into a single environment

▪ Replication of environments

▪ Quickly provision replicas of test environments

Benefits of WebLogic Server Multitenancy

▪ Improves density and resource utilization

▪ Environment consolidation

▪ Portability

What is Shared What is Not Shared

Domain Application Data

WebLogic Server Application Configuration

JVM Application Runtime

Disadvantages of WebLogic Server Multitenancy

▪ Does not support most Oracle Fusion Middleware applications

▪ Only supports Java EE applications

▪ Does not support Oracle ADF applications

▪ Does not support applications that depend on Oracle JRF

▪ Shared WebLogic Server and domain will impact upgradeability

▪ Not 100% isolated

WebLogic Microcontainers vs. Docker

▪ Both isolate packaged applications and their resources

▪ Both are portable

▪ Docker works at the OS level

▪ Microcontainers work at the WebLogic level

▪ i.e., Does not exist outside the WebLogic runtime environment

▪ WebLogic 12.2.1 is certified to run on Docker containers

▪ To create your own WebLogic Docker images

References

▪ Domain Partitions for Multi-tenancy in WebLogic Server 12.2.1

https://blogs.oracle.com/WebLogicServer/entry/domain_partitions_for_multi_tenancy

▪ Oracle Fusion Middleware Using WebLogic Server Multitenant

http://docs.oracle.com/middleware/1221/wls/WLSMT

▪ WebLogic Multitenant: Configuring Domain Partitions

https://docs.oracle.com/middleware/1221/wls/WLSMT/config_domain_part.htm#WLSMT585

▪ WebLogic Multitenant: Configuring Resource Consumption Management

https://docs.oracle.com/middleware/1221/wls/WLSMT/config_rcm.htm#WLSMT630

▪ Exporting and Importing Partitions

https://docs.oracle.com/middleware/1221/wls/WLSMT/export_import.htm#WLSMT636

▪ WebLogic Server 12.2.1 – Converting Domains to Partitions (video)

https://www.youtube.com/watch?v=D1vQJrFfz9Q

▪ Migrating a Java EE Application to Oracle Java Cloud Service (tutorial)

http://www.oracle.com/webfolder/technetwork/tutorials/obe/cloud/javaservice/JCS/jcs_migration/jcs_migration.html

▪ Checking the Health of an On-Premise WebLogic Domain

https://docs.oracle.com/en/cloud/paas/java-cloud/jscug/checking-health-premises-weblogic-domain.html

▪ Oracle Java Cloud Service – AppToCloud Tooling

http://www.oracle.com/technetwork/topics/cloud/downloads/java-cloud-apptocloud-3042466.html

Contact Information

▪ Ahmed Aboulnaga

▪ Technical Director

▪ @Ahmed_Aboulnaga

▪ ahmed.aboulnaga@raastech.com

Domain Partitions and Multitenancy in Oracle WebLogic Server 12c - Why It's Useful

Technology

Transcript of Domain Partitions and Multitenancy in Oracle WebLogic Server 12c - Why It's Useful

Requirements of Storage Multitenancy

WebLogic 12c & WebLogic Mgmt Pack

Multitenancy with Rails - 2nd edition

High density deployments using Weblogic Multitenancy · – a2c-export will generate a warning if it detects JMS,WLDF,Coherence,Security • However, AppTo(SOA/PS)Cloud is coming

BEA Campaign Manager for WebLogic BEA WebLogic Commerce ... · BEA WebLogic Commerce Server 3.5 BEA WebLogic Personalization Server 3.5 Document Edition 3.5 BEA WebLogic Commerce

The Docker Multitenancy Problem: A Journey through Infrastructure Hell

JVM Multitenancy (JavaOne 2012)

WebLogic JMS Messaging Infrastructure WebLogic Server ...img.oradba.net/files/docs/02-oracle-application-server/weblogic/03... · WebLogic JMS Messaging Infrastructure WebLogic Server

High density deployments using weblogic multitenancy

Understanding Oracle WebLogic Server · 2019-09-03 · Multitenancy 1-6 Running Oracle WebLogic Server on Docker 1-7 WebLogic Server Kubernetes Operator 1-7 WebLogic Server in the

Partner Webcast – Oracle WebLogic Server 12.2.1 Multitenancy and Continuous Availability

eBook: How to create a multitenancy cloud framework

Using JMX to Monitor Oracle Weblogic Partitions 1 ... · Using JMX to Monitor Oracle Weblogic Partitions 1. Introduction ... Monitoring. ... and the partition uses a virtual target

Solutions Guide Database Consolidation with Oracle 12c Multitenancy · Solutions Guide Database Consolidation with Oracle 12c Multitenancy James Morle Scale Abilities, Ltd.

Kubernetes: Multitenancy in...Multitenancy in Kubernetes: Better walls make better tenants Adrian Ludwin, Senior Software Engineer Wednesday, June 17, 2020 aludwin@google.com Goal

What s New in IBM Cognos Multitenancy(BP)

BEAWebLogic Server - Oracle€¦ · BEA WebLogic Network Gatekeeper, BEA WebLogic Persona lization Server, BEA WebLogic Personal Messaging API, BEA WebLogic Platform, BEA WebLogic

BEA WebLogic Server - otndnld.oracle.co.jpotndnld.oracle.co.jp/document/products/wls61/pdf/wtc_admin.pdf · WebLogic Commerce Server 、 BEA WebLogic E-Business Platform 、 BEA WebLogic

Navision Stat 9.0 Multitenancy · Navision Stat 9.0 – Multitenancy CSY/ØSY/ RASEG 18.12.2017 Samlet opgraderings- og installationsvejledning Nedenstående beskriver den samlede

Understanding Multitenancy and the Architecture of the Salesforce Platform