Introduction to the new mainfame © Copyright IBM Corp., All rights reserved. Chapter 14a: z/OS HTTP Server

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Objectives After reading this chapter, you will be able to: List the three server modes Explain static and dynamic Web pages Understand how to deploy a Web application on z/OS

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Key terms in this chapter CGI dynamic FRCA HTTP J2EE LDAP Plugin SSL static

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Introduction to Web applications on z/OS: Past: Many applications are tied to z/OS (CICS, DB2) New developments made on other platforms Now: Integrate both on z/OS

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. HTTP Server - history

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. The 3 basic functions serving out a web application Embedded http listener Configuration search to match on a directive client

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Client – Server based model

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. z/OS HTTP Server Server modes: Stand-alone server Scalable server Multiple servers Static Web pages Dynamic Web pages /usr/lpp/internet/samples/config => obrowse httpd.conf

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Starting the HTTP Server SHELL httpd –p 8080 JCL Procedure SYS1.PROCLIB(IMWHTTPD)

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. HTTP SERVER Security Classes The Web server uses the following z/OS UNIX System Authorization Facility (SAF) classes: BPX.DAEMON The Web server usually uses this facility for daemon programs that need to validate user passwords and then change the MVS identity and z/OS UNIX UID and GID of a spawned address space. BPX.SERVER The Web server usually uses this facility for its programs that use POSIX threads and need to associate a Surrogate MVS identity with each thread in their address space. BPX.SMF The Web server usually uses this facility to validate read access to the its user ID for writing SMF records.

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. HTTP server capabilities Security functions: Thread level security HTTPS/SSL support LDAP support Certificate authentication Proxy support Configure SSL if you are planning: Conducting business on the Internet (WAN) using sensitive or personal information Make sensitive or private information available to certified business partners or exchange critical data on-line.

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. HTTP server capabilities (continued) File caching: HTTP server caching HFS files (HFSDSP01-04) (Data spaces) HTTP server caching z/OS data sets Proxy Caching Fast Response Cache Accelerator (FRCA)

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Dynamic Pages 1)Linked Programs and Plug-ins - link external pgms to web-pages w/o access to server 2) JavaScript: Local (browser-based) Interactively - Firefox, NetScape and Internet Explorer 3)CGI: Remote (server-based) Interactivity * - Common Gateway Interface (defacto standard) - OPEN MARKETS FAST_cgi 4)Java: Local/remote programming - Greatest degree of interactivity *ServerSide Includes allows you to insert information into CGI and HTML This has considerations for performance and security

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Dynamic Web Pages Common Gateway Interface (CGI) 1.Create 2.Execute 3.Destroy

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Open markets FAST CGI Combines the best aspects of CGI and Vendor APIs Processes are persistent-they are reused to handle multiple request Easy to migrate from CGI and has backward compatibility Process isolation – buggy Fcgi can not crash or corrupt core server Architecture independence having the ability to run apps remotely over TCP/IP connection (single or multi-threaded) /usr/lpp/internet/samples/config => obrowse lgw_fcgi.conf

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Dynamic Web Pages Fast Common Gateway Interface (FastCGI) FCGI Application FCGI Application

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Dynamic Web Pages - Interaction with WebSphere WebSphere plug-in, same address space JSP

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Dynamic Web Pages - Interaction with WebSphere Web container inside HTTP Server, separate EJB container

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Dynamic Web Pages - Interaction with WebSphere Separate J2EE server with both Web container and EJB container

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Relationship between HTTP Server’s Configuration files

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. WAS on z/OS Virtual Hosts – hosting three different host domains Domain Name Server

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved.

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved.

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Start JCL Procedures for Queue Manager / Queue Server

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Logging Server Access Log - all server activity FRCA Access Log (Fast response Cache Accelerator) - used to log only FRCA entries Proxy and Cache Access Log - Proxy requests for files - Proxy server’s cache Agent Log / Referer Log - who accessed what web page - originating web page linked from Server Error Log - host error log CGI Error Log - error output (stderr) from cgi programs

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Cookie A message given to a Web browser by a Web server The message is in a text file - Session Cookie (transient cookie) - Persistent Cookie (permanent or stored cookie)

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. HTTP ServerApplication Server 1. Can only work with HTTP/S protocolCan work with many different protocols (HTTP/S, IIOP/RMI, RMI, SOAP-XML) inclusive of messaging transport 2. Can hold conversation state between request/response via cookie (CGI or Servlet) Can hold conversation (session) state between request/reply. Can have affinity to a particular application server. 3. Used for mostly serving static HTML a Used for highly dynamic content 4. No transactionality functionality (no commit/rollback) Provides for transactionality on one phase, two phase, last participant intra-inter LPAR (Commit/Rollback) 5. Does not take advantage of J2EE b functionality and compliancy Takes full advantage of J2EE functionality and compliancy 6. Can be used as a proxy server (bastion host)Is not implemented as a proxy server (nor bastion host) 7. All application runtime attributes need to be explicitly written within the application (security, availability, scalability, transactionality) The Application Server runtime “container” includes implicitly all runtime attributes. The application does not need to have its own code be written for these characteristics. 8. Does not manage its heap storage in all servers for object clean up c Manages its heap storage utilization in all servers via a daemon task (garbage collector) 9. Can utilized PlugIn functionality to extend capability having limited logic functionality (pre- written extension programs, i.e. minor security support ) Program extension functionality is user-written as needed (Java) or acquired through ISV software. Has optimal logic functionality. 10. Support connector technology to EIS systems via servlets Supports connector technology to EIS Systems via servlets and EJBs 11. Usually resides within a DMZ within a non- trusted network Usually resides behind a DMZ within a trusted network. 12. Not used as a hub for Service Oriented Architecture Is used as a hub for Service Oriented Architecture a. CGI and DHTML are means to serve dynamic content prior to use of an App. Server b. A CGI can be written in Java, but can not provide full features of App Server. c. Only one HTTP serves that shares the proxy cache can participate in garbage collection Server Characteristics 13. SMF 103 records SMF 120 records

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved.

Introduction to the new mainframe © Copyright IBM Corp., All rights reserved. Summary In this chapter, you learned about: The three server modes Static and dynamic Web pages HTTP server modes Dynamic web serving Sample z/OS HTTP Server