Protecting an MDB application from system resource problems
We can configure the system so that if there is a problem with a dependent external system resource, the enterprise application is stopped before messages are moved unnecessarily to an exception destination. This configuration also handles occasional problems with messages without blocking the enterprise application.
This task assumes that we have deployed an enterprise application containing a message-driven bean (MDB) that interacts with external system resources.
The destination to which the MDB listens must use an exception destination. This exception destination can be the system default, or one configured specifically for the destination.
To complete this task, we need the following information:
- The enterprise application containing the MDB.
- The dependent external system resources.
- An acceptable value for the Sequential failed message threshold, that is, the maximum number of sequential failures of delivery of messages, after which the MDB is stopped. This property applies to sets of messages.
- An acceptable value for the Delay between failing message retries, that is, the time in milliseconds before a failing message is available to be delivered to the MDB. Other messages might be delivered during this period, unless the Sequential failed message threshold and the maximum concurrency is set to 1.
- An acceptable value for the Maximum failed deliveries per message, that is, the maximum number of failed attempts to process a message, after which the message is forwarded from its intended destination to the exception destination. This property applies to individual messages.
When an MDB fails to process a message, the message is rolled back and made available to the MDB again. Typically, the messaging system is configured in one of the following ways:
- Failed messages are retried a finite number of times, and if they continue to fail, they are moved to an exception destination allowing subsequent messages to be processed.
- Failed messages are retried indefinitely until the problem is rectified.
Configuration (1) protects the MDB from an occasional problem message that prevents subsequent messages from being processed. However, if there is a prolonged problem with a resource that the enterprise application or business-level application depends on, for example a database, all messages sent to the destination might be moved to the exception destination.
Configuration (2) blocks the delivery of messages until the original failing message problem is resolved. This configuration prevents messages being moved unnecessarily to an exception destination, but it also blocks subsequent messages as soon as a single problem message fails to be processed.
We can configure the activation specification for an MDB so that the MDB endpoint is stopped automatically when a number of failures with sequential messages are detected. These failures indicate a problem with a dependent resource. When the problem is resolved, the MDB endpoint is restarted manually. This configuration tolerates occasional message failures, allowing individual problem messages to be moved to the exception destination without blocking the entire MDB.
Use the following steps to protect an enterprise application from dependent external system resource failures.
Tasks
- Navigate to the deployed enterprise application containing the MDB.
- From the MDB, navigate to its JMS activation specification. Click Resources -> JMS -> Activation specifications -> activation_specification_name.
- Enter a value for the Sequential failed message threshold and the Delay between failing message retries.
- Save the configuration.
- Navigate to the destination to which the MDB is listening. Click one of the following paths, as appropriate:
- Service integration -> Buses -> bus_name -> [Destination resources] Destinations -> queue_name
- Service integration -> Buses -> bus_name -> [Destination resources] Destinations -> topic_space_name
- Enter a value for the Maximum failed deliveries per message.
- Save changes to the master configuration.
We have configured the enterprise application, or business-level application, to protect itself from the sort of external resource problem that can occur at any time. This means that, in the event of a system resource problem, the MDB is stopped automatically when the Sequential failed message threshold is reached for any message.
What to do next
When the system resource that failed becomes available, we can restart the system resource and resume the MDB. The messages that failed during the system resource downtime are retried instead of being left on an exception destination.
Subtopics
- Example 1: Handling a planned outage of an MDB application external resource
We can configure the system so that, if there is a problem with a dependent external system resource, the enterprise or business-level application can continue.- Example 2: Automatically stopping an MDB when a system resource becomes unavailable
To prepare for a system resource becoming unavailable, configure the system to stop the message-driven bean (MDB) automatically after a small number of message failures, and to alert you to the problem.- Example 3: The system experiences problems with a problem message
To prepare for a problem message, configure the system to move that message to an exception destination and allow other messages to be processed successfully.- Example 4: Automatically stopping an MDB when no exception destination is specified
To prepare for a system resource becoming unavailable or a problem message, configure the system to stop the message-driven bean (MDB) automatically. To maintain message ordering, do not use an exception destination.