Enabling Web GIS. Dal Hunter Jeff Shaner

Transcription

1 Enabling Web GIS Dal Hunter Jeff Shaner

2 Enabling Web GIS In Your Infrastructure Agenda Quick Overview Web GIS Deployment Server GIS Deployment Security and Identity Management Web GIS Operations

3 Web GIS Concepts Enabling Web GIS Enabling GIS Everywhere Desktop Web Device Simple Integrated Open portal Server Online Content and Services Available in the Cloud and On-Premises

4 Web GIS Concepts Why Central hub for your GIS assets Solution when - Additional security requirements - No public cloud option Allows for - Enterprise integration (e.g., security) COTS product since 10.2 Extension to ArcGIS for Server Included with Standard and Advanced

5 Web GIS Concepts Capabilities Browse, search, and discover your GIS assets Self-service mapping Content creation and management Sharing and collaboration Data hosting and mapping Visualization, Collection, and Analysis Ready to use maps and layers Portal

6 Web GIS Concepts Security Integrates with Your Enterprise Security Infrastructure Authentication - Supports web tier authentication, including Windows Authentication & PKI - Supports SSO to your ArcGIS Servers (federated servers) Web SSO with SAML Users, Roles, and Groups Users Built-in Enterprise Active Directory LDAP Roles Anonymous User Publisher Administrator 10.3 Custom roles Groups Built-in 10.3 supports Enterprise groups

7 Web GIS Concepts Users and Roles Use Esri Maps for Apps, Collector, Operations Dashboard, and Explorer

8 Web GIS Concepts Groups Groups have membership Organize by: - Theme or initiative - Common and supportive content - Functional department/structure - Based on organization s business units - Projects - Specific projects or tasks - Ad-hoc - Prototyping, non-permanent/temp projects, staging 10.3 supports Enterprise Groups Foundation data

9 Web GIS Concepts Basemaps and Utility Services Important part of Portal s resources Can be hosted: - Online (by Esri) - On-premises (by you) - Combination Basemaps Utility services

10 Web GIS Concepts Portal as a destination Must have Administrator privileges Name Banner Logo Featured content Background image Description

11 Demo

12 Web GIS Deployment

13 Web GIS Deployment Overview On-premises Public Cloud Hybrid

14 Web GIS Deployment On-Premises Intranet Portal Portal for ArcGIS ArcGIS Server Basemaps, Geocoding, etc.

15 Web GIS Deployment Public Cloud Internet Users Internet Users Internet Users Cloud GIS Server (e.g. Amazon) Esri Managed Cloud Services Online Online Online Intranet Intranet Intranet ArcGIS Online ArcGIS Online w/ Cloud GIS Server(s) ArcGIS Online w/ Esri Managed Cloud Svcs

16 Web GIS Deployment Hybrid Online Intranet Intranet Portal Hybrid Pattern #1 Hybrid Pattern #2 Fast Start & No Additional Software Likely Lower TCO Some Metadata Stored in Cloud Some Functionality Loss Issues with non-cors Browsers More Control All Data & Metadata On-Premises More Security Integration Options Additional Software to Manage Architecture Becomes More Complex

17 Web GIS Deployment Example Investors (external) Custom App Employees (Internal) GeoServices Portal Esri Managed Cloud Services Internal GIS Server(s)

18 Web GIS Deployment Internal & External Web GIS External Users Internal Users Online Hosted Services Basemaps, Geocoding, etc. Portal Internal GIS Server(s)

19 Web GIS Deployment Multiple Portals portal portal portal portal One Portal Many Portals?

20 Web GIS Deployment Multiple Web GIS Deployments Department A Users Department B Users Department C Users portal portal portal

21 Web GIS Deployment Multiple Web GIS Deployments Department A Users Department B Users Department C Users portal portal portal Shared Services

22 Web GIS Deployment Multiple Web GIS Deployments Enterprise or Public Users portal Department A Users Department B Users Department C Users portal portal portal Shared Services

23 Web GIS Deployment The Web GIS Information Model Organization Group Item User Application Web Scene Web Map Web Layer Service Dataset

24 Server GIS Deployment

25 ArcGIS Desktop Apps APIs & SDKs http: http: Portal http: Maps Scenes Analytics Feature Layers & Tables Scene Layers Tile Layers Image Layers Analytics Services Data

26 Server GIS Deployment Everything On One Machine Wow, this is easy!

27 Server GIS Deployment Workload Separation LB ArcGIS Server All Workloads Visualization Analysis Imagery Caching

28 Server GIS Deployment Load Balancing ArcGIS Web Adaptor 3 rd Party Load Balancer Provided by Esri Works w/ ArcGIS Server sites (not silos) Discovers new machines dynamically Typically a single point of failure Can t load balance Portal for ArcGIS Not provided by Esri (e.g. F5, CSM, NGINX) Works w/ ArcGIS Server sites & silos Doesn t discover new machines dynamically Typically already fault tolerant Can load balance Portal for ArcGIS

29 Server GIS Deployment Workload Separation LB LB LB LB ArcGIS Server ArcGIS Server ArcGIS Server ArcGIS Server Visualization Analysis Imagery Caching Additional Sites May Include Real-time & Data Management

30 Server GIS Deployment Workload Separation can evolve LB LB LB LB ArcGIS Server ArcGIS Server ArcGIS Server ArcGIS Server Visualization & Imagery Visualization Analysis & Data Management Imagery Initial Deployment Complete GIS

31 Server GIS Deployment Server & Portal Patterns Server w/ Single Web Adaptor Server w/ 3 rd Party LB Server w/ Multiple Web Adaptors & 3 rd Party LB Portal w/ 3 rd Party LB Portal w/ Multiple Web Adaptors & 3 rd Party LB

32 Server GIS Deployment The Role of Portal & Web Layers Portal GeoServices Geodata Web Layer Service Web Layer Service Feature Class Web Layer Service

33 Server GIS Deployment The Role of Portal & Web Layers Portal GeoServices Geodata Web Layer Web Layer Service Feature Class Web Layer

34 Server GIS Deployment The Role of Portal & Web Layers Portal GeoServices Geodata Active Wells Proposed Wells Wells Wells Wells by Status

35 Server GIS Deployment Publishing Methods By Reference By Value Server Connects to Data by reference portal Copies Data by value ArcMap Enterprise GDB ArcMap ArcGIS Pro Maps for Office Portal Website Gedatabases Spreadsheets Shapefiles

36 Server GIS Deployment Publishing Patterns Server Pattern App Web GIS Pattern App Services Web Maps & Layers Services portal

37 Security and Identity

38 Security Terminology Built-in Users Active Directory SSO Privileges NTLM Portal-tier Authentication FedRAMP & FISMA

39 Security Key Concepts Role Privilege Authentication Authorization (capabilities) Organization User Identity Authorization (content) Group Item

40 Security Online Authentication Patterns Online SAML IDP Online User Store Portal-tier Auth Built-in Users SAML Auth Enterprise Users

41 Security Portal & Server Authentication Patterns Portal SAML IDP Portal Web Adaptor User Store User Store Portal User Store Portal Portal-tier Auth Built-in Users SAML Auth Enterprise Users Web-tier Auth Enterprise Users Portal-tier Auth Enterprise Users Web Adaptor Server User Store Server User Store Server-tier Auth Built-in Users Server-tier Auth Enterprise Users Server Web-tier Auth Enterprise Users

42 Security Federating Portal & Server App 1. Login 2. Login (again) Portal for ArcGIS ArcGIS Server User Store (Active Directory, LDAP)

43 Security Federating Portal & Server App 1. Login 2. Single Sign On (SSO) Portal for ArcGIS federation ArcGIS Server User Store (Active Directory, LDAP) Portal manages users, groups & roles Every service has an item in Portal Server inherits from Portal

44 Web GIS Operations

45 Web GIS Operations System Management System Monitoring Operations Planning System Design Deployment Requirements Development Design System Testing

46 Web GIS Operations System Monitoring Network Hardware Web Server ArcGIS Server Geodatabase RDBMS

47 Web GIS Operations Managing Tiered Environments Development Staging Production Portal Caching Visualization

48 Web GIS Operations Key Takeaways System management never stops, especially with Web GIS Good monitoring practices are key to business continuity & growth Managing tiered environments is becoming complex, we don t have all the answers

49