1. A New Architecture for Web Services at CERN Alberto Di Meglio, Francois Fluckiger, Monica Marinucci, Per Hagen, Alberto Pace http://cern.ch/web

2. A New Architecture for Web Services at CERN – CHEP, February 2000 Part 1 of 2 u The new Web Namespace u Review of new Services

3. A New Architecture for Web Services at CERN – CHEP, February 2000 Today’s namespace u http://www.cern.ch/… u http://wwwinfo.cern.ch/… u http://network.cern.ch/… u http://home.cern.ch/… u http://nicewww.cern.ch/… u http://wwwas.cern.ch/… u …

4. A New Architecture for Web Services at CERN – CHEP, February 2000 Is there a problem ?

5. A New Architecture for Web Services at CERN – CHEP, February 2000 Is there a problem ?

6. A New Architecture for Web Services at CERN – CHEP, February 2000 From the MAIL architecture First.last@cern.chuser@host.cern.ch Generic addressPhysical address Global namespacedomain Physical Mail Server name Translation Service Mailbox name

7. A New Architecture for Web Services at CERN – CHEP, February 2000 The same for the WEB http://cern.ch/SiteNamehttp://host.cern.ch/path Generic addressPhysical address Global namespacedomain Physical Web Server name Translation / Redirection Service Site Name

8. A New Architecture for Web Services at CERN – CHEP, February 2000 alberto.pace@cern.chhttp://cern.ch/alberto.pace Complete Duality Mail - Web it-div@cern.chhttp://cern.ch/it-div Mail address and mailing listsWeb address aleph-exp@cern.chhttp://cern.ch/aleph-exp Organisational Units Individuals addresses and personal files

9. A New Architecture for Web Services at CERN – CHEP, February 2000 u Mail u “Mail Composing” tools are unable to find the physical server name from the generic address first.last@cern.ch u given a user’s mailbox “xxxx”, the host “xxxx.mailbox.cern.ch” represents the server hosting the xxxx mailbox u Web u “Web Authoring” tools are unable to find the physical server name from the generic address http://cern.ch/xxxx u given a sitename “xxxx”, the host “xxxx.web.cern.ch” represents the server hosting the xxxx site … more duality … xxxx@xxxx.mailbox.cern.ch http://xxxx.web.cern.ch/xxxx

10. A New Architecture for Web Services at CERN – CHEP, February 2000 Not limited to Central Servers u MAIL: “Generic E-mail Addresses” (xxxx@cern.ch) can point to locally managed mail servers or even to servers outside CERN u WEB: “Generic URL Addresses” (http://cern.ch/xxx) can point to locally managed web servers or even to servers outside CERN

11. A New Architecture for Web Services at CERN – CHEP, February 2000 What about www.cern.ch ? u http://www.cern.ch and http://cern.ch are equivalent u Users preferring the www.cern.ch syntax can use it, the leading www. being optional.

12. A New Architecture for Web Services at CERN – CHEP, February 2000 Will we still have broken links ? u The new web redirector supports site aliasing u Multiple / different names can be mapped to the same physical site u We can have: u Old names pointing to new names http://cern.ch/cn-div -> http://cern.ch/it-div u Descriptive names pointing to real names http://cern.ch/it.division -> http://cern.ch/it-div http://cern.ch/Alberto.Pace -> http://cern.ch/pace u Site nicknames, easier to type http://cern.ch/it -> http://cern.ch/it-div u Existing hosts can be ‘taken over’ by the central redirector u http://mysite.cern.ch/ -> http://cern.ch/mysite

13. A New Architecture for Web Services at CERN – CHEP, February 2000 100 % compatible with the existing infrastructure u Existing servers integrates smoothly in the namespace u No broken links / No HTML to modify u The Web namespace becomes independent from the physical server layout and it allows the evolution of the existing infrastructure

14. A New Architecture for Web Services at CERN – CHEP, February 2000 DEMO u You can access the CERN Scuba club site using any of the following URLs: u http://cern.ch/subaqua u http://www.cern.ch/subaqua u http://web.cern.ch/subaqua u http://subaqua.cern.ch u http://subaqua.web.cern.ch u http://subaqua.web.cern.ch/subaqua u As in the browser, the prefix http:// and the domain name cern.ch can be omitted, a CERN user can simply type “subaqua” to access the site

15. A New Architecture for Web Services at CERN – CHEP, February 2000 Part 2 of 2 u The new Web Namespace u Review of new Services

16. A New Architecture for Web Services at CERN – CHEP, February 2000 With the new web namespace … u We are no longer bound to the “all in one server” architecture. u We can differentiate Server OS, Web Server software, File Storage and support multiple solutions if necessary. u We can go beyond simple static HTML authoring and open a wide set of new services … u (as described in the next slides)

17. A New Architecture for Web Services at CERN – CHEP, February 2000 Site Hosting u Site hosting means offering disk space to store web files and then make them available via http u Based on a pool of (cheap) servers to host web sites of customer who do not want to maintain their own server u Load balanced using the web.cern.ch subdomain u Every web site has one (and only one) owner responsible for the site content who can manage or delegate the site security

18. A New Architecture for Web Services at CERN – CHEP, February 2000 Site Hosting u Sites can be physically stored on u Central Web servers u AFS u NICE u (locally managed servers) u Flat Namespace (part of the CERN web namespace) u http://(www.)cern.ch/sitename u Subsites are possible but managed by owners of upper sites u http://cern.ch/mainsite/subsite1 subsite1 is managed by the owner of mainsite

19. A New Architecture for Web Services at CERN – CHEP, February 2000 Authoring interfaces u Authoring interfaces (sites on the Central Web Servers) u HTTP (PUT method) http://sitename.web.cern.ch/sitename u FTP ftp://sitename.web.cern.ch/sitename ftp://user@sitename.web.cern.ch/sitename u OSE = Microsoft Office Server Extensions See http://www.microsoft.com/office/ork u DAV = Distributed Authoring and Versioning (Foreseen) See http://www.w3c.org

20. A New Architecture for Web Services at CERN – CHEP, February 2000 DEMO

21. What’s the difference ?

22. A New Architecture for Web Services at CERN – CHEP, February 2000 Site Registration Services u Automated Site Registration and Creation Service u Users can create/delete web sites or registrations themselves u A moderator authority supervises all actions u Users are authenticated on AFS or NICE and site ownership is always checked

23. A New Architecture for Web Services at CERN – CHEP, February 2000 Support for Authoring Tools u Site management & page editing tools u Microsoft FrontPage u Macromedia Dreamweaver u Page editing tools u Netscape Composer u Other Microsoft Office Applications (Word, Excel, PowerPoint, Access, …)

24. A New Architecture for Web Services at CERN – CHEP, February 2000 More Services u Forms u All sites in the central web servers are form-ready u Users can create electronic forms themselves u Databases u All central web pages can be connected to databases u Databases can be local “Access” files or remote Oracle u Read and Write access u Search services u Both client-side (infoseek) and server-side indexing u Complementary services

25. A New Architecture for Web Services at CERN – CHEP, February 2000 Searching and Indexing u Two distinct methods: u The Infoseek server indexes all ‘reachable’ documents. u Indexes also locally manages servers u CERN global searches possible u It takes 3-4 days before a page gets revisited u Server-side indexing u Instantaneous index update u Very fast queries for subsearches u Extended searches possible (hit count, client addresses, what’s new, …) u The Infoseek and the server-side indexing are complementary services

26. A New Architecture for Web Services at CERN – CHEP, February 2000 More services (2) u Access Control u ACL, IP address restrictions, external authentication, password protected documents, … u Secure connections (HTTPS, SSL) u Available on all central sites by default u Cascading Styles Sheets (CSS) and Themes u We have now the necessary tools to make available Corporate / Divisional look and feel policies u Document Source Control u For sites authored by multiple persons

27. A New Architecture for Web Services at CERN – CHEP, February 2000 Access Control & Security u Web Site Owners can manage access to central sites u Access Control List u Login forms and name username/password pairs to authenticate unregistered users u IP addresses restrictions u Password-protected document

28. A New Architecture for Web Services at CERN – CHEP, February 2000 Secure connections and SSL u Every Web page on the central Web server can be accessed using HTTP *or* HTTPS u Web authors can choose which protocol to use

29. A New Architecture for Web Services at CERN – CHEP, February 2000 CSS and Themes u Cascading Style Sheets are supported (normal HTML feature) u FrontPage Themes are supported for FrontPage authors u Same functionality but does not require a CSS- compatible browser u We have now the necessary tools to make available Corporate / Divisional look and feel policies

30. A New Architecture for Web Services at CERN – CHEP, February 2000 Source Control u Every Site hosted on the central server can activate source control for sites authored by many persons simultaneously u Document source control available only to Microsoft Office users only

31. A New Architecture for Web Services at CERN – CHEP, February 2000 CGI-Interface and Scripting u Every site on the central servers has a cgi-bin directory u Standard CGI-Interface fully supported u Scripting u Supported interpreters: *.PL (Perl) and *.ASP (Active Server Pages). u Supported languages for ASP: Vbscript, Jscript and PerlScript.

32. A New Architecture for Web Services at CERN – CHEP, February 2000 Conclusion u The new namespace gives us independence from the physical infrastructure and allows us to move forward u An important set of pending requirements for the web services will be addressed with the new architecture u For more information …

33. A New Architecture for Web Services at CERN – CHEP, February 2000 http://cern.ch/web