ApacheCon NA 2015

Javascript Object Signing and Encryption (JOSE) [1] specifies how arbitrary data payloads can be signed and/or encrypted with JSON metadata describing the cryptographic algorithm properties. It offers a very powerful, rich, flexible mechanism that will change the way HTTP service communications are secured.
In this presentation, Sergey Beryozkin will provide an overview of JOSE with the examples, describe Apache CXF JOSE implementation and show how typical JAX-RS applications can be JOSE-enabled fast. The use of JOSE inside OAuth2 applications will also be discussed. The talk will conclude with a demo.

[1] https://datatracker.ietf.org/wg/jose/documents/

WebSocket is a full-duplex transport protocol that can operate over a single socket and does not suffer from network restriction such as proxies and firewalls when establishing a duplex channel. The services based on JAXRS, such as those provided by CXF and the new OData services provided by Olingo can take advantage of WebSocket.

However, to layer those JAXRS based services on top of WebSocket requires some protocol agreements to exchange the information required to invoke those services. Swagger-Socket, which is implemented using Atmosphere, is one such protocol that can be used by the existing CXF and Olingo services to directly utilizes WebSocket. In addition to Swagger-Socket, other protocols can also be implemented as an Atmosphere handler and used in those CXF and Olingo services.

Apache Karaf becomes more and more popular and the new 3.0.x releases have been an important step forward for to increase the adaption of Karaf in enterprise. This talk will introduce the new features provided in Karaf 3.0.x and how they answer to the enterprise needs. It will also introduce the new features coming in the roadmap.

The increased number of online services, especially of the in-the-cloud variety, led to increased demand for scalable, multi-tenant messaging platforms. Apache ActiveMQ is a robust, feature rich messaging framework. ActiveMQ already supports flexible deployment topologies via networks of brokers. With a minimum of effort, multiple JMS apps can be fenced-in in a multi-tenant environment. This presentation explains the required elements and demonstrates practical ways to deploy and manage elastic, multi-tenant networks of brokers.

ActiveMQ clustering with a network of brokers is susceptible to race conditions, significant overhead for consumer creation and removal, lack of consolidated reporting, messages becoming stuck and more. Configuring and standing up broker topologies requires a fair amount of effort, knowledge, and tooling.

A new effort is under way to address these concerns and more, in order to provide the ActiveMQ community with truly scalable, reliable, and maintainable cluster topologies. We'll review these concerns, discuss ideas for addressing them, and demonstrate some of the work in progress. The long-term vision is clustered ActiveMQ as a unified, complete, and reliable JMS solution for the enterprise. Having a topology of brokers operate no different than a single broker to individual client applications enables true horizontal scaling and enterprise management of messaging load.

Apache Qpid Proton is a robust, lightweight implementation of the AMQP 1.0 messaging specification. In this presentation, Richard Li will discuss how a resilient microservices architecture can be built using asynchronous messaging using Apache Qpid Proton.