In the Additional Test Options section, select the Enable Stress Test option if you Click Test Web Service to initiate the test.

12-6 Oracle Fusion Middleware Security and Administrators Guide for Web Services Figure 12–5 Security Parameters on the Web Services Test Page Enabling Quality of Service Testing Three characteristics of Quality of Service QoS can be tested: reliable messaging WS-RM, WS-Addressing, and Message Transmission Optimization Mechanism MTOM in the Quality of Service section of the Test Web Service Page Figure 12–6 . For each type of Quality of Service, there are three options: ■ WSDL Default – Execute the default behavior of the WSDL. For example, if WSDL Default is selected for MTOM, and the WSDL contains a reference to an MTOM policy, the policy is enforced. If the WSDL does not contain a reference to an MTOM policy, then no MTOM policy is enforced. ■ None – No policy for the specific QoS, even if it is included in the WSDL, is executed. For example, if None is selected for WS-RM, no reliable messaging policy is enforced. If the WSDL contains a reference to a reliable messaging policy, it is ignored. ■ Custom – Enforce a custom policy. For example, if a WS-Addressing policy is referenced in the WSDL, this policy will be ignored, and the policy specified in URI will be used instead. ■ URI – Specify the location of the policy to be enforced. Figure 12–6 Quality of Service Parameters on the Test Web Service Page Enabling HTTP Transport Options The test mechanism uses the WSDL to determine whether a SOAP action is available to test. If the WSDL soap:operation has a soapAction attribute, then this is displayed and Enable SOAP Action is enabled. When a request is sent with Enable SOAP Action enabled, then the SOAP action HTTP header is sent. Note: This section is not applicable when testing RESTful Web services. Note: This section is not applicable when testing RESTful Web services. Testing Web Services 12-7 To change this behavior, clear the Enable SOAP Action box, in which case the HTTP header is not sent. Or, you can override the behavior by providing a different value in the SOAP Action field. You must already know the SOAP action that you want to test, and the syntax. Figure 12–7 HTTP Transport Options on the Test Web Service Page Stress Testing the Web Service Operation Select the Enable Stress Test check box Figure 12–8 to invoke a continuous series of invocations of the Web service operation Figure 12–8 . The following options are available: ■ Concurrent Threads – The number of concurrent threads on which the invocations should be sent. The default is 5 threads. ■ Loops per Thread – The number of times to invoke the operation. The default is 10 times. ■ Delay in Milliseconds – The number of milliseconds to wait between operation invocations. The default is 1000 milliseconds 1 second. Figure 12–8 Stress Testing Parameters on the Test Web Service Page When you invoke the test, a progress box indicates the test status. When the stress test is complete, a confirmation page displays the results of the test. The Response tab provides additional information about the stress test, including the number of tests with errors, and the average, minimum, and maximum response times. Details about each test are provided in tabular form. For each test, you can view the thread and loop numbers, the duration of the test, the start and end times for the test, and the invocation status. You can filter the fields displayed in the table using the View menu. 12-8 Oracle Fusion Middleware Security and Administrators Guide for Web Services Figure 12–9 Stress Test Results on Test Web Service Page Disabling the Test Page for a Web Service Disabling the test page for a Web service allows you to increase security by reducing the externally visible details of an application that exposes Web services. To disable the Test Page using Fusion Middleware Control 1. Navigate to the Web Services summary page, as described in Navigating to the Web Services Summary Page for an Application on page 6-4. 2. In the Web Service Details section of the page, click on the plus + for the Web service to display the Web service ports if they are not already displayed.

3. Click the name of the port to navigate to the Web Service Endpoint page.

4. Click the Configuration tab.

5. In the Endpoint Test Enabled field, select False from the list.

6. Click Apply.

Note: This section does not apply to Java EE Web services. Note: Disabling the Endpoint Test Enabled control affects only the Web service’s externally-visible test page. It does not affect the Web service test feature described in this chapter. 13 Monitoring the Performance of Web Services 13-1 13 Monitoring the Performance of Web Services This chapter describes how to monitor the performance of a Web service using Fusion Middleware Control. The chapter includes the following sections: ■ Overview of Performance Monitoring ■ Viewing Web Service Statistics from the Summary Page ■ Viewing Web Service Statistics for a Server Instance ■ Viewing Web Service-Specific Statistics ■ Viewing Endpoint-Specific Operations Statistics ■ Viewing the Security Violations for a Web Service In addition to the monitoring features described in this chapter, see Analyzing Policy Usage on page 7-26 to analyze how policies are used by one or more Web services. Overview of Performance Monitoring From the Web Services home page in Fusion Middleware Control, you can do the following: ■ Monitor Web services faults, including Security, Reliable Messaging, MTOM, Management, and Service faults. ■ Monitor Security failures, including authentication, authorization, message integrity, and message confidentiality failures. ■ Configure your Web services ports, including enabling and disabling the port, attaching policies to Web services, and enabling or disabling policies. The Application home page also displays select Web service details if the application includes Web services. When Are Web Service Statistics Started or Reset? The statistics described in this chapter are started or reset when any one of the following events occur: ■ When the application is being deployed for the first time. ■ When the application is redeployed. Note: Not all of the monitoring features described in this chapter apply to Java EE Web services. 13-2 Oracle Fusion Middleware Security and Administrators Guide for Web Services ■ If the application is already deployed, and the hosting server is restarted. Viewing Web Service Statistics from the Summary Page In Fusion Middleware Control, the Web Services summary page for an application displays the collective Summary and faultviolation information for all Web services in the application, as shown in Figure 13–1 . The Charts section shows a graphical view of all security faults for a Web service. To navigate to the Web Service Summary page for a Web service 1. From the navigator pane, click the plus sign + for the Application Deployments folder to expose the applications in the domain, and select the application. The Application Deployment home page is displayed.

2. Using Fusion Middleware Control, click Application Deployment, then click Web

Services . The Web Services Summary page for this application is displayed. The page displays Web service endpoints as well as application-level metrics. The following Web service-wide statistics are displayed: ■ Web Services Number of Web services in the application ■ Web Service Endpoints ■ Web Service Endpoints Disabled ■ Total Policy Violations ■ Total Faults ■ Invocations Completed Figure 13–1 Web Services Performance Summary and Charts Viewing Web Service Statistics for a Server Instance The server-side Web services page displays statistics for all of the Web services on that server.