ibm-zconnect-mule.pdf

All contents © MuleSoft, LLC
Deﬁne Engagement Success
March 2022
Nikola Fschiev
nikola.feschiev@mulesoft.com

All contents © MuleSoft, LLC
Three pillars to support success
References: MuleSoft Catalyst Methodology

@tony_papa42 Anthony Papageorgiou
Challenge
“Modern developers demand APIs, yet companies
struggle to provide API access to core business
services on IBM Z”

z/OS Connect EE
Seamless OpenAPI
integration to and from
IBM Z subsystems
Leveraging world
renowned IBM Z security
A robust solution that you
can depend on
Try it today: ibm.biz/ibmztrial

z/OS Connect
Enterprise Edition
is pluggable and
extensible allowing
3rd Party Service
Providers to expand
the list of z/OS
assets you can
expose as APIs
Need Data? Use
Data Virtualization
Manager (DVM)
Have rigid 3270
applications? Use
Host Access
Transformation
Services (HATS)
*WebSphere Optimized Local Adapters
z/OS Connect EE capabilities

Unlock the value of your IBM Z
subsystems as truly RESTful APIs to
and from IBM Z.
Call APIs from IBM Z apps to enhance
them with the power of cloud native
functions.
Create consumable APIs in minutes to
make IBM Z apps and data central to
your hybrid cloud strategy.
Key Capabilities
• Rapidly respond
to business
requirements
which demand
access to core
assets on IBM Z.
• Reduce
development
costs to API
enable IBM Z
assets.
Benefits
• Quick & easy
• Secure & scale
• Manage &
control
z/OS Connect EE value and benfits

Benefits: Quick & easy
• Point and click development of Swagger® -
defined APIs in minutes, not months.
• Removes dependency on Z platform
development skills.
• Rapid development of APIs using modern
DevOps processes.

Benefits: Secure & scale
• Continue to leverage the renowned security
of IBM Z.
• Uses modern technologies such as Java Web
Tokens (JWT).
• Remove risks associated with moving data.
• Can easily support enterprise-grade
APIs workloads.

Benefits: Manage & control
• All IBM Z APIs in a single location.
• With a consistent approach to monitoring and
audit across the platform.
• Integrations with OMEGAMON for JVM, IBM Z
APM Connect and IBM Common Data
Provider.

IBM z/OS Connect Enterprise Edition
11
Continuous Delivery Updates
See the change history for details ibm.biz/zosconnect-kc-changehistory
Runtime V3: 3.0.0 ---> 3.0.37…
z/OS Connect EE V3.0 launched in June 2017
<--- Monthly open betas --->
API Toolkit V3: 3.0 ---> 3.0.8.6…
Open beta
CD Drop
Server
Tooling
API Toolkit: ---> 3.2.8.6…
Aqua 3.2 / Eclipse 4.8
Aqua 3.1 / Eclipse 4.6

12
Continuous Delivery highlights thru 2020
October 2020
V3.0.38
IMB Large Data
Structure
Enhancements
See the change history for details: ibm.biz/zosconnect-kc-changehistory

Db2 service creation
13
Import details directly from the Db2 service manager
Delivered!
3.0.29
ibm.com/support/knowledgecenter/SS4SVW_3.0.0/designing/db2_import_db2_service.html

IMS DB service creation
14
Expose and consume date fields – structured example
Delivered!
3.0.31
ibm.com/support/knowledgecenter/SS4SVW_3.0.0/designing/imsdb_service.html

MQ service creation
15
Define MQ service projects using Service Interfaces
Delivered!
3.0.32

OpenAPI 2.0-compliant dates
16
Expose and consume date fields using standard OpenAPI representation
Delivered!
3.0.34
date-fullyear = 4DIGIT
date-month = 2DIGIT ; 01-12
date-mday = 2DIGIT ; 01-28, 01-29, 01-30, 01-31 based on
; month/year
full-date = date-fullyear "-" date-month "-" date-mday

17
Expose and consume date fields – numeric example
Source code representation:
JSON schema representation:
User data example:
Delivered!
3.0.34
ibm.com/support/knowledgecenter/SS4SVW_3.0.0/designing/service_fields.html - service_fields__EFW_date

18
Expose and consume date fields – character example
User data example:
Delivered!
3.0.34

19
Expose and consume date fields – structured example
User data example:
Delivered!
3.0.34

Dynamic CICS URIMAP for API requester
Isolate separate outbound workload paths and avoid server affinities
20
CICS application can override default URIMAP if required, choosing an
alternative z/OS Connect EE server instance
ibm.com/support/knowledgecenter/SS4SVW_3.0.0/facilitating/urimap_parm.html
Delivered!
3.0.37

21
Continuous Delivery highlights thru 2020
See the change history for details: ibm.biz/zosconnect-kc-changehistory
October 2020
V3.0.38
IMB Large Data
Structure
Enhancements

/poc_to_prod
Tips for moving from first project to production

/connections
23
Tip 1: Plan your connection reference names carefully

Common scenario - connect to CICS
Topology
Connection to CICS is configured in server.xml.
ibm.biz/zosconnect-scenarios
An IPIC connection must be configured in CICS.

Sample CICS catalog API
25
z/OS LPAR
z/OS Connect EE V3
HTTPS/
JSON
GET /items?startItemRef
GET /items/{itemRef}
POST /orders
Services
API
inquireCatalog
inquireSingle
placeOrder
GET /items?startItemRef=<value>
GET /items/{itemRef}
POST /orders + (JSON with item reference and quantity)
HTTP Verb conveys the method
against the resources; i.e., POST
is for create order, GET is for
retrieving information about
items in the catalog
URI conveys the resource
to be acted upon; i.e.,
item reference
The JSON body carries the
specific data for the action
(verb) against the resource
(URI)
DFH0XCMN
DFH0XVDS
VSAM
CICS

Top Tip!
Think carefully about your connection reference names
Mortgage Service archive file
Connection reference
DevCICS
z/OS Connect EE Development Server
Service archive file
DevCICS IPIC Connection
id=DevCICS
CICS
Development Region
Loans Service archive file
DevCICS
DevCICS
DevCICS
Credit Service archive file
DevCICS

Top Tip!
DON’T DO THIS!
DevCICS
DevCICS CICS IPIC connection
id=DevCICS
CICS
Development Region
DevCICS
z/OS Connect EE Test Server
DevCICS
CICS IPIC connection
id=TestCICS1
CICS
Test Region 1
id=TestCICS2
CICS
Test Region 2
z/OS Connect EE Production Server
DevCICS
id=ProdCICS1
CICS
Prod Region 1
id=ProdCICS2
CICS
Prod Region 2
CICS
Prod Region 3
id=ProdCICS3
DevCICS
DevCICS
DevCICS
DevCICS
DevCICS
DevCICS
DevCICS
X
X

Top Tip!
DO THIS! Use logical rather than physical names
MortgageCICS
CICS
Development Region
LoansCICS
id=MortgageCICS
id=LoansCICS
id=CreditCICS
CreditCICS
MortgageCICS
LoansCICS
CreditCICS

Top Tip!
MortgageCICS
LoansCICS
z/OS Connect EE Test Server
id=MortgageCICS
id=LoansCICS
id=CreditCICS
CreditCICS
MortgageCICS
LoansCICS
CreditCICS
CICS
Test Region 1
CICS
Test Region 2

Top Tip!
MortgageCICS
LoansCICS
z/OS Connect EE Production Server
id=MortgageCICS
id=LoansCICS
id=CreditCICS
CreditCICS
MortgageCICS
LoansCICS
CreditCICS
CICS
Prod Region 1
CICS
Prod Region 2
CICS
Prod Region 3

/devops
31
Tip 2: z/OS Connect EE is designed for modern DevOps

32
DevOps considerations
Automate the development and deployment of services, APIs, and API requesters for continuous integration and delivery.
• The build toolkit supports the generation of service archives and API archives from projects created in the z/OS Connect EE API toolkit
• The build toolkit also supports the use of properties files to generate API requester archives
• Run the build toolkit from a build script to generate the archive files
• Deploy of services, APIs and API requesters to z/OS Connect EE servers
ibm.biz/zosconnect-devops
{plan + code + test} {build} {deploy} {test} {release + operate + monitor}

33
DevOps Pipeline using z/OS Connect EE
ibm.biz/zosconnect-devops

Using Git + Jenkins + Artifactory with z/OS Connect EE
34
Exclude specific files from Git using a .gitignore file

35
Using UrbanCode Deploy with z/OS Connect EE
Example implementation

36
z/OS Connect EE integration with Zowe
z/OS Connect EE and Zowe API Catalog – Administration API

37
z/OS Connect EE integration with Zowe
z/OS Connect EE Zowe CLI – Working with APIs
github.com/zosconnect/zowe-cli-zosconnect-plugin

Testing of APIs
38
Manual and automated testing

/versioning
39
Tip 3: Think about versioning upfront, it’s part of the API design!

API and service versioning example
40

Top Tip!
An API versioning strategy for the enterprise will have been decided by the
enterprise API management team in your organization
GO TALK TO THEM!
Consider z/OS Connect EE API and service versioning from the beginning.
It’s difficult to change it later
41

/security
42
Tip 4: Try not to get overwhelmed by the number of security options

High level security options available in z/OS Connect EE
43
http://ibm.biz/zosconnect-security

API provider security flow
44
1. Client credentials
2. Identity passed on connection
3. Authenticate the client
4. Map authenticated identity to a user ID
5. Authorize the authenticated user ID
6. Audit the request
7. Secure connection to System of Record
8. Use asserted identity in System of Record

API requester security flow
45
1. z/OS program can provide user ID & password
2. Send request on secure connection
3. Authenticate the credentials
4. Authorize the authenticated user ID
5. Audit the request
6. Obtain token from authorization server
7. Secure connection to API provider with security token
8. RESTful API runs in API provider

Authentication / Identification
47
ibm.biz/zosconnect-security

Top Tip!
A lot of the security requirements will have been decided by the enterprise
security architects in your organization
GO TALK TO THEM!
You’ll then know which options you need to implement!
JSON Web Token (JWT) is the most popular third-party authentication
token used with z/OS Connect EE
48

/monitoring
49
Tip 5: z/OS Connect EE is built to integrate with end-to-end API monitoring

SMF is just the beginning
50
• SMF123_SERVER_SECT_VERSION: 1
• SMF123_RESERVED_02: 000000
• SMF123_SERVER_SYSTEM: ZT01
• SMF123_SERVER_SYSPLEX: ZT00PLEX
• SMF123_SERVER_JOBID: STC07299
• SMF123_SERVER_JOBNAME: MOPZCEP
• SMF123_SERVER_STOKEN: 5686536700910
• SMF123_SERVER_CONFIG_DIR: /var/zosconnect/servers/MOPZCEP/
• SMF123_SERVER_VERSION: 3.0.30.0
• SMF123_REQ_DATA_VERSION: 1
• SMF123S1_REQ_TYPE: 1
• SMF123S1_HTTP_RESP_CODE: 200
• SMF123S1_RESP_FLAGS: 0
• SMF123S1_RESERVED_04: 000000
• SMF123S1_USER_NAME: NicolasBoss
• SMF123S1_USER_NAME_MAPPED: ZCOBOSS
• SMF123S1_CLIENT_IP_ADDR: 9.101.139.230
• SMF123S1_API_NAME: catalog_v1.0
• SMF123S1_API_VERSION: 1.0.0
• SMF123S1_SERVICE_NAME: inquireCatalog_v1.0
• SMF123S1_SERVICE_VERSION: 1.0.0
• SMF123S1_REQ_METHOD: GET
• SMF123S1_REQ_QUERY_STR: startItemRef=0
• SMF123S1_REQ_TARGET_URI: /catalogManager/v1.0/items
• SMF123S1_REQ_PAYLOAD_LEN: 0
• SMF123S1_RESP_PAYLOAD_LEN: 1923
Server Section
Request Data Section
• SMF123S1_TIME_ZC_ENTRY: 2020-03-09|13:29:53.105249
• SMF123S1_TIME_ZC_EXIT: 2020-03-09|13:29:53.162643
• SMF123S1_TIME_SOR_SENT: 2020-03-09|13:29:53.142812
• SMF123S1_TIME_SOR_RECV: 2020-03-09|13:29:53.144512
• SMF123S1_SP_NAME: CICS-1.0
• SMF123S1_SOR_REFERENCE: CICSMOB1
• SMF123S1_SOR_IDENTIFIER: MOPZT00.CICSMOBP
• SMF123S1_SOR_RESOURCE: MZIC,DFH0XCMN
• SMF123S1_REQ_ID: 13
• SMF123S1_TRACKING_TOKEN: C2C1D80100…
• SMF123S1_REQ_HDR1: User-Agent:PostmanRuntime/7.22.0
• SMF123S1_REQ_HDR2: Host:9.212.143.123:50743
• SMF123S1_REQ_HDR3:
• SMF123S1_REQ_HDR4:
• SMF123S1_RESP_HDR1:
CICS subsystem

Extracting data from z/OS Connect EE for monitoring
51
Search: “zos connect monitoring API workloads”
SMF123

Monitoring APIs with OMEGAMON for JVM
52
Monitoring APIs and services
Monitoring connections to SoRs
Monitoring SoR resources
From previous article:
Tomorrow at 10:30am GMT:

53
End-to-end transaction tracking
Identify z/OS
Connect EE in
business
transaction, as
well as
downstream
service providers

54
JOBNAME ARRIVAL-DATE ARRIVAL-TIME TARGET-URI SERVICE-OR-API METHOD USER-NAME MAPPED-USER-NAME
MOPZCEW 2019/05/14 12:44:31.78 /catalogManager/v1.0/orders catalog_v1.0 GET JeanLeclerc EMPLOY1
Operational analytics

Top Tip!
The ability to identify performance issues quickly and to take corrective
actions is a primary requirement for IT Operations
AVOID BLIND SPOTS!
Use your enterprise’s existing API monitoring frameworks to monitor
z/OS Connect EE
55

Want more? Get the guide!
ibm.biz/zcee-deployment-guide
IBM Montpellier have released
a full guide to deployment
planning considerations
covering:
DevOps
Security
Workload management
High availability configuration
Policy-based API processing
Monitoring
Problem determination
Performance
And more...
Watch the webinar: https://lnkd.in/gvUiEFP

Additional Resources
57
Publications
Getting Started
Going deeper
IBM Z Integration Guide for Hybrid
Cloud
z/OS Connect EE Quick Start Scenarios
z/OS Connect EE v3 Getting Started
Performance reports
Deployment Planning Guide
redbooks.ibm.com/abstracts/redp5319.html
ibm.biz/zosconnect-scenarios
github.com/ibm-wsc/zCONNEE-Wildfire-Workshop
https://www-01.ibm.com/support/docview.wss?uid=swg24041569
ibm.biz/zcee-deployment-guide
z/OS Connect EE Security ibm.biz/zosconnect-security

/examples
Who’s using APIs on Z and what are they using for?

Join the API revolution!
Enterprises across every industry are seizing the
opportunity to change the way they interact
with their customers by unleashing their digital
core as part of a hybrid landscape.
The first step of a
hybrid journey is
to integrate IBM Z
through the
power of APIs.

Some Examples
Scale
Large US Bank
Serves 150 million API requests
per day from z/OS Connect EE to
support fintech startups
Speed
European Bank
Reduced API development time
from 3 months to
less than a day
Time to value
Australian Bank
Transformed their core banking
application with APIs on Z in
half the time and for a fraction
of the cost
ROI
Financial organisation
Savings account creation from 3
days to less than a second
through APIs resulting in over
5000 new accounts and $150m
in deposits withint 3 months
Simplification
UK Bank
Removed 60% of the time,
effort and money required to
integrate PSD2 APIs with their
core banking system on Z
Expanding Z
Spanish Insurance
Called an external vehicle
lookup API from CICS to provide
quick quotes based on just
registration number. Resulted in
30% more conversions from
their quotation website

APIs deliver peace of mind to customers
during a global crisis
Business Need
• A large automotive
company needed to
rapidly automate their
manual loan extension
request process to
handle the huge
increase of finance
extension requests
(<10,000 per month to
>19.000 per day) driven
by the COVID-19
outbreak.
Solution
• IBM z/OS Connect EE
generated REST APIs that
could be easily called from
applications on any
platform.
• Process automation was
based on modern
technologies such as
Kubernetes®, microservices
and z/OS Connect EE API
enablement.
• This enabled
unprecedented acceleration
to create new user
experiences that integrated
functions owned/
orchestrated by multiple
groups within the
enterprise.
Business Outcome
• Leveraging on z/OS
Connect Enterprise
Edition’s APIs to rapidly
innovate processes in
days/weeks.
• Digitization of business
processes enabled
customer needs to be
met and the business
the capacity to
focus recourses on
processes requiring
manual customization.

Their Need:
To drive quality and
responsiveness, BNP Paribas
set out to give its IBM Z
developers a modern IDE,
together with autonomous
control over – and
responsibility for – their own
development environments.
The Customer:
BNP Paribas®
“The more we can
expose applications
and business logic
running on IBM Z,
the more value we
can add to the
business and to our
clients.”
BNP Paribas achieve rapid development with APIs
through z/OS Connect Enterprise Edition
Business Challenge:
In an increasingly deregulated global market, established banks face
new kinds of challenges. Agile FinTech competitors continue to
emerge, capitalizing on the opportunities created by the increased
ease, for a client, of switching from one financial service provider to
another. Given these challenges, large global banks like BNP Paribas
must constantly improve the quality and responsiveness of their
digital offerings.
Our Solution:
BNP Paribas deployed IBM z/OS
Connect Enterprise Edition as
its strategic tool for exposing
IBM Z services as RESTful APIs
that can be called and
consumed by other
applications.
Customer Benefit:
With agile, modern
development practice and
services in place, BNP Paribas
can now seamlessly use
business critical data and
transactions on IBM Z within its
hybrid cloud strategy.
Abdelhakim Loumassine,
Head of the
Mainframe Division,
BNP Paribas
Read full story here
Search: “IBM Z BNPP”

Hear their stories
mediacenter.ibm.com/media/1_mn7lt7ix ibm.biz/zCEE-1014
ibm.biz/ibmzday
Register for free
Talks -> Replays ->
IBM Z Track

Talk to users, share your stories
ibm.biz/zcon-users

Resources
65
Downloads
Explore the docs
Where to get help
z/OS Connect EE open beta runtime
z/OS Connect EE workstation tooling
z/OS Connect EE Knowledge Center
z/OS Connect EE Community Blogs
LinkedIn User Group
Z API Enablement Community Forum
ibm.biz/zosconnect-open-beta
ibm.biz/zosconnect-tooling-download
ibm.biz/zosconnect-kc
ibm.biz/zosconnectcommunity
ibm.biz/zcon-users
ibm.biz/zcee-beta-forum
z/OS Connect EE GitHub samples zosconnect.github.io

/questions?thanks=true
Thank you for listening

Please submit your session feedback!
• Do it online at http://conferences.gse.org.uk/2020/feedback/6AR
• This session is 6AR

GSE UK Conference 2020 Charity
• The GSE UK Region team hope that you find this presentation and
others that follow useful and help to expand your knowledge of z
Systems.
• Please consider showing your appreciation by kindly donating a small
sum to our charity this year, NHS Charities Together. Follow the link
below or scan the QR Code:
http://uk.virginmoneygiving.com/GuideShareEuropeUKRegion

ibm-zconnect-mule.pdf

More Related Content

Similar to ibm-zconnect-mule.pdf (20)

Recently uploaded (20)

ibm-zconnect-mule.pdf