hamid khafagy executive it architectzu.ac.ae/wss/presentations/cloud computing, the...

© 2009 IBM Corporation

© 2010 IBM Corporation

HamidHamid KhafagyKhafagy

Executive IT ArchitectExecutive IT [email protected]@ae.ibm.com April, 2010April, 2010

2 © 2010 IBM Corporation

Agenda

Cloud Computing UpdateStandards Landscape to-date“The Open Group” Standards Work-in-Process


“Cloud Computing 101” Anyone?


Still as popular as ever


Why Do Clouds …


Why Not Do Clouds …


Private Clouds gaining momentum


Market Size & Growth Forecast - Overall

Worldwide IT Cloud Services Spending: 2009-2013(for Business Applications, Application Development / Deployment,

System Infrastructure Software, Storage and Servers)


Market Size & Growth Forecast – Cloud Services

44.21 17.41

12.82 3.66

6.63 2.09 Servers

6.19 1.57 StorageIaaS

14.59 5.22

8.84 3.48 Middleware

5.75 1.74 ADPaaS

16.80 8.53 App'sSaaS

20132009


Market Acceptance …

95.7613170.6IBM

24.9225176.1Google

46.7124224.2Apple

156.5319201.3GE

1.3113310.6Salesforce.com

Revenue (B$)Price / Earnings (P/E)Market Value (B$)

According to Yahoo Finance - April 19, 2010


But, how mature though?


Cloud Computing is currently at the Peak of Inflated Expectations – according to the Gartner


Looks Familiar ?


Growing Marketplace


An IBM Cloud Update

Public Cloud

Private cloud -Appliances

Private Cloud

IBM Lotus LiveNEW - IBM Lotus®

iNotes®

IBM CloudBurst™family

IBM Smart Business Test Cloud

IBM Smart Business Desktop Cloud

IBM Smart Business Storage Cloud

Analytics Collaboration Development and test

Desktop and devices

Infrastructurestorage

IBM Smart Analytics System

InfrastructureCompute / security

IBM Computing on Demand

IBM Information Protection Services

Business services

BPM BlueWorks(design tools)

Smart business end user support – IBM service assist

IBM Smart Business Desktop Cloud

IBM Smart Analytics Cloud

Smart business expense reporting on the IBM cloud

Smart Business Development and Test on the IBM Cloud (beta)

IBM Information Protection Services


Agenda



Crowded Standards Scene …


And mostly overlapping work-in-process

http://www.nrf-arts.org/

http://www.opengroup.org/

http://www.oasis-open.org/

http://www.opencloudconsortium.org/

http://www.snia.org/home

http://www.omg.org/

http://www.occi-wg.org/

http://www.ogf.org/

http://csrc.nist.gov/groups/SNS/cloud-computing/index.html

http://www.etsi.org/

http://www.dmtf.org/

http://www.cloudsecurityalliance.org/

Association for Retail Technology Standards (ARTS)

The Open Group

Organization for the Advancement of Structured Information Standards (OASIS)

Open Cloud Consortium (OCC)

Storage Networking Industry Association (SNIA)

Object Management Group (OMG)

Open Cloud Computing Interface (OCCI) Working Group

Open Grid Forum (OGF)

National Institute of Standards and Technology (NIST)

The European Telecommunications Standards Institute (ETSI)

Distributed Management Task Force (DMTF)

Cloud Security Alliance


An attempt to position these efforts


We will focus on The Open Group Work


Agenda



To create a common understanding among buyers and suppliers of how enterprises of all sizes and scales of operation can include Cloud Computing technology in a safe and secure way in their architectures to realize its significant cost, scalability and agility benefits.It includes some of the industry’s leading cloud providers and end-user organizations, collaborating on standard models and frameworks aimed at eliminating vendor lock-in for enterprises looking to benefit from cloud products and services.We are committed to work with other groups with similar aims. At the outset, it is our intent to work with:

– The Cloud Security Alliance

– The Open Cloud Manifesto

– The Cloud Computing Interoperability Forum

– CloudCamp

– The Cloud Computing Use Cases Group

– The Jericho Forum

The Open Group “Cloud Work Group” Objective


Scope and Deliverables

Cloud Computing Explained

Cloud Computing Business Use cases

Cloud Computing Business Artifacts

Cloud Computing Security

Cloud Architecture Framework

• OpenGroup Definitions, Terminology , White Paper or OpenGroup Manager’s Guide series

• Service Oriented Cloud Computing Infrastructure (SOCCI)• Cloud Computing Architecture (CCA)

• Questionnaire• Cloud Meta Model• CC Business Solution Architecture White Paper-

• Cloud Business Uses Cases Taxonomy• CC Financial Templates• CC Adoption Strategies• White Paper

• OpenGroup Cloud Security Explanation • Comparison of the Open Group Security Architecture with other Cloud Security Architectures• White paper or OpenGroup Manager’s Guide Series

• Cloud Standards Analysis • Cloud Governance Framework• Cloud Business Taxonomy

• Definition of Service Oriented Cloud Computing Infrastructure, SOI and IaaS• Identify required components for enabling Service-Oriented Infrastructure as a Cloud Service• Application of Enterprise Service Management concepts• Define relationship between SOA and XaaS (BPaaS, SaaS, PaaS, IaaS)• Define consumption models for IaaS

SOCCIA framework - possibly incorporated in TOGAF or positioned as an extension to TOGAF - that contains Cloud architecture method descriptions and reference artifacts.- Link to other forums including Jericho, Cloud Security

Alliance, NIST , Open Group SOA Architecture - for Enterprise Architects- for business solutions including Business Analysts, Business Architects, and business process owners

CCA

CC Security

• Open Group Cloud Security Architecture comparison with

• Cloud Security Alliance• Jericho Forum• Cloud Security Cube• Gartner: 7 Cloud Security Risks• NIST: Effectively and Securely

Using the Cloud Computing Paradigm

• ISO 28002• CSA• Jericho Cloud Cube.• OASIS Cloud work• …


Participants, timelines

Participants– Bank of America

– Capgemini

– CGI

– Hewlett-Packard

– IBM

– Intel Corporation

– Logica

– The MITRE Corporation

– Model Driven Solutions

– Sogeti

– Steria

– Wipro

– ….

July 09 Jan10

Mar10

Jun10

Oct10

Jan 11

InitiateCloud Computing

Project TeamsElected

Service oriented cloud computing Infrastructure SOCCI

Cloud Computing Architecture CCA

Cloud Computing Business Use cases CCBU

Cloud Business Artifacts CBA

Cloud Computing Explained


The Thinking Process

Agree on set of overriding principles for standards development– opencloudmanifesto.org

Agree on Terminology & TaxonomyIdentify a set of business-driven Cloud “Use Cases”Identify the various capabilities and requirements of each of these “Use Cases”that need to be standardized in a cloud environment to ensure interoperability, ease of integration and portability.Identify standards from existing ones and found gaps.


Cloud Manifesto’s 6 PrinciplesOpenness– Cloud providers must work together to ensure that the challenges to cloud adoption are addressed through open collaboration and the appropriate use of standards.

Reuse – Cloud providers must use and adopt existing standards wherever appropriate. The IT industry has invested heavily in existing standards and standards organizations; there is no need to duplicate or reinvent them.

Pragmatism– When new standards (or adjustments to existing standards) are needed, we must be judicious and pragmatic to avoid creating too many standards. We must ensure that standards promote innovation and do not inhibit it.

Business-Driven– Any community effort around the open cloud should be driven by customer needs, not merely the technical needs of cloud providers, and should be tested or verified against real customer requirements.

Cooperation– Cloud computing standards organizations, advocacy groups, and communities should work together and stay coordinated, making sure that efforts do not conflict or overlap.

Competition– Cloud providers must not use their market position to lock customers into their particular platforms and limiting their choice of providers.


DefinitionsCloud Computing DefinitionDelivery Models

– Software as a Service (SaaS)

– Platform as a Service (PaaS)

– Infrastructure as a Service (IaaS)

Deployment Models– Public Cloud

– Private Cloud

– Community Cloud

– Hybrid Cloud

Essential Characteristics– Rapid Elasticity: Elasticity

– Measured Service

– On-Demand Self-Service

– Ubiquitous Network Access

– Location-Independent Resource Pooling


Definitions …Other Terms

– Interoperability

– Integration

– Portability

– Service Level Agreement (SLA)

– Federation

– Broker

– Multi-Tenancy

– Cloud bursting

– Policy

– Governance

– Virtual Machine (VM)


Taxonomy

Service Consumer (Roles: User, Developer, Administrator)Service ProviderService Developer


Standards Types

1. Standards Across Cloud Service Types 2. Standards Within Cloud Service Types 3. Standards Between the Cloud and the Enterprise 4. Standards Within an Enterprise


Seven Use Cases1.End User to Cloud2.Enterprise to Cloud to End User3.Enterprise to Cloud4.Enterprise to Cloud to Enterprise5.Private Cloud6.Changing Cloud Vendors7.Hybrid Cloud


1. End User to Cloud

Applications running on the cloud and accessed by end users Common applications of this type include email hosting and social networking sitesThe user doesn’t want to keep up with anything more than a password


2. Enterprise to Cloud to End User

Applications running in the publiccloud and accessed by employeesand customersWhen the end user interacts with the enterprise, the enterprise accesses the cloud to retrieve data and / or manipulate it, sending the results to the end user. The end user can be someone within the enterprise or an external customer.


3. Enterprise to Cloud

Cloud applications integrated with internal IT capabilitiesIn this scenario, the enterprise uses cloud services to supplement the resources it needs:– Using cloud storage for backups or storage of seldom-used data

– Using virtual machines in the cloud to bring additional processors online to handle peak loads

– Using applications in the cloud (SaaS) for certain enterprise functions (email, calendaring, CRM, etc.).

– Using cloud databases as part of an application's processing. This could be extremely useful for sharing that database with partners, government agencies, etc.


4. Enterprise to Cloud to Enterprise

Cloud applications running in the public cloud and interoperating with partner applications (supply chain) This use case involves two enterprises using the same cloud. The focus here is hosting resources in the cloud so that applications from the enterprises can interoperate. A supply chain is the most obvious example for this use case.


5. Private Cloud

A cloud hosted by an organization inside that organization’s firewallThe Private Cloud use case is different from the others in that the cloud is contained within the enterprise. This is useful for larger enterprises. For example, if the payroll department has a surge in workload on the 15th and 30th of each month, they need enough computing power to handle the maximum workload, even though their everyday workload for the rest of the month is much lower. With a private cloud, computing power is spread across the enterprise. The payroll department gets extra cycles when they need it and other departments get extra cycles when they need it. This can deliver significant savings across the enterprise


6. Changing Cloud Vendors

An organization using cloud services decides to switch cloud providers or work with additional providersThis use case involves working with a different cloud vendor, either adding an additional vendor orreplacing an existing one.There are four different scenarios, each of which has slightly different requirements:– Scenario 1: Changing SaaS vendors

– Scenario 2: Changing middleware vendors

– Scenario 3: Changing cloud storage vendors

– Scenario 4: Changing VM hosts


7. Hybrid Cloud

Multiple clouds work together, coordinated by a cloud broker that federates data, applications, user identity, security and other detailsThis use case involves multiple clouds working together, including both public and private clouds. A hybrid cloud can be delivered by a federated cloud providerthat combines its own resources with those of other providers. A broker can also deliver a hybrid cloud; the difference is that a broker does not have any cloud resources of its own. The user has no knowledge of what the hybrid cloud provider actually does.


Cloud Computing Use Cases Requirements

yyyyLifecycle Management

yyyyyyySLAs

yyyyData and Application Federation

yyyyyCloud Middleware API

yyyyyCloud Database API

yyyyyCloud Storage API

yyyyyyVM Image Format

yyyIndustry-Specific Standards

yyInteroperability

yTransactions and Concurrency

yyyDeployment

yyyyyyySecurity

yyyyyMgmt and Governance

yyyyyMetering and Monitoring

yyyyyLocation Awareness

yyyyFederated Identity

yyyyyyyOpen Client

yyyyIdentity

7. Hybrid Cloud

6. Changing Cloud Vendors

5. Private Cloud

4. Enterprise to Cloud to

Enterprise

3. Enterprise to Cloud

2. Enterprise to Cloud to End

User

1. End User to CloudRequirement


ConclusionsGeneral requirements: – Common VM Formats, Data Formats and APIs: Virtual machines, data and applications created for one cloud provider should run on another cloud provider without changes.

– Cloud Management: Cloud computing is not feasible without service management, governance, metering, monitoring, federated identity, SLAs and benchmarks, data and application federation, deployment, and lifecycle management.

– Security: Security in cloud computing is vital, although the requirements for security will vary widely depending on the application and data types.

– Location awareness: A way of identifying the location of the physical machine hosting the cloud infrastructure is an absolute requirement for many government regulations.

Cloud computing builds on and complements many trends in the industry, including virtualization, SOA and Web 2.0. As a result, standards already exist for many of the requirements outlined here.We will work together as a community to:– Specify the existing standards that meet customer needs,

– Leverage standards work already in progress, and

– Identify what is needed to fill in the gaps not addressed by existing standards.


Thank you!

hamid khafagy executive it architectzu.ac.ae/wss/presentations/cloud computing, the...

Documents