geOrchestra, a free, modular and secure SDI
1 like779 views
GeOrchestra is a free, modular, and secure spatial data infrastructure (SDI) that enhances geodata search and access while minimizing data duplication and maintenance for administrators. It comprises various interoperable modules, and its development has evolved since 2008, with deployments in multiple regions, including France and Bolivia. The project emphasizes community involvement and continuous improvement in software architecture, scaling, and monitoring, with future plans for enhanced user interfaces and streamlined installation processes.
geOrchestra, a free, modular and secure SDI
- 1. geOrchestra a free, modular and secure SDI François Van Der Biest Florent Gravin
- 2. 2/26www.camptocamp.com / What does SDI stand for ? Store Share Discover View Compose Download Extract Describe Spatial Data Infrastructure
- 3. 3/26www.camptocamp.com / What are the benefits ? ■ For users: ○ Eases geodata search & access ○ Should work with all OGC client software ■ For administrators: ○ INSPIRE constraint → opportunity ○ No data duplication ○ Less maintenance work
- 4. 4/26www.camptocamp.com / What is geOrchestra ? Security Proxy CAS GeoServer GeoNetwork Other modules http Java software based on Spring
- 5. 5/26www.camptocamp.com / What is geOrchestra ? ■ Free as in speech – GPL ■ Modular – more than 10 available « modules » ■ Interoperable – OGC services and REST apis ■ Secure – https support, continuous delivery, ... Demo → http://sdi.georchestra.org/
- 6. 6/26www.camptocamp.com / Where do we come from ? ■ 2008 – developing Brittany's own SDI ■ 2009 – trying to create something more generic ■ 2010 – first production deployment ■ 2011 – Aquitaine (French region) ■ 2012 – Bolivia plurinational state SDI ■ 2013 – Picardie, Alsace, Auvergne regions ■ 2014 – Cities : Rennes, Le Puy, Vienne ... + Research labs & Industry at the same time
- 7. 7/26www.camptocamp.com / Community Very diverse : nation, regions, cities, research, companies
- 8. 8/26www.camptocamp.com / Community … and a strong presence in Bolivia Mostly in France ... … but also around the world
- 9. 9/26www.camptocamp.com / Community ■ IRC freenode #georchestra ■ Mailing lists ○ georchestra@googlegroups.com ○ georchestra-dev@googlegroups.com ■ Source & Issues ○ on github.com/georchestra ■ « geOcom » annual community meeting ○ 3rd edition this year
- 11. 11/26www.camptocamp.com / How it works... ■ CAS authenticates the user ■ Security proxy : ○ keeps the user session ○ routes all requests to the modules ... ○ … adding « security headers » ■ Modules : ○ read the security headers ○ grant or deny access to resources accordingly
- 12. 12/26www.camptocamp.com / Modules ■ We're standing on the shoulders of giants ○ GeoNetwork 2 & 3 ○ GeoServer (latest), optionally with GeoFence ○ CAS - Single Sign On ■ Advanced geodata viewer & editor ■ Extractor – allows to download geodata extracts ■ Users & groups management console ■ Analytics – monitors OGC services usage
- 16. 16/26www.camptocamp.com / geOrchestra in production ■ Hardware & OSes ■ Middleware & provisioning ■ Scaling ■ Monitoring the systems
- 17. 17/26www.camptocamp.com / Hardware & OS ■ Small to medium sized deployments ○ Dedicated hardware - 2 to 32 CPU – 8 to 128 Gb RAM ○ OpenStack instances (demo / dev) ■ OSes : ○ runtime tested on Debian 6 to 8 ○ known to work on RedHat / CentOS boxes
- 18. 18/26www.camptocamp.com / Middleware & provisioning ■ Middleware : ○ Apache / Nginx ○ Tomcat ○ PostGreSQL ○ OpenLDAP ■ Provisioning ○ Puppet ○ Ansible
- 19. 19/26www.camptocamp.com / Scaling ■ Modular architecture means it's easier to scale ■ Scaling the GeoServer component ■ Security-proxy scaling is currently being investigated
- 20. 20/26www.camptocamp.com / Monitoring ■ Nagios … Icinga 2 – checks the base system (disks, processes, ...) ■ M/Monit – monitors and automatically restarts tomcat instances in case of failure ■ GeoHealthCheck – checks the OGC services availability and response time ■ Collectd … grafana – collects and displays metrics ■ ELK – stores and analyses logs ■ SAAS solutions: ○ Pingdom – checks the OGC services availability and response time, and alerts ○ Librato – displays metrics ○ statuspage.io – integrates well with pingdom to provide a status page for your services
- 21. 21/26www.camptocamp.com / What's next in geOrchestra? ■ New viewer based on OpenLayers 3 & AngularJS ■ Custom Modules tailored for specific needs ■ Debian / RedHat packages ■ Streamlining the installation process with puppet ○ from bare OS to OGC services in 5 minutes ! ■ Docker : from dev to production ? ■ Scaling all the components ○ Auto-scaling would be really nice to have
- 22. 22/26www.camptocamp.com / What we learned... With SDIs, infrastructure is key ! ○ Configuration management ○ High availability & performance architectures ○ Backup ○ Scaling ○ Monitoring
- 24. 24/26www.camptocamp.com / Camptocamp - Our service offer
- 25. 25/26www.camptocamp.com / Camptocamp - Our vision of Open Source