eCommerce Roadmap

1
eCommerce Roadmap
Summary of the Newco.com eCommerce Project and
Central Resource Index
2
This document is a project summary and index of
all collateral created and researched for the
Newco.com initiative
DocumentDefinition
eCommerce Roadmap -Project Outline
-Resource Index
ExecutionArchitecture
OperationsArchitecture
DataArchitecture
NetworkArchitecture
DevelopmentArchitecture
SecurityArchitecture
ApplicationArchitecture
Infrastructure Architecture
Software Architecture
3
Table of Contents

• I. Project Definition
• II. Infrastructure Architecture
• a. Execution Architecture
• b. Operation Architecture
• c. Network Architecture
• d. Security Architecture
• III. Software Architecture
• a. Application Architecture
• b. Development Architecture
• c. Data Architecture

4
Newco.com will represent a flexible system that
is highly available and scalable which quickly
delivers business needs to market
ProjectDefinition

• The www.newco.com web initiative will have
  increasing impact on the Newco Business Model
  going into 2000 and beyond
• The project capacity requirements for the site
  are the following
• Over 750,000 orders in 2000
• Over 1.5 million orders in 2001
• 17 of all reorders by 2001
• 10 of new orders by 2000

• Related Resources
• Newco.com - The Internet Project

Internet Order Growth
1,400,000
1,200,000
1,000,000
800,000
600,000
400,000
200,000
0
97
98
99
00
01
Source Internet Summit
5
Newco.com will represent a flexible system that
is highly available and scalable which quickly
delivers business needs to market
ProjectDefinition

• High Level Architecture Requirements
• High Availability (24X7)
• Scalable Architecture
• Personalization and Membership functionality to
  customize the "Digital Experience
• New User Interface (Look and Feel) with improved
  User Experience
• CiSR Integration for automate order taking
• Intro Order processing capabilities
• Order Status capabilities growing into customer
  self services with real time responses
• Processes in place for deploying content and code
  from development to ISP

• Related Resources
• Newco.com - The Internet Project

6
Infrastructure Architecture
Execution Architecture Operations
Architecture Network Architecture Security
Architecture
7
The Execution Architecture defines the operating
environment in which the systems application and
business processes are executed
Execution Architecture

• The designed Newco.com represents a highly
  available system
• Any given network connection has been crafted to
  be redundant creating a system with zero single
  points of failure
• Servers run separate services to increase
  performance and facilitate horizontal scaling
• SQL servers run Active/Active Cluster Service to
  achieve high degree of database availability and
  redundancy
• 2 ArrowPoints load balance incoming traffic to
  the most available web servers
• LDAP servers run WLBS to support site
  personalization functionality

• Related Resources
• Newco Infrastructure Documentation.Doc

Load Balanced Web Farm
Backend Cluster
8
The execution operating system and hardware was
carefully chosen to provide scalability
availability
Execution Architecture

• Related Resources
• Execution Phase 2
• Production Configuration.doc
• MSCS White Paper
• Compaq DISA Architecture

• Windows NT Operating System was optimal platform
  for Newco.com
• Rapidly becoming dominant network operating
  system for LAN environments
• Newco is already familiar with NT environment
• Windows NT facilitates speed to market with the
  following functions
• Transaction server
• Web servers
• Message Queue
• Remote administration tools
• SQL 7.0 installed on MS Cluster Server in
  Active/Active achieves high availability
• If a node fails, the remaining node takes
  ownership of the shared SCSI disks and restarts
  the implementation of SQL Server that has failed
  over
• An active/active configuration allows for maximum
  utilization of hardware
  resources

• Database servers
• Personalization Membership
• Integrated security Server

9
The execution operating system and hardware was
carefully chosen to provide scalability
availability
Execution Architecture

• Four technical environments will be employed to
  manage Newco.com
• Development Individual component development
  testing / sandbox at CU
• Integration Combining different code to test
  interoperability/ hosted at CU
• Staging Final environment before content
  deployment to ISP/hosted at CU
• Production Live site hosted at ISP

Development
Integration
Staging
Production
web1
web4
web3
web2
web6
web5
web7
Fat Web Servers
(1850r)
(1850r)
(1850r)
(1850r)
(1850r)
(1850r)
(1850r)
ldap1
ldap3
ldap2
ldap5
ldap4
LDAP Servers
(1850r)
(1850r)
(1850r)
(1850r)
(1850r)
Active
Active
Active
Active
Cat.-Price
Cat.-Price
Data Servers
PM
PM
orders
orders
Data2
Data3
Data4
Data1
Data3
Data4
(5500)
(5500)
(5500)
(5500)
(5500)
(5500)
System Test
User Test
10
Newco will work closely with Global Crossing to
determine load balancing network configurations
Execution Architecture

• ArrowPoint was chosen as load balancing hardware
  provider
• Preferred ISP vendor heavily supported ArrowPoint
  load balancing
• Offers cookie based sticky connections for Newco
  eCommerce
• Scales for high volume sites handling 1,000,000
  URL flows per switch
• Optimizes web content delivery versus IP packet
  speed
• Newco and ISP will finalize production
  environment Execution Architecture
• Architect ArrowPoint load balance, switch,
  router, and LAN hardware
• Architect topology, protocols, system roles and
  functionality
• Architect redundancy, routes to major providers
  and intranet needs
• Content push and management bandwidth needs
• Determine DNS responsibilities, resources, and
  locations
• Plan remote reboot capability across server
  implementation
• Implementation of planned WAN architecture

• Related Resources
• Server Documentation Manual
• Execution Phase 2 Staging
• Execution Phase 1

11
Production Environment
12
Infrastructure Architecture
Execution Architecture Operations
Architecture Network Architecture Security
Architecture
13
The Operations Architecture aligns tools and
procedures to achieve availability and
scalability with desired performance levels
Operations Architecture

• The objectives of the Operations Architecture is
  to
• Architect site to scale for future growth in site
  traffic
• Implement site quickly to achieve speed to market
  
• Outline processes to create a highly available
  and scalable site
• Determine roles and responsibilities between
  Newco and ISP
• Develop procedures to evaluate site performance
• The Operations Architecture is based on several
  assumptions
• 24 hours per day, 7 days per week operations
• The SLA with ISP will be managed by a Newco
  Program Manager
• Newco will outsource the entire daily maintenance
  of the production site to the ISP
• Capacity planning and performance monitoring will
  be defined by Newco and managed by the ISP

• Related Resources
• SLA Negotiation Checklist.xls
• ISP Selection Ecommerce Project.doc
• Global Crossing Proposal
• ISP Hosting White Paper
• Global Crossing Master Service Agreement

14
Working with the ISP to determine service level
agreement and statement of work will define the
Operations Architecture
Operations Architecture

• Managing the Service Level Agreement with the ISP
• The SLA defines the service level to be provided
  to Newco from the ISP that ensures high levels of
  system availability response time
• Proper management of the SLA and the relationship
  with the ISP will benefit system operations
• Newco must define roles responsibilities with
  the ISP
• Create Joint Project Plan as working document
• Create interface document detailing roles and
  responsibilities
• Establish regular milestone and variance
  reporting to Program Managers
• Develop procedures to evaluate the performance of
  the Newco eCommerce application to allow for
  proper response and event management

• Related Resources
• Global Crossing Master Service Agreement

15
Focus internal technical strategy towards
performance monitoring capacity planning when
daily operations are outsourced to ISP
Operations Architecture

• Performance monitoring metrics must be captured
  on a regular basis to determine the current
  condition of the system
• Establish monitoring and reporting process with
  the ISP
• Determine intrusion detection policy when Global
  Crossing initiates service
• Identify areas that may require tuning and
  enhance overall site performance
• Perf Mon metrics for traffic growth thresholds
  and response points
• Processor Process Time for EACH Processor
  Processor Utilization
• ActiveServerPages ASP Requests/Second Processor
  Utilization
• Memory Available Bytes Memory Management
• NBT Connection Bytes Total/sec Network Capacity
• ISP will utilize the following monitoring
  mechanisms to support service-level agreements
• Storm Watch for page/port analysis
• Perf Mon
• HP OpenView
• NT Monitoring
• Web Trends

• Http Https Monitoring
• Historical Logs
• Net IQ
• Network Monitoring

16
Infrastructure Architecture
Execution Architecture Operations
Architecture Network Architecture Security
Architecture
17
The Network Architecture defines the strategy and
the components necessary to achieve reliable
LAN/WAN services
Network Architecture

• The Network Architecture was based on the
  following assumptions
• Redundancy
• Scalable network services
• Reliable access to information
• Zero single points of failure
• Single standard network protocol (TCP/IP)
• 2 T1 Lines will supply sufficient bandwidth for
  backend connectivity
• The Newco Network Architecture consists of
  several physical networks
• Public Network Production Environment at ISP
• Private Network Production Environment at ISP
• Tape Backup Network Production Environment at
  ISP
• Newco Development Environment of the system
• All servers at the ISP will be on one NT Domain
  on the private network
• No trust relationships will exist with any other
  NT Domains
• ISP is assumed to be sole domain administrator

• Related Resources
• Network Architecture
• NT Server Configuration Properties.doc
• Creating a Highly Available Web Site

18
The Network Architecture defines the strategy and
the components necessary to achieve reliable
LAN/WAN services
Network Architecture

• Public network at ISP will be connected to
  Internet by redundant hi-speed routers
• HTTP requests are passed to one of two Arrow
  Point CS-100 (APCS100) units
• Web servers are connected via 100mb Ethernet
  connections to APCS100s
• Newco.com will be multi-homed and dual homed to
  provide resiliency and security to the
  architecture
• APCS 100 will provide packet filtering
• HTTP HTTPS only bi-directional protocol
• SMTP outbound for email notification order
  status
• TCP/IP forwarding will be disabled on the web
  servers
• Private network at ISP will be physically
  isolated from the Internet
• No TCP/IP restrictions on Private network
• NET BIOS traffic will be allowed to facilitate
  Windows NT inter-server communication
• All servers connecting to the private network
  will be dual homed to two different 100mb
  switches
• A TCP/IP addressing scheme will be created and
  maintained by the ISP for the private network
• Private network will be connected to the Parent
  Company Corporation WAN by means of two private
  T-1 lines to provide high bandwidth and redundancy

• Related Resources
• ArrowPoint White Paper
• ArrowPoint Articles
• Network Architecture

19
The production environment configuration will
serve as a standard by which all staging and
development systems will follow
Network Architecture

• NT Domain Information
• Domain Name CUISP1
• Trust Relationships NONE
• Audit Policy Success Failure all objects
  except File/Object Access Process Tracking
• Newco User Accounts FirstnameLastInitial ex.
  JohnD
• Service Account ServiceDescription ex.
  ServiceSQL
• NT Groups and Purpose
• Application Publishing CU to publish application
  (Code) updates
• Content Publishing CU to publish web site
  content updates
• SQL Administration CU SQL Access
• Web Reporting CU to collect reporting statistics
• Infrastructure CU infrastructure access
  requirements
• Server Naming Standards

• Related Resources
• NT Server Configuration Properties.doc

• ISPLDAP1 LDAP Server
• ISPLDAP2 LDAP Server
• ISPSMTP1 SMTP Server
• ISPSMTP2 SMTP Server
• ISPSQL1 SQL Server
• ISPSQL2 SQL Server

• ISPDC1 Domain Controller
• ISPDC2 Domain Controller
• ISPWEB1 Web Server
• ISPWEB2 Web Server
• ISPWEB3 Web Server

20
Infrastructure Architecture
Execution Architecture Operations
Architecture Network Architecture Security
Architecture
21
The Security Architecture defines the strategy by
which Newco will protect its information assets
Security Architecture

• The Security Architecture is based on the
  following assumptions
• No access to system resources will be available
  through the Internet
• Access to ISP resources will only be available
  through Parent Company
• Parent Company will allow connectivity through
  their network via firewall to ISP
• Configuration to be determined by CU
  Infrastructure team Dan Lynn/Stephanie Calahan
• Physical Network Security
• ArrowPoint CS100 Switches will control Internet
  traffic access to web servers
• Packet filtering will only allow HTTP HTTPS
  inbound protocols
• Packet filtering will only allow HTTP, HTTPS,
  SMTP outbound protocols
• Wire-speed ICSA Firewall
• Denial of Service Prevention
• URL Blocking
• Web servers will be multi-homed between
  independent physical networks
• Web servers will be configured to allow no IP
  forwarding across networks
• Developer Security
• Single NT Domain will allow centralized
  administration of users, passwords, and directory
  access
• All servers on private network will be members of
  Domain
• ISP will manage NT Domain

• Related Resources
• ArrowPoint Security Checklist
• Security Issues Doc

22
Security Architecture describes all levels
including Network, Operating System, System
Software, and Application.
Security Architecture

• Server Security
• All non-essential services will be disabled from
  Web servers
• Access to servers will be for limited authorized
  personnel
• Application Level Security will be controlled by
  Site Server PM
• Provide robust authentication, log-in security,
  and user management for high volume site
  membership
• Impersonation allows secure NT access without an
  NT account
• Windows NT LAN Manager (NTLM) provides a secure
  web-based authentication
• Negotiation with Parent Company is necessary to
  establish security parameters
• Agree with Parent Company on security
  infrastructure
• Identify roles and accessibility with Parent
  Company for managing network services
• Implement firewall services at Parent Company
• Newco will work with ISP to finalize Security
  Architecture
• PC AnyWhere will be allowed for remote
  administration to ISP
• Adherence to mandatory Global Crossing security
  policy
• Establish access and authorization
• Prepare and implement list change procedures
• Distribute access list to Data Center Operations
  staff

23
Software Architecture
Application Architecture Development
Architecture Data Architecture
24
Application architecture defines the structure,
software and components that comprise Newco.com
Application Architecture

• Objectives of Newco application architecture
• Scalability
• Reusability
• Openness for future enhancements
• The following assumptions were defined to
  establish the focus of the application
  architecture
• Newco.com will follow Microsoft Distributed
  interNet Application (DNA) Architecture for the
  next software release
• Site Server with PM will act as a vehicle to
  create an eCommerce framework
• CiSR functionality will be reused in the web
  environment
• XML / BizTalk will help standardize Newco.com
  data exchange
• Distributed COM Architecture will help achieve
  optimal performance by isolating functions
• Development with open standards will create a
  modular application with vendor independence
• Message Queuing will be employed for order
  processing
• Transaction Servers will be utilized to achieve
  greater transaction performance and credibility

• Related Resources
• Software Architecture Document
• Site Architecture Design
• Design of the Application
• ASP Framework
• Include Files

25
Newco skill set and CiSR functionality in
Microsoft technologies make DNA architecture an
ideal candidate
Application Architecture

• Distributed interNet Application (DNA)
  architecture presents many advantages
• CiSR is DNA-Based
• Newco has skills in Microsoft technologies
• Helps to design and build n-tier server-based
  applications
• Provides client transparency
• Enables full transactional processing support
• Newco.com will employ a 3-tiered DNA approach to
  application development
• Client Services Layer User interface and
  navigation
• Business Services Layer Business processes
  logic
• Data Services Layer Physical data storage

• Related Resources
• Application Arch
• COE and Internet Order Process
• Current COE to CISR Order Process

MembershipDirectory
ADSILDAP
WebServers
Browser
Business Components
OLE-DB
JavaScript
SQL 7.0
Client Services Layer
Business Services Layer
Data Services Layer
26
Site Server will act as the Newco.com application
foundation while providing a framework for
development
Application Architecture

• Site Server allows Newco to pursue an engaging
  marketing strategy
• Manage targeted online advertising with
  intelligent personalization capabilities
• Easily deploy promotions, cross-selling
  campaigns, and discount programs
• Use PM capabilities to customize information to
  specific users
• Site Server PM offers services to manage user
  communities of any size
• User data access and storage is handled by the
  Site Server LDAP service
• Lightweight Directory Access Protocol (LDAP)
  handles the interface between client application
  and membership directory
• The membership directory stores user attributes
  such as name, address, password, and preferences
• PM will use the backend clustered SQL database
  for data storage
• ActiveX Data Objects will be utilized to design a
  thin client model application
• ADO is not only a component, but a structured
  series of objects that allow data manipulation
• A thin client application places only interface
  code on the client and sending just static HTML
  of the requested data to the user
• Newco.com will use ADO to create cursors, handle
  transactions, execute and create stored
  procedures

• Related Resources
• Site Server White Paper
• Site Server PM Arch Overview

27
Newco.com will employ the BizTalk framework in
order to create interoperability of data exchange
with XML medium
Application Architecture

• The BizTalk Framework addresses communication
  gaps in a platform and technology neutral manner
• Developed with guidance from leading service/
  solution providers, customers and standards
  organizations
• The independent consortium provides
  specifications for the design and development of
  XML-based communication solutions
• BizTalk provides a recognition framework managing
  business data to and from your partner
  applications
• Newco.com will use BizTalk/XML to ensure
  interoperability for future designs
• Migration towards structured data exchange
  between businesses and applications
• Low barrier to entry for a rich and flexible
  Universal Language
• More efficient interactions between business
  stakeholders internal processes
• BizTalk offers common standards for XML to
  facilitate data exchange
• More efficient delivery of data means less server
  workload
• With XML the Document Object Model (DOM) helps
  automate development

• Related Resources
• BizTalk Framework 1.0
• XML Documentation

28
Message queuing increases throughput efficiency
with order processing through asynchronous
communication
Application Architecture

• Related Resources
• MSMQ White Paper
• MSMQ Document
• CISR Asynchronous Interfaces

• Challenges of Application Integration without
  message queuing
• CiSR was not designed for easy integration with
  other platforms because of tightly coupled
  communication technologies
• Receiving applications lose much of their ability
  to manage their response times and prioritize
  requests because they must process incoming
  requests on demand
• Newco.com will use MSMQ to integrate with Newco
  legacy systems
• Dynamo will provide future interaction with
  Parent Company system will by acting as a bridge
  between MSMQ MQ Series
• Application efficiency is created with store
  forward queuing
• Close integration with Windows NT V4.0,
  exploiting the Microsoft Management Console (MMC)
  and Active Directory Services Interface (ADSI)
  functions

29
Software Architecture
Application Architecture Development
Architecture Data Architecture
30
The development architecture outlines the tools
and environments used to facilitate rapid
development and prototyping of software
Development Architecture

• The development process will be a controlled
  iterative path through 4 different environments
  each with its own objective
• Development Environment
• Objective Object / ASP creation and basic unit
  testing
• Sytem Test Environment
• Objective Used by marketing to test UI,
  navigation and look feel
• User Test Environment
• Objective Used by marketing to test UI,
  navigation and look feel
• Staging Environment
• Objective Mirror production site while
  performance testing capacity planning
• The Newco development testing approach will
  ensure application revisions are suitable to
  migrate to the next environment
• Identify test/ case conditions
• Determine test data source
• Determine expected results
• Execute tests
• Compare actual to expected
• Iterate as necessary
• Signoff

• Related Resources
• Software Architecture Document
• Development Environments
• Development Environment Documentation
• Development Server Configurations

31
Newco.com will pursue an iterative design process
with three distinct phases that require unique
personnel deliverables
Development Architecture

• Phase 1
• Required Personnel
• Content Expert
• Business Architect
• Domain Expert
• Deliverables
• User interface requirements
• Use Case
• Business Rules
• Phase 2
• Required Personnel
• Content Expert (Business Architect transitions
  into)
• Domain Expert
• Developer/ Designer
• Deliverables
• CRC Cards
• Interaction Diagrams
• Class Diagrams

• Related Resources
• Design Phases UML Workshop Presentation

• Phase 3
• Required Personnel
• Domain Experts
• Developer Designer
• Content Expert
• UI Engineer
• Deliverables
• UI Definition
• Detail Design (Screen)
• Detail Class Specs

32
Detailed modeling, well-designed processes and
powerful tools will facilitate efficient and
timely development
Development Architecture

• Related Resources
• UML Presentation
• Use Cases
• Interwoven White Paper

• Visual Modeling with Visio 2000 will define the
  development initiative
• Controlled iterative development creates shorter
  development cycles
• Model-driven and Use-Case development results in
  improves software quality
• Unified Modeling Language improves team
  communication
• Visualize proper structure, key elements, and
  optimize database design
• Newco.com will use SourceSafe to help manage the
  development process
• Shadow directories for testing and deployment
• Develop Web content, source code, and supporting
  program files in the same environment, and deploy
  your files directly to Web sites
• Automatically test both local and remote
  hyperlinks to maintain the structural integrity
  of Web site HTML, graphics, and applications
• Interwoven may be used for Content Management
  processes
• Allows authorized individuals to deploy web
  content without developers help
• Interwovens Open Deploy can manage numerous
  deployment rules across multiple sites and
  development environments
• Transactional deployment ensures content
  replication integrity

33
Performance testing throughout the development
process ensures availability in the Production
Environment
Development Architecture

• Microsoft web application stress tool will be
  used initially to gather performance and
  stability information about Newco.com
• Easily develop scripts that simulate traffic load
  and navigation patterns
• Pinpoint bottlenecks in the application prior to
  uploading revisions to ISP
• Tune Internet Information Server (IIS) and gauge
  performance results
• Determine site capacity in number of users at
  desired performance levels
• The Mercury Tool Set is a more robust tool suite
  that will provide more granular testing results
• Load tests can be from different browsers and IP
  addresses
• Real-time monitors track application performance
  under load
• Mercury isolates performance in transactions,
  server, and networking areas to help define where
  problems are occurring
• Supports Secure Socket Layer (SSL) to more
  accurately test production environment
  functionality
• NuMega Dev Partner will be used to detect errors
  and analyze performance of application components
  which results in fast-performing, well test COM
  objects

• Related Resources
• Mercury Interactive Testing Docs

34
Software Architecture
Application Architecture Development
Architecture Data Architecture
35
The data architecture defines the Newco strategy
of information asset management
Data Architecture
Data storage for the Web site is managed by two
Compaq Proliant 5500r servers running SQL Server
7.0 under Microsoft Cluster Server (MSCS)

• Related Resources
• Software Architecture Document
• Data Architecture
• Installing SQL 7.0 on MSCS

• Fibre Channel connection to a shared RAID level 5
  disk array
• Server cluster provides availability in the event
  of server failure
• RAID array provides availability in the event of
  disk failure
• Disks will be formatted to the NTFS file format
  because it provides a much higher level of
  security and data integrity as compared to the
  FAT file format

SQL Active/Active Cluster

• Cluster Specifications
• 2 Xeon PIII 550
• 1Gb Ram per server
• 2 Dual NICS 3122
• RAID 1_at_ 2x9.1 GB (OS)
• RAID 1_at_ 2x9.1 GB (Transaction Logs Sql1 on Shared
  Array)
• RAID 1_at_ 2x9.1 GB (Transaction Logs Sql2 on Shared
  Array)
• RAID 5 _at_ 4x 9.1 GB HDD for shared arrays

36
SQL 7.0 was selected as the database software for
Newco.com because of its solid foundation and
extensive functionality
Data Architecture

• SQL 7.0 demonstrates robust capabilities for the
  Newco.com application
• Built upon SQL 6.5 solid foundation
• SQL Server is a Relational Database Management
  software that meets the scalability requirements
• Offers ease of use, reliability and data
  warehousing capabilities
• The only scalable database that supports Site
  Servers Membership Directory
• Provides the ability to partition the directory
  across multiple databases
• Results in smaller index sizes on tables
• More efficient searching
• Provides ability to scale through adding
  additional hardware
• Allows the LDAP Service to be on a different
  machine than the database due to its ability to
  provide its own services to service database
  requests

37
Developing standards and assumptions around
information assets provides structure to the Data
Architecture
Data Architecture

• Data Database Assumptions
• Date-Time represented with Calendar Year and
  Oracle Time stamp???
• Language Support for multiple languages in the
  Database (future)
• Language Support for English (Standard) Only in
  HTML
• Currency Support - USD's
• Database Naming Standards

• Integers
• b_ - bit
• i_ - integer
• si_ - smallint
• ti_ - tinyint
• Approximate Numerics
• f_ - float
• r_ - real
• Unicode Character Strings
• nc_ - nchar
• nvc_ - nvarchar
• ntxt_ - ntext

• General
• tbl - Table
• tmp - Temporary Table
• proc - Store Procedure
• Special Numerics
• cur_ - cursor
• ts_ - timestamp
• guid_ - global unique id
• non-Unicode Character Strings
• c_- char
• vc_ - varchar
• txt_ - text

• Decimals and Numeric
• n_ - decimal
• n_ - numeric
• m_ - money
• sm_ smallmoney
• Datetime and Smalldatetime
• dt_ - datetime
• sdt_ - smalldatetime