Enterprise Oracle Service-Orientated Architecture

Overview

The Enterprise Oracle Service Oriented Architecture (SOA) consists of centrally managed hardware and Oracle’s SOA family of products. Oracle SOA Suite sits on top of Oracle’s Fusion Middleware software.  SOA offers a complete, integrated platform which enables high end integration capabilities by utilizing a unified toolset for the development of services and composite applications. 

SOA is designed to simplify the process of creating connections between users and applications by turning common requests into reusable services.  With SOA, there is no need for direct connections between applications, making them more agile.  It’s a standard-based service using web services that are easily consumable by modern web applications.  It provides greater visibility, controls and analytics to govern how services are processed and deployed, reused and changed across their entire lifecycle. 

This service is clustered with at least one pre-production environment, and has a disaster recovery environment at our secondary datacenter for production only. Since SOA sits on top of Oracle Fusion middleware, please refer to the Oracle middleware for details of the infrastructure hosting environment.

SOA takes a unified approach by incorporating several components and features, such as an enterprise service bus, adapters to other applications, and real-time complex event processing with a common management and monitoring environment and layering business process management (BPM) or with business activity monitoring (BAM), on top of the SOA suite.

Oracle Web Services Manager (OWSM), a component of SOA, will be used to configure and apply security policies.  These policies will authenticate service accounts via active directory. OWSM allows you to externalize web services security and management from the application.  Instead of coding security logic in the application, use OWSM to implement declarative security and manage through predefined policies.

Governance

The MaineIT architects will set up a governance policy to ensure the State of Maine takes advantage of the reusable components.  This governance will consist of a center of excellence (CoE) to oversee the architecture and enforce standards.  This CoE will determine what are acceptable architectural policies; that ensure there will be management oversight and an ability to evaluate ROI & increasing reusable components; and eliminating proliferation of spaghetti-like connections between applications.

Includes

  • Initial deployment of the application with some basic debugging assistance
  • Deployments are expected in JAR or WAR files with all libraries needed included
  • Creation of managed servers with at least one pre-production and one production cluster
  • Creation of data sources using GridLink data sources by the application team
  • Auto deployment setup and configuration pre-production environments
  • Production and pre-production deployments
  • Access to logs
  • Log rotation configuration
  • Encryption in flight configuration between Oracle WebLogic servers and Oracle Databases
  • Load test monitoring and reporting of how the SOA container performs
  • Backup and recovery of infrastructure and/or logs
  • On-call coverage is available for production break/fix 24x7x365 (see Availability above)
  • Monitor production services ensuring they are up and available
  • Standard security build; use ECDHE Ciphers to ensure TLS 1.2 protocol for client communications
  • Oracle software stays patched at the “Premier Support” level
  •  Oracle WebLogic Server support
  • Upgrade of JDK (Java) four times a year or more frequent, depending on exploited vulnerabilities
  • Support of Operating System Patching Cycle on a quarterly basis or more frequent depending on exploited vulnerabilities
  • Support of Platinum Patching Cycle on a quarterly basis or more frequent depending on exploited vulnerabilities
  • Support of Oracle Software Patching Cycle on a quarterly basis or more frequent depending on exploited vulnerabilities
  • Annual DR testing
  • Server housing costs (power, backup generator, UPS, network connection, cooling) operational monitoring at the node and vServer layer
  • All hardware purchase and maintenance costs when utilizing the full Oracle stack
  • LB URL’s, direct URL will not be supported
  • State of Maine Middleware engineers
  • All core middleware administration functions, including application deployment and configuration, upgrades, and patches.
  • Full restore/recovery services in the event of disaster, simple hardware failure of the infrastructure
  • DR for pre-production and production at a site level
  • Performance tuning assistance and advice
  • Customer Support Center for problem reporting

Excludes

  • Assistance with desktop/laptop installations and configuration
  • Encryption in flight between the customer’s PCs and the database, any non-Oracle middleware product, and non-Oracle database

Options Available for Additional Charge

  • Batch processes support
  • Scripting assistance
  • Off-hour pre-production support
  • Monitoring of pre-production applications status
  • Security scan modifications needed to complete a security issue or special security request
  • Load test monitoring to debug a production issue
  • Support of database configurations that have been coded inside of the application
  • For backup and restore items out of scope please refer to the Backup Service Catalog
  • AD integration of Oracle stack
  • Audit request, completion of audit questionnaire, development and implementation of security remediation plans as a result of a specific audit finding
  • Any services for PaaS and/or IaaS hosted systems (performance monitoring/interruptions of monitoring reports/troubleshooting/security services/audits etc)
  • Dedicated vServers (2 vCPU’s, 2GB of memory) are the base, additional charges apply for additional vServer and memory allocation.

Service Level Targets & Availability

  • The standard production published service level agreement can be viewed at the following link: Standard_SLA_CTS_Production Services
  • Standard business hour coverage is 7:00AM - 5:00PM Monday through Friday 
  • On-call coverage is available for production break/fix 24x7x365; to report a production break/fix after hours, please contact MaineIT Operations
  • If service is required for non-production systems outside of the standard business hour coverage prior arrangements will be required with the director of this Service Area and associated fee apply

Service Rates: Please see the MaineIT Rate Table 

Customer Expectations

    • Individual users follow state IT use rules and policies, including all security policies
    • A contact person and backup are designated to interface with the MaineIT team
    • Any issues or problems with this service are reported to the MaineIT team as promptly and with as complete information as is feasible
    • Ability to stay current with supported versions of the Oracle product to support this service offering

To get help or order this service

  • Call MaineIT Service Center at 624-7700, assigned to the Oracle Middleware team
  • For application projects (new projects or major enhancements or upgrades), contact the MaineIT Project Management Office (PMO) to get started
  • If the published SLA is not met, the issues can be escalated to the next priority level by contacting any of the following individuals:
    • Contact the lead, John Hawkes, for the Oracle Middleware team
    • Sharon Horne, Application Hosting Services Director
    • For after-hours production break fix contact MaineIT Operation at Customer Support 624-7700
    • MaineIT Operations will engage the On-call Core Technology Duty Manager if necessary