Cloud Infrastructure and Operations Chapter 2B/8 Page Main concept from which Cloud Computing developed

Transcription

1 Cloud Infrastructure and Operations Chapter 2B/8 Page 1 Chapter 2: Cloud Layer Setup and Maintenance Topics covered: 2.1 Basic Cloud Computing Concept 2.2 Benefits of Cloud Computing 2.3 Main concept from which Cloud Computing developed 2.4 Types of Cloud Computing 2.5 Role of Network and Servers in Cloud Computing 2.6 Roles of IaaS, PaaS and SaaS 2.7 Benefits and cost elements of Private and Public Cloud 2.8 Types of Cloud provisioning software and its characteristics 2.9 Monitoring VMware vcloud director 2.10 Identify industry standard power rack configuration and setup.

2 Cloud Infrastructure and Operations Chapter 2B/8 Page 2 Basic Cloud Computing Concept Overview of Cloud Computing. According to the American National Institute of Standards and Technology (NIST): Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. NIST Special Publication (September 2011) 5 Cloud characteristics On-demand self-service; within an existing contract, a user/customer can add new services, storage space or computing power without a formal request for a change. Broad network access; this is what Microsoft s Bill Gates envisioned in the late nineties: "any time, any place, and any device. And of course also with enough bandwidth. Resource pooling; also known as Multi-tenancy. Many users/customers share a varied type and level of resources. Rapid elasticity; this characteristic has to do with the fundamental Cloud aspects of flexibility and scalability. For example, web shops need a standard amount of transaction ability during the year, but need to peak around Christmas, without any increase in charges. Measured service; this means monitored, controlled, and reported services. This characteristic enables a pay-per-use service model. It has similarities to the mobile telephone concept of service bundles, where you pay a standard subscription for basic levels, and pay extra for additional service without changing the contract. Benefits/Limitations of Cloud Computing Like any service model, Cloud has many benefits and limitations. Benefits: Reduced Cost; because of the pay-per-use and/or subscription model clients do not have to invest in IT infrastructure up front. For Cloud providers they are able to lower costs because of the economics of scale and the multi-tenancy principle; no floor space is left unused. Automated; updates, security patches and backups are no longer a concern of the customer as everything is automated. Flexibility; Cloud computing offers more flexibility than legacy IT services. Within an existing or standard contract a customer can change the Cloud mix of services in a dynamic way to support business demands and requirements.

3 Cloud Infrastructure and Operations Chapter 2B/8 Page 3 More Mobility; data and applications can be accessed through the Internet from any type of smart computing device at anytime and anywhere. Shared Resources; customers share resources allowing more facilities and supporting services made possible. Agility and scalability; enterprises can scale their IT infrastructure up or down on demand. Back to core business; most types of start-up business do not need to own and operate IT. They can focus on their core business. More IT functionality for a lower price; by sharing of resources. Limitations Internet access; no Internet access means no Cloud access Security; If the management of Cloud data centres security is bad then security is a big concern. Privacy; because of the uncertainty where your data is stored in combination with varying national and international legislation on privacy, you never know who can access your data Service level agreement; does your agreement allow for flexibility and scalability? Vendor lock-in; application migration to another Cloud computing provider may not be possible due to incompatible platform used. Key factors that have contributed to the present day existence of the Cloud. The development of the Internet. The move from Mainframe computing to the present day myriad of personal devices with connection to the Internet. The development of computer networks. Virtualization

4 Cloud Infrastructure and Operations Chapter 2B/8 Page 4 Virtualization Virtualization is technology that lets you create useful IT services using resources that are bound to hardware. It allows you to use a physical machine s full capacity by distributing its capabilities among many users or environments. In more practical terms, imagine you have 3 physical servers with individual dedicated purposes. One is a mail server, another is a web server, and the last one runs internal legacy applications. Each server is being used at about 30% capacity But with virtualization, you can split the mail server into 2 unique ones that can handle independent tasks so the legacy apps can be migrated. It s the same hardware, you re just using more of it more efficiently. Keeping security in mind, you could split the first server again so it could handle another task increasing its use from 30%, to 60%, to 90%. Types of virtualization and its uses: Access virtualization Allows access to any application from any device. Application virtualization Enables applications to run on many different operating systems and hardware platforms. Processing virtualization Makes one system seem like many, or many seem like one. Network virtualization Presents an artificial view of the network that differs from the physical reality. Storage virtualization Allows many systems to share the same storage devices, enables concealing the location of storage systems, and more. For the average Cloud user this means that hardware, applications and data can be located anywhere in the Cloud; we only need to access and use them. Virtualization is one of the important technologies that propel Cloud computing to what it is today. Cloud computing architectures Two key architectural principles apply to Cloud computing, multipurpose architecture and multi-tenancy service-oriented

5 Cloud Infrastructure and Operations Chapter 2B/8 Page 5 Multipurpose architecture Virtualization is one of the key factors that contribute to this characteristic. Many different types of implementation can run on the same (type of) platform in a virtual environment. Key Characteristics: Multi-tiered (different tiers for Database, application and load balancing) Virtualization ensures scalability, reliability and security to all customers. Interoperable layers Open standards Multi-tenancy architecture Multi-Tenancy: A large number of users, basically multi tenants, make the Cloud platform most efficient in terms of usability of the application and Do More With Less Resources. Some examples of multi-tenant solutions: Salesforce.com: a SaaS-based CRM application for various businesses using common framework and multi tenancy model Microsoft Dynamics CRM Online offering Multi-Tenancy IaaS/PaaS offerings from Amazon or IBM or Microsoft Azure Note: If security cannot be guaranteed at all levels of the infrastructure, from the basic infrastructure to the web interface, customers will be hesitant to adopt this model. Service Oriented Architecture (SOA) Service-Oriented Architecture (SOA) is an architectural style that supports service orientation. Is a logical representation of a repeatable business activity that has a specified outcome (e.g., check customer credit; provide weather data, consolidate drilling reports) Is self-contained May be composed of other services Is a black box to consumers of the service A service-oriented architecture is basically a collection of services that communicate with each other. This communication may be simply passing data between two or more services or a jointly managed activity. Connecting these services in many cases involves Web services using XML.

6 Cloud Infrastructure and Operations Chapter 2B/8 Page 6 Types of Cloud Computing Four Deployment models: Private Cloud, Community Cloud, Public Cloud and Hybrid Cloud. Type 1 : The Private Cloud A private Cloud resides on a private network that runs on (part of) a data centre that is exclusively used by one organization. Services are delivered to the different parts of the organization, i.e. its business units and internal departments like human resources and finance. The goal is to support the organization s business objectives in an economically sound way, but more importantly in a secure way. A Private Cloud solution is usually chosen when there is a need to comply with external regulations and legislation causing the need for a high degree of governance. The downside is a high degree of total cost of ownership (TCO). Type 2 : The Public Cloud A public cloud is one based on the standard cloud computing model. A service provider makes resources, such as virtual machines (VMs), applications or storage, available to the general public over the internet. Public cloud services may be free or offered on a pay-per-usage model. Benefits : lower TCO high flexibility and scalability of capacity, also called Elasticity Limitations: a lower level of security and privacy making it more difficult to comply with different types of international legislation. Sharing basic infrastructure like storage, database servers or applications can all cause (data) security and privacy issues. Type 3 : The Community Cloud The Community Cloud delivers services to a specific group of organizations and/or individuals that share a common goal. Examples are national educational institutes, community centres, etc. It can help to reduce costs, improve performance and privacy and security without raising TCO in a significant way.

7 Cloud Infrastructure and Operations Chapter 2B/8 Page 7 (Last) Type 4 : The Hybrid Cloud Hybrid Cloud Is a mix of several private and public Cloud solutions from several providers into one IT infrastructure. For example, a companyhas the enterprise resource planning (ERP) systems running on a Private Cloud solution, while the common office applications are run by the Google Apps for business solution. This results in cost savings and does not compromise the integrity of core business services. Roles of network and servers in Cloud computing Overview of Servers and Network Virtualization Hardware components commonly found in a typical Cloud datacenter setup: Blade servers and Rack mount servers running as Database servers, Application servers, Web servers and more. Backup servers, Network/domain servers (Windows server, Unix, Linux) Workstation or virtual desktop Local Area Network (LAN) providing the network connectivity Storage Area Network (SAN); dedicated network that provides access to consolidated, data storage. Network Attached Storage (NAS) Main software components Virtualization software (like VMware, Microsoft and Citrix) Cloud application software (i.e. CRM, Office suite, ERP, etc.) Database software (Oracle, IBM DB2, Microsoft SQL, etc.) Middleware: A set of intermediaries for the components in a distributed computing system. Operating systems (Microsoft, UNIX, open source Linux) Architectural considerations: In order to make maximum use of the interoperability principle of Cloud computing it is important to standardize the architecture by using standard protocols and other building blocks that are location and vendor independent. Some examples of these are: virtualization, SAN and Blade servers, load balancing. To manage the infrastructure, a central management console is needed. Successful Cloud solutions require specific performance criteria. Some examples are: Physical components: Scalability of server and storage capacity Storage: SAN performance (read, write and delete times) Internal processes: Connection speed, Deployment latency and Lag time

8 Cloud Infrastructure and Operations Chapter 2B/8 Page 8 Virtual Private Network (VPN) access A Cloud VPN can help you to create a secure connection between your Private Cloud and your remote users, external service providers and Public or Community Cloud providers. The benefits of using a VPN are: Remote secure connectivity; extends your LAN/WAN to a global scale Cheaper than using traditional rented network connections; More mobility for employees; improve productivity for employees working from their home Virtual private network technology is based on the idea of tunneling. For Internetbased VPNs, packets in one of several VPN protocols are encapsulated within Internet Protocol (IP) packets. VPN protocols also support authentication and encryption to keep the tunnels secure. Tunneling is the process of placing a packet within another packet and sending it over a network. Three different protocols are needed for tunneling: Carrier protocol - The protocol used by the network, Encapsulating protocol - The protocol wrapping the original data and Passenger protocol - The original data (i.e. IP). Key building blocks of VPN are: IP-tunneling Firewalls Internet Protocol Security Protocol (IPsec) and Encryption, and Authentication, authorization and accounting servers (AAA).

9 Cloud Infrastructure and Operations Chapter 2B/8 Page 9 Cloud Standards Some of the Standards : ISO/IEC :2011; Information technology -- Service management -- Part 1: Service management system requirements ISO/IEC :2012; Information technology -- Service management -- Part 2: Guidance on the implementation of service management systems ISO/IEC 27001:2005; Information technology -- Security techniques Information security management systems Requirements ISO/IEC 27002:2005; Information technology -- Security techniques -- Code of practice for information security management ISO/IEC 24762:2008; Information technology -- Security techniques -- Guidelines for information and communications technology disaster recovery services Audit standards: COBITTM 4.1 Guidance for executive management to govern IT within the enterprise ISO/IEC 38500:2008; Corporate governance of information technology Cloud Service Models : IaaS, PaaS and SaaS There are many types of Cloud services like webmail, hosted Exchange, online storage, online backup, social media, etc. All these services can be grouped under three main Cloud service models: Software as a Service (SaaS) Platform as a Service (PaaS) Infrastructure as a Service (IaaS)

10 Cloud Infrastructure and Operations Chapter 2B/8 Page 10 Cloud service model 1 : Software as a Service (SaaS) SaaS services were developed from ASP solutions into Cloud solutions. An organization does not need to develop their own software, they simply pay to use it to the Cloud provider that supply the software. Typical examples of SaaS solutions are: CRM (Customer Relation Management) ERP (Enterprise Resource Planning) Billing and invoicing Web Hosting E-commerce Transaction processing Online collaboration Key characteristics: software hosted offsite (not in location of a company) software on demand (use only when needed) software package no modification of the software plug-in software: external software used with internal applications (hybrid Cloud) vendor with advanced technical knowledge user dependent on vendor s service The key benefits are that the customer does not need to worry about the development and management of these applications. The provider is responsible for updates and managing licenses, and most service management parameters like scalability, availability, maintenance and service continuity. A customer pays by means of a subscription or pay-per-use model Cloud service model 2 : Platform as a Service (PaaS) This service offers customers the ability to use a computer on demand without owning one. Two such services are: Microsoft Azure Google App engine

11 Cloud Infrastructure and Operations Chapter 2B/8 Page 11 Benefits: save costs in ownership, No worry on management and maintenance. Great for a short term project development environment, platforms are used for the time the project runs. offers on demand scalability. If needed, the platform performance can be scale up to meet temporary demand and scale down after that. Key characteristics: Mostly used for remote application development Remote application support provided Platform may have special features Low development costs Cloud service model 3 : Infrastructure as a Service (IaaS) Infrastructure as a service (IaaS) is a form of cloud computing that provides virtualized computing resources over the internet. IaaS services are sold by hardware service providers. Customers can rent physical or virtual hardware like storage, servers or Internet connectivity. Services are sold according to a utility computing service and billing model. Key characteristics: Dynamic scaling (can be expanded anytime) Desktop Virtualization Policy-based services Private Cloud Benefits of Private Cloud No restrictions of network bandwidth, No external security exposures, No worry on legal issue. It is controlled and managed by the organization itself thus provide better security, accountability, and resilience than public cloud. Costs The cost of private cloud can be borne by the organization as a whole, rather than by individual users. Private clouds can be especially useful for larger enterprises, because they can gain greater economies from shared use of pooled resources. Limitations Capital investment: Significant capital investment (money) is required for the parent organization.

12 Cloud Infrastructure and Operations Chapter 2B/8 Page 12 Time-to-market: Most companies will take 6-36 months to establish a usable private cloud. If high availability is required, costs will go up. Technology: An organization needs to make important decisions such as buying best-of-breed point technology solutions, and this inevitably means significant integration work or buying a single-vendor solution, which might not be best fit in all areas. Although each deployment option has its own benefits and drawbacks, what you need to do is identify those situations in which you can apply the cloud to reap the maximum rewards with minimum risk. Advantages and disadvantages in a Public cloud deployment Public Cloud infrastructure can made available to the general public or a large industry group It is owned by an organization selling cloud services. Public does not mean free. Public cloud providers may offer some services free of charge, but in general they charge enough on average to at least cover their costs. Also, public does not mean that user data is visible to the public at large. Cloud providers implement security mechanisms to control access to data. The main benefit of using a public cloud, as opposed to creating a private cloud, is easy adoption. The provider has done the work needed to create the cloud; the consumer just need to get connected and configure the resources to be used. 4 Cloud Provisioning Software Types Software Type 1 : Vmware vcloud Director VMware vcloud Director is a software solution that enables enterprises to build secure, multitenant private clouds. It does this by by pooling infrastructure resources into virtual datacenters. Users access the resources through Web-based portals and programmatic interfaces as fully automated, catalogue-based services. The IT organizations will act as service providers, driving innovation and agility while increasing IT efficiency and enhancing security How it works: It delivers Infrastructure as a Service. IT organizations can manage resources more efficiently with complete abstraction between consumption and delivery of IT services.instead of providing users or organizations with each physical infrastructures, IT teams can deliver isolated virtual datacenter that draw resources from a common physical infrastructure.

13 Cloud Infrastructure and Operations Chapter 2B/8 Page 13 How is VMware vcloud Director Used? When deployed, IT organizations become cloud service providers for the business, achieving the benefits of cloud computing without sacrificing security or control. Users experience unprecedented responsiveness and agility, and IT management can reduce costs through increased consolidation, task automation, and simplified administration. All this is achieved cost-effectively while leveraging existing investments in people and technology. VMware vcloud Director integrates with existing VMware vsphere deployments and supports existing and future applications by providing elastic standard storage and networking interfaces, such as Layer-2 connectivity and broadcasting between virtual machines. VMware vcloud Director utilizes open standards to preserve deployment flexibility and pave the way to the hybrid cloud and customers can extend their datacenter capacity to include secure and compatible public clouds and manage them as easily as their own private cloud Key Features Create virtual data centres Virtual datacenters are logical constructs of compute, storage and networking capabilities. Support multi-tenant environments Users can be grouped into organizations that can represent any policy group. Each has isolated virtual resources, independent LDAP- authentication, specific policy controls, and unique catalogues. These features enable secure multi-tenancy and safe sharing of infrastructure. vshield security technologies Integrated vshield Edge technologies such as perimeter protection, port-level firewalling, network address translation and DHCP services, offer virtualizationaware security, simplify application deployment, and enforce boundaries required by compliance standards. Infrastructure service catalogue Users are empowered to deploy and consume pre-configured infrastructure and application services, such as virtual appliances, virtual machines, operating system images, and other media with the click of a button from central catalogues. This enables IT teams to standardize offerings, simplifying troubleshooting, patching, and change management. Self-service portal Users get direct access to their catalogues and virtual data centres through a userfriendly Web portal. VMware vcloud API and Open Virtualization Format The vcloud API is an open, REST-based API that allows scripted or 3 rd party software to access to consume its resources, such as vapp upload/download, catalog management, and other operations. The vcloud API makes basic transfer using the open virtualization format (OVF), which preserves application properties, networking configuration, and other settings.

14 Cloud Infrastructure and Operations Chapter 2B/8 Page 14 Software Type 2 : Automation and Orchestration Administrators can automate routine tasks, build ITIL workflows, and script complex operations with ease. Software Type 3 : Microsoft System Centre 2012 Microsoft System Centre 2012 offers the capability to create a Cloud Infrastructure just like VMware. It is an integrated management platform that helps you to easily and efficiently manage your datacenter, client devices, and hybrid cloud IT environments. System Centre 2012 offers comprehensive management of applications, services, physical resources, hypervisors, software defined networks, configuration, and automation in a single offering. Software Type 4 : Cloud & Data Centre & Client Management Microsoft System Centre 2012 provides a common toolset to manage infrastructure and applications across private, hosted, and public clouds.

15 Cloud Infrastructure and Operations Chapter 2B/8 Page 15