Mastering Enterprise JavaBeans™ and the Java 2 Platform, Enterprise Edition - Roman E
..pdf
290 
M A S T E R I N G E N T E R P R I S E J A V A B E A N S
Distributed Transactions
The most basic flat transaction occurs with a single application server tied to a single database. Depending on the functionality of your application server’s transaction service, you may be able to perform distributed flat transactions as well. Distributed flat transactions obey the same rules as simple flat transactions— if one component on one machine aborts the transaction, the entire transaction is aborted. Distributed flat transactions can run across multiple application servers and databases. This means you can have components deployed in one application server running under the same transaction as other components deployed in another application server. This may be necessary if multiple machines are collaborating across a network to solve a business problem. Distributed flat transactions allow multiple application servers, written by different vendors, to collaborate under one transactional hood. While this may not be a reality today, the potential exists for such a scenario in the future, as we’ll see a bit later.
Durability and the Two-Phase Commit Protocol
One important ACID property is durability. Durability guarantees that all resource updates that are committed are made permanent. Durability is easy to implement if you have one storage into which you are persisting. But what if multiple resource managers are involved? If one of your resources undergoes a catastrophic failure, such as a database crash, you need to have a recovery mechanism. How do transactions accomplish this?
One way would be to log all database operations before they actually happen, allowing you to recover from a crash by consulting the log and reapplying the updates. This is exactly how transactions guarantee durability. To accomplish this, transactions complete in two phases:
Phase One begins by sending a before commit message to all resources involved in the transaction. At this time, the resources involved in a transaction have a final chance to abort the transaction. If any resource involved decides to abort, the entire transaction is cancelled and no resource updates are performed. Otherwise, the transaction proceeds on course and cannot be stopped, unless a catastrophic failure occurs. To prevent catastrophic failures, all resource updates are written to a transactional log or journal. This journal is persistent, so it survives crashes and can be consulted after a crash to reapply all resource updates.
Phase Two occurs only if Phase One completed without an abort. At this time, all of the resource managers, which can all be located and controlled separately, perform the actual data updates.
Go back to the first page for a quick link to buy this book online!
Transactions 
291
The separation of transaction completion into two phases is called the two-phase commit protocol or 2PC. The two-phase commit protocol is useful because it allows for many transaction managers and resource managers to participate in a transaction across a deployment. If any participant votes that the transaction should abort, all participants must roll back.
In the distributed two-phase commit, there is one master transaction manager called the distributed transaction coordinator. The transaction coordinator runs the show and coordinates operations between the other transaction managers across the network. The following steps occur in a distributed two-phase commit transaction:
1.The transaction coordinator sends a prepare to commit message to each transaction manager involved.
2.Each transaction manager may propagate this message to the resource managers that are tied to that transaction manager.
3.Each transaction manager reports back to the transaction coordinator. If everyone agrees to commit, then the commit operation that’s about to happen is logged in case of a crash.
4.Finally, the transaction coordinator tells each transaction manager to commit. Each transaction manager in turn calls each resource manager, which makes all resource updates permanent and durable. If anything goes wrong, the log entry can be used to reapply this last step.
This process is shown in Figure 10.9.
The Transactional Communications Protocol and
Transaction Contexts
A distributed two-phase commit transaction complicates matters because the transaction managers must all agree on a standard mechanism of communicating. Remember that each of the participants in a distributed transaction may have been written by a different vendor, such as a deployment with heterogeneous application servers. The communication mechanism used is called the transactional communications protocol. An example of such a protocol is the
Internet Inter-ORB Protocol (IIOP), which we describe in Chapter 11.
The most important piece of information sent over the transactional communications protocol is the transaction context. A transaction context is an object that holds information about the system’s current transactional state. It is passed around between parties involved in transactions. By querying the transaction context, you can gain insight into whether you’re in a transaction, what stage of a transaction you are at, and other useful data. In order for any component
Go back to the first page for a quick link to buy this book online!
292 
M A S T E R I N G E N T E R P R I S E J A V A B E A N S
Transaction Participants
|
1: prepare to commit |
Transaction |
|
|
|
Manager |
|
|
2: return |
|
|
Transaction |
4: |
Resource Manager |
|
Coordinator |
commit |
||
|
|||
|
5: return |
Transaction |
|
|
|
||
|
|
Manager |
Transaction
Manager
3: log result
Resource Manager
Figure 10.9 A distributed flat transaction using a two-phase commit protocol.
to be involved in a transaction, the current thread in which the component is executing must have a transaction context associated with it.
The EJB 1.0 specification does not define a mechanism for transaction context propagation with the Java Remote Method Invocation (RMI) native protocol. This means that application servers from different vendors cannot participate in a distributed two-phase commit transaction because they will be unable to communicate in a standard way.
Fortunately, transaction context propagation is built in to CORBA’s Object Transaction Service (OTS) and the Internet Inter-ORB Protocol (IIOP). Application servers that use these technologies should be interoperable and run in a distributed 2PC transaction. Sun is likely to standardize on a protocol that handles this as well, called EJB/IIOP. But until then, you can expect to see very little support for distributed two-phase commit transactions across heterogeneous application servers. For most users, this is acceptable because distributed 2PC has very poor performance and because most deployments will bet on a single application server vendor.
Go back to the first page for a quick link to buy this book online!
Transactions 
293
It’s important to understand which communications protocol your application server uses. If you want to perform a distributed two-phase commit transaction, the transaction participants must agree on a standard protocol.
Programmatic Transactions in EJB
We wrap up this chapter with a discussion of how you can control transactions programmatically in EJB. Programmatic transactions allow for more advanced transaction control than declarative transactions, but they are trickier to use. To control transaction boundaries yourself, you must use the Java Transaction API (JTA). We begin by taking a look at how the JTA was established.
CORBA’s Object Transaction Service (OTS)
When we described the ACID properties earlier in this chapter, we mentioned that many parties, such as an enterprise bean and a database driver, can participate in a transaction. This is really an extension to the basic ACID properties, and it’s the primary reason that Object Management Group (OMG) developed a standardized Object Transaction Service (OTS) as an optional CORBA service. OTS improved on earlier transaction systems that didn’t support multiple parties participating in a transaction.
OTS is a suite of well-defined interfaces that specify how transactions can run behind the scenes—interfaces that the transaction manager, the resource manager, and the transactional objects use to collaborate. OTS is decomposed into two parts: CosTransactions and CosTSPortability.
The CosTransactions interfaces are the basic interfaces that transactional objects/components, resources, resource managers, and transaction managers use to interoperate. These interfaces ensure that any combination of these parties is possible.
The CosTSPortability interface offers a portable way to perform transactions with many participants.
The inner workings of OTS are not relevant to the development of enterprise beans. As an EJB programmer, you should need to think only about writing your application, not about low-level transaction services. This is how EJB achieves rapid application development; you can write a distributed server-side application without understanding complex middleware APIs. EJB shields you from transaction services such as OTS.
Go back to the first page for a quick link to buy this book online!
294 
M A S T E R I N G E N T E R P R I S E J A V A B E A N S
The Java Transaction Service (JTS)
Sun realized that you, as an application developer, should not care about most of OTS. Only system-level vendors need to be concerned with the inner workings of OTS. Part of OTS is very applicable to you, however, because part of OTS allows you to demarcate transaction boundaries programmatically. Hence, Sun has split up OTS into two sub-APIs: the Java Transaction Service (JTS) and the
Java Transaction API (JTA).
The Java Transaction Service (JTS) is a Java mapping of CORBA OTS for sys- tem-level vendors. JTS defines the interfaces used by transaction managers and resource managers behind the scenes. It is used to have various vendors’ products interoperate. It also defines various objects passed around and used by transaction managers and resource managers. As an application programmer, you should not care about most of OTS, and you should not care about JTS at all. What you should care about is the Java Transaction API (JTA), which allows you to programmatically control transaction boundaries.
The Java Transaction API (JTA)
The Java Transaction API (JTA) is a transaction API used by component and application developers. You can use the JTA in your client and bean code to programmatically control transactional boundaries. The JTA package is a standard Java extension, and hence the package will be automatically downloaded if needed.
You can do very useful things with the JTA, such as start a transaction inside your bean, call other beans that also are involved in a transaction, and control whether things commit or abort. Nonbeans can use the JTA as well—the client code that calls your beans can use the JTA to control transaction boundaries in a workflow scenario, where the client code is calling multiple beans and wishes each bean to participate in one transaction.
If you use JTA to demarcate transaction boundaries in your client code, you must be careful. Once you’ve invoked a method on a bean and that bean is associated with a transaction, you can’t call another method that would involve it in a different transaction (or no transaction). You first must complete the original transaction with a commit or an abort. If you try to do otherwise, your client code will receive a java.rmi.RemoteException.
JTA consists of two interfaces: one for X/Open XA resource managers (which we don’t need to worry about) and one that we will use to support programmatic transaction control. The interface you use to programmatically control transactions is javax.transaction.UserTransaction.
Go back to the first page for a quick link to buy this book online!
Transactions 
295
javax.transaction.UserTransaction
The javax.transaction.UserTransaction interface (formerly called javax.jts
.UserTransaction) allows you to programmatically control transactions. Here is what the javax.transaction.UserTransaction interface looks like:
package javax.transaction;
interface UserTransaction {
public static |
final int |
STATUS_ACTIVE; |
public static |
final int |
STATUS_MARKED_ROLLBACK; |
public static |
final int |
STATUS_PREPARED; |
public static |
final int |
STATUS_COMMITTED; |
public static |
final int |
STATUS_ROLLEDBACK; |
public static |
final int |
STATUS_UNKNOWN; |
public static |
final int |
STATUS_NO_TRANSACTION; |
public static |
final int |
STATUS_PREPARING; |
public static |
final int |
STATUS_COMMITTING; |
public static |
final int |
STATUS_ROLLING_BACK; |
public abstract |
void begin(); |
public abstract |
void commit(); |
public abstract |
void rollback(); |
public abstract |
void setRollbackOnly(); |
public abstract |
int getStatus(); |
public abstract |
void setTransactionTimeout(int); |
} |
|
As you can see, six methods are exposed by the UserTransaction interface. Three of them—begin, commit, and rollback—are used to begin a new transaction, commit a transaction permanently, and roll back a transaction in case some problem occurred, respectively. The constants for the JTA are summarized in Table 10.2, and the methods are in Table 10.3.
Table 10.2 The javax.transaction.UserTransaction Constants for Transactional Status
CONSTANT |
MEANING |
STATUS_ACTIVE |
A transaction is currently happening and is active. |
STATUS_NO_TRANSACTION |
There is no transaction currently happening. |
STATUS_MARKED_ROLLBACK |
The current transaction will eventually abort because it’s |
|
been marked for rollback. This could be because some |
|
party called setRollbackOnly(). |
STATUS_PREPARING |
The current transaction is preparing to be committed |
|
(during Phase One of the two-phase commit protocol). |
|
|
|
continues |
Go back to the first page for a quick link to buy this book online!
296 |
|
M A S T E R I N G |
E N T E R P R I S E J A V A B E A N S |
Table 10.2 (Continued) |
|
||
|
|
||
CONSTANT |
MEANING |
||
STATUS_PREPARED |
The current transaction has been prepared to be |
||
|
|
|
committed (Phase One is complete). |
STATUS_COMMITTING |
The current transaction is in the process of being |
||
|
|
|
committed right now (during Phase Two). |
STATUS_COMMITTED |
The current transaction has been committed (Phase Two is |
||
|
|
|
complete). |
STATUS_ROLLING_BACK |
The current transaction is in the process of rolling back. |
||
STATUS_ROLLEDBACK |
The current transaction has been rolled back. |
||
STATUS_UNKNOWN |
The status of the current transaction cannot be |
||
|
|
|
determined. |
|
|
|
|
Table 10.3 The javax.transaction.UserTransaction Methods for Transactional Boundary Interaction
METHOD |
DESCRI PTION |
begin() |
Begin a new transaction. This transaction becomes |
|
associated with the current thread. |
commit() |
Run the two-phase commit protocol on an existing |
|
transaction associated with the current thread. Each |
|
resource manager will make its updates durable. |
getStatus() |
Retrieve the status of the transaction associated with this |
|
thread. |
rollback() |
Force a rollback of the transaction associated with the |
|
current thread. |
setRollbackOnly() |
Call this to force the current transaction to roll back. This |
|
will eventually force the transaction to abort. One |
|
interesting use of this is to test out what your components |
|
will do, without having them perform any permanent |
|
resource updates. |
setTransactionTimeout(int) |
The transaction timeout is the maximum amount of time |
|
that a transaction can run before it’s aborted. This is useful |
|
to avoid deadlock situations, when precious resources are |
|
being held by a transaction that is currently running. |
|
|
Go back to the first page for a quick link to buy this book online!
Transactions 
297
Declarative versus Programmatic Transactions Example
We now show you how to write an enterprise bean in two equivalent ways: using programmatic (or bean-managed) transactions and using declarative (or containermanaged) transactions. To illustrate this, we’ll take our bank account example from Chapter 8. This bank account example has a method called deposit() that deposits funds into an account. We’ll make this method transactional.
The following code illustrates a deposit method using declarative transactions:
/**
* Deposits amt into account. */
public void deposit(double amt) throws AccountException { System.out.println("deposit(" + amt + ") called.");
balance += amt;
}
A bean using the above method relies on the EJB container to demarcate transactional boundaries. Therefore, the bean should be deployed with a transaction attribute that provides this (such as TX_REQUIRED, TX_MANDATORY, or TX_REQUIRES_NEW).
The following code illustrates the same method using programmatic transactions:
/**
* Deposits amt into account. */
public void deposit(double amt) throws AccountException { System.out.println("deposit(" + amt + ") called.");
javax.transaction.UserTransaction userTran = ctx.getUserTransaction();
userTran.begin();
balance += amt;
try { userTran.commit();
}
catch (Exception e) {
throw new AccountException("Deposit failed because of " + e.toString());
}
}
Go back to the first page for a quick link to buy this book online!
298 
M A S T E R I N G E N T E R P R I S E J A V A B E A N S
Here, we are controlling the transactional boundaries explicitly in code. Rather than relying on the EJB container to begin and commit transactions, we perform these steps by ourselves. A bean using the above method should be deployed with the TX_BEAN_MANAGED transaction attribute because the bean is performing its own transaction boundary demarcation.
Take a look at the size difference between the two sets of source code above. Bean-managed transactions clutter your source code because you need to write to a transaction API. Container-managed transactions allow you to elegantly write application code and externalize all transaction logic to the container. This is quite analogous to our discussion of container-managed persistence versus bean-managed persistence in Chapter 9.
How to Control Transactions from Client Code
We’ve seen using the Java Transaction API (JTA) from within a bean. But you can also use the JTA in client code that calls your beans. You might want to do this if you have a workflow bean that calls into several smaller beans to perform tasks. You can also use the JTA from Java servlets, stand-alone Java applications, or any other Java code.
In EJB 1.0, your beans can access the JTA UserTransaction interface by calling getUserTransaction() on your context object, as we illustrated in the previous example.
But how do you access the JTA UserTransaction interface from a servlet or other nonbean code? Unfortunately, there is no standardized way to do this in EJB 1.0. EJB 1.1, however, fixes this problem. In EJB 1.1, you can look up the JTA
UserTransaction interface with the Java Naming and Directory Interface
(JNDI). JNDI is a generic lookup facility to look up resources across a network, and it is fully described in Appendix B. The following code illustrates looking up the JTA UserTransaction interface from client code using JNDI and BEA’s WebLogic server. The complete source code is in Part IV, when we use the JTA in an e-commerce deployment.
try {
/*
*1: Set environment up. You must set the JNDI Initial
*Context factory, the Provider URL, and any login
*names or passwords necessary to access JNDI. See
*your application server product's documentation for
*details on their particular JNDI settings.
*/
java.util.Properties env = ...
Go back to the first page for a quick link to buy this book online!
Transactions 
299
/*
* 2: Get the JNDI initial context */
Context ctx = new InitialContext(env);
/*
*3: Look up the JTA UserTransaction interface
*via JNDI
*/
userTran = (javax.transaction.UserTransaction) ctx.lookup("javax.transaction.UserTransaction");
/*
* 4: Execute the transaction */
userTran.begin();
// perform business operations
userTran.commit();
}
catch (Exception e) {
//deal with any exceptions, including ones
//indicating an abort.
}
When you demarcate transactional boundaries in client code, you should be very careful. You should always strive to keep your transactions as short in duration as possible. Longer-lived transactions result in multiuser performance grinding to a halt. If you need a very long transaction (that lasts for minutes, hours, or days) you should use a distributed locking mechanism, such as the CORBA locking service. Unfortunately, there is currently no distributed locking service equivalent in the Java 2 Platform, Enterprise Edition.
Designing Transactional Conversations in EJB
In this chapter we’ve seen that a transactional abort entails an automatic rollback of database updates that were performed during the transaction. But database updates are only half of the picture. Your application code needs to consider the impacts of a failed transaction as well.
When a transaction aborts, your application code has several choices. You can abort your business process and throw an exception back to the client, or you can attempt to retry the transaction several times. But unfortunately, your application cannot sit in a loop retrying transactions forever, as that would yield
Go back to the first page for a quick link to buy this book online!
