An enterprise-grade cloud management platform to enable a self-service, on-demand IT operating model for the Cloud Empowered Enterprise

Transcription

1 WHITE PAPER January 2014 An enterprise-grade cloud management platform to enable a self-service, on-demand IT operating model for the Cloud Empowered Enterprise

2 2 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Table of Contents Executive Summary 3 Section 1: 4 CA Cloud Manager[Powered by ServiceMesh] Section 2: 5 Core Platform Capabilities Section 3: 11 Planner Section 4: 12 Designer Section 5: 13 Store Section 6: 14 Operations Section 7: 15 Summary

3 3 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Executive Summary This white paper describes key product capabilities of CA Cloud Manager [Powered by ServiceMesh], an enterprise-grade cloud management platform that enables self-service, on-demand IT operating models for Global 2000 clients. CA Cloud Manager enables enterprise customers to automate the deployment and management of enterprise applications, platforms, and infrastructure across private, public and hybrid clouds. It provides a unified control point for governance, compliance, and security across the customer s cloud applications and services, empowering the business with fully governed, self-service access to the IT resources they need. CA Cloud Manager is a fully integrated platform consisting of multiple product modules, cloud adapters, a robust API, SDK, and Command Line Interface (CLI). The core, underlying platform includes governance, security, and orchestration capabilities that are consumed by each product module, exposed via API, and implemented via adapters for all workloads and cloud environments under management. Target Audience This document is intended for IT leaders and practitioners involved in cloud management platform evaluation and related cloud inititatives. At a Glance A single, consolidated platform for the management, governance, orchestration, and delivery of enterprise applications, platforms, and IT services. Integration with CA Release Automation to increase the speed and frequency of software releases and accelerate DevOps initiatives. An extensible policy engine that enables the creation and enforcement of an unlimited range of custom governance, compliance, and security policies. Cloud portability throughout the lifecycle of cloud applications and platforms, independent of the underlying private, public or hybrid cloud environment. Empowers the business with fully governed, self-service access to the applications, platforms, and IT services they need. Migrate existing applications and virtual machines to fully governed hybrid cloud environments. Rapid deployment and time-to-value.

4 4 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Section 1: CA Cloud Manager[Powered by ServiceMesh] CA Cloud Manager enables enterprises to adopt cloud-based, IT-as-a-Service operating models to compress IT service delivery time and lower costs throughout the enterprise. The solution includes policy-based governance, security, and lifecycle management capabilities that allow customers to accelerate the adoption of cloud services and speed the delivery of business applications into the cloud with governance and control. CA Cloud Manager automates the deployment and management of cloud applications, development platforms, and a broad range of other cloud services across private, public, and hybrid cloud environments. Integration with CA Release Automation also provides improved speed and frequency of software releases and accelerates the application delivery lifecycle. CA Cloud Manager ensures the portability of cloud services throughout their lifecycle independent of the underlying infrastructure or cloud deployment environment. CA Cloud Manager enables IT organizations to empower their business unit customers with fully governed, self-service access to the IT services they need. IT organizations use the solution not just to manage cloud infrastructure, but to transform their IT operating model with on demand applications and platforms that can provide significant cost and time-to-market advantages while meeting requirements for governance, compliance, and security through flexible policy definition and enforcement.

5 5 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Section 2: Core Platform Capabilities The core, underlying platform includes governance, security, and orchestration capabilities that are consumed by each product module, exposed via API, and implemented via adapters for all the cloud workloads and environments under management. These core platform capabilities include: An extensible policy engine enabling the creation and enforcement of an unlimited range of custom governance, compliance, and security policies. An end-to-end security model spanning network, instance, data, and access levels including identity management. An orchestration engine for deploying complex, multi-tier business applications across heterogeneous private and public clouds. An API, cloud adapter SDK, CLI, and workflow automation capabilities to extend cloud operating model capabilities to existing IT ecosystems and software development tool chains. Centralized management, orchestration, and governance across hybrid clouds, enabling enterprises to optimize workload placement decisions and establish vendor contestability between cloud services. A purpose-built platform that minimizes operational complexity and provides proven scalability to support tens of thousands of workloads under management. Enterprise Cloud Governance Organizations require fine-grain cloud governance controls to manage complexity and mitigate regulatory and compliance risk inherent in enterprises today. There are countless permutations of policy controls required for cloud applications and platforms that address ownership, user permissions, regulatory compliance, operating parameters, service level agreements, financial controls, geographic constraints, resource availability, and more. Organizations need a single control point for enterprise-wide cloud governance, compliance, and security that is powerful enough to address their current and future needs. Application-Centric Policies Providing policy control solely at the infrastructure or VM level is insufficient when the unit of self-service provisioning is the application or platform. A broad range of application-centric policy types are required to control the deployment and operation of applications and platforms as opposed to the relative simplicity of bare underlying infrastructure. CA Cloud Manager provides enterprises with the broad range of application-centric policy types including: Access policies: Role-based access to cloud services including identity management. Entitlement policies: Limit user access to specific asset types. Deployment policies: Limit deployment of workloads and data to authorized environments. Storage Tier policies: Limit deployment of data to a storage tier with appropriate service level. Orchestration policies: Apply multiple layers of policies across assets and services in order to enforce Standard Operating Environments.

6 6 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Service Level Agreement (SLA) policies: Dynamically scale-up and scale-down applications based on compound auto-scaling rules and threshholds, either by adding instances to a workload pool or by resizing individual instances. Regulatory compliance policies: Limit deployment of workloads to regulatory compliant environments (e.g. PCI, HIPAA, others). Security policies: Enforce security zone compliance with policies that configure firewalls, embed third-party security tools and utilities, and more. Lifecycle event policies: Enforce policies at events including SDLC stages, third-party system events/notifications, and event correlations from event streams. Backup and failover policies: Enforce high availability and disaster recovery policies. Resource constraint policies: Limit the quantity of IT resources consumed. Lease and scheduling policies: Limit the duration and scheduling of IT resources deployed. Chargeback/metering policies: Limit resource consumption and meter consumption based on customizable pricing models. Configuration management policies: Detect non-sanctioned configuration changes and reapply the approved configuration along with the appropriate alerts/notifications. Policies Based on an Extensible Meta-Model CA Cloud Manager enables customers to create and enforce an unlimited range of custom policies through an extensible meta-model, allowing you to create new attributes that policies can reference to make decisions. Fine-Grain Policy Enforcement Across a Hierarchical Organizational Model CA Cloud Manager enforces cloud governance within a customizable organizational hierarchy model, making it quick and easy to enforce concurrent policies at different layers within an organization. Policy Control Across SDLC Stages and Environments CA Cloud Manager s cloud governance policies natively recognize different software development lifecycle (SDLC) stages and events, and allow for customized governance controls as applications and their deployment environment are promoted across SDLC stages to support initiatives around DevOps, Continuous Delivery, and others. Dynamic, Declarative Policies CA Cloud Manager leverages declarative policies that are easy to modify and maintain, simple to combine additively with other policies at multiple enforcement points, and designed to respond to real-time event correlations in addition to use in approval workflows. Visual Policy Editor for Non-Technical Staff CA Cloud Manager includes a drag-and-drop visual policy editor that can be used by IT Analysts and other roles that lack programming knowledge, making it easier to codify policy controls from Business Units, Corporate Compliance offices, and other stakeholders. More sophisticated users can toggle between synchronized graphical and JavaScript/XML policy views.

7 7 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Figure A. End-to-End Cloud Security Cloud-based IT operating models require that cloud workloads and environments operate as a trusted extension of the enterprise. The Agility Platform provides end-to-end cloud security that leverages automated security policies and zoned security models to better ensure security and minimize/ eliminate manual configuration errors. This includes capabilities to secure and isolate virtual networks, configure firewalls, encrypt persistent data, harden machine instances, leverage internal and external encryption key stores, and enforce fine grain access controls. Identity Management CA Cloud Manager allows organizations to leverage existing authentication and authorization directories for single sign-on across a broad range of private and public cloud services under management. This includes support for Microsoft Active Directory, LDAP, and SAML 2.0. Automate Firewall Configuration Across Private and Public Clouds CA Cloud Manager provides native integration with a variety of virtual and physical firewall products so that you can consistently enforce a workload s security posture across different heterogeneous private and public clouds. Application-Level User Permissions Model CA Cloud Manager s role-based access controls encompass native application-level permissions. For example, existing application specific permissions such as User, Power User, or Administrator for MS SQL Server, can be passed through automatically to self-service provisioning users. This improves instance security, rather than providing default root access to the machine, and enable more sophisticated IT services to be offered on an automated, self-service basis.

8 8 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Application Portability, Orchestration and Configuration Management CA Cloud Manager enables cloud workloads to be portable across a broad range of private and public clouds, including the use of cloud-portable application blueprints. This applies to cloud workload ranging from simple stacks to the most complex, multi-tier applications. Blueprints can also leverage policy controls to automate and optimize cloud workload placement decisions based on costs, geographic location, regulatory constraints, and a wide range of other parameters, helping to ensure vendor contestability and prevent lock-in. Application-Centric Orchestration and Delivery Cloud Manager orchestrates the deployment of complex, multi-tier applications, which can include diverse application components, load balancers, firewalls, virtual networks, DHCP, dynamic DNS, registration with third-party systems, and more. Customizable Storage Tiers Cloud Manager enables the configuration and management of storage tiers, allowing policy controls to align cloud workloads to the most appropriate storage resources to optimize service levels, storage utilization, and costs. Configuration Management Detection and Remediation CA Cloud Manager continuously monitors cloud applications and platforms including the detection of configuration changes. When a non-sanctioned configuration change occurs, the solution uses policies to enforce the appropriate remediation action via configuration management tools like Puppet and Chef to reapply the approved configuration, and/or send alerts and notifications to third-party systems and execute approval workflows. CA Cloud Manager has the ability to correlate multiple disparate events and take action, allowing for greater insight into changes and more sophisticated options for remediation. Portability Across Diverse Private and Public Clouds CA Cloud Manager enables hybrid cloud strategies with support for the following cloud providers: VMware vcloud Director, VMware vcenter, Microsoft System Center, Microsoft Azure, Amazon EC2, CSC, Fujitsu, Terremark, Savvis, Dell, OpenStack, CloudStack, Rackspace, Eucalyptus, and others. Extend and Enhance Existing IT Ecosystems CA Cloud Manager integrates across an ecosystem of third-party products and service providers both within an enterprise s existing IT organization, and out to external public clouds. Comprehensive REST API Customers use CA Cloud Manager s API to access cloud services from existing IT products and tools; including developer tools, continuous software build tools, third-party portals, IT ops dashboards, and more. CA Cloud Manager s API is as full-featured as the CA Cloud Manager user interface, and every capability exposed via the API goes through the same policy-driven governance and security controls. Cloud Adapter SDK The CA Cloud Manager SDK enables customers and partners to rapidly build their own cloud adapters to govern and control IT resource managers, including bare-metal provisioning tools.

9 9 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Command Line Interface CA Cloud Manager provides a command line interface that enables rapid DevOps toolchain integration. Technical users can also use the CLI to instruct the solution to execute a wide range of commands and functions from the convenience of a command line tool rather than through the graphical web interface. Complex Event Processing CA Cloud Manager is designed to capture a broader array of real-time events and respond with pre-programmed notifications and responses either within the solution or to third-party offerings. This enables a wide range of responses to changing application needs, such as updating CMDBs, automating ticket submission into incident management systems, activating third-party application performance management tools to gather detailed forensics, or using and SNMP to generate custom alerts when monitoring thresholds are exceeded. Workflow Automation CA Cloud Manager provides workflow automation capabilities to streamline workload migration planning and approvals, and software release automation and approvals across SDLC tool chains. Vendor Contestability CA Cloud Manager provides vendor contestability for enterprise customers by abstracting the technical and operational differences between heterogeneous cloud providers into a single control point for orchestration, governance, and lifecycle management. CA Cloud Manager s centralized reporting enables monitoring and auditing of cloud provider performance, and CA Cloud Manager s cloud-portable blueprints support on-demand price comparisons between cloud providers and allow enterprises to make policy-based deployment optimization decisions based on multiple parameters. An Integrated, Purpose-Built Platform CA Cloud Manager minimizes operational complexity by providing a centralized governance, orchestration and management control point over broad IT service portfolios deployed across heterogeneous private and public clouds. The solution is also built on a cloud-native architecture that dynamically scales to meet system demand, using only the amount of resources needed. Cloud Workload Portability CA Cloud Manager s cloud-portable application blueprints enable enterprises to create a single blueprint and deploy it across heterogeneous private and public clouds. This portability helps drive vendor contestability and policy-based optimization of deployment decisions based upon cost, performance, or other parameters. Embed IT Standards in the Blueprint Design and Modeling Process CA Cloud Manager enables enterprise IT to create and enforce standards during the blueprint design and modeling process. This includes embedding IT Ops best practices for the governance and configuration of deployment environments, and defining standard operating environments with software packages and scripts assembled by default into the desired blueprints. Configuration management policies help ensure that these standards are maintained throughout the application lifecycle.

10 10 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Asset version control and change tracking Enterprises require full control over changes to cloud blueprints, stacks, policies, configurations, and instances, along with the ability to track and approve changes. CA Cloud Manager includes governed change-control and version tracking of assets within cloud environments. Self-updating blueprints and templates Cloud applications and platforms are based on underlying virtual machine designs that can change based on updates or patches to operating systems, utilities, agents, scripts, and other software packages. When a change is made to an underlying design component, it can be automatically updated to all the dependent application blueprints that rely on it. This helps eliminate configuration drift, facilitates compliance and standardization across the enterprise, and significantly reduces artifact sprawl and design complexity. Supports 10 s of thousands of workloads with a single instance CA Cloud Manager has been proven to support the concurrent provisioning and management of 10 s of thousands of workloads with one instance of the solution. Organizations can also deploy multiple instances as desired. Distributed Reporting Architecture CA Cloud Manager s distributed reporting architecture dramatically reduces report creation time and bandwidth consumption. This is especially useful when aggregating reports over thousands of workloads and environments where users are charged for network bandwidth. Traditional aggregate report collection methods become costly and unresponsive at these volumes.

11 11 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com At a Glance Evaluate and prioritize workloads for cloud migration. Import configurations from CMDBs and other sources. Automatically discover and import virtual machines. Generate Cloud Value and Cloud Readiness scores. Model dependencies in multi-tier application blueprints. Capture initial governance requirements. Section 3: Planner Planner provides a systematic approach to profile, score, approve, and migrate existing applications and virtual machines to fully governed hybrid cloud environments. Enterprise application portfolios can be quite large and diverse, containing several thousand types of applications and workloads. Planner imports existing application information from sources such as CMDBs, and combines this with cloud service provider capabilities to analyze, classify, and score workloads according to a programmable criteria set. Planner generates Cloud Readiness and Cloud Value scores for each workload and systematically compares and provides recommendations for a best-fit cloud environment. The resulting scores and any remediation actions are then tracked in a customizable approval workflow, and upon approval, seamlessly promoted to Designer (the next lifecycle stage) where they are assembled and configured for cloud deployment. Planner also captures initial policy parameters during workload profiling including workload sizing and placement criteria, security parameters, operating limits, and regulatory restrictions. These policy definitions are retained for later refinement and enforcement when end users provision these workloads later in the lifecycle. Planner also enables you to automatically discover and import existing virtual machines (VMs) deployed from other third-party provisioning tools. Upon VM import, the CA Cloud Manager enforces the specified policies on those VMs to better ensure governance, security, and control. These existing VMs can be imported in bulk, with governance and security policies applied systematically upon import, or manually applied after import is complete. Once imported, these VMs can be published through Store, monitored via Operations, and otherwise leverage the full range of capabilities provided by CA Cloud Manager.

12 12 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com At a Glance Graphical workbench to assemble stacks, templates, blueprints, and topologies. Version-controlled library of pre-built, re-usable assets. Assemble highly complex, multi-tier platforms and applications. Fine grain configuration, security, and governance controls. Section 4: Designer Designer is a graphical workbench to assemble cloud-portable blueprints for deployment across hybrid clouds. Organizations need the flexibility to deploy their cloud workloads to whatever cloud delivers the best combination of price, performance, compliance, security, and service levels that they need. Designer enables the rapid assembly of everything from simple stacks to highly complex mult-tier application blueprints, and enables these workloads to have the cloud portability that enterprises need, combined with the business agility provided by self-service, on-demand provisioning. Designer provides a graphical environment to accelerate the design and assembly process of complex cloud workloads. Using Designer, workloads such as development platforms, custom business applications, and packaged applications are assembled into blueprints and outfitted with application configuration controls, auto-scaling rules, storage tiers, security settings, governance controls, and embedded with operating environment agents and utilities. To accelerate design and assembly, Designer includes a version-controlled library for reusable base images and deployment accelerators including customizable templates, scripts, blueprints, policies, packages, and more. Enterprise IT can also automatically enforce standards during the blueprint design and modeling process, such as embedding best practices for the governance and configuration of deployment environments, and defining standard operating environments with software packages and scripts included by default into selected blueprints. Designer allows developers and architects to construct a versatile IT-as-a-service portfolio that is policy-compliant and portable across heterogeneous clouds. Once these cloud workloads are assembled, they can be seamlessly promoted to the next lifecycle stage for publishing and end user consumption CA Cloud Manager s Store.

13 13 White Paper: Document Title ca.com At a Glance Graphical workbench to assemble stacks, templates, blueprints, and topologies. Version-controlled library of pre-built, re-usable assets. Assemble highly complex, multi-tier platforms and applications. Fine grain configuration, security, and governance controls. Section 5: Store Store is a fully governed, self-service portal to access applications, platforms, and other IT services for on-demand deployment. Global enterprises may have several hundred development, testing, staging, and production teams, including external contractors and outsourcers. Providing these teams with self-service access to all the applications, platforms, and IT infrastructure needed to do their work can drive tremendous time and cost savings across the enterprise, but requires on demand provisioning combined with sophisticated governance and security controls. CA Cloud Manager s Store provides a fully governed, self-service portal for a broad portfolio of business applications, software development platforms, and third-party SaaS, PaaS and IaaS. Store features an easy-to-use interface to support users ranging from developers needing complete development platforms, to non-technical users accessing mobile applications and desktop resources. Store users can conduct detailed searches for IT resources, and customize and re-publish assets where appropriate. When offering self-service capabilities in Store, you re also provided with the option to publish pricing information, collect user feedback, reviews, and ratings to provide a feedback loop for service portfolio optimization. Store keeps track of resource consumption including customizable chargeback, showback, and cost center assignment features. All Store resources and assets are also accessible via CA Cloud Manager s governance-enforced API.

14 14 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com At a Glance Consolidated runtime monitoring and reporting. Complete line-ofsight visibility. Benchmark the performance of private and public clouds. Comprehensive drill-down and roll-up reporting. Access reports via graphical user interface or API. Create and collect custom reporting metrics. Monitor thresholds and generate responses. Section 6: Operations Operations consolidates all cloud environments managed into a single runtime management console with visibility into costs, resource consumption, workload performance, and more. IT operation groups need to have line-of-sight visibility from applications to their underlying infrastructure to provide the availability, performance, and service levels demanded by business application owners and end users. However, this end-to-end contextual view is nearly impossible to achieve using traditional operations monitoring tools in dynamic cloud-based operating environments. Operations greatly simplifies and makes transparent IT operations management functions across private and public cloud environments by consolidating a number of important monitoring, reporting and benchmarking capabilities. Operations abstracts the technical and operational differences between cloud providers for uniform visibility into resource consumption, performance, costs, availability, and other metrics. Operations also provides capabilities to benchmark the performance of your private and public cloud providers. You can compare cloud provider performance across different operational parameters and limits, such as average VM provisioning time, number of failed or degraded instances, maximum number of concurrent provisioning requests executed, and others. Operations provides role-based access to custom reports that can quickly drill-down or roll-up across clouds, organizations, projects, topologies, instances, and more. Reports can be accessed from Operation s graphical user interface or via a comprehensive API for integration with accounting/billing systems, third-party portals, existing ITOM dashboards, and other applications. Operations allow for the creation and collection of custom reporting metrics, enabling new business-relevant reports on their cloud workloads to be captured and delivered to application owners and other enterprise stakeholders. Business and IT users can also define monitoring thresholds for their cloud workloads and select policy enforcement triggers and alerting mechanisms including auto-scaling actions and and SNMP alerts.

15 15 White Paper: CA Cloud Manager An Enterprise Cloud Management Platform ca.com Section 7: Summary Global enterprises use CA Cloud Manager [Powered by Service Mesh] to empower their business units with fully governed, self-service access to the cloud applications, platforms, and services they need. Enterprises are using the solution not simply to manage cloud infrastructure, but to transform their IT operating model with cloud-based applications and platforms that provide significant cost and time-to-market advantages while meeting their requirements for governance, compliance, and security through flexible policy definition and enforcement. By providing a single, integrated platform for lifecycle management and governance, organizations can accelerate their adoption of cloud-based services while ensuring compliance across hybrid clouds. Some of the world s largest and most sophisticated companies in financial services, health care and other highly regulated industries rely on this technology to deliver applications and services at the speed of market change, streamline inefficient IT operating models, and transform IT into a strategic business enabler and competitive advantage. Connect with CA Technologies at ca.com Agility Made Possible: The CA Technologies Advantage CA Technologies (NASDAQ: CA) provides IT management solutions that help customers manage and secure complex IT environments to support agile business services. Organizations leverage CA Technologies software and SaaS solutions to accelerate innovation, transform infrastructure and secure data and identities, from the data center to the cloud. CA Technologies is committed to ensuring our customers achieve their desired outcomes and expected business value through the use of our technology. To learn more about our customer success programs, visit ca.com/customer-success. For more information about CA Technologies go to ca.com. Copyright 2014 CA. All rights reserved. All trademarks, trade names, service marks and logos referenced herein belong to their respective companies. This document is for your informational purposes only and to the extent permitted by applicable law, CA provides it as is without warranty of any kind, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose, or noninfringement. The information in this document is based upon CA s experiences with the referenced software products in a variety of development and customer environments. Past performance of the software products in such development and customer environments is not indicative of the future performance of such software products in identical, similar or different environments. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, business interruption, goodwill or lost data, even if CA is expressly advised in advance of the possibility of such damages. CA does not provide legal advice. Neither this document nor any software product referenced herein serves as a substitute for your compliance with any laws (including but not limited to any act, statute, regulation, rule, directive, standard, policy, administrative order, executive order, and so on (collectively, Laws )) referenced herein or any contract obligations with any third parties. You should consult with competent legal counsel regarding any such Laws or contract obligation CS55321_0214