Fujitsu Global Cloud Platform Service Catalog

Transcription

1 Fujitsu Global Cloud Platform Service Catalog October, 2011 Fujitsu America, Inc. NOTE: This presentation is only a summary and does not constitute a legal contract. Please see the terms and conditions of your services contracts for the controlling language. 1

2 Service Outline 2

3 Service outline This service creates and provides a private virtual system environment for customers within the large scale resources of Fujitsu data center (DC) by using virtualization technology. Fujitsu DC Provide the allocated private virtual system environment Internet Resource pool Customers Virtual system Create a scaling system (from small to large ) to meet customers needs Available to create system with a load balancer and firewall Customers can login as an administrator of virtual machine (VM) s OS: no restrictions on installing any type of software or developing applications 3

4 Four features Simplified Design On-demand Select the best system configuration that meets your purposes from the System Template Library Provide a secure environment which protects against threats coming from Internet (DMZ, Firewall) Create/delete, and increase/decrease servers/storages, at any time necessary Hourly-based charge system Service Portal (Operate via browser) Safety & Reliability Create/customize servers/storages on the Service Portal Monitor status/trend, start/stop VMs, and operate back-up/restore on the Service Portal Data Protection by redundancy, ensured performance for VM resources (CPU/Memory), and VPN connection 4

5 Simplified Design DMZ Secure Simplify creation of Infrastructure by using system templates Provide variety of templates which set VMs on multiple layers separately Easy to add extra VMs to the template System template 1.Select Customer Private Environment 3.Deploy VMs System Template Library Virtual System... Additional resources Firewall Windows Server CentOS Server WEB Server DB Server 2.Customize WEB Server CentOS Server 5

6 On-demand Get VMs operational within the first hour after system deployment Pay as you go (*) Scale out at any time, any way Example Setting Increase Decrease Customer Normal hour Business peak hour Normal hour Able to increase/decrease the number of load-balance VMs corresponding to online peak business hours Temporary use as development/inspection environment Setting Start with minimal initial investment Scale up VM performance corresponding to business growth Customer Initial Operation Business scale expansion Performance reinforcement Customer Setting Initial Operation Increase Increase Data reinforcement Start with small scale Scale out the disk capacity to meet data volume Easy to estimate disk capacity * Costs of Windows OS / SQL Server /other software will be based on monthly license usage.. 6

7 Provide Service Portal All of the operations can be initiated via web browsers Design studio allows you to deploy a system with ease Dashboard shows you system operation, operation and charging status Design studio Select and customize system templates Resource settings: Deploy and delete VMs Attach/detach additional disks, backup disks Set a firewall Dashboard Information function Operate VMs (Start/stop/restart/backup/restore) Display status (Working, Stopping, Deploying) Show resource usage (CPU, Disk, Network etc.) (In planning) Show charging information Show trouble information (Entire service, provided resource) 7

8 System Template Service Service Menu Description System Template Service Provide templates to create multi-layer subnet system with a few clicks OS and middleware are included and basic network settings are configured by default Access to the system from the Internet only by firewall settings Example for 3-Tier system template Customers can deploy 3-tier system as diagrammed below Customers can select a wide variety of system templates DMZ WEB WEB WEB Inside 1 AP AP Templates Web/DB Windows [2003 SE/SP2/2-tier] OS/software Windows 2003 R2 SE 32bit SQL Server 2008 SE Inside 2 DB Web/DB Windows [2008 R2 SE/2-tier] Windows Server 2008 R2 SE 64bit SQL Server 2008 SE Examples of the Template 8

9 Durability/reliability High-availability by fail-over and system redundancy Ensured performance for VM resources (CPU/Memory) Secure connection with VMs by SSL-VPN connection Complete redundancy of parts, components, and networks VM VM Server Redundant power supply Storage Stocks of spare parts and repair parts Automatic fail-over in case of hardware trouble Redundant switch and router Redundant LAN network Redundant cabinet SSL-VPN VM Secure access to VMs by SSL-VPN connection Redundant disk Mirroring between cabinets 9

10 Flow of using service Select a template at the Service Portal Deploy the selected template as a virtual system Connect via SSL-VPN, log-in to VMs and build applications Configure firewall, publish own services to the Internet / private net Customer Access via the Internet Service Portal 1. Select template Single Web Server 3. Connect via SSL-VPN, log-in to VM. System Template Library 2. Deployment Web Server x3 + AP/DB Server x1 + Interior FW/LB + Additional disk Web Server x3 + AP Server x2 + DB Server x1 + etc.... Patches for system template are updated regularly Internet / Intranet 4. Set the firewall, then connect to the Internet or Intranet Firewall/NAT (Network Address Translation) Deployed system can obtain the Internet connection, VPN, and the Intranet connection easily Virtual system 10

11 Service Details 11

12 Service Menu Outline Category Menu Description Virtual Subnet Provides a private IP address Enables communication between VMs in the system template Network Firewall Provides a Firewall function which controls the communication with the Internet and between virtual subnets Provides a display of session logs NAT (Network Address Translation) Provides a NAT function for global IP address communication Update Servers Provides accesses to both WSUS server for Windows update and yum repository server for CentOS update Monitor Hardware monitoring Monitors the failure of hardware Automatically reboots VMs at different server and notifies by when failure is detected VM Health Checking Monitors the running status of the VM Service Portal Design Studio Dash Board Modifies configuration of the system, deploys the system, specify/changes the system settings Operates the system and confirms the status of the system 12

13 Network Layer Types Subnet Firewall-controllable traffic Conceptual diagram 1-Tier Internet <-> DMZ Internet DMZ 2-Tier Internet <-> DMZ DMZ <-> Internal net1 Internet DMZ Internal net1 3-Tier Internet<->DMZ DMZ<->Internal net1 DMZ<->Internal net2 Internal net1 <->Internal net2 Internet DMZ Internal net1 Internal net2 Provide firewall by default One firewall can control traffic not only between Internet and Intranet but also between intranets 13

14 VM Type Type CPU Performance index *1 Number of virtual CPU *2 Memory (GB) Economy Standard Advanced High-performance *1:Each unit in the CPU Performance Index provides the equivalent CPU capacity of a 1.0 GHz Intel Xeon processor. *2:Number of virtual CPUs could be varied in future requirements Since CPU resource is statically assigned to each VM, VM usage does not affect other VM s performance. Disk Capacity(GB) System Disk OS is installed to the system disk. The space requirement varies by OS. (The capacity above is maximum before installing OS.) System disk will be deleted when VM is deleted. An additional disk is available for customer s data. Installed OS Version Windows Windows Server Windows Server 2003 R2 SE/EE SP2 32bit Windows Server 2008 R2 SE/EE 64bit Linux CentOS CentOS /64bit (open source) 14

15 Middleware Service Service Menu Description Middleware Service Microsoft SQL Server 2008 R2SE Provide VMs with middleware installed 15

16 Network Service Service Menu Description Internet Communication Service Intranet Connection Service Provide the Internet connection for VMs Provide the SSL-VPN connection via the Internet to the virtual system Provide a connection between Global Cloud Platform virtual system and Fujitsu DC / customer site Global IP Address Service Provide up to 10 global IP addresses to access from the Internet Load-balance Service * This service will be available in Sunnyvale DC. Provide internally/externally load-balancing system Load balancers maintain a session (with SSL) and Error page functionality 16

17 Internet Communication Service Provide the Internet connection for VMs by configuring firewall Provide the SSL-VPN connection for VMs Image of Internet connection Internet Clients Configure firewall using Service Portal Service Portal Global IP address G1 G2 G3 Address Translation P1 P2 P3 Private IP address Rapid to build a connection to the Internet Virtual system No requirement for customers Translate global IP address into private IP address by the configuration of firewall 17

18 Intranet Connection Service Connection Service between virtual system and system in Fujitsu data center or customer site allows of hybrid use of customer s housing environment and virtual system (*) Customer site / Customer data center Storage Server NetWork Data center Internal network in Fujitsu DC Virtual system Private network between customer site and virtual system * This service will be available in the Sunnyvale DC 18

19 Load Balance Service Load-balancing requests to VMs Maintain session / monitor failures / continuous service Balancing Requests Dispatch requests according to balancing rule Maintain Session Request may be dispatched to different server, inconsistency in the reply may occur. Without session preservation Load Balancer Load Balancer Monitoring With session preservation Continuous Service Dispatch requests from the same user to the same server so that inconsistency does not occur. Monitoring server s health. Disconnect from load balancer when a failure Is detected. error Disconnect from load balancer manually for maintenance. Maintenance Join to load balancer after finishing maintenance. Online Load Balancer Load Balancer Load Balancer Load Balancer 19

20 Storage Service (1) Service Menu Description Additional Disk Service 10 GB to 1TB capacity per an additional disk. (Data is encrypted when written on a physical disk) Easy to add another disk or switch connection when needed. Scale out/switch connection to another VM DMZ Add a disk when needed Inside1 Attach/detach Additional Disk Service... Inside2 Re-attach to another VM. Disk Stand-by area Reserved area for unconnected disks. Example: Easily migrate data to higher performance server. 20

21 Storage Service (2) Service Menu Description Disk Service for System Backup Provide a disk for system backup Backup VM system disk by copying the entire disk.(*1) This service is available when you perform backup operation from Web. It is possible to generate multiple generation backup files. (*2) Disk Service for Additional Disk Backup Provide a disk for additional disk backup Backup additional disk by copying the entire disk (*1) This service is available when you perform backup operation from Web. It is possible to generate multiple generation backup files. (*2) *1 : Backup files can only be restored to original volume. Backup files are deleted automatically when original volume is deleted. *2 : User can manage any generation of backup files. 21

22 Service Portal 22

23 Service Portal Outline Manage use of cloud resources Secure login by client authentication Usable functions after login: Design Studio allows easy system designing Dashboard to help visualize status of VMs Additional administrator functions (ID/certificate management) Notices / Maintenance Info Menu List Login New Account Service Portal screen 23

24 Screen after Service Portal login Natural UI User-friendly interface with multiple windows Menu List Notice Window Start-up Window Minimized Windows Screen after login 24

25 Design Studio Tool to select system template, deploy, etc. Compatible with configuration changes to running system System cloning and template abstraction are also possible Initial System Deployment System template selection VM addition, removal, spec change Addition, removal and reconfiguration of firewalls, etc. Addition, creation and removal of options Configuration Changes to Running Systems VM addition, removal and spec change Addition, removal and reconfiguration of firewalls, etc. Addition, creation and removal of options 25

26 Building a New System Flow Step 1 Search for system templates Select system template Step 2 Name the system template Select connection type (Internet/private network) Step 3 Create/delete/modify VMs Create/delete/modify options Step 4 Confirm estimation Save the estimation Step 5 Accept the Terms of Service Deployment process Start to deploy system after confirming 26

27 Building a New System (Steps 1 and 2) Step 1. Select a template by objective Template Search Refine by keyword and approximate cost Template List Template Details Template Creation Screen System Name Input Network Type Selection Step 2. Specify network environment System Name Screen 27

28 Building a New System (Steps 3 and 4) Step 3. Modify system config. as necessary System Outline Diagram Details for Virtual Systems, etc. VM spec change and VM deletion are possible. Attachable Appliance Group Attachable by drag and drop to the system outline diagram. System Build/Change Screen Estimation Results An estimate of the cost from 31 days continuous usage can exported to PDF or saved. Saved estimations can be re-opened. Step 4. Confirm estimate 28 Estimate Confirmation Screen

29 Building a New System (Step 5 - Start Deployment) Step 5. Agree to service usage contract Service Usage Contract Service Usage Contract Screen Ready to start deployment 29

30 Dashboard Operation tools to confirm status of running VMs Operation functionality is also available Display Running Status Display Billing Status Resource Operations Reporting VM status display Resource usage status display (CPU/disc usage, etc.) (In planning) Current and historical status can be displayed Current month s charge details (Total, Per-VM) Historical details up to 12 months Start/stop VMs Execute backup/restore disks Register Certificates in Load Balancing Service Resource usage/billing status in CSV file Monthly report in PDF format (configurable contents) 30

31 System Summary Screen Shot Operation Buttons Show system details System Summary System Summary (Composition View) VM Summary Operation Buttons VPN Console, System composition change, Return System Status 31

32 VM Summary Screen Shot Operation Buttons VM bootup/shutdown VM/Disk backup / restore VM Summary Displays various VM info. VM status VM name IP address Backup/restore status Number of backups etc. VM Summary Screen Backup Data Summary Summary of stored backup data Operation Buttons Start backup Start restore Delete backup data Backup History 32 Backup Screen

33 Cloud API 33

34 Cloud API Design Studio and Dashboard functionalities are provided by API By using the API, the same functions as the GUI are possible in a custom application Secure access by client authentication Image of usage Development of original apps by the API API The same operations as the Design Studio and the Dashboard can be executed via the API. (e.g., VM deploy, shutdown, bootup, backup, etc.) Developers Management/operation automation apps API System Virtual system Automation/systematization of operations is possible Service providers can build original services 34

35 API Usage Scenario User operation automation/systemized processing Building of a branded service by a third-party Automation/systematization of Administrative operation Scale up/down based on schedule or load, automated processing of backups, etc. Develop new portals implementing only necessary functions. Develop mobile device-specific portals Operator System Administrator Selling via Original Brand High-Level (PaaS/SaaS) service Service provider s clients Use of Only necessary function Original portal Mobile use Portal for mobile Tool development Automation tools Service use Service provide Service Provider Service (Third party) Service use (API) Service use (API) Service provide Global Cloud Platform Global Cloud Platform 35

36 Customer Benefits from Cloud API Standardization Due to the standardization of Cloud APIs, customers would be able to choose from a broad selection of cloud computing service vendors, or use their own facilities. They are not locked into one particular cloud provider. Cloud Computing has two types: Public/private cloud - Customer uses the ICT system resources as a service by a provider Enterprise Cloud - Customer owns the ICT system and builds/installs/configures it Many service providers offer these two types of cloud systems. As Cloud Computing propagates throughout the world, it is possible to lose the ease of use for users because multiple cloud APIs exist. Therefore, to increase ease of taking advantage of cloud computing, the Open Cloud Standards Incubator" has been established to promote Cloud API standardization associated with the world's leading IT vendors. Fujitsu has joined the leadership board of the Open Cloud Standards Incubator in the DMTF (Distributed Management Task Force). The Open Cloud Standards Incubator was formed as part of the DMTF Standards Incubation process, which enables like-minded DMTF members to work together and produce informational specifications that can later be fast-tracked through the standards development process. It now consists of 37 major IT companies such as IBM, Microsoft, and VMware. By joining the leadership board, Fujitsu applies knowhow of the 'Trusted-Service Platform' the Cloud Service Infrastructure provided by Fujitsu, and is promoting Cloud Computing standardization, promoted by the Open Cloud Standards Incubator. Fujitsu and Fujitsu Laboratories Ltd. have submitted a proposal Cloud API specification (Interface for deployment of ICT resource in the cloud, configuration, deletion) to the DMTF. We will contribute to standardization of the API. 36

37 Examples of Cloud API (1) Operations of Virtual System Name of API Description Name of API Description DestroyVSYS GetVSYSStatus Delete the virtual system. All resources in the virtual system are discarded and becomes invalid. Obtain status information of the virtual system ListVServer CreateVDisk Obtain a list of all VM IDs in the virtual system Create additional disks in the virtual data center. Users can attach those created additional disks to the VMs GetVSYSConfiguration GetVSYSAttributes UpdateVSYSAttribute Obtain configuration information of the virtual system Obtain attribute information of the virtual system Update attribute information of the virtual system ListVDisk Obtain a list of all additional disk IDs in the virtual data center. The list indicates whether or not additional disks are attached to the VM CreateVServer Create a VM in the virtual system. Specifying the ID of the disk image, which is used for initial contents of the boot disk, is required. Request message is encoded in UTF-8 37

38 Examples of Cloud API (2) Operations of Virtual Machine Operations of Additional Disk Name of API Description Name of API Description DestroyVServer StartVServer StopVServer Delete a VM Start OS of the VM Stop OS of the VM DetachVDisk BackupVDisk Detach an additional disk from the VM Start a backup of additional disk. The created backup is copied to the newly-created backup disk. GetVServerStatus GetVServerAttributes UpdateVServerAttribute GetVServerInitialPassw ord AttachVDisk DestroyVDisk Obtain status information of the VM Obtain attribute information of the VM Update attribute information of the VM Obtain an administrator s initial password of the OS in the VM Attach an additional disk to the VM Delete an additional disk as well as the saved data in the disk RestoreVDisk ListVDiskBackup GetVDiskStatus GetVDiskAttributes UpdateVDiskAttribute Copy the contents of additional disk s backup to the another additional disk Obtain a list of the additional disk s backups Obtain status information of the additional disk Obtain attribute information of the additional disk Update attribute information of the additional disk 38

39 Examples of Cloud API (3) Operations of Template Operations of Built-in Server Name of API Description Name of API Description UnregisterVSYSDescript or GetVSYSDescriptorConf iguration GetVSYSDescriptorAttri butes Cancel a registration of the template Obtain configuration information of the template Obtain attribute information of the template CreateEFM ListEFM DestroyEFM StartEFM Create a built-in server Obtain a list of the built-in server Delete a built-in server Start a built-in server StopEFM Stop a built-in server Operations of Disk Image Name of API UnregisterDiskImage GetDiskImageAttributes Description Cancel a registration of the disk image from the virtual disk center Obtain attribute information of the disk image GetEFMStatus GetEFMAttributes GetEFMConfiguration UpdateEFMAttribute UpdateEFMConfiguratio n Obtain status information of the built-in server Obtain attribute information of the built-in server Obtain configuration information of the built-in server Update attribute information of the built-in server. API of this version can update the built-in server name only Update configuration information of the built-in server 39

40 Examples of Cloud API (4) Operations of Virtual DC ( * ) Operations of Global IP Address Name of API Description Name of API Description ListVSYSDescriptor CreateVSYS ListVSYS AllocatePublicIP Obtain a list of the template in the virtual data center Create a virtual system based on the template Obtain a list of the virtual system in the virtual data center Allocate the global IP address FreePublicIP AttachPublicIP DetachPublicIP GetPublicIPStatus Release a global IP address Attach a global IP address to the virtual system Detach a global IP address from the virtual system Obtain status information of the global IP address ListPublicIP ListDiskImage Obtain a list of all global IP addresses in the virtual data center Obtain a Disk Image ID in the virtual data center GetPublicIPAttributes Other Operations Obtain attribute information of the global IP address Name of API StandByConsole Description Prepare a connection with the console (*) A hypothetical data center on the cloud where users can create and use virtual systems. 40

41 Charging System 41

42 Considerations of Charges and Payment Requests Charge for the usage of the various resources and functions Refer to the portal website for each service s unit price Operating time is rounded up to the next hour ex. Operating time : 1H 45M -> 2H Network traffic is rounded down to the previous GB ex. Network traffic : 31.5GB -> 31GB Charge from the start point in usage of the resource/function (1 hour minimum) The same as when the resource type is changed The charging system varies by the service used (See examples on next slide) Where several systems exist within one contract, per-system charge totals are calculated, then included in a single bill 42

43 Charging System Type Charging System Description Service TYPEI Rate-based (1-hour units) Charge corresponding usage time For VMs, the unit price varies with type VMs Global IP address Service Load Balancing Service TYPEII Rate-based (Monthly) Charging is performed even for a single usage (Independent of number of VM CPU) TYPEIII TYPEIV Rate-based (Monthly and Number of CPUs) Rate-based (Time and Capacity) Charging is performed even for a single usage (Dependent on number of VM CPU) Perform charging according to [Usage period x Guaranteed capacity] (Capacity is the guaranteed capacity) TYPEV Usage amount Charging performed on the basis of usage TYPEVI Usage counts Charging performed by each single use of the service. Unit price varies by template type (network class) 43 VM OS Environment [Microsoft Windows Server ] VM Middleware Environment [Microsoft SQL Server ] System Disk Offer Service Additional Disk Service Template Storage Service Disk Service for System Backup Disk Service for Additional Disk Backup Internet Communication Service (Include the usage amount of SSL-VPN connection service) System Template Service (Only at first time of new system creation)

44 Usage Period Considerations [1-Hour Unit] Usage time is calculated by summing minutes of actual usage Totals are rounded up to the next hour (1-59 min) Example : 15:10 15:35 16:20 17:10 20:00 20:30 15:00 16:00 17:00 18:00 19:00 20:00 21:00 25min 50min 30min Round up Usage Period : 25min + 50min + 30min = 105min (1H45M) -> 2 Hours 44

45 Other Terms 45

46 Service Level Coverage of redundancy Object Description VM Virtual Storage (System, Data) Provide automatic failover. In the case of a physical server fault, a new VM is automatically assigned and booted. Data being processed at the time of fault is not guaranteed. Copies of data are maintained across four physical disks Even in the case of three simultaneous physical disk failures, data is not lost. All data is stored in the same DC Internet connection Fully redundant Switchover time for equipment failure within one minute Target SLA Availability of offered virtual resource: 99.95% (*) *Excluding maintenance time or any other service loss due to circumstances beyond the reasonable control of Fujitsu. Please see the contract terms for details. 46

47 N.B. (Other Notes) On-Site operations Customers cannot perform installations or setups in the DC. All operation is remotely accessible. Maintenance The security on the VMs is the responsibility of the customers. Data deletion at time of deleting VM Data in the system disk will be deleted by deletion of the VM Data in an additional disk will be deleted by deletion of the disk Back up disks will be deleted when its system disk or additional disk deleted. We use zero write method to delete data Requirements (Service Portal) Resolution : 1280 x 1024 or better (recommended), 1024 x 768 (min.) OS : Windows XP SP3 (32bit), Windows Vista SP2 (32bit) Browser : Internet Explorer 7/8 Flash Player : Adobe Flash Player 10 Java Runtime Environment : JRE 6.0 or better 47

48 Security Stipulations Data center VMs run in Fujitsu in-country DCs All data is stored internally to Fujitsu DCs Administrator privileges Fujitsu does not retain administrator privileges on VMs deployed by the customers Security updates Security updates for OS and middleware of the VM are applied by customer Security updates for hypervisor, admin OS, network equipments, and storage are applied by Fujitsu 48

49 49