The adoption of cloud services

Transcription

1 Andres Steijaert The adoption of cloud services ASPIRE STAKEHOLDER WORKSHOP Brussels Thursday 13 September

2 The adoption of cloud services How can higher education and research benefit from cloud services? Brian Boyle (HEAnet), Simon Leinen (SWITCH), Ingrid Melve (UNINETT), Yannis Mitsos (GRNET), Andres Steijaert (SURFnet) Slide

3 Topics The power and scale of the cloud distribution model The sense of urgency and interest in clouds Two routes towards cloud adoption (consumption and production approach) Connecting the clouds (cloud middleware infrastructure) Next steps: recommendations Slide

4 The consumerisation of IT: users are choosers IT departments facilitate the users

5 End user push 2 billion people online 30% of world population IT used to be scarce Now available in abundance Commoditization Bring your own device

6 The power and scale of the cloud distribution model The profound changes in the way providers deliver their services

7 Cloud? We have been doing this for years

8 Traditional supply chain ; cd-rom distribution, on-premise hosting New supply chain ; cloud distribution model

9 PRODUCE Infrastructure as a service CONSUME software as a service

10 CLOUD + fast delivery, rapid updates, Elastic, pay-per-use - Data outside of your own organization, trust and control

11 Power and size of the cloud

12 'Shadow IT'

13 The sense of urgency and interest in clouds The desire of stakeholders to see the adoption of cloud services

14 Opportunities & drivers Cloud services offer higher education and research organisations the opportunity to provide their users with a wider range of relevant IT services at a faster pace and fulfill user demand. IT departments can use the instant availability and elasticity of cloud services to modify their expenditure profile, reducing the need for periodic and large capital expenditure (CAPEx) to a smoother, increased, but predictable operational expenditure (opex).

15 Confluence Microsoft Office365 Box.net Cisco WebEx Liferay A lot of clouds... fragmented 'islands' IBM LotusLive Google Apps Alfresco Sakai Adobe Connect Interconnect Services from multiple vendors

16 Cross-organisational Users and teams from different organisations collaboration...

17 Challenges & obstacles Trust and control Security Privacy Legislation (national legislation vs 'international clouds') Costs are not clear Interoperability (standards)

18 Compliance, legal aspects, privacy and security The EU/EEA regulations differ substantially from US regulations, and many of the major cloud providers operate with the US regulations. This poses challenges,

19 Compliance, legal aspects, privacy and security The three main issues with cloud services and EU privacy regulations: 1. Storing Personally Identifiable Information (PII); Crossing national borders, Inside EU, Outside EU 2. Data processing agreements must be signed, and must be comprehensible without unilateral change management by the cloud provider 3. Auditing requirements: documentation of procedures is mandatory

20 Compliance, legal aspects, privacy and security Never put sensitive data unencrypted outside your organization, including into a cloud. Terena trusted cloud drive

21 Routes towards cloud adoption

22 1 consumption of services offered by commercial vendors in the public cloud NREN level, European level commodity services

23 Consume use the public cloud External vendor focus service specifications price security & privacy data portability interoperability Vendor management & cloud brokering Align online services roadmaps Exchange vendor information Share documents Negotiate and procure together multi-vendor outsourcing scenario individual users choose from numerous public cloud services

24 ? Which one? Both!

25 Consume use the public cloud Aggregate demand from their member organisations. Negotiate with vendors to reach agreements on their behalf, with better conditions than the individual users or organisations can establish themselves. Organise the distribution and adoption of the cloud services. NRENs thinking of undertaking such a role, should carefully examine the internal organisational Discussion question for afternoon breakout sessions Are we capable, prepared, ready, to fulfill this role?

26 2 production of services together in a community cloud NREN level, European level services for the specific needs and special requirements of the higher education and research community

27 Produce become a community cloud internal community focus Services that fulfill the specific requirements of the community, and prohibits the use of public cloud services, because of security and privacy considerations or legal requirements regarding the physical location where data is stored or special functional needs that commercial vendors cannot provide co-producing scenario higher education and research organisations get together (at an NREN level), to provide a specialised online service

28 Produce become a community cloud Utilize the network internal community focus Reduce the costs of data transfer, which can be significant with commercial clouds, especially for 'big data' applications Assure performance concerning both throughput and, perhaps more importantly, latency (delay), to make both data-intensive and highly interactive uses possible co-producing scenario higher education and research organisations get together (at an NREN level), to provide a specialised online service

29 Produce become a community cloud Do NRENs have what it takes to operate clouds? Considering the expertise NRENs have developed in producing and operating backbone networks and the current market situation, it seems reasonable to further investigate the opportunities for community cloud services. However, are NRENs really in a position where operating such a cloud is a realistic option? Distinguish ourselves from Commercial vendors Universities Discussion question for afternoon breakout sessions Are we capable, prepared, ready, to fulfill this role?

30 Produce become a community cloud It is not about being the 'cheapest provider'... It is about being the best and most trustworthy partner for your community. Discussion question for afternoon breakout sessions Are we capable, prepared, ready, to fulfill this role?

31 Two use cases GRNET Building and operating an IaaS cloud SURFnet Defining and implementing a 'cloud first' strategy with SURFconext as collaboration infrastructure Slide

32 Connecting the Clouds Interoperability via trusted middleware collaboration infrastructure

33 Connecting the clouds End fragmentation - provide added value Provide an excellent infrastructure which interconnects cloud services and users To achieve interoperability and trust

34 Institute U Cloud service A Institute V Cloud service B Institute W Institute X cloud middleware infrastructure Cloud service C Cloud service D Institute Y Cloud service E Institute Z Cloud service F

35 Three key elements in a collaboration infrastructure User databases and user control at institutes Federated authentication and identity management to access cloud services (single sign-on). Unified group management and authorization A single point of control where users can manage their teams. These group-related privileges (roles) are automatically used and updated in all connected cloud services. Open, data exchange Use components (widgets) to build your own team workspace. Social networking between online services. Discussion question for afternoon breakout sessions How do we work towards such a collaboration infrastructure

36 Next steps?

37 NREN's should collaborate on Consuming the public cloud: aggregating demand, vendor management and cloud brokering Producing community clouds: business cases Connecting the clouds, by means of collaboration infrastructures Legal issues (on EU level), standardization and interoperability Slide

38 Together

39 consume use the public cloud produce become a community cloud cloud forum! connecting the clouds middleware collaboration infrastructure