Loading ...
nielsdebr...
Technology & Engineering
854
0
Try Now
Log In
Pricing
on enabling the adaptive enterprise Our Hard Facts Oracle Platinum Partner Microsoft Gold Partner 280 Employees Privately-Owned Corporation Cross-Industry Non-Proprietary Founded 1994 33 Mio. Euro Revenue in 2018 > Your Partner for Digital Change Individual IT Solutions from a Singl About me § Niels de Bruijn, Business Unit Manager APEX § Born in 1977, married, three daughters, living in Ratingen § Responsible for all Low-Code activity in the company § Knowledge Portal: apex.mt-ag.com § Track record with APEX since its inception § Oracle APEX 18 Developer Certified Professional § DOAG e.V. - Director Development Community § DOAG e.V. - Initiator & Conference Chair of the 3-day confere § ODTUG - Part of APEX Content Committee for Kscope MT Lab News: Low Code • APEX metadata driven User Acceptance Tests • Execute on many different test engines (Selenium, browserstack.com, Puppeteer, etc.) • Demo Video: https://bit.ly/lowcodetesting • Contacts: • Kai Donato & Fabian Neureiter + 1. Get APEX metadata 2. Cre bit.ly/apexrelease APEX archit Pre-setup APEX environment nee Why build yourself? Get Cloudy! (< 10 m For everybody that don‘t want to setup the APEX environ (and can live with the fact that their data is residing outside th Options of hosting services: § apex.oracle.com - free, but limitations like 25 MB storage, no § Oracle Cloud Free Tier § apex.oracle.com/autonomous § 2 databases with each effective 12 GB of uncompressed user d § You need to implement a backup plan yourself § No activity within 7 days? Your instance will be stopped! § Excellent blog post series by Dimitri Gielis: http://bit.ly/apexclou § maxapex.com, enciva.com, revion.com, skillbuilders.com, AMI Installing yourself? Warm-up o Laptop Installation (+/- 2 hours) Browser Li n Client 1. Install Oracle Database 18c Express Edition* 2. Install the latest APEX version in the PDB 3. Load the static files of APEX in the PDB 4. Configure RMAN & test backup/recover process *) - Great blog post from Johannes Ahrends: https://www.carajandb.com/en/blog/2018/ora - No official support from Oracle, but there will be a major release each year, so you coul Warmed up? Let’s take it to Minimal Server Installation (+/- 8 hours) Browser Li n Server Oracle REST Data Services Tomcat Client LAN 1. Get your CentOS server with root access (buy HW yourself o 2. Convert CentOS to Oracle Linux (see: https://linux.oracle.com 3. Install Oracle RDBMS, APEX, Tomcat, configure & deploy OR 4. Configure RMAN & test backup/recover process 5. Request and install SSL certificate in Tomcat HTTPS Recommended Server Installation (+/- 9 Browser Li n Data Oracle REST Data Services Tomcat Linux/Windows Server Apache Web Server, NGINX or IIS Client LAN 1. Get your CentOS server with root access (buy HW yourself 2. Convert CentOS to Oracle Linux (see: https://linux.oracle.co 3. Install Oracle RDBMS, APEX, Tomcat, configure & deploy OR 4. Configure RMAN & test backup/recover process 5. Request and install SSL certificate on the proxy server AJP HTTPS JDBC Single Sign-On for my APEX apps? § Security § Productivity Adding Single Sign-On using Kerberos (+ Browser Li n Data Oracle REST Data Services Tomcat Linux/Windows Server Apache Web Server or IIS Client LAN Apache: mod_auth_kerb Windows Domain Controller with AD 1. Internal APEX environment with Windows AD accounts? Th 2. Step-by-step guide on http://knowledgebase.mt-ag.com/q/ HTTPS AJP JDBC External acce Use cases to differentiat • Give Active Directory your internal APEX en to use VPN) • Give non-AD users con APEX environment Adding External Access for AD users (ba Browser Li n Data Oracle REST Data Services Tomcat Linux/Windows Server Apache Web Server or IIS Internal Client LAN Windows Domain Controller with AD Browser DMZ Apache: mod_auth_kerb External Client ADFS Proxy Apache Web Server* SAMLv2: mod_auth_mellon * Alt Logon External acce Use cases to differentiat • Give Active Directory u internal APEX environm VPN) • Give non-AD users co internal APEX environ Adding External Access (based on SAML Browser Li n Data Oracle REST Data Services Tomcat Linux/Windows Server Apache Web Server or IIS Internal Client LAN Windows Domain Controller with AD Apache Web Server* Browser External Client DMZ * Alt Apache: mod_auth_kerb SAMLv2: mod_auth_mellon ORDS APEX 18.1+ OAuth2 / OpenID Identity Provider Browser Use „Generic OAuth2 Provider“ or „OpenID“ as Authentication Provider Adding External Access (based on OAut ID Provide Rem • W Ha • Al au m SAML2 versus OAuth2 SAML2: • Mostly supported by Identity Providers • Able to transport Kerberos ticket OAuth2: • More browser redirects • Also useful if explicit authorization by the end user is required (ie • Built-in with APEX 18.1+ Step-by-Step Guides for Kerberos, SAMLv2, OAuth2: http://knowledgebase.mt-ag.com/q/sso Adding High Availability Storage (RAID) Browser Kubernetes Cluster RDBMS In RDBMS Instance Liste Listener Pod Service „Web“ DB Node 1 DB Node 2 Oracle RAC (mirror this for disaster recovery) Clusterware load balancer: ie. DNS, NGINX, FabioLB/Consul*, H Client Device Pod Service „Tom Docker Image Web Server Docker Im ORDS on To *) http://krisrice.io/2019-04-17-ORDS-Consul-Fabio Linux distribution used: CoreOS Ingress (ie. NGINX/Traefik) – exposes Services Pod Docker Image Web Server Pod Docker Image Web Server load balancer: ie. DNS, NGINX, FabioLB/Consul*, H Master 1 Master 2 Some remarks § No clue what Kubernetes is? § Watch the 8 minute Children‘s Guide to Kubernetes § https://www.youtube.com/watch?v=4ht22ReBjno § Or read the docs § https://kubernetes.io/docs/concepts/ § https://kubernetes.io/docs/tutorials/kubernetes-basics/ § Implementing Kubernetes & RAC, especially when on-premise § Evaluate cloud solutions!
