4.6.1 Web Services Development Platform TCPTunnel. This is a utility that listens to the TCP/IP port, say, port 8080 for SOAP messages. It comes with Apache SOAP Axis, which you can download from http://xml.apache.org/axis . SOAP Debugger. An example is XMLSpy, which is an XML editing utility with some SOAP debugging capability. You can download a trial copy from http://www.xmlspy.com . 4.6.2 Web Services Deployment Platform Unit Testing. An example is jTest, which is a Java-based unit testing tool. Stress/Load Testing. An example is Mercury Interactive's LoadRunner, which is an application stress test tool. Refer to http://www.mercuryinteractive.com for details. Regression Testing. An example is Rationale Test Studio, which provides regression testing capability. SOAP Testing/Performance Testing. Examples are Empirix's FirstAct (commercial product that simulates end- user SOAP client's testing; refer to http://www.empirix.com ), PushtoTest (a SOAP testing utility; refer to http://www.pushtotest.com ), and SOAPTest (a public utility for generating stress testing for SOAP clients ; refer to http://www.parasoft.com/jsp/products/ home.jsp?product=SOAP ). Web Services Management/Network Services. These vendors provide routing of Web Services for different versioning and also network management tools for remote Web Services. Examples are http://www.flamenconetworks.com/ and http://www.talkingblocks.com/. 4.6.3 Infrastructure Tools Version Management. Version management tools keep track of different versions of your SOAP applications. Examples are CVS and Rational ClearCase. Release Control. Release control tools help when deploying, by upgrade or fallback, a specific version of your SOAP applications to the target platform. An example is Rational ClearCase. Application Server Analyzer. Application server analyzer helps analyzing the performance and different components (for example, states or cookies) of the J2EE application server. Examples are WebSphere Web Site Analyzer from Altaworks ( http://www.altaworks.com ) and Omegamon XE from Candle ( http://www.candle.com ). Systems Management Tools. These tools provide infrastructure support and health check for the platform. Examples are BMC Patrol and OpenView. Performance Tuning. There are performance tuning methods and tools for Unix, NT platform, vendor-specific database tuning tools, and Java application tuning tools. Middleware Monitoring Tools. If middleware is used, these tools help monitor the middleware components such as the queue management. These are vendor-specific middleware administration control and monitoring tools. 4.6.4 Security Infrastructure Certificate Management. If digital certificates are used for generating digital signatures, then a certificate management server will be essential. An example is Sun ONE certificate manager server. Hardware Encryption. Hardware encryption tools may include SSL accelerator for HTTPS connectivity and Hardware Security Module (HSM) for storing the public and private keys. There are various vendor-specific products for hardware encryption and HSM. Policy Server. A policy server that integrates different directory servers and provides Single Sign-on is essential. An example is Netegrity's Siteminder. Directory Server. A directory server provides authentication and entitlement services for applications. It is also a core component for network identity management. An example is Sun ONE Directory Server and Identity Server. 4.6.5 Web Services Open Standards Major Web Services security standards are SOAP-SEC (SOAP security using XML digital signature), XML Key Management Services (XKMS), Security Access Mark-up Language (SAML), and XML Access Control Mark-up Language (XACML). Please refer to Chapter 3, Web Services Technology Overview for an introduction and Chapter 7, Web Services Security for details. 4.6.6 Product Architecture J2EE Application Server Platform. These are typically application servers, and they usually come with many useful development tools. Examples are Sun ONE Application Server, IBM WebSphere, and Microsoft .NET Server. Edge Products. These products provide peripheral utilities that enhance performance (for example, caching product) and scalability (for example, load balancing). An example is Progress eXcelon XIS (aka XML/SOAP Cache). | 