July 2009 – Rich Sharples' Weblog

Migrating to JBoss

Posted on July 27, 2009February 16, 2015 by Rich Sharples

An increasing amount of the bigger deals I see at JBoss come at the expense of our competitors like Oracle and IBM. Technology decisions that were made 5, 6 or 7 years ago are being reviewed and JBoss is the clear alternative

If you are looking to migrate from Weblogic or Websphere we have a growing list of migration success stories including :

KLM / Air France expect to save 11 million Euros by moving from Websphere and AIX to Red Hat and JBoss

Education Testing Services (ETS) reduced costs and boosted competitiveness by moving from Websphere and Solaris to Red Hat and JBoss.

Avis Rental Cars reduced TCO and increased flexibility by moving from Solaris and Weblogic to JBoss and Red Hat

JBoss EAP 4.3 Achieves Security Certification

Posted on July 6, 2009February 16, 2015 by Rich Sharples

A few weeks back JBoss Enterprise App. Platform 4.3 achieved Common Criteria Certification at Evaluation Assurance Level (EAL) 2+ – here’s the press release and here’s the evaluators updated page.

Common Criteria Evaluation is an internationally recognized standard that defines a framework for computer systems users to specify security requirements; for vendors to implement them and for third-party evaluators to test them. The Evaluation process ensures that this is all carried out in a consistent, formalized and standard way.

The Evaluation Assurance Level (EAL) describes the “depth and rigour” of the evaluation not necessarily the security hardness. Though products certified at Level 7 (the highest) are likely to be deployed more demanding and secure environments than a product certified at Level 1 (the lowest). EAL 2+ means the products have been evaluated in collaboration with the vendor (eg. to provide development, design and test documentation).

What this means is that customers who care about security (who doesn’t ?) can be assured that JBoss Enterprise App. Platform 4.3 will meet commonly accepted, best practice security requirements. Even outside military and government use, who use Common Criteria as a benchmark, this evaluation should demonstrate Red Hat’s commitment to security. It’s a long and fairly involved process and the costs aren’t insignificant.

This is the first successful evaluation for a JBoss product but the JBoss Data Services Platform is currently in process and we’re already planning for a more stringent evaluation (higher EAL) for JBoss EAP 5.x.

JBoss Open Choice, Part 1 – JBoss Enterprise Web Server

Posted on July 4, 2009February 16, 2015 by Rich Sharples

It’s July 4th and we have an extended weekend in the US which is a good enough excuse to catch up on some blogging; at least until the Strawberry Margaritas start flowing. At Java One this year we announced an initiative called Open Choice which I blogged about previously. Fundamentally Open Choice is about broadening our footprint and giving customers what they want and moves us closer to supporting the whole applications infrastructure tier rather than just parts.

Open Choice isn’t some big, far-into-the-future vision thing it’s something we’re doing now. This year. Product-wise it consists of four offerings (where previously there was only one) and as we release them I’ll give you my perspective on why they’re important. Unfortunately I’m already a little behind – we’ve already delivered two products out of four and the third is in Alpha moving quickly towards Beta.

So let me use this post to talk about JBoss EWS 1.0 (Enterprise Web Server). EWS is basically a packaged, certified and tested bundle of Tomcat and Apache HTTP – the industry’s dominant Java web-container and Web Server respectively. We round out the bundle with mod_jk, APR and most importantly a management agent for JBoss ON. We currently support and certify on Red Hat Enterprise Linux and Solaris with Windows coming next.

Providing JBoss ON management support is pretty important – it gives customer the ability to manage the application and web stacks easily and consistently using the same toolset. If you want to learn more – there is a free Webinar on July 14th at 2pm Eastern – more here.

The rationale for supporting Tomcat is that it is absolutely the dominant Java web-container and has become an important part of the corporate IT fabric. Tomcat has been popular for years but in the last two or three I’ve seen it evolve into a much more strategic platform for IT. Many customer I speak with have defined two distinct tiers of functionality – essentially a full Java EE stack and a lighter-weight Tomcat platform. By supporting both the dominant Java EE implementation (JBoss EAP) and Tomcat, combined with the ability to manage from a single tool – I think we can do a much better job of satisfying a much broader customer base than our competition. Here’s an (albeit unscientific) chart from a recent survey that demonstrates this well :

It’s also interesting to note that from this survey JBoss’ deployment share is more than Websphere and Weblogic combined.

OK, so JBoss EWS 1.0 is out and we have customers deployed or deploying some pretty large, strategic apps. but I’m already thinking about the next version (code named Cavalier). Some initial ideas for Cavalier are :

increasing platform support to include AIX, HP-UX and maybe other Linux flavours;
alternative Connection Pool implementations for Tomcat;
looking at a more recent version of Apache HTTPD;
possibly supporting mod_cluster.
soft-appliances to better support virtualized hosts.

Any other thoughts are always welcome – leave a comment or get in touch directly.

Month: July 2009