IBM Cloud Hyper Protect DBaaS

Transcription

1 IBM Cloud Hyper Protect aas A new hyper secure Database in the IBM Cloud Nourhane Bziouech aas Squad Lead Infrastructure Nourhane.Bziouech@de.ibm.com Holger Wolf aas Development and Test Lead Holger.Wolf@de.ibm.com Horst Hummel Offering Manager Horst.Hummel@de.ibm.com

2 Content The Value of IBM Cloud Hyper Protect aas Technical Overview Cloud Application Service Try it! 2 2

3 IBM Cloud Hyper Protect aas Fully-managed, hyper secure Database The Offering IBM Cloud Hyper Protect aas provides a fully managed, high secure database with the following capabilities: TRUSTED Rely on the LinuxONE server combined with HSBN & SSC - the most secure platform and proven to deliver uninterrupted service. Hyper Secure environment based on Secure Service s (SSC) o Eliminates the thread of rogue insider and snooping by privileged user o Same technology that is used for IBM's Enterprise Blockchain solution o Provides ultimate security and privacy for public cloud environments AFFORDABLE Enjoy elastic cloud pricing Only the data owner (client) controls access to data (no sysadmin access) IBM Z QoS reputation (reliability/resilience) combined with security & scaling. o integrated, highly scalable computer system o handling very large amounts of information for many users at the same time o without users experiencing any failures in service Various types managed with a single set of tools (Experimental only for Mongo EE - additional types planned for later stages) OPEN Get the best of Linux - with the freedom and agility of open source and standards based interfaces. FAST Deploy you Instance within minutes 3

4 IBM Cloud Hyper Protect aas Fully-managed, hyper secure Database Customer problem statement TRUSTED Rely on the LinuxONE server combined with HSBN & SSC - the most secure platform and proven to deliver uninterrupted service. AFFORDABLE Enjoy elastic cloud pricing OPEN Get the best of Linux - with the freedom and agility of open source and standards based interfaces. FAST Deploy you Instance within minutes 4

5 IBM Cloud Hyper Protect aas Fully-managed, hyper secure Database Unique Value Proposition 5 Unique Values Security Hyper secure, certified, tamper-resistant Environment based on HSBN/SSC technology, Encryption of data with very low performance impact. Scalability Ability to scale without sharding, Very large memory sizes allow large single instance inmemory s. Reliability Based on IBM LinuxONE technology. An integrated, highly scalable computer system, handling very large amounts of information for many users at the same time, without users experiencing any failures in service. Additional Values Unmatched Performance IO performance delivered by powerful LinuxONE IO subsystem. Functions Ability to manage different database types with single UI / API, highly granular instance sizes. Integration Optimized integration into other Bluemix offerings (e.g. Watson data services). Designed for easy workload migration between IBM Cloud and on-prem.

6 IBM Cloud Hyper Protect aas Fully-managed, hyper secure Database Key Capabilities / Differentiators 1. It is a framework for full service of different types A common tool-set to manage several s (Mongo, PostgreSQL (under development) and others) Deployed and production usable within minutes 2. It is a fully managed, high secure -aas A hardened config dynamically assembled to best practice. Locked down Virtual Appliance with no privileged access Secure boot sequence for tamper evident detection and no malware 3. It s compute is optimized for performance Fastest Linux compute and high speed network Including crypto accelerators 6

7 Technical Details Comparison Manual installation vs. Cloud usage aas installation background Architecture UI / CLI 7

8 Hyper Protect aas Installation Comparison Manual Installation Hardware / LPAR / Storage / Network Deploy/configure LPARs/VMs and connect to Storage and Network Deploy and Configure Operating System Deploy and Configure a management agent IBM Cloud Hyper Protect aas Get a IBM Cloud ID Select target region and plan size, press create Configure TLS/SSL Setup encryption at rest Setup Cluster/Replicas for HA Setup Monitoring, Logging and Alerts Configure backup procedure Install Upgrades... 8

9 Technical Details Secure Service SSC Image Contains: - All required packages for the operation Configured in Install Mode aas SSC Image File FCP Encrypted FCP Encrypted 9

10 Technical Details Secure Service SSC Image Contains: - Single cluster members can SSC GUI SSC GUI SSC GUI be installed on a single CEC or separated environments aas API SSC API aas API SSC API aas API SSC API FCP Encrypted FCP Encrypted FCP Encrypted FCP Encrypted FCP Encrypted FCP Encrypted 10

11 Content of a Database Image Administration only with RESTFull API Mongo Single Image: used for the installation of a cluster of minium 3 s API Plugin Logstash contains all components for aas to setup System API Database Manager Fully Encrypted Administration only through RESTfull APIs, push service of log data for administration. collectd FCP Encrypted 11

12 Technical Overview User Cloudant IAM IBM Cloud Services aas Dashboard PagerDuty aas Broker Logging Service Metrics Service API Plugin SystemAPI Authentication aas Manager API Plugin SystemAPI aas System Ctrl aas Mgr API Plugin SystemAPI Master Node Worker Node 12

13 Technical Overview User Cloudant IAM IBM Cloud Services aas Dashboard PagerDuty aas Broker Logging Service Metrics Service API Plugin SystemAPI Authentication aas Manager API Plugin SystemAPI aas System Ctrl aas Mgr API Plugin SystemAPI Master Node Worker Node 13

14 Hyper Protect aas 14

15 Technical Overview User Cloudant IAM IBM Cloud Services aas Dashboard PagerDuty aas Broker Logging Service Metrics Service API Plugin SystemAPI Authentication aas Manager API Plugin SystemAPI aas System Ctrl aas Mgr API Plugin SystemAPI Master Node Worker Node 15

16 16 Hyper Protect aas

17 aas Command Line Client $ usage: dmclient [--accept-license] <subcommand>... IBM Cloud Hyper Protect aas API Client positional arguments: <subcommand> cluster-create Create a cluster cluster-delete Delete a cluster cluster-list List clusters cluster-show Show a cluster database-create Create a database database-delete Delete a database database-list List databases instance-restart Restart a instance instance-start Start a instance instance-stop Stop a instance log-get Get a log file log-list List database log files user-create Create a database user user-delete Delete a database user user-list List database users user-show help Show a database user Displays help about this program or one of its subcommands. 17 optional arguments: --accept-license Accept the license stated on are/sla/sladb.nsf/sla/bm Mandatory for "cluster-create" to create an IBM hosted cluster and optional for other subcommands.

18 Hyper Protect aas API 18

19 Hyper Protect aas Create - Demo Here demo video 19

20 Integration of Hyper Protect aas into a Application Use Mongo administration tools ( Mongo Shell, Mongo Compass ) Integrate it into your existing Application using the Mongo drivers for the programming languages only change connection properties and migrate data if needed 20 Use IBM Cloud Application Service : A developerguide helping easily to setup programming environment for applications (here based on SWIFT) Full integration by using a so called starter kit

21 IBM Cloud Application Service : CAS Starter Kits are low code applications that illustrate sample usecases, endpoints, and services to users who are interested in exploring the capabilities of IBM Cloud. IBM Cloud Application Service offers several starter-kits. Based on the programming language, frameworks and tools, a developer can choose the adequate starter-kit and simply start coding. 21

22 22 IBM Cloud Application Service : CAS

23 Hyper Protect aas is part of CAS For the storage and management of their Data, developers can use Hyper Protect aas service in their CAS projects. Once the Hyper Protect aas is added as Data Resource to the project, the following steps will automatically be generated: A Hyper Protect aas cluster will be created New credentials will be initiated for the database replica set Mongokitten driver will be integrated in the project code Connection to the database instance will be initialized using the credentials 23 At this stage the developer is only asked to use the database to write his data and manipulate it without worrying about the steps above.

24 24 Starter Kits : IBM Hyper Protect Platform Services

25 Starter Kits : MBaaS with IBM Hyper Protect Services 25

26 Starter Kits : Backend for IBM Hyper Protect Services 26

27 Hyper Protect aas CAS - Demo Here demo video 27

28 28 Hyper Protect aas Developers Guide

29 Want to influence IBM Cloud Hyper Protect Family product design and direction? Join the IBM Z Client Feedback Program: Collaborate with IBM Designers & Technical Leaders to solve Customer challenges. Visibility of product requirements, design, development and test progress. Engage with the IBM Development Teams. Participate in IBM s Design Thinking processes to Influence product design and direction. Details on technical previews for collaborative activities. Open to all* Customers and Business Partners. * Eligibility criteria exist for some design feedback activities and some are invitation only IBM Feedback Program Agreement: One, easy Web Based Click On IBM Feedback Program Agreement covers all design feedback activities across all IBM Offerings! Simple 2 page evergreen Agreement. Sign once and you re done! Individualized Client Areas of Interest profile helps Clients engage in design activities. Select ZAAS How to get started : 1. Accept the Online IBM Feedback Agreement by clicking on this Link. 2. Work with your team members to create their personalized Areas of Interest profile by clicking on this Link. IBM Z Client Feedback Coverage Operating systems and application software ZaaS DevOps Software Management Software Analytics Software Hardware

30 Become a Sponsor User 30

31 Nourhane Bziouech aas Squad Lead Infrastructure IBM Böblingen, Germany Holger Wolf aas Developmet & Test Lead Experimental Service on IBM Cloud IBM Cloud Hyper Protect aas Documentation Getting started with IBM Cloud Hyper Protect aas IBM Böblingen, Germany ibm.com/bluemix 31

32 Technical Overview User https Bluemix/GUI/ CLI Authentication aas Manager API Plugin SystemAPI aas System Ctrl NoSQL aas Mgr API Plugin SystemAPI Master Node API Plugin SystemAPI 17 Worker Node 32