HP Operations Orchestration

For the Windows and Linux

Software Version: 10.10
Architecture Guide
Document Release Date: May 2014
Software Release Date: May 2014
Legal Notices
Warranty
The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be
construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
The information contained herein is subject to change without notice.
Restricted Rights Legend
Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer
Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor' s standard commercial
license.
Copyright Notice
Copyright 2005-2014 Hewlett-Packard Development Company, L.P.
Trademark Notices
Adobe is a trademark of Adobe Systems Incorporated.
This product includes an interface of the ' zlib' general purpose compression library, which is Copyright 1995-2002 Jean-loup Gailly and Mark Adler.
AMD and the AMD Arrow symbol are trademarks of Advanced Micro Devices, Inc.
Google and Google Maps are trademarks of Google Inc.
Intel, Itanium, Pentium, and Intel Xeon are trademarks of Intel Corporation in the U.S. and other countries.
Java is a registered trademark of Oracle and/or its affiliates.
Microsoft, Windows, Windows NT, Windows XP, and Windows Vista are U.S. registered trademarks of Microsoft Corporation.
Oracle is a registered trademark of Oracle Corporation and/or its affiliates.
UNIX is a registered trademark of The Open Group.
Documentation Updates
The title page of this document contains the following identifying information:
l Software Version number, which indicates the software version.
l Document Release Date, which changes each time the document is updated.
l Software Release Date, which indicates the release date of this version of the software.
To check for recent updates or to verify that you are using the most recent edition of a document, go to: http://h20230.www2.hp.com/selfsolve/manuals
This site requires that you register for an HP Passport and sign in. To register for an HP Passport ID, go to: http://h20229.www2.hp.com/passport-registration.html
Or click the Newusers - please register link on the HP Passport login page.
You will also receive updated or new editions if you subscribe to the appropriate product support service. Contact your HP sales representative for details.
Support
Visit the HP Software Support Online web site at: http://www.hp.com/go/hpsoftwaresupport
This web site provides contact information and details about the products, services, and support that HP Software offers.
HP Software online support provides customer self-solve capabilities. It provides a fast and efficient way to access interactive technical support tools needed to manage
your business. As a valued support customer, you can benefit by using the support web site to:
l Search for knowledge documents of interest
l Submit and track support cases and enhancement requests
l Download software patches
l Manage support contracts
l Look up HP support contacts
l Review information about available services
l Enter into discussions with other software customers
l Research and register for software training
Most of the support areas require that you register as an HP Passport user and sign in. Many also require a support contract. To register for an HP Passport ID, go to:
http://h20229.www2.hp.com/passport-registration.html
To find more information about access levels, go to:
http://h20230.www2.hp.com/new_access_levels.jsp
HP Software Solutions Nowaccesses the HPSW Solution and Integration Portal Web site. This site enables you to explore HP Product Solutions to meet your
business needs, includes a full list of Integrations between HP Products, as well as a listing of ITIL Processes. The URL for this Web site is
http://h20230.www2.hp.com/sc/solutions/index.jsp
HP Operations Orchestration (10.10 ) Page 2 of 11
Contents
Contents 3
System Architecture 4
Operations Orchestration Components 4
Simple Deployment 4
Simple Cluster 4
Scalability 5
Adding a RAS 5
RAS High Availability 6
Using a Load Balancer in HP OODeployment 8
Load Balancer Requirements 8
Load Balancer Security 8
Configuring the Load Balancer and HP OOCentrals for SSL/TLS Offloading 9
Architecture Guide
Contents
Page 3 of 11
HP Operations Orchestration (10.10 )
System Architecture
Operations Orchestration Components
HP OO Studio is a standalone authoring programused for creating, modifying, and testing flows.
HP OO Central is the run time environment of HP OO. It is used for running flows, monitoring the
various runs, and generating reports.
A RAS is a remote action server, containing a worker and a remote protocol for connecting with
Central.
For additional information on HP OOcomponents, see the HP OOConcepts Guide.
Simple Deployment
The basic HP OOdeployment consist of a single Central instance, as shown in the image below.
Simple Cluster
In order to prevent the Central being the single point of failure, it is recommended to have a high-
availability deployment. You can set a cluster of multiple Central nodes, the simplest of which
contains two Central nodes connected to the same database schema. As shown in the image
below, a load balancer can be set before the Central cluster to expose a single URL to the end
users. Exposing a single URL can also be done with DNS load balancing.
Architecture Guide
SystemArchitecture
Page 4 of 11
HP Operations Orchestration (10.10 )
Change from HP OO 9.x: Unlike in previous versions, there is no need for external clustering
software, nor is there a requirement for a shared file system.
Scalability
Hp OOoffers horizontal scaling for increasing execution throughput.
You can add more Central instances to the HP OOcluster. HP OOsupports live scalability, which
means that no downtime is required when adding a Central node. Simply install an additional
Central instance and point it to the existing database schema.
For more information, see the HP OO10 Benchmark document, available on HPLN at
https://hpln.hp.com/node/17617/attachment.
Adding a RAS
A RAS instance is an optional HP OOcomponent. A RAS can be used if HP OOneeds to run flows
in a network segment that is not reachable fromthe HP OOCentral nodes. In such case, you can
Architecture Guide
SystemArchitecture
Page 5 of 11
HP Operations Orchestration (10.10 )
install a RAS instance in the target network segment and it will pull the required flows fromthe
Central and run themlocally.
Another use case where a RAS can be used is when the executed flow requires specific binaries on
the local machine. There is no need to install the binaries on each HP OOnode. It is enough to
install themon a host where a RAS is installed, and configure the flows (or specific steps) to run on
this RAS. This can be achieved by leveraging the worker group functionality.
For more information on worker groups, see the HP OOConcepts Guide.
You can attach RAS instances to HP OOCentral or a cluster of HP OOCentral nodes. The image
below shows how RAS3 and RAS4 communicate with the HP OOCentral cluster. Note that RAS4
is located behind a firewall.
RAS High Availability
When a RAS is deployed in a network segment to manage the machines in that segment, you do
not have to make do with a single instance. To achieve high availability, you can deploy an
additional RAS instance in the same segment. Make sure to associate it with the same worker
group. This is illustrated in the image below:
Architecture Guide
SystemArchitecture
Page 6 of 11
HP Operations Orchestration (10.10 )
Change from HP OO 9.x: There is no need for an additional load balancer between the RAS
cluster and Central (or central cluster). Because both RAS 4 and RAS 5 belong to the same
worker group, they share the load of executing flows\steps that are designated for that worker
group and provide high availability.
Architecture Guide
SystemArchitecture
Page 7 of 11
HP Operations Orchestration (10.10 )
Using a Load Balancer in HP OO Deployment
For information about how to install a load balancer, see the documentation provided by your load
balancer vendor.
Load Balancer Requirements
We recommend to configure the load balancer with two separate virtual IPs for the user interface
and for RASes:
l For the HP OOuser interface and customer portals, the virtual IP should use a sticky session
policy. The sticky session ensures that all subsequent requests will be sent to the server that
handled the first login request. This means that users will only need to log in to the HP OO
interface once.
l For RASes, the virtual IP should use a round robin policy, to distribute the load across the
different servers.
Note: If you have a different configuration that satisfies these requirements, it is okay to use it.
For example, if you have a load balancer that supports JSESSION, you can use the
JSESSIONID parameter to set up a single virtual IP with a sticky session policy for all
sources. Since RAS requests are stateless (no JSESSIONID), this will provide a round robin
policy for RASes.
Central uses the following URL to check which server is live: http://<IP>/oo/hello.html
Load Balancer Security
In a hardened high availability environment, the load balancer should be configured for SSL/TLS.
For information about how to configure SSL/TLS, see "Server and Client Certificate Authentication"
in the HP OOSystemConfiguration and Hardening Guide.
Communication between the HP OOinterface and the load balancer can use HTTPS. We
recommend to install the SSL/TLS certificate on the load balancer so that this is the termination
point for the encryption. Beyond the load balancer, communication will continue in HTTP, at a faster
rate.
Architecture Guide
Using a Load Balancer in HP OODeployment
Page 8 of 11
HP Operations Orchestration (10.10 )
Configuring the Load Balancer and HP OO Centrals
for SSL/TLS Offloading
If a load balancer is used to access the Central servers, it is recommended to configure the load
balancer for SSL/TLS offloading.
1. Edit the Tomcat server.xml file, to include the following, for example:
<Engine name="Catalina" defaultHost= "localhost" >
. . .
<Valve className="org.apache.catalina.valves.RemoteIpValve"protocolHeader
="X-Forwarded-Proto" />
. . .
</Engine>
2. Configure the load balancer to add a new header to all the clients requests.
The header name is configurable and should match the Tomcat configuration specified above.
In this example, the name is "X-Forwarded-Proto".
In the F5 load balancer, the configuration would look like this:
when HTTP_REQUEST {
Architecture Guide
Using a Load Balancer in HP OODeployment
Page 9 of 11
HP Operations Orchestration (10.10 )
HTTP::header insert "X-Forwarded-Proto" "https";
}
Architecture Guide
Using a Load Balancer in HP OODeployment
Page 10 of 11
HP Operations Orchestration (10.10 )