Admission and Aid Princeton Tim Hogan thogan princeton

Admission and Aid @ Princeton Tim Hogan thogan@princeton. edu Admission and Aid @ Princeton

Background n First EJB project in ’ 98 – ’ 99 n n n Learning experience 3 Users Proved that a Servlet/EJB/RDBMS application can be built and works Did not address performance or availability issues Non-mission critical application Several Servlet (then JSP) applications followed. n n n Reached a bigger audience Increased number of skilled developers Increased understanding of performance and availability issues App Servers improved / Specs evolved Still not mission critical Admission and Aid @ Princeton

Background (cont. ) n Time Collection project n n n On-line time cards for 3500 hourly employees Full calculation of wages including overtime and job differentials Mission critical – 22 x 7 Internal to Princeton NOW – Admission and Financial Aid n Allow all applicants to apply on-line n n n n Admission – part 1 only Financial Aid Current students can apply for aid on-line Back office processes too Mission critical Internal and External to Princeton 24 x 7 Admission and Aid @ Princeton

Business Scope n For all applicants: n n n Provide a registration and log in mechanism Allow applicants to save their applications and come back later to submit Provide customized forms depending on applicant’s status n n U. S. , Canadian, International 2 -parent household, divorced, independent students Provide on-demand validation For current students – Financial Aid only: n n Same as above but no registration needed Can apply for current or upcoming academic year Admission and Aid @ Princeton

Business Scope (cont) n Back office processes – Admissions n n n Print out applications Search facilities Back office processes – Financial Aid n Support “Need Analysis” – figuring out how much aid you can get. 3 separate methods: n n n Princeton method Federal method Non-custodial method Each method is a series of formulas and sub-formulas that can be “tweaked” along the way. Also, formulas differ by academic year Support “Packaging” – figuring out what combination of scholarships, grants, jobs to give to a student Admission and Aid @ Princeton

Business Scope (cont. ) n Financial Aid processes (cont. ) n Scholarship allocation – after packaging is complete, autoallocate scholarships in the most efficient way. n n Allocate non-Princeton scholarships first Some scholarships are very specific (e. g. , Boy Scouts from Kentucky) Admission and Aid @ Princeton

Technical Architecture n N-tier n Client - Ns 4. 7+ or IE 4. 0+ n n n n n IE 5. 5+ only for back office Apache 1. 3. 26 w/Open SSL on Solaris 2. 8 Web. Logic 6. 1 sp 1 on Solaris 2. 8 Oracle 8. 1 on Solaris 2. 8 LDAP for authentication of students and staff Yale CAS authentication for applicants SSL between browser and web server only Automated batch feeds (via maestro) 24 x 7 Admission and Aid @ Princeton

Technical Architecture Client Browser Web Server encrypted Apache v 1. 3. 26 Open SSL App Server Web. Logic 6. 1 NS LDAP Authentication Server Admission and Aid @ Princeton DB Server Database Oracle 8. x Trusted Sub-Net

Some Stats n n n 22 Entity Beans – all CMP 4 Stateless Session Beans 132 Business/Support classes 10 Servlets 108 JSPs 40 distinct windows Admission and Aid @ Princeton

Yale’s CAS n n CAS – Common Authentication Service Allows “single sign-on” between Admission and Fin Aid applications. n n Customized and installed in 2 weeks n n Cookies must be enabled Provide your own authentication class At entry point of each app you want to involve, add CAS jsp tags to automatically handle single sign-on process. Mostly learning curve issues CAS architecture Admission and Aid @ Princeton

Using CAS Admission 2. Apply 3. validate 4. Exit Browser 1. Log In 8. Log Out Log In and Registration (CAS) 5. Apply 6. validate 7. Exit Fin Aid Admission and Aid @ Princeton

Using CAS – Rules of thumb n n Each app is a standalone WL instance Each application is responsible for its own session management once a user has entered Each app has only 1 entry point that coordinates with CAS “Exit” invalidates the session for that app and redirects back to CAS Admission and Aid @ Princeton

Application Design – Rules of Thumb n n n Standard "MVC" design JSPs for painting screens n Java script for field validation only n Liberal use of java “beans” to minimize java code in JSPs n Put all your java code “at the top” Servlets to manage screen flow and coordination between JSPs and session beans n Did not use one “controller” servlet that delegates to other servlets n Common behavior via subclassing n Avoid do. Get(), use do. Post() instead Stateless session beans as "transaction controllers“ Domain objects contain business logic and map directly to an entity EJB Admission and Aid @ Princeton

Application Design (cont. ) n Entity beans – CMP only n n 1 Entity Bean = 1 Table n n Local interfaces used, not remote interfaces Not “course grained” – but do map to business entities. Entity Bean Guidelines n n Entity Beans are only directly accessed by other Entity Beans or Session Beans. That is, Servlets/JSPs do NOT access Entity Beans. Entity relationships managed via CMP, NOT managed by Session Beans (as in earlier projects) – big performance improvement. Admission and Aid @ Princeton

Application Design (Cont. ) n An entity bean has an associated "domain object" (a regular java class) n n n Can be stored in the HTTP session Can be used by Servlet/JSP/EJBs/etc Entity beans only used where we have objects (tables) that are directly updated during a transaction Admission and Aid @ Princeton

Application Design (Cont) n Static/lookup tables n n Implications: n n n We use one (large) singleton class to access all static tables Lazy initialization Static data queried once and stored internally Assume data does not change frequently Must restart server to refresh Future enhancement n Administrative function to clear out static tables from memory. This will force a reload Admission and Aid @ Princeton

Application Design (cont. ) n 600+ unique data items, each is uniquely named and is consistent across: n n Heavy use of reflection to move data items between HTML -> Java domain objects -> EJB -> Database n n n txt. Stu. First. Name (HTML) stu. First. Name, get. Stu. First. Name(), set. Stu. First. Name() (java/EJB) STU_FIRST_NAME (database) Very easy to add data items later Very little coding (reflection takes care of it) Standardized 100+ abbreviations Admission and Aid @ Princeton

Technical Issues n n Performance Should we cluster? Development environment Why use EJB Admission and Aid @ Princeton

Performance n On-line applications had to be as fast as possible n n Original implementation used BMP where bean relationships were managed by Session Bean n n Each movement between pages posted all data from that page and it had to be cached “Saving” the application had to be fast Saving data to 9 different tables 3 - 5 seconds to save Moved to CMP (which handled all relationships too) n 0. 5 seconds to save Admission and Aid @ Princeton

Performance (cont. ) n n Volume Testing – Financial Aid We knew our peak times and volumes based on previous years paper applications n n Early Decision (Nov 1) – 2000 applications Regular Decision (Feb 1) – 5000 applications Assume 50% are submitted during the last 3 days. Performance Goal – support 9000 applications over the course of 3 days n 3 K/day – during 8 hour period (8 pm – 4 am)… 378 apps/hr Admission and Aid @ Princeton

Performance (cont. ) n n Load Runner – Mercury Interactive Simulated 100 simultaneous users submitting 5 applications in 30 minutes n n n 2 sec avg response time Maxed out the testing machine first 1000 apps/hr seems good enough for us Admission and Aid @ Princeton

Performance (cont. ) n n n 200 meg ram allocated to app server JRE 1. 3. 1 Hotspot – Server mode Hardware Sizing n n Estimate transaction volume at peak and non-peak times. Advice from BEA Consultant n n n Choose server type (small/medium/large) Chose ES 250 - Dual 300 Mhz, 2 Gig ram n n n Allows for more CPUs Max out memory Put all static content on Apache so app server is not burdened with it n n Memory is most important Many smaller servers is better than one large one Recommended clustering *. gif, *. css, *. js Cache all static data in a singleton Admission and Aid @ Princeton

Clustering n Like our other applications, we did not use clustering n n However, we now have 7 Web. Logic applications all running on the same app server n n n Each runs its own WL instance If this machine crashes, we’re in big trouble We are considering clustering in the context of general availability of ALL WL applications n n Expensive licensing (20 K / cpu) Generally, overkill for our application 24 x 7 = keep it up most of the time Gives us a redundant app server Recently, a DB server that supports 20+ apps died Admission and Aid @ Princeton

Development Environment n n n Developers can choose any IDE they want 2 used Web. Gain and WL on W 2 K desktop 1 used Visual. Age on W 2 K and ran WL on Solaris n n n Used SMB to map Unix directory to Windows drive PVCS for source control Note: our code is compiled in VA on W 2 K, and runs on Solaris 2. 8 – no problem Admission and Aid @ Princeton

Development Environment n We have 4 environments n DEV, QA, PROD are all exactly the same n n n Developers can opt to have their own “local” environment n n n Solaris 2. 8 with same patch level Same exact directory structure Same exact WL version and patches Same exact Apache On their W 2 K desktop or unique Unix directory (pre-dev) This makes migration very easy We DON’T deploy as WAR file n Not practical when you only need to change 1 JSP Admission and Aid @ Princeton

Why use EJB? n Technically, we don’t need EJB in our apps because n n n However, we use EJB because: n n n Transactions don’t span multiple sources Our services don’t need to be remotable (location independent, distributed) It’s very fast Auto commit and rollback (very convenient) Built-in relationship management with the 2. 0 spec We don’t have to write SQL (very lazy) One EJB “bug” n Transactions spanning multiple tables are not always updated in the correct order (we had to disable constraints to get around this) Admission and Aid @ Princeton

Monitoring Availability n Tivoli – every 5 minutes n n n Checks for a static page on Apache – is Apache OK? Logs in – is CAS OK? Goes to the “Welcome” page – is the App Server OK? Logs out If one of these fails, we get a page Admission and Aid @ Princeton

Usage Stats n 98% of our users are IE 5. 0 or higher n n n 1% AOL browser 1% Netscape (usually on MAC) Average session time is 40 minutes Usually 2 or 3 visits n n n Most are IE 5. 5 or 6. 0 This includes most AOL users Check it all out (5 minutes) Fill it our for real (40 minutes) Of the 3000 Fin Aid applications: n n About 15 had cookies disabled No one had java script disabled Admission and Aid @ Princeton

Usage Stats (cont. ) n Peak times – 8: 00 pm – Midnight n n n # Fin Aid applications n n n Moves across time zones A lag over the Pacific, then starts up again in China 2132 - USA 622 – Canada 220 – India 180 – China Over 35 countries represented 2/3 are students, 1/3 parents Admission and Aid @ Princeton

The End Thank You Tim Hogan thogan@princeton. edu Admission and Aid @ Princeton

Design Challenge #1 n n Calculations and formulas change from year to year System must handle multiple versions of formulas simultaneously Formulas are defined in Reverse Polish Notation Formulas are based on labels n n n M_AGI = 67800 ADJ_AGI = M_AGI + F_AGI – F_MEDEXP Therefore, every data item is a String in the database because it can be an actual number or a formula Formulas are then associated with a particular “need method” and academic year We can make all calculations table based which can be modified by user Admission and Aid @ Princeton

Design Challenge #2 n n n On-screen validation must be flexible Used a table-based approach – a validation engine Validation Table defines n n Screen name Java object involved Field name Validation criteria n n n Field format / required / relationship to other fields / method name [for special validation] Heavy use of reflection Validation logic is a simple table change Admission and Aid @ Princeton

Issue - Performance (Specs) n Goals n n n Support 100 simultaneous users with 3 sec response time Run payroll calculations in allotted time window (2 hours) Size hardware as best as possible and allow room to grow Admission and Aid @ Princeton

Issue - Performance (Approaches) n n Use App Server (EJB) for web transactions only. Run mass updates in "batch" mode while App Server is down. Only App Server can update database while it is up. Cache everything: n n n Entity beans Lookup tables / Rule tables (Singletons) DB Connections Static content on Web Server, not App Server Split large batch jobs into smaller ones running in parallel. Minimize/eliminate external DB calls. Duplicate data instead. Admission and Aid @ Princeton

Issue - Performance (Tuning) n n Used tool Web. Load by Rad. View Software Each “user transaction” added 30 time entries then removed them all (many servlet / EJB hits and db IO) Did not simulate “think time” Started with 50 users and increased by 25 until 3 -sec response time was reached at 150 users. Admission and Aid @ Princeton

Issue - Monitor Availability n Web. Logic provides a “ping” utility n n Via maestro (scheduling software), ping the server every 5 minutes. If ping fails 3 times, assume the server is locked up or dead. n n n During high volume periods, ping fails even though server is ok. n n Recycle server Send out beeper and e-mail We automatically recycled the server during a very heavy period! Now, we also check if Unix process is alive n kill – 0 pid Admission and Aid @ Princeton

Non-Standard Ports n n To support multiple WL apps on one machine, each runs off a different Unix port We define an Apache virtual host that maps to that WL instance n We must define a separate VH for each WL instance because the Web. Logic/Apache proxy bridge requires it Admission and Aid @ Princeton

Non-Standard Ports Admission Apache apps. princeton. edu 7000 8000 Log In and Registration (CAS) 9000 Fin Aid 3 URLs: https: //apps. princeton. edu: 7000/ https: //apps. princeton. edu: 8000/ https: //apps. princeton. edu: 9000/ Admission and Aid @ Princeton

Non-Standard Ports n n n However, some ISPs do not allow HTTP or HTTPS access via non-standards port (any port not 80 or 443) We’ve moving to a named-based virtual host approach (vs the port-based virtual host approach) This means we have many more certificates to manage too Admission and Aid @ Princeton

Non-Standard Ports (cont. ) Admission Apache apps. princeton. edu admit. princeton. edu cas. princeton. edu Log In and Registration (CAS) finaid. princeton. edu Fin Aid 3 URLs: https: //admit. princeton. edu/ https: //cas. princeton. edu/ https: //finaid. princeton. edu/ Admission and Aid @ Princeton