SlideShare a Scribd company logo
1 of 37
IBM DataPower Gateway
Overview & What’s New in V7.5.2
Ozair Sheikh, Senior Product Manager, API Connect & Gateways
Arif Siddiqui, Program Director, API Connect & Gateways
Sep 30, 2016
Agenda
DataPower Gateway Overview
DataPower Operations Dashboard
Recent Releases
What’s New in DataPower Gateway V7.5.2
2
IBM DataPower Gateways provide a low startup cost,
helping clients increase ROI and reduce TCO with
specialized, consumable, dedicated gateways that
combine superior performance and hardened security in
Docker container, Linux application, virtual machine, and
physical appliance form factors
INTEGRATE Systems of Engagement with Systems of Record
CONTROL & MANAGE Traffic and Service Level Agreements
SECURE API, Mobile, Web, Cloud, SOA, and B2B Workloads
OPTIMIZE Data Delivery and User Experiences
CONSOLIDATE & Simplify Infrastructure Footprint
DataPower Gateways …
Secure, control & accelerate Today’s Digital workloads
3
B2B
Simplify mobile security with single, purpose-built
gateway; control mobile traffic and accelerate delivery
Web
Simplify web security with single,
purpose-built gateway; control traffic
and accelerate delivery for intranet and
internet web applications
Cloud
Deploy in multiple hypervisor, cloud
environments and enable hybrid &
inter cloud connectivity
API
Easily secure, control,
publish, monitor & manage
your APIs
SOA
Secure, integrate, control &
manage SOA workloads in
the DMZ and Trusted zones
Extend Connectivity & Integration beyond the
enterprise with DMZ-ready B2B edge capabilities
Mobile
Before DataPower Gateway After DataPower Gateway
Control
Integrate
Optimize
Secure
Consumer
Consumer
Consumer
Consumer
Centralize, offload and simplify critical functions
Internet Trusted ZoneDMZ
1 API Gateway
2 Mobile Gateway
3 Web Gateway
4 B2B Partner Gateway
5 API & SOA Gateway
6 ESB / Integration Gateway
7 Internal Security Enforcement
8 Legacy Integration
System Z
ESB /
Middleware
App Server or
Service
Internal LoB
App
Web
Trading Partners
Mobile, IoT
Common Use Cases
IBM DataPower Gateways are the industry-leading
Security & Integration gateways that help provide security, integration, control and optimized access to a full
range of API, Mobile, Web, Cloud, SOA, & B2B workloads
MobileFirst Platform Foundation
Essential mobile backend services pre-integrated with
advanced safeguards, management and analytics
DataPower Gateway
High performance gateway to secure, control &
accelerate traffic across API, mobile, web, and cloud
API Connect
Create, Run, Manage & Secure new or existing APIs and
Microservices in a hybrid deployment with Node.js and
Java to power modern digital applications
Use one or all of these components together based on project needs
Single Gateway for API & Mobile policy enforcement
MobileFirst
Foundation
wwwTH GS
IN Cloud
DataPower
API
Connect
ISAM Proxy Module
 User access control, session management,
web SSO enforcement
 Advanced mobile security: mobile SSO,
context-based access, one-time password,
multi-factor authn
Application Optimization
Module
 Frontend self-balancing
 Backend intelligent load distribution
 Session affinity
 z Sysplex Distributor integration
Integration
Module
 Any-to-Any message transformation
 Database connectivity
 Mainframe IMS connectivity
B2B Module
 B2B DMZ gateway
 EDIINT AS1,AS2,AS3,AS4,ebXML
 Partner profile management
 B2B transaction viewer
 Any-to-Any message transformation
 Database connectivity
TIBCO EMS
Module
 Integrate with TIBCO EMS messaging
middleware
 Support for queues & topics
 Load balancing & fault-tolerance
IBM DataPower Gateway (Base)
Secure
 Authentication, authorization
 Security token translation
 Service / API virtualization
 Threat protection
 Message schema validation
 Message filtering
 Message digital signature
 Message encryption
 AV scanning integration
Integrate
 Transport protocol bridging
 Any-to-any message
transformation
 Message enrichment
 Database connectivity
 Mainframe connectivity
 B2B partner connectivity
 Hybrid cloud connectivity
Control & Manage
 Quota & rate enforcement
 Content-based routing
 Message accounting
 B2B partner management
 Integration w/ governance,
management & monitoring
platforms including IBM API
Connect & WSRR for policy
enforcement
Optimize & Offload
 HTTP/2
 SSL / TLS offload
 Hardware accelerated crypto*
 JSON, XML offload
 JavaScript, JSONiq, XSLT,
XQuery acceleration
 Local response caching
 Distributed caching with WXS
 Backend load balancing
Single, modular & extensible Gateway platform
Available Form Factors: Deploy Anywhere
Hardware
Gateway Image
Physical Virtual** Linux** Docker**
Crypto Acceleration
Trusted
Platform
Module
IBM Provided
Hardware
Gateway Image
Hypervisor1
Hardware / Hypervisor
Gateway Image
Docker
Operating System
All in one solution (HW / SW)
* Physical security
* Drop-in deployment & mgmt
* Performance including HW
crypto acceleration
* DMZ drop-in
Embedded HSM option (FIPS
140-2 certified)
Software solution (Virtual machine)
* User responsible for providing &
securing HW and Hypervisor
Flexible deployment
Flexible resource allocations
Software solution (Application)
* User responsible for providing
& securing HW, Hypervisor, OS
Public & private Cloud deployments
Rapid scale up/down
First class Cloud citizen
Physical server deployment
Software solution (Container)
* User responsible for providing
& securing HW, Hypervisor, OS
Docker optimized image
* Apply your DevOps tools &
processes
* Use Docker Volumes & Docker
Build to manage gateway config
1 Supported on VMware & Citrix XenServer hypervisors.
2 Supported via RHEL & Ubuntu operating systems anywhere, including bare-metal physical
servers, hypervisors (Hyper-V, KVM, VMware, XenServer) and cloud platforms (Amazon EC2,
Microsoft Azure, IBM SoftLayer, Cloud Foundry, OpenShift, others).
Hardware
Security
Module
Signed & Encrypted
Gateway Stack
IBM Optimized
Embedded OS
Signed & Encrypted
Gateway Stack
IBM Optimized
Embedded OS
** “Once deployed, it’s DataPower Gateway”
** ”Available in Production, Non-prod & Developer edition on X86_64”
Hardware / Hypervisor
Gateway Image
Operating System2
Signed & Encrypted
Gateway Stack
IBM Optimized
Application Layer
IBM Optimized
Application Layer
Gateway Stack
 Available free of charge for Development use:
https://hub.docker.com/r/ibmcom/datapower/
 Seamless configuration migration
 Easily move configuration between form factors
 Deployment flexibility and elasticity
 “Right size” the deployment, quickly deploy where needed & rapidly scale
 Workload isolation
 Projects can use their own instances
 Unbounded memory scalability
 Memory can be added to instances without additional licensing
 Low cost for Dev & Test environments
 Developers & Non-Production versions include add-on software modules at no additional charge
 Free disaster recovery
 Warm or cold backup without additional licenses when licensed for Production
 Flexible licensing and entitlement
 Sub-capacity licensing
 Monthly licensing option
 Entitlement to future product versions at no additional charge with active maintenance (S&S)
Virtual Edition Benefits
 Non-blocking event-driven I/O architecture
 Architecture similar to Nginx & Node.js
 Continued enhancements since 2002
 Parsers & compilers for JSON & XML processing written from
ground-up with several patents
 Secure and optimized JavaScript runtime called GatewayScript
 Purpose-built, secure gateway image (all form factors)
 Single self-contained, signed & encrypted secure gateway image
without external software dependencies
 No arbitrary software
 Security exposure minimized due to smaller vulnerability surface (few
user-exposed and 3rd party components)
 High assurance, “locked-down” configuration
 Optimized, embedded operation system
Purpose-Built, Secure Gateway
How DataPower Gateways are unique?
Enterprise grade security requires a secure platform
 Physical security (physical appliance only)
 Sealed, tamper-evident case
 No usable USB, VGA, other ports
 Customized intrusion detection switch
 Trusted Platform Module
 Encrypted flash drive
 Cryptographic acceleration card
 Optional FIPS 140-2 level 3 certified Hardware Security Module
Simple & Secure Architecture
 How is DataPower Gateway different? Purpose-built, secure gateway platform
 Complete gateway platform delivered as hardened image
 Guiding philosophy is to centralize common security, traffic management, mediation, acceleration
functions and optimize them in a security-hardened gateway stack delivered in Docker container,
Linux application, Virtual machine and Physical appliance form factors
Display Ports
database
config
App Server
config
HTTP
Server
config
JVM
config
Proprietary
Software
config
Linux Daemons
config
JSP Engineglibclibxml
Full Linux OS
(including shells and user accounts)
config
Bootable
CDROM
Drive
Bootable
USB Ports
Hardware
config
Hardware
DataPower Gateway Platform
Digitally Signed and Encrypted
Image
Flash
Memory
Crypto
Acceleration
IBM Optimized Embedded Operating Environment
DataPower Gateways
(Secure & Easy to Manage)
Commodity Gateways
(In-Secure & Hard to Manage)
• JavaScript-based gateway runtime which simplifies configuration for developers
and provides an easier development paradigm for API, Mobile, Web, & IoT
• Security
• Transaction isolation to prevent memory-based attacks
• Code injection protection to prevent security exposures from malicious code
• Performance
• Highly optimized JavaScript compiler
• Built on intellectual capital and expertise from 10+ years securing and optimizing
parsing/compiler technology
GatewayScriptTM: Secure & optimized JavaScript runtime
Purpose-built, Secure
Gateway
API,Mobile,Cloud,B2B
Built-in security, traffic mgmt,
mediation, acceleration
Developer, Enterprise
& DevOps Friendly
Operations Dashboard
Flexible & ExtensibleDeploy Anywhere
DataPower Gateways ….
• Used by 95% of top global
insurances firms
• SaaS providers, ASPs, regulators,
etc.
• Agencies and ministries
• Defense and security organizations
• Crown corporations
InsuranceGovernment
Banking
• Healthcare
• Retailers
• Utilities, Power, Oil and Gas
• Telecom
• Airlines
• Others
Many, many, more
• Majority of the big US and European banks
• All of the big 5 Canadian banks
• Numerous regional banks and credit unions
Over 15 years of innovation & 2000 global installations
DataPower Gateways
DataPower’ing IBM Bluemix!!!
• Security
• Control
• Filtering
• Content-Based Routing
• Load balancing
• Monitoring and Logging
Mobile
client
Bluemix
Tooling
VM
Application
Manager
App
App
App
App
Service
Service
Service
Service
Open Stack
External
Services
Internet
DataPower has been trusted to be the exclusive gateway
for Bluemix, IBM’s global Platform as a Service
Did you know?
• Data format & language
– JavaScript
‒ JSON
‒ JSON Schema
‒ REST, SOAP 1.1, 1.2
‒ WSDL 1.1
‒ XML 1.0
‒ XML Schema 1.0
‒ XPath 1.0, XPath 2.0 (XQuery only)
‒ XSLT 1.0
‒ XQuery 1.0, JSONiq
• Security policy enforcement
‒ OAuth 2.0, OpenID Connect, Social Login
‒ JWE, JWS, JWT, JWK
‒ SAML 1.0/1.1/2.0, SAML Tkn Profile, SAML queries
‒ XACML 2.0
‒ Kerberos (including S4U2Self, S4U2Proxy)
‒ SPNEGO
‒ RADIUS, RSA SecurID OTP using RADIUS
‒ LDAP versions 2 and 3
‒ Lightweight Third-Party Authentication
‒ Microsoft Active Directory
‒ FIPS 140-2 Level 3 (w/ optional HSM)
‒ FIPS 140-2 Level 1 (w/ certified crypto module)
‒ SAF & IBM RACF® integration with z/OS
‒ Internet Content Adaptation Protocol
‒ W3C XML Encryption
‒ W3C XML Signature
‒ S/MIME encryption and digital signature
‒ WS-Security 1.0, 1.1
‒ WS-I Basic Security Profile 1.0, 1.1
‒ WS-SecurityPolicy
‒ WS-SecureConversation 1.3
• Transport & connectivity
– HTTP, HTTP/2, HTTPS, WebSocket Proxy
– FTP, FTPS, SFTP
– WebSphere MQ
– WebSphere MQ File Transfer Edition
– TIBCO EMS
– WebSphere Java Message Service
– IBM IMS Connect, & IMS Callout
– NFS
– AS1, AS2, AS3, AS4, ebMS 2.0, CPPA 2.0, POP,
SMTP (B2B Module)
– DB2, Microsoft SQL Server, Oracle, Sybase, IMS
• Transport Layer Security
‒ TLS versions 1.0, 1.1, and 1.2
‒ SSL versions 2 and 3
‒ SNI, PFS, ECC Ciphers
• Public key infrastructure (PKI)
‒ RSA, 3DES, DES, AES, SHA, X.509, CRLs,
OCSP
‒ PKCS#1, PKCS#5, PKCS#7, PKCS#8, PKCS#10,
PKCS#12
‒ XKMS for integration with Tivoli Security Policy
Manager (TSPM)
• Management
‒ Simple Network Management Protocol
‒ SYSLOG
‒ IPv4, IPv6
Link to Product Documentation
• Web services
– WS-I Basic Profile 1.0, 1.1
– WS-I Simple SOAP Basic Profile
– WS-Policy Framework
– WS-Policy 1.2, 1.5
– WS-Trust 1.3
– WS-Addressing
– WS-Enumeration
– WS-Eventing
– WS-Notification
– Web Services Distributed Management
– WS-Management
– WS-I Attachments Profile
– SOAP Attachment Feature 1.2
– SOAP with Attachments (SwA)
– Direct Internet Message Encapsulation
– Multipurpose Internet Mail Extensions
– XML-binary Optimized Packaging (XOP)
– Message Transmission Optimization Mechanism
(MTOM)
– WS-MediationPolicy (IBM standard)
– Universal Description, Discovery, and Integration
(UDDI versions 2 and 3), UDDI version 3
subscription
– WebSphere Service Registry and Repository
(WSRR)
DataPower Gateway V7.5.2: Supported standards & protocols
See slide deck for Common Use Cases:
slideshare.net/ibmdatapower/data-power-common-use-cases
Agenda
DataPower Gateway Overview
DataPower Operations Dashboard
Recent Releases
What’s New in DataPower Gateway V7.5.2
DataPower Operations Dashboard Overview
 Smart Insights, visibility & troubleshooting for DataPower Gateways
 Provides advanced operations console for real-time visibility of transactions and
centralized operations to enable quicker problem determination and operational
resiliency
 Overview: youtube.com/watch?v=I3Y7RwpP2ns
 Details: youtube.com/watch?v=6NJJjaW8Z7U
 Documentation: ibm.com/support/docview.wss?uid=swg21984708
Released
May 2016
DataPower Operations Dashboard Features
 Centralized, customizable console with self-service capabilities for developers
 Real-time and Historical Transaction Troubleshooting including full text search
Quickly and easily drill-down, assess, and react to real-time or historical cross-gateway transactions
down to the detailed logs and payloads
 Dashboards, Statistics, Reports, and more
Real-time visibility of DataPower gateway operations and performance as well as historical analysis,
statistics, scheduled and ad-hoc reports, and more
 Non-intrusive, Completely Asynchronous, Highly Scalable
Seamlessly integrates with existing DataPower gateways to provide vital feedback without affecting
transaction latency and irrespective of the number of gateways being monitored
Agenda
DataPower Gateway Overview
DataPower Operations Dashboard
Recent Releases
What’s New in DataPower Gateway V7.5.2
7.5.1
Released
Jun 2016
 Cloud
 Red Hat Enterprise Linux (RHEL) deployment support on Microsoft Azure
 Smaller Docker image sizes for flexible delivery
 API
 OAuth distributed token management support (API Connect only)
 Fine-tuned caching in a AAA security policy
 Platform
 Fixed-length TCP/IP integration for backend services
 Optimized connectivity with HTTP 2.0 support
New Cloud Offerings
Deployment Flexibility using Docker
New Modernized User Experience
Enhanced API Security
Run DataPower as an Red Hat Enterprise Linux
(RHEL) application on cloud platforms
(Amazon/SoftLayer) for easier management
using cloud management tools
Deploy DataPower as a Docker container for
enhanced portability, scalability and
environment provisioning
Modernized user experience to reduce
complexity and allow quicker creation of
gateway services
Network HSM Integration
Flexible user authentication for Single Sign-On
(SSO) to Web, mobile and API workloads using
social (eg. Google) or enterprise identities
based on OpenID Connect
Integrate with Gemalto (formerly Safenet)
network HSM to provide secure key
management and offload of crypto operations
in cloud and virtual environments.
Built-in Policies on IBM API Connect
New API gateway policies for IBM API CONNECT
to enable quick delivery of gateway capabilities
without any custom policy authoring or coding
Create Run
ManageSecure
7.5
Released
Mar 2016
Secure. Integrate. Control. Optimize.
Released
Jun 2015
New Cloud Offerings
Secure Gateway for Bluemix
Easier DevOps with new REST API
GatewayScript Enhancements
Robust Platform Security
Deploy DataPower Gateways on Amazon EC2,
Microsoft Azure and SoftLayer CCI to provide
enhanced cloud elasticity for cloud workloads
Enhanced hybrid cloud integration to securely
connect between IBM Bluemix applications and
on-premise services protected using DataPower
Gateways
Protect mission-critical applications from security
vulnerabilities with enhanced TLS protocol support
using Elliptic Curve Cryptography, Server Name
Indication, and Perfect Forward Secrecy
New REST-based management API to build
deployment and automation scripts, enabling easier
devops for continuous software delivery and quicker
problem resolution
Enhanced Mobile and API security
Easily transform between XML and JSON
messages to quickly integrate System of Records
data sources with Systems of Engagement interfaces
Increased mobile and API security for protecting
mission-critical transactions with JSON Encryption,
JSON Signature, JSON Key, and JSON Token
7.2
Agenda
DataPower Gateway Overview
DataPower Operations Dashboard
Recent Releases
What’s New in DataPower Gateway V7.5.2
Enhanced Docker Image
Optimized DataPower Gateway Docker image
provides smaller footprint, enhanced security,
& DevOps support
7.5.2
Released
Sep, 2016
Available on Docker Hub
Download & deploy DataPower Gateway
directly from Docker Hub for enhanced
productivity, see
https://hub.docker.com/r/ibmcom/datapower/
New Modernized User Experience
Modernized user experience to reduce
complexity & allow quicker creation of gateway
services, now available as the default UI
No-Charge Edition for Developers
Enhanced B2B Integration with AS4
Support for AS4 one-way message exchange
pattern in the B2B module enables users to
meet government & industry mandates
Evaluate, demonstrate, develop and unit test
DataPower Gateway configuration free for
charge, see
https://hub.docker.com/r/ibmcom/datapower/
Deploy Anywhere on Linux
Install and run DataPower Gateway on Red Hat
Enterprise Linux or Ubuntu in any environment
including bare-metal, virtual & cloud platforms
http://www.ibm.com/support/knowledgecenter/SS9H2Y_7.5.0/com.ibm.dp.doc/whats_new_7.5.2.html
Enhanced Docker Image
• Deploy DataPower Gateway anywhere using Docker containers on x86_64 including
– Bare-metal physical servers
– Virtual platforms: VMware, XenServer, Hyper-V, KVM, others
– Cloud platforms: Amazon EC2, Microsoft Azure, IBM SoftLayer, Cloud Foundry, OpenShift, others
• Smaller footprint: 250MB download size (from Docker Hub), less than 1GB running size,
running in less than 10 seconds!
• Enhanced security: Run without root privileges
• DevOps support
– Project and file-based management for deploying
configuration from source control in a continuous
delivery manner
– Interactive command-line experience to quickly
perform common gateway tasks
– DevOps support to quickly bootstrap new
installable images into a running container
https://hub.docker.com/r/ibmcom/datapower/
Deploy Anywhere using Docker containers
• Deploy DataPower Gateway Docker container on any X86_64 Docker platform
• Perform regular Docker tasks (build, pull, and run) on Docker supported hosts
• Pull DataPower gateway images from Docker private registries
• Higher density to run multiple concurrent DataPower gateway instances on a single machine
28
Deploy Anywhere on Linux
• Deploy DataPower Gateway anywhere on Red Hat Enterprise Linux or Ubuntu Linux
natively on x86_64 including
– Bare-metal physical servers
– Virtual platforms: VMware, XenServer, Hyper-V, KVM, others
– Cloud platforms: Amazon EC2, Microsoft Azure, IBM SoftLayer, Cloud Foundry, OpenShift, others
Hardware
Linux Operating System
Hardware
Linux Operating System
Hypervisor
DataPower Gateway
Bare-metal
Physical server
Virtual or Cloud
platform
DataPower Gateway
No-charge Edition for Development
• DataPower Gateway available at no charge without IBM support for Developers
– Evaluate, demonstrate, develop & unit test without cost
– Restricted to development and unit testing, no expiry period
– Download & deploy directly from Docker Hub!
• Supports Docker for Mac and Docker for Windows
• https://hub.docker.com/r/ibmcom/datapower/
• Develop and unit test gateway configuration using the no-charge download from Docker Hub and
convert it to paid offerings for formal IBM support and deployment in test, staging, production via
license activation from IBM Passport Advantage® without starting over with a new image
DataPower Gateway Virtual
Edition for Developers
DataPower Gateway Virtual
Edition for Non-Production
DataPower Gateway Virtual
Edition for Production
DataPower Gateway for
Developer (No Charge)
Deployment in test, quality assurance,
benchmarking, staging environments
Deployment in production environments
Low-cost, single-user license w/ IBM support
Enhanced B2B Integration: AS4 One-way Message Exchange Pattern
• B2B module now includes support for AS4 protocol One-way Message
Exchange Pattern (MEP)
– AS4 is an open standard for secure and payload-independent exchange of business-to-
business documents by using Web Services
– Supports one-way push and one-way pull message exchange pattern
• AS4 protocol is a requirement due to government & industry mandates,
common in Europe, Australia and New Zealand
31
INTERNET TRUSTED ZONEDMZ
B2B Partner Gateway
Trading Partners B2Bi
AS4
One-way MEP
New Modernized User Experience
Modernized look and feel with updated theme and simplified navigation experience
Current
New
Other enhancements (1 .. 2)
33
• Accelerate DevOps & increase platform resiliency
– Flexibility to store cryptographic material in the local: directory, plus ability to securely store local
user account and password in exported configuration, enable 100% self-contained configuration
export for easier DevOps
– Dynamically configure transaction timeouts in a gateway policy based on transactional context or
environmental issues to optimize response times and resource usage
– Dynamically specify caching policies on a per transaction basis in a gateway policy based on
message content
– View certificate details using RMI and SOAP management interface for easier certificate
management
– Quickly troubleshoot SSL related issues with enhanced SSL debugging using session key logging
Other enhancements (2 .. 2)
34
• Enhanced security, control API workload
– Fine-grained caching control of authentication and authorization failures to provide enhanced
environment resiliency
– New Quota Enforcement (ratelimit) API to identify and count the number of concurrent
transactions that are simultaneously processed
– Invoke Processing Policy Rules programmatically using GatewayScript
– Convert any asynchronous callback pattern into a synchronous one with virtually no performance
penalty with the new fibers module in GatewayScript
– Authenticate requests using a SAML response assertion
– Set cipher suites for SSH connections when acting as a SFTP client or SFTP server
• Support for IBM Transformation Extender v9.0.1
• Support for IBM Security Access Manager v9.0.1
 Known as the ‘bible’ of DataPower planning, implementation, and
usage.
 New content to cover new products/features, including 9006/7.2!
 Volume 1 consists of DataPower Intro, Setup Guide, Common Use
Cases, Deployment Checklist, new Preface and three invaluable new
appendices for physical and virtual gateways.
 Volume II is an in-depth coverage of DataPower networking topics,
including VLAN, link aggregation, high availability.
 Volume III is an in-depth coverage of DataPower development,
including XSLT, EXSLT, JavaScript/GatewayScript, JSON, JSONiq, XQuery,
binary/secondary data formats, and development tools.
 Volume IV covers DataPower B2B processing and file transfer,
including relevance of B2B in today’s API driven world.
Available in softcover and e-book formats
DataPower Handbook, Second Edition, Volume I, II, III, IV
Where can I learn more about IBM DataPower Gateway?
• Overview Video
– youtube.com/watch?v=RqT3f_TmSMM
• Product Page
– ibm.com/software/products/en/datapower-gateway
• Developer Center & Playground
– developer.ibm.com/datapower/
• Product Documentation
– ibm.com/support/knowledgecenter/SS9H2Y
• Videos
– youtube.com/channel/UCV2_-gdea5LM58S-E3WCqew
• Slide Decks
– http://slideshare.net/ibmdatapower
• GitHub Repository
– github.com/ibm-datapower/
• Twitter
– twitter.com/IBMGateways
• LinkedIn
– Private user group ‘IBM DataPower Gateway’
– linkedin.com/groups?gid=4820454
• User Forum
– ibm.biz/dpuserforum

More Related Content

What's hot

Presentation f5 – beyond load balancer
Presentation   f5 – beyond load balancerPresentation   f5 – beyond load balancer
Presentation f5 – beyond load balancer
xKinAnx
 
Data power Performance Tuning
Data power Performance TuningData power Performance Tuning
Data power Performance Tuning
KINGSHUK MAJUMDER
 

What's hot (20)

APIConnect Security Best Practice
APIConnect Security Best PracticeAPIConnect Security Best Practice
APIConnect Security Best Practice
 
APIC/DataPower security
APIC/DataPower securityAPIC/DataPower security
APIC/DataPower security
 
IBM Cloud Integration Platform Introduction - Integration Tech Conference
IBM Cloud Integration Platform Introduction - Integration Tech ConferenceIBM Cloud Integration Platform Introduction - Integration Tech Conference
IBM Cloud Integration Platform Introduction - Integration Tech Conference
 
What's New in API Connect & DataPower Gateway in 1H 2018
What's New in API Connect & DataPower Gateway in 1H 2018What's New in API Connect & DataPower Gateway in 1H 2018
What's New in API Connect & DataPower Gateway in 1H 2018
 
Presentation f5 – beyond load balancer
Presentation   f5 – beyond load balancerPresentation   f5 – beyond load balancer
Presentation f5 – beyond load balancer
 
Gateway deepdive
Gateway deepdiveGateway deepdive
Gateway deepdive
 
천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)
천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)
천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)
 
Understanding Cisco’ Next Generation SD-WAN Technology
Understanding Cisco’ Next Generation SD-WAN TechnologyUnderstanding Cisco’ Next Generation SD-WAN Technology
Understanding Cisco’ Next Generation SD-WAN Technology
 
Disaster Recovery using Spectrum Scale Active File Management
Disaster Recovery using Spectrum Scale Active File ManagementDisaster Recovery using Spectrum Scale Active File Management
Disaster Recovery using Spectrum Scale Active File Management
 
IBM API Connect Deployment `Good Practices - IBM Think 2018
IBM API Connect Deployment `Good Practices - IBM Think 2018IBM API Connect Deployment `Good Practices - IBM Think 2018
IBM API Connect Deployment `Good Practices - IBM Think 2018
 
Intorduction to Datapower
Intorduction to DatapowerIntorduction to Datapower
Intorduction to Datapower
 
Cisco Security portfolio update
Cisco Security portfolio updateCisco Security portfolio update
Cisco Security portfolio update
 
Data power Performance Tuning
Data power Performance TuningData power Performance Tuning
Data power Performance Tuning
 
[웨비나] 클라우드 마이그레이션 수행 시 가장 많이 하는 질문 Top 10!
[웨비나] 클라우드 마이그레이션 수행 시 가장 많이 하는 질문 Top 10![웨비나] 클라우드 마이그레이션 수행 시 가장 많이 하는 질문 Top 10!
[웨비나] 클라우드 마이그레이션 수행 시 가장 많이 하는 질문 Top 10!
 
API and Microservices Management
API and Microservices ManagementAPI and Microservices Management
API and Microservices Management
 
Real-world 802.1X Deployment Challenges
Real-world 802.1X Deployment ChallengesReal-world 802.1X Deployment Challenges
Real-world 802.1X Deployment Challenges
 
IBM BP Session - Multiple CLoud Paks and Cloud Paks Foundational Services.pptx
IBM BP Session - Multiple CLoud Paks and Cloud Paks Foundational Services.pptxIBM BP Session - Multiple CLoud Paks and Cloud Paks Foundational Services.pptx
IBM BP Session - Multiple CLoud Paks and Cloud Paks Foundational Services.pptx
 
Connecting mq&kafka
Connecting mq&kafkaConnecting mq&kafka
Connecting mq&kafka
 
IBM Cloud Pak for Integration 2020.2.1 installation
IBM Cloud Pak for Integration 2020.2.1 installation IBM Cloud Pak for Integration 2020.2.1 installation
IBM Cloud Pak for Integration 2020.2.1 installation
 
Aruba ClearPass Exchange Deep Dive
Aruba ClearPass Exchange Deep DiveAruba ClearPass Exchange Deep Dive
Aruba ClearPass Exchange Deep Dive
 

Similar to IBM DataPower Gateways - What's new in 2016 v7.5.2

Whats new in data power
Whats new in data powerWhats new in data power
Whats new in data power
sflynn073
 
Common DataPower use cases, incl Caching with XC-10 appliance.
Common DataPower use cases, incl Caching with XC-10 appliance.Common DataPower use cases, incl Caching with XC-10 appliance.
Common DataPower use cases, incl Caching with XC-10 appliance.
sflynn073
 
Security best practices for hyper v and server virtualisation [svr307]
Security best practices for hyper v and server virtualisation [svr307]Security best practices for hyper v and server virtualisation [svr307]
Security best practices for hyper v and server virtualisation [svr307]
Louis Göhl
 
Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)
Jorgen Thelin
 
AUSTINGSMITH-v7a-logo
AUSTINGSMITH-v7a-logoAUSTINGSMITH-v7a-logo
AUSTINGSMITH-v7a-logo
Austin Smith
 

Similar to IBM DataPower Gateways - What's new in 2016 v7.5.2 (20)

Whats new in data power
Whats new in data powerWhats new in data power
Whats new in data power
 
Common DataPower use cases, incl Caching with XC-10 appliance.
Common DataPower use cases, incl Caching with XC-10 appliance.Common DataPower use cases, incl Caching with XC-10 appliance.
Common DataPower use cases, incl Caching with XC-10 appliance.
 
WebSphere Integration User Group 13 July 2015 : DataPower session
WebSphere Integration User Group 13 July 2015 : DataPower sessionWebSphere Integration User Group 13 July 2015 : DataPower session
WebSphere Integration User Group 13 July 2015 : DataPower session
 
Datapowercommonusecases 130509114200-phpapp02
Datapowercommonusecases 130509114200-phpapp02Datapowercommonusecases 130509114200-phpapp02
Datapowercommonusecases 130509114200-phpapp02
 
Datapowercommonusecases 130509114200-phpapp02
Datapowercommonusecases 130509114200-phpapp02Datapowercommonusecases 130509114200-phpapp02
Datapowercommonusecases 130509114200-phpapp02
 
Datapower it sec2019
Datapower   it sec2019Datapower   it sec2019
Datapower it sec2019
 
Connect your datacenter to Microsoft Azure
Connect your datacenter to Microsoft AzureConnect your datacenter to Microsoft Azure
Connect your datacenter to Microsoft Azure
 
Password Express - Data Sheet
Password Express - Data SheetPassword Express - Data Sheet
Password Express - Data Sheet
 
Convertigo Mobility Platform | Mobile Application Development for Enterprises...
Convertigo Mobility Platform | Mobile Application Development for Enterprises...Convertigo Mobility Platform | Mobile Application Development for Enterprises...
Convertigo Mobility Platform | Mobile Application Development for Enterprises...
 
Java Development on Bluemix
Java Development on BluemixJava Development on Bluemix
Java Development on Bluemix
 
Food and Beverage Automation with InduSoft Web Studio
Food and Beverage Automation with InduSoft Web StudioFood and Beverage Automation with InduSoft Web Studio
Food and Beverage Automation with InduSoft Web Studio
 
Implementing Private Clouds
Implementing Private CloudsImplementing Private Clouds
Implementing Private Clouds
 
Security best practices for hyper v and server virtualisation [svr307]
Security best practices for hyper v and server virtualisation [svr307]Security best practices for hyper v and server virtualisation [svr307]
Security best practices for hyper v and server virtualisation [svr307]
 
IBM WebSphere Appliance Overview
IBM WebSphere Appliance OverviewIBM WebSphere Appliance Overview
IBM WebSphere Appliance Overview
 
Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)
 
Presentation applications with the power of soft layer
Presentation   applications with the power of soft layerPresentation   applications with the power of soft layer
Presentation applications with the power of soft layer
 
IBM InterConnect 2013 Cloud General Session: George Karidis
IBM InterConnect 2013 Cloud General Session: George KaridisIBM InterConnect 2013 Cloud General Session: George Karidis
IBM InterConnect 2013 Cloud General Session: George Karidis
 
AUSTINGSMITH-v7a-logo
AUSTINGSMITH-v7a-logoAUSTINGSMITH-v7a-logo
AUSTINGSMITH-v7a-logo
 
Convertigo Mobile Application Development platform for Enterprises
Convertigo Mobile Application Development platform for EnterprisesConvertigo Mobile Application Development platform for Enterprises
Convertigo Mobile Application Development platform for Enterprises
 
Array Networks Corporate Overview
Array Networks Corporate OverviewArray Networks Corporate Overview
Array Networks Corporate Overview
 

Recently uploaded

Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Safe Software
 

Recently uploaded (20)

Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Manulife - Insurer Innovation Award 2024
Manulife - Insurer Innovation Award 2024Manulife - Insurer Innovation Award 2024
Manulife - Insurer Innovation Award 2024
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 

IBM DataPower Gateways - What's new in 2016 v7.5.2

  • 1. IBM DataPower Gateway Overview & What’s New in V7.5.2 Ozair Sheikh, Senior Product Manager, API Connect & Gateways Arif Siddiqui, Program Director, API Connect & Gateways Sep 30, 2016
  • 2. Agenda DataPower Gateway Overview DataPower Operations Dashboard Recent Releases What’s New in DataPower Gateway V7.5.2
  • 3. 2 IBM DataPower Gateways provide a low startup cost, helping clients increase ROI and reduce TCO with specialized, consumable, dedicated gateways that combine superior performance and hardened security in Docker container, Linux application, virtual machine, and physical appliance form factors INTEGRATE Systems of Engagement with Systems of Record CONTROL & MANAGE Traffic and Service Level Agreements SECURE API, Mobile, Web, Cloud, SOA, and B2B Workloads OPTIMIZE Data Delivery and User Experiences CONSOLIDATE & Simplify Infrastructure Footprint DataPower Gateways …
  • 4. Secure, control & accelerate Today’s Digital workloads 3 B2B Simplify mobile security with single, purpose-built gateway; control mobile traffic and accelerate delivery Web Simplify web security with single, purpose-built gateway; control traffic and accelerate delivery for intranet and internet web applications Cloud Deploy in multiple hypervisor, cloud environments and enable hybrid & inter cloud connectivity API Easily secure, control, publish, monitor & manage your APIs SOA Secure, integrate, control & manage SOA workloads in the DMZ and Trusted zones Extend Connectivity & Integration beyond the enterprise with DMZ-ready B2B edge capabilities Mobile
  • 5. Before DataPower Gateway After DataPower Gateway Control Integrate Optimize Secure Consumer Consumer Consumer Consumer Centralize, offload and simplify critical functions
  • 6. Internet Trusted ZoneDMZ 1 API Gateway 2 Mobile Gateway 3 Web Gateway 4 B2B Partner Gateway 5 API & SOA Gateway 6 ESB / Integration Gateway 7 Internal Security Enforcement 8 Legacy Integration System Z ESB / Middleware App Server or Service Internal LoB App Web Trading Partners Mobile, IoT Common Use Cases IBM DataPower Gateways are the industry-leading Security & Integration gateways that help provide security, integration, control and optimized access to a full range of API, Mobile, Web, Cloud, SOA, & B2B workloads
  • 7. MobileFirst Platform Foundation Essential mobile backend services pre-integrated with advanced safeguards, management and analytics DataPower Gateway High performance gateway to secure, control & accelerate traffic across API, mobile, web, and cloud API Connect Create, Run, Manage & Secure new or existing APIs and Microservices in a hybrid deployment with Node.js and Java to power modern digital applications Use one or all of these components together based on project needs Single Gateway for API & Mobile policy enforcement MobileFirst Foundation wwwTH GS IN Cloud DataPower API Connect
  • 8. ISAM Proxy Module  User access control, session management, web SSO enforcement  Advanced mobile security: mobile SSO, context-based access, one-time password, multi-factor authn Application Optimization Module  Frontend self-balancing  Backend intelligent load distribution  Session affinity  z Sysplex Distributor integration Integration Module  Any-to-Any message transformation  Database connectivity  Mainframe IMS connectivity B2B Module  B2B DMZ gateway  EDIINT AS1,AS2,AS3,AS4,ebXML  Partner profile management  B2B transaction viewer  Any-to-Any message transformation  Database connectivity TIBCO EMS Module  Integrate with TIBCO EMS messaging middleware  Support for queues & topics  Load balancing & fault-tolerance IBM DataPower Gateway (Base) Secure  Authentication, authorization  Security token translation  Service / API virtualization  Threat protection  Message schema validation  Message filtering  Message digital signature  Message encryption  AV scanning integration Integrate  Transport protocol bridging  Any-to-any message transformation  Message enrichment  Database connectivity  Mainframe connectivity  B2B partner connectivity  Hybrid cloud connectivity Control & Manage  Quota & rate enforcement  Content-based routing  Message accounting  B2B partner management  Integration w/ governance, management & monitoring platforms including IBM API Connect & WSRR for policy enforcement Optimize & Offload  HTTP/2  SSL / TLS offload  Hardware accelerated crypto*  JSON, XML offload  JavaScript, JSONiq, XSLT, XQuery acceleration  Local response caching  Distributed caching with WXS  Backend load balancing Single, modular & extensible Gateway platform
  • 9. Available Form Factors: Deploy Anywhere Hardware Gateway Image Physical Virtual** Linux** Docker** Crypto Acceleration Trusted Platform Module IBM Provided Hardware Gateway Image Hypervisor1 Hardware / Hypervisor Gateway Image Docker Operating System All in one solution (HW / SW) * Physical security * Drop-in deployment & mgmt * Performance including HW crypto acceleration * DMZ drop-in Embedded HSM option (FIPS 140-2 certified) Software solution (Virtual machine) * User responsible for providing & securing HW and Hypervisor Flexible deployment Flexible resource allocations Software solution (Application) * User responsible for providing & securing HW, Hypervisor, OS Public & private Cloud deployments Rapid scale up/down First class Cloud citizen Physical server deployment Software solution (Container) * User responsible for providing & securing HW, Hypervisor, OS Docker optimized image * Apply your DevOps tools & processes * Use Docker Volumes & Docker Build to manage gateway config 1 Supported on VMware & Citrix XenServer hypervisors. 2 Supported via RHEL & Ubuntu operating systems anywhere, including bare-metal physical servers, hypervisors (Hyper-V, KVM, VMware, XenServer) and cloud platforms (Amazon EC2, Microsoft Azure, IBM SoftLayer, Cloud Foundry, OpenShift, others). Hardware Security Module Signed & Encrypted Gateway Stack IBM Optimized Embedded OS Signed & Encrypted Gateway Stack IBM Optimized Embedded OS ** “Once deployed, it’s DataPower Gateway” ** ”Available in Production, Non-prod & Developer edition on X86_64” Hardware / Hypervisor Gateway Image Operating System2 Signed & Encrypted Gateway Stack IBM Optimized Application Layer IBM Optimized Application Layer Gateway Stack  Available free of charge for Development use: https://hub.docker.com/r/ibmcom/datapower/
  • 10.  Seamless configuration migration  Easily move configuration between form factors  Deployment flexibility and elasticity  “Right size” the deployment, quickly deploy where needed & rapidly scale  Workload isolation  Projects can use their own instances  Unbounded memory scalability  Memory can be added to instances without additional licensing  Low cost for Dev & Test environments  Developers & Non-Production versions include add-on software modules at no additional charge  Free disaster recovery  Warm or cold backup without additional licenses when licensed for Production  Flexible licensing and entitlement  Sub-capacity licensing  Monthly licensing option  Entitlement to future product versions at no additional charge with active maintenance (S&S) Virtual Edition Benefits
  • 11.  Non-blocking event-driven I/O architecture  Architecture similar to Nginx & Node.js  Continued enhancements since 2002  Parsers & compilers for JSON & XML processing written from ground-up with several patents  Secure and optimized JavaScript runtime called GatewayScript  Purpose-built, secure gateway image (all form factors)  Single self-contained, signed & encrypted secure gateway image without external software dependencies  No arbitrary software  Security exposure minimized due to smaller vulnerability surface (few user-exposed and 3rd party components)  High assurance, “locked-down” configuration  Optimized, embedded operation system Purpose-Built, Secure Gateway How DataPower Gateways are unique? Enterprise grade security requires a secure platform  Physical security (physical appliance only)  Sealed, tamper-evident case  No usable USB, VGA, other ports  Customized intrusion detection switch  Trusted Platform Module  Encrypted flash drive  Cryptographic acceleration card  Optional FIPS 140-2 level 3 certified Hardware Security Module
  • 12. Simple & Secure Architecture  How is DataPower Gateway different? Purpose-built, secure gateway platform  Complete gateway platform delivered as hardened image  Guiding philosophy is to centralize common security, traffic management, mediation, acceleration functions and optimize them in a security-hardened gateway stack delivered in Docker container, Linux application, Virtual machine and Physical appliance form factors Display Ports database config App Server config HTTP Server config JVM config Proprietary Software config Linux Daemons config JSP Engineglibclibxml Full Linux OS (including shells and user accounts) config Bootable CDROM Drive Bootable USB Ports Hardware config Hardware DataPower Gateway Platform Digitally Signed and Encrypted Image Flash Memory Crypto Acceleration IBM Optimized Embedded Operating Environment DataPower Gateways (Secure & Easy to Manage) Commodity Gateways (In-Secure & Hard to Manage)
  • 13. • JavaScript-based gateway runtime which simplifies configuration for developers and provides an easier development paradigm for API, Mobile, Web, & IoT • Security • Transaction isolation to prevent memory-based attacks • Code injection protection to prevent security exposures from malicious code • Performance • Highly optimized JavaScript compiler • Built on intellectual capital and expertise from 10+ years securing and optimizing parsing/compiler technology GatewayScriptTM: Secure & optimized JavaScript runtime
  • 14. Purpose-built, Secure Gateway API,Mobile,Cloud,B2B Built-in security, traffic mgmt, mediation, acceleration Developer, Enterprise & DevOps Friendly Operations Dashboard Flexible & ExtensibleDeploy Anywhere DataPower Gateways ….
  • 15. • Used by 95% of top global insurances firms • SaaS providers, ASPs, regulators, etc. • Agencies and ministries • Defense and security organizations • Crown corporations InsuranceGovernment Banking • Healthcare • Retailers • Utilities, Power, Oil and Gas • Telecom • Airlines • Others Many, many, more • Majority of the big US and European banks • All of the big 5 Canadian banks • Numerous regional banks and credit unions Over 15 years of innovation & 2000 global installations DataPower Gateways
  • 16. DataPower’ing IBM Bluemix!!! • Security • Control • Filtering • Content-Based Routing • Load balancing • Monitoring and Logging Mobile client Bluemix Tooling VM Application Manager App App App App Service Service Service Service Open Stack External Services Internet DataPower has been trusted to be the exclusive gateway for Bluemix, IBM’s global Platform as a Service Did you know?
  • 17. • Data format & language – JavaScript ‒ JSON ‒ JSON Schema ‒ REST, SOAP 1.1, 1.2 ‒ WSDL 1.1 ‒ XML 1.0 ‒ XML Schema 1.0 ‒ XPath 1.0, XPath 2.0 (XQuery only) ‒ XSLT 1.0 ‒ XQuery 1.0, JSONiq • Security policy enforcement ‒ OAuth 2.0, OpenID Connect, Social Login ‒ JWE, JWS, JWT, JWK ‒ SAML 1.0/1.1/2.0, SAML Tkn Profile, SAML queries ‒ XACML 2.0 ‒ Kerberos (including S4U2Self, S4U2Proxy) ‒ SPNEGO ‒ RADIUS, RSA SecurID OTP using RADIUS ‒ LDAP versions 2 and 3 ‒ Lightweight Third-Party Authentication ‒ Microsoft Active Directory ‒ FIPS 140-2 Level 3 (w/ optional HSM) ‒ FIPS 140-2 Level 1 (w/ certified crypto module) ‒ SAF & IBM RACF® integration with z/OS ‒ Internet Content Adaptation Protocol ‒ W3C XML Encryption ‒ W3C XML Signature ‒ S/MIME encryption and digital signature ‒ WS-Security 1.0, 1.1 ‒ WS-I Basic Security Profile 1.0, 1.1 ‒ WS-SecurityPolicy ‒ WS-SecureConversation 1.3 • Transport & connectivity – HTTP, HTTP/2, HTTPS, WebSocket Proxy – FTP, FTPS, SFTP – WebSphere MQ – WebSphere MQ File Transfer Edition – TIBCO EMS – WebSphere Java Message Service – IBM IMS Connect, & IMS Callout – NFS – AS1, AS2, AS3, AS4, ebMS 2.0, CPPA 2.0, POP, SMTP (B2B Module) – DB2, Microsoft SQL Server, Oracle, Sybase, IMS • Transport Layer Security ‒ TLS versions 1.0, 1.1, and 1.2 ‒ SSL versions 2 and 3 ‒ SNI, PFS, ECC Ciphers • Public key infrastructure (PKI) ‒ RSA, 3DES, DES, AES, SHA, X.509, CRLs, OCSP ‒ PKCS#1, PKCS#5, PKCS#7, PKCS#8, PKCS#10, PKCS#12 ‒ XKMS for integration with Tivoli Security Policy Manager (TSPM) • Management ‒ Simple Network Management Protocol ‒ SYSLOG ‒ IPv4, IPv6 Link to Product Documentation • Web services – WS-I Basic Profile 1.0, 1.1 – WS-I Simple SOAP Basic Profile – WS-Policy Framework – WS-Policy 1.2, 1.5 – WS-Trust 1.3 – WS-Addressing – WS-Enumeration – WS-Eventing – WS-Notification – Web Services Distributed Management – WS-Management – WS-I Attachments Profile – SOAP Attachment Feature 1.2 – SOAP with Attachments (SwA) – Direct Internet Message Encapsulation – Multipurpose Internet Mail Extensions – XML-binary Optimized Packaging (XOP) – Message Transmission Optimization Mechanism (MTOM) – WS-MediationPolicy (IBM standard) – Universal Description, Discovery, and Integration (UDDI versions 2 and 3), UDDI version 3 subscription – WebSphere Service Registry and Repository (WSRR) DataPower Gateway V7.5.2: Supported standards & protocols
  • 18. See slide deck for Common Use Cases: slideshare.net/ibmdatapower/data-power-common-use-cases
  • 19. Agenda DataPower Gateway Overview DataPower Operations Dashboard Recent Releases What’s New in DataPower Gateway V7.5.2
  • 20. DataPower Operations Dashboard Overview  Smart Insights, visibility & troubleshooting for DataPower Gateways  Provides advanced operations console for real-time visibility of transactions and centralized operations to enable quicker problem determination and operational resiliency  Overview: youtube.com/watch?v=I3Y7RwpP2ns  Details: youtube.com/watch?v=6NJJjaW8Z7U  Documentation: ibm.com/support/docview.wss?uid=swg21984708 Released May 2016
  • 21. DataPower Operations Dashboard Features  Centralized, customizable console with self-service capabilities for developers  Real-time and Historical Transaction Troubleshooting including full text search Quickly and easily drill-down, assess, and react to real-time or historical cross-gateway transactions down to the detailed logs and payloads  Dashboards, Statistics, Reports, and more Real-time visibility of DataPower gateway operations and performance as well as historical analysis, statistics, scheduled and ad-hoc reports, and more  Non-intrusive, Completely Asynchronous, Highly Scalable Seamlessly integrates with existing DataPower gateways to provide vital feedback without affecting transaction latency and irrespective of the number of gateways being monitored
  • 22. Agenda DataPower Gateway Overview DataPower Operations Dashboard Recent Releases What’s New in DataPower Gateway V7.5.2
  • 23. 7.5.1 Released Jun 2016  Cloud  Red Hat Enterprise Linux (RHEL) deployment support on Microsoft Azure  Smaller Docker image sizes for flexible delivery  API  OAuth distributed token management support (API Connect only)  Fine-tuned caching in a AAA security policy  Platform  Fixed-length TCP/IP integration for backend services  Optimized connectivity with HTTP 2.0 support
  • 24. New Cloud Offerings Deployment Flexibility using Docker New Modernized User Experience Enhanced API Security Run DataPower as an Red Hat Enterprise Linux (RHEL) application on cloud platforms (Amazon/SoftLayer) for easier management using cloud management tools Deploy DataPower as a Docker container for enhanced portability, scalability and environment provisioning Modernized user experience to reduce complexity and allow quicker creation of gateway services Network HSM Integration Flexible user authentication for Single Sign-On (SSO) to Web, mobile and API workloads using social (eg. Google) or enterprise identities based on OpenID Connect Integrate with Gemalto (formerly Safenet) network HSM to provide secure key management and offload of crypto operations in cloud and virtual environments. Built-in Policies on IBM API Connect New API gateway policies for IBM API CONNECT to enable quick delivery of gateway capabilities without any custom policy authoring or coding Create Run ManageSecure 7.5 Released Mar 2016
  • 25. Secure. Integrate. Control. Optimize. Released Jun 2015 New Cloud Offerings Secure Gateway for Bluemix Easier DevOps with new REST API GatewayScript Enhancements Robust Platform Security Deploy DataPower Gateways on Amazon EC2, Microsoft Azure and SoftLayer CCI to provide enhanced cloud elasticity for cloud workloads Enhanced hybrid cloud integration to securely connect between IBM Bluemix applications and on-premise services protected using DataPower Gateways Protect mission-critical applications from security vulnerabilities with enhanced TLS protocol support using Elliptic Curve Cryptography, Server Name Indication, and Perfect Forward Secrecy New REST-based management API to build deployment and automation scripts, enabling easier devops for continuous software delivery and quicker problem resolution Enhanced Mobile and API security Easily transform between XML and JSON messages to quickly integrate System of Records data sources with Systems of Engagement interfaces Increased mobile and API security for protecting mission-critical transactions with JSON Encryption, JSON Signature, JSON Key, and JSON Token 7.2
  • 26. Agenda DataPower Gateway Overview DataPower Operations Dashboard Recent Releases What’s New in DataPower Gateway V7.5.2
  • 27. Enhanced Docker Image Optimized DataPower Gateway Docker image provides smaller footprint, enhanced security, & DevOps support 7.5.2 Released Sep, 2016 Available on Docker Hub Download & deploy DataPower Gateway directly from Docker Hub for enhanced productivity, see https://hub.docker.com/r/ibmcom/datapower/ New Modernized User Experience Modernized user experience to reduce complexity & allow quicker creation of gateway services, now available as the default UI No-Charge Edition for Developers Enhanced B2B Integration with AS4 Support for AS4 one-way message exchange pattern in the B2B module enables users to meet government & industry mandates Evaluate, demonstrate, develop and unit test DataPower Gateway configuration free for charge, see https://hub.docker.com/r/ibmcom/datapower/ Deploy Anywhere on Linux Install and run DataPower Gateway on Red Hat Enterprise Linux or Ubuntu in any environment including bare-metal, virtual & cloud platforms http://www.ibm.com/support/knowledgecenter/SS9H2Y_7.5.0/com.ibm.dp.doc/whats_new_7.5.2.html
  • 28. Enhanced Docker Image • Deploy DataPower Gateway anywhere using Docker containers on x86_64 including – Bare-metal physical servers – Virtual platforms: VMware, XenServer, Hyper-V, KVM, others – Cloud platforms: Amazon EC2, Microsoft Azure, IBM SoftLayer, Cloud Foundry, OpenShift, others • Smaller footprint: 250MB download size (from Docker Hub), less than 1GB running size, running in less than 10 seconds! • Enhanced security: Run without root privileges • DevOps support – Project and file-based management for deploying configuration from source control in a continuous delivery manner – Interactive command-line experience to quickly perform common gateway tasks – DevOps support to quickly bootstrap new installable images into a running container https://hub.docker.com/r/ibmcom/datapower/
  • 29. Deploy Anywhere using Docker containers • Deploy DataPower Gateway Docker container on any X86_64 Docker platform • Perform regular Docker tasks (build, pull, and run) on Docker supported hosts • Pull DataPower gateway images from Docker private registries • Higher density to run multiple concurrent DataPower gateway instances on a single machine 28
  • 30. Deploy Anywhere on Linux • Deploy DataPower Gateway anywhere on Red Hat Enterprise Linux or Ubuntu Linux natively on x86_64 including – Bare-metal physical servers – Virtual platforms: VMware, XenServer, Hyper-V, KVM, others – Cloud platforms: Amazon EC2, Microsoft Azure, IBM SoftLayer, Cloud Foundry, OpenShift, others Hardware Linux Operating System Hardware Linux Operating System Hypervisor DataPower Gateway Bare-metal Physical server Virtual or Cloud platform DataPower Gateway
  • 31. No-charge Edition for Development • DataPower Gateway available at no charge without IBM support for Developers – Evaluate, demonstrate, develop & unit test without cost – Restricted to development and unit testing, no expiry period – Download & deploy directly from Docker Hub! • Supports Docker for Mac and Docker for Windows • https://hub.docker.com/r/ibmcom/datapower/ • Develop and unit test gateway configuration using the no-charge download from Docker Hub and convert it to paid offerings for formal IBM support and deployment in test, staging, production via license activation from IBM Passport Advantage® without starting over with a new image DataPower Gateway Virtual Edition for Developers DataPower Gateway Virtual Edition for Non-Production DataPower Gateway Virtual Edition for Production DataPower Gateway for Developer (No Charge) Deployment in test, quality assurance, benchmarking, staging environments Deployment in production environments Low-cost, single-user license w/ IBM support
  • 32. Enhanced B2B Integration: AS4 One-way Message Exchange Pattern • B2B module now includes support for AS4 protocol One-way Message Exchange Pattern (MEP) – AS4 is an open standard for secure and payload-independent exchange of business-to- business documents by using Web Services – Supports one-way push and one-way pull message exchange pattern • AS4 protocol is a requirement due to government & industry mandates, common in Europe, Australia and New Zealand 31 INTERNET TRUSTED ZONEDMZ B2B Partner Gateway Trading Partners B2Bi AS4 One-way MEP
  • 33. New Modernized User Experience Modernized look and feel with updated theme and simplified navigation experience Current New
  • 34. Other enhancements (1 .. 2) 33 • Accelerate DevOps & increase platform resiliency – Flexibility to store cryptographic material in the local: directory, plus ability to securely store local user account and password in exported configuration, enable 100% self-contained configuration export for easier DevOps – Dynamically configure transaction timeouts in a gateway policy based on transactional context or environmental issues to optimize response times and resource usage – Dynamically specify caching policies on a per transaction basis in a gateway policy based on message content – View certificate details using RMI and SOAP management interface for easier certificate management – Quickly troubleshoot SSL related issues with enhanced SSL debugging using session key logging
  • 35. Other enhancements (2 .. 2) 34 • Enhanced security, control API workload – Fine-grained caching control of authentication and authorization failures to provide enhanced environment resiliency – New Quota Enforcement (ratelimit) API to identify and count the number of concurrent transactions that are simultaneously processed – Invoke Processing Policy Rules programmatically using GatewayScript – Convert any asynchronous callback pattern into a synchronous one with virtually no performance penalty with the new fibers module in GatewayScript – Authenticate requests using a SAML response assertion – Set cipher suites for SSH connections when acting as a SFTP client or SFTP server • Support for IBM Transformation Extender v9.0.1 • Support for IBM Security Access Manager v9.0.1
  • 36.  Known as the ‘bible’ of DataPower planning, implementation, and usage.  New content to cover new products/features, including 9006/7.2!  Volume 1 consists of DataPower Intro, Setup Guide, Common Use Cases, Deployment Checklist, new Preface and three invaluable new appendices for physical and virtual gateways.  Volume II is an in-depth coverage of DataPower networking topics, including VLAN, link aggregation, high availability.  Volume III is an in-depth coverage of DataPower development, including XSLT, EXSLT, JavaScript/GatewayScript, JSON, JSONiq, XQuery, binary/secondary data formats, and development tools.  Volume IV covers DataPower B2B processing and file transfer, including relevance of B2B in today’s API driven world. Available in softcover and e-book formats DataPower Handbook, Second Edition, Volume I, II, III, IV
  • 37. Where can I learn more about IBM DataPower Gateway? • Overview Video – youtube.com/watch?v=RqT3f_TmSMM • Product Page – ibm.com/software/products/en/datapower-gateway • Developer Center & Playground – developer.ibm.com/datapower/ • Product Documentation – ibm.com/support/knowledgecenter/SS9H2Y • Videos – youtube.com/channel/UCV2_-gdea5LM58S-E3WCqew • Slide Decks – http://slideshare.net/ibmdatapower • GitHub Repository – github.com/ibm-datapower/ • Twitter – twitter.com/IBMGateways • LinkedIn – Private user group ‘IBM DataPower Gateway’ – linkedin.com/groups?gid=4820454 • User Forum – ibm.biz/dpuserforum

Editor's Notes

  1. Organizations need a single solution, a security and integration gateway, that is capable of handling all types of application workloads with a policy-driven interface. This will promote consistent security, control & integration policy enforcement and provide end-to-end security for transactional workloads, regardless of the business channel that they are coming in through; reduce infrastructure complexity, lower operating costs, allow consistent enforcement of security & control policies while improving user experience and helping scale the backend IT infrastructure. An ideal security integration gateway for the multi-channel enterprise should be able to help secure, control, integrate and optimize workloads across all of these different business channels, and utilize a common policy-based interface. The gateway acts as the policy enforcement point (PEP) for all authentication and authorization decisions related to these combined workloads. But the gateway should do more than access management, it should provide a full range of other capabilities as well, such as helping protect against application-level threats, application acceleration, integration, and traffic management. By deploying a security and integration gateway, enterprises can decouple the enforcement of security and other policies from the underlying application and also provide functional offload of repeatable tasks to allow the backend applications and resources to more efficiently scale to meet the high-volume demands that inevitably occur with mobile and cloud traffic. Enterprise Boundaries Expanding Points of Control becoming more Strategic Data, Application and API Delivery Focus Consolidation of Edge(s) Functions User Experience Focus Developers are Omnipresent Security remains Paramount
  2. Physical Gateway 2U rack mount appliance using latest generation hardware platform Two base editions: Non-HSM and HSM (FIPS 140-2 Level 3 certified) Each software module is licensed separately Virtual Edition Three editions: Developer, Non-Production, Production Developer includes all software modules at no additional cost, except TIBCO EMS Non-Production includes all software modules at no additional cost, except TIBCO EMS & ISAM Proxy Production: Each software module is licensed separately All software modules are field upgradeable Hardware crypto accelerated operations are provided on the physical gateway appliance through built-in cryptography accelerator card
  3. Purpose-built hardware provides physical security Sealed, tamper-evident case No usable USB, VGA, other ports Intrusion detection switch Trusted Platform Module Encrypted flash drive FIPS 140-2 level 3 Hardware Security Module (option) for secure storage of private keys Hardened image provides platform security for physical & virtual gateways Single signed and encrypted gateway stack image by IBM No arbitrary software Optimized, embedded operating system High assurance, “locked-down” configuration Key materials are not exportable from the gateway *
  4. Amazon EC2, Microsoft Azure and IBM Softlayer CCI support for increased deployment flexibility on public cloud environments Enhanced hybrid cloud integration using Secure Gateway service to securely connect between IBM Bluemix applications and on-premise services secured using DataPower Gateways Stronger cloud and on-premise security with support for Elliptic Curve Cryptography (ECC), Server Name Indication (SNI), and Perfect Forward Secrecy (PFS) to protect against malicious protocol attacks Mobile security enhancements for securing access to REST services using JSON Web Encryption (JWE), JSON Web Signature (JWS), JSON Web Key (JWK) and JSON Web Token (JWT) Easier integration between Systems of Engagement and System of Record solutions with XML support using GatewayScript, JavaScript-based runtime. New management API based on a REST architecture for managing DataPower configuration, enabling easier DevOps. Increased transactional reliability with enhanced IMS database support Distributed caching support with IBM WebSphere eXtreme Scale 8.6+
  5. This slide shows how DataPower can provide a secure conduit between the public Amazon cloud services, and an on-premises system of record. There’s a number of interesting things going on here. A request might come in from a mobile device as a JSON request. It’ll pass through the load balancer to DataPower, which might decrypt the payload using elliptic curve cryptography, then possibly make a side call to the on-premises DataPower in order to obtain some information from the system of record. Once DataPower receives the data, it can bundle the payload together with the retrieved data and pass it to the backend service running in EC2. The response from the server will pass back through DataPower, which will then encrypt and sign the response and send it back to the client.
  6. So, to summarize this presentation, I showed you that DataPower can simplify your network infrastructure by being the sole gateway for multiple channels of traffic. With its new virtual and cloud form factors, you can leverage the same DataPower technology in virtualized and cloud environments. Before I conclude, I just want to bring to your attention this slide that shows where you can learn more about DataPower Gateways. [Thank you – any questions]
  7. Available today on Amazon: IBM WebSphere DataPower SOA Appliance Handbooks:2nd Edition: Volume I: DataPower Intro & Setup http://amzn.to/1IjrEBb2nd Edition Volume II: DataPower Networking http://amzn.to/1Ijrzh3 2nd Edition Volume III: DataPower Development http://amzn.to/1JJszf42nd Edition Volume IV: DataPower B2B and File Transfer http://amzn.to/1O6HNuCAmazon.com worldwide & Amazon Kindle KindleMatch – buy hardcopy & get ebook for US$2.99 Kinde Unlimited, Kindle lending