Unicenter Desktop and Server Management Architectural Options -Latest Revision 10/27/05

Domain Management: Components © 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies.

3 Domain Management Component Overview

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 4 The MDB -Common data storage for all CA r11 applications -Initial support – Ingres only -Near future – Microsoft SQL Server

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 5 The Domain Manager -Provide MDB connection information to other DSM components -Broker requests to update/retrieve data for other components -Long running services for scheduling and managing DSM operations -Manage communications with Scalability Servers

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 6 Domain Manager Communications -Must be able to initiate communications with the MDB using the configured database port to update and retrieve data

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 7 The Engine -Must be able to accept communications initiated by the Domain Manager the via CAM to… -Provide updated Engine status -Receive command/control requests

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 8 The Engine -Initiates communications with the Domain Manager to request database connection information via CAM.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 9 The Engine -Initiates connection with the MDB via database port to update/retrieve data.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 10 The Engine -By default, an Engine instance referred to as “System Engine” is installed. -“System Engine” is typically assigned management tasks (i.e., group evaluation, report execution). -In most cases, installation of additional Engine instances is recommended to handle collection and replication tasks. -In slides that follow, understand that there is no difference in the requirements or capabilities of “System Engine” and “Engine” - only in the tasks that would normally be assigned.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 11 Scalability Server -Must be able to accept communications initiated by the Domain Manager and the Engine via CAM to… -Manage agent operations -Send status/inventory updated

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 12 Scalability Server -Must be able to initiate communications with the Domain Manager via CAM to... -Register new agents -Send agent operation updates

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 13 DSM Explorer -Must be able to initiate communications with the Domain Manager via CAM to... -Request data for objects displayed -Submit command/control instructions

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 14 Reporter -Must be able to initiate communications with the Domain Manager via CAM to... -Request MDB connection information -Submit command/control instructions to schedule Engine tasks to execute reports

Domain Management: Scaling © 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies.

16 Simple, small environment…. All Domain Management components may be implemented on a single, adequately sized system in a simple, small environment… System Specification: CPU:Dual 2 GHz RAM:2 GB Disk:100 GB free Agents (same LAN): Up to 2000

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 17 Simple, small-to-medium environment -…a more powerful single system for a -simple, small to medium environment System Specification: CPU:Quad 2 GHz RAM:4 GB Disk:200 GB free Agents (same LAN): 2K-5K

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 18 Distributed Environment -More commonly, components will be distributed not only for performance and scalability reasons… System Specification: MDB CPU:Dual 2 GHz RAM:2 GB Disk:150 GB free Domain Mgr: CPU:Dual 2 GHz RAM:2GB Disk:25 GB free Scalability Server: CPU:Single 2 GHz RAM:2 GB Disk:25 GB free Agents/Scalability Server (same LAN): up to 2K Agents (total): up to 5K

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 19 Network Challenges …but to address a variety of network topology challenges as well (more on this later).

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 20 But the basics still apply Domain Mgr.and Engines should be electronically close to the MDB. Scalability Servers should be electronically close to the agents

Enterprise Management: Components © 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies.

22 Enterprise Management Component Overview Enterprise components are similar in name, function and communication requirements to Domain Management components.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 23 The Engine -Like Domain, by default, an Engine instance referred to as “System Engine” is installed. -The “System Engine” is typically assigned management tasks (i.e., group evaluation, report execution). -In most cases, installation of additional Engine instances is recommended to handle collection and replication tasks. -In slides that follow, understand that there is no difference in the requirements or capabilities of “System Engine” and “Engine” - only in the tasks that would normally be assigned. -Note, however, that in r11, it is an Engine in the linked Domain that is assigned the actual replication task, NOT an Enterprise Engine

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 24 Scalability Servers -Scalability Servers (used to communicate with agents) are a Domain component only and…

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 25 Scalability Servers …additional lines of communication between Domains and the Enterprise are required to support data replication and reporting.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 26 Enterprise Manager -Enterprise Manager must be able to initiate communications with the Domain Managers via CAM to link the Domains and assign the replication task to a Domain Engine.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 27 Domain Engine Domain Engine assigned the replication task must be able to initiate communications with the Enterprise Manager via CAM to obtain connection information for the Enterprise MDB.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 28 Domain Engine -Domain Engine assigned the replication task must also be able to access the Enterprise MDB via the database port to transfer data.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 29 DSM Explorer -Enterprise DSM Explorer must be able to initiate communications with the Domain Manager via CAM to drill down.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 30 Reporter -Enterprise Reporter must be able to access the Domain Manager via CAM to obtain connection information to...

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 31 Reporter -...establish a connection to the linked Domain MDB to retrieve data that was not replicated.

Enterprise Management: Scaling © 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies.

33 Small Environment – Average Activity -Hardware requirements will vary based on number of assets and typical activity. In a small environment with average activity, all components may be installed on a single system. System Specification: CPU:Dual 2 GHz RAM:2 GB Disk:150 GB free Agents: 2K-5K Activity: Average

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 34 Small Environment – Above Average Activity In a small environment with above average activity or medium environment with average activity, all components may be installed on a larger single system… System Specification: CPU:Dual 2 HT RAM:4 GB Disk:200 GB free Agents: 2K-5K Activity: Above Average Agents: 5K-10K Activity: Average

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 35 Distributed Option …or components may be distributed across a number of smaller systems. System Specification: CPU:Dual 2 GHz RAM:2 GB Disk:100 GB free Agents: 2K-5K Activity: Above Average Agents: 5K-10K Activity: Average

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 36 Additional Engines As the number of agents and activity increases - the number of systems and related specifications increases. Additional Engine systems are added as needed to distribute workload. System Specifications: MDB and Manager CPU:Quad 2 GHz RAM:4 GB Disk:150 GB free Additional Engines: CPU:Single 2 GHz RAM:1-2 GB Disk:50 GB free Agents: 15K-20K Activity: Above Average Agents: 25K-30K Activity: Average

Network Challenges © 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies.

38 Network Challenges -Overcoming network topology issues has been simplified with DSM r11. Remote SiteLocal LANDMZ

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 39 Communication Types Basically, there are only two types of communication…

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 40 Component to DB -Via default or configured CAM port

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 41 Component to Component -Via default or configured CAM port

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 42 Required Ports -“Opening” required ports (a.k.a. “connectivity” ) is only half the battle, however. Remote SiteLocal LANDMZ

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 43 Firewall and NAT Firewalls not only block port communication but also conceal the identity of the resources they protect using Network Address Translation (NAT). Remote Site Local LAN DMZ

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 44 Keep Target System “Visible” Not only must access rules allow connectivity to the target system but the target system must be “visible” from the system initiating the communication. Remote Site Local LAN DMZ

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 45 Visibility Example -“Visible” does not necessarily mean the IP address for the target can be resolved and reached by the source system directly.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 46 Common Visibility Issues -Determine before becoming concerned with establishing connectivity (“opening ports”) -Common Issues: -Target identifiers not unique -Target identifiers cannot be resolved -Target identifiers change without notice

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 47 Limited Number of Challenges Given the interaction of DSM components and basic architectural design principles the number of challenges is fairly limited.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 48 Domain Level Challenge -Since Engines should be electronically close to the MDB, the principle challenge at the Domain level will be Domain Manager communication to/from the Scalability Server.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 49 Resolution: Scalability Server -Since Domain Manager communication to/from the Scalability Server requires only CAM, it is a matter of... - Ensuring the Scalability Server host is “visible” from the Domain Manager and vice versa. - Connectivity is possible by ensuring communications via the default/configured CAM port(s) and protocol is not blocked.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 50 Resolution: DSM Explorer -At the Domain level, the DSM Explorer must communicate with the Domain Manager via CAM. Since it is conceivable that not all instances will be installed on the same LAN... - Ensure the Domain Manager host is “visible”. - Ensure Connectivity is possible via the default or configured CAM port(s) and that protocol is not blocked.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 51 Resolution: Reporter -At the Domain level the Reporter must communicate with the Domain Manager via CAM and with the MDB via the database port. It is possible that not all instances will be installed on the same LAN... -Ensure the Domain Manager host is “visible”. -Ensure the MDB host is “visible”. -Ensure Connectivity is possible via the default/configured CAM port(s) and protocol is not blocked. -Ensure connectivity is possible via the default/configured database port.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 52 Enterprise Architecture Challenge -In an Enterprise architecture, the Enterprise Manager must be able to communicate with Domain Managers to link Domains and assign the replication task to a Domain Engine. -Ensure the Domain Manager host is “visible”. -Ensure Connectivity is possible via the default/configured CAM port(s) and protocol is not blocked to the Enterprise Manager.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 53 Domain Engine -Also in an Enterprise architecture, the Domain Engine assigned the replication task must be able to initiate communications with the Enterprise Manager via CAM to obtain connection information for the Enterprise MDB. -Ensure the Enterprise Manager host is “visible”. -Ensure the default/configured CAM port(s) are not blocked to the Enterprise host.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 54. Domain Engine to Enterprise MDB -Also in an Enterprise architecture, the Domain Engine assigned the replication task must be able to access with the Enterprise MDB. -Ensure the Enterprise MDB host is “visible”. -Ensure connectivity via the default/configured database port can be established to the Enterprise MDB

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 55 DSM Explorer to Enterprise Manager -At the Enterprise level, the DSM Explorer must communicate with the Enterprise Manager and each linked Domain Manager via CAM. Since it is conceivable that not all instances will be installed on the same LAN... -Ensure the Enterprise Manager host and linked Domain Manager hosts are “visible”. -Ensure Connectivity is possible via the default/configured CAM port(s) and protocol is not blocked.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 56 Reporter to Domain Manager -Reporter at the Enterprise level must communicate with the linked Domain Managers via CAM. -Ensure the linked Domain Manager hosts are “visible”. -Ensure connectivity is possible via the default/configured CAM port(s) and protocol is not blocked to the linked Domain Managers.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 57 Reporter to Domain MDB -Reporter at the Enterprise level must be able to access linked Domain MDBs via the database port. -Ensure the Domain MDB host is “visible”. -Ensure connectivity is possible via the default/configured database port to the Enterprise MDB.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 58 DSM r11 Network Challenge (not resolved) At the current time a solution for support of remote sites with multiple agents where cost/benefit would not justify the implementation of a Scalability Server is being researched. It has been suggested that a “CAM Relay” node could be configured and used much like a DTS “Hop Node” had been used in the past. The suggested resolution, however, has only been discussed in theory to date.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 59 Guidelines presented were in many cases based on results of Stress Lab Testing (visit for details). The next few slides touch on only a small subset of the testing conducted. Understand that because many of the items in the test plan would require installation of thousands of systems and agents, a simulation tool known as “Load Tester” was employed. “Load Tester” generates the CAM messages that agents would produces at a very high, configurable rate and “bursting” them onto the network in large batches. Details on the rates used for individual should be documented with the results posted. DSM r11 From the Stress Lab

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 60 Migration of data from existing 4.0 Domains to their newly implemented DSM r11 counterparts will certainly be at the top of the “to do list” at client sites. To gauge performance with realistic data, a replica of the GIS North American UAM Domain containing approximately 16,000 units was used as the source. DSM r11 From the Stress Lab: Migration

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 61 Results for the initial UAM inventory migration: Number of Units:15, 783 Time to Complete:3 days, 2.5 hours Average Time/Unit: seconds DSM r11 From the Stress Lab: Migration System Specifications: DSM r11 CPU:HT Quad 3 GHz RAM:8 GB Disk:200 GB Free UAM 4.0 CPU:Single 3 GHz RAM:2 GB Disk:200 GB Free

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 62 Results for the initial DSM replication: Number of Units:5,000 Time to Complete:20 hours, 34 minutes Average Time/Unit:14.81 seconds DSM r11 From the Stress Lab: Replication System Specifications: CPU:HT Quad 3 GHz RAM:8 GB Disk:200 GB Free