SERVER 101 COMPUTE MEMORY DISK NETWORK

Transcription

1 Cloud Computing ก ก ก

2 SERVER 101 COMPUTE MEMORY DISK NETWORK

3 SERVER GHz = 1, Cycle/Second 1 CPU CYCLE

4 VIRTUALIZATION 101

5 VIRTUALIZATION 101

6 VIRTUALIZATION 101

7 HISTORY

8 YEAR 1800

9 YEARS LATER

10 INNOVATION

11 BUSINESS OPPORTUNITIES

12 KNOWLEDGES CREATIVITY MANAGEMENT

13 NEW OPPORTUNITIES BEGIN

14 STAY CONNECTED MOBILITY MASSIVE STORAGE UNLIMITED COMPUTATION HIGH QUALITY SERVICES SECURE AND PAY AS YOU USE

15 CLOUD COMPUTING IF YOU ONLY NEED MILK WOULD YOU BUY A COW?

16 LONG JOURNEY OF VIRTUAL MACHINE

17

18

19

20

21 PERSONAL COMPUTER By the early 1970s, people in academic or research institutions had the opportunity for single-person use of a computer system in interactive mode for extended durations, although these systems would still have been too expensive to be owned by a single person. The introduction of the microprocessor, a single chip with all the circuitry that formerly occupied large cabinets, led to the proliferation of personal computers. Early personal computers - generally called microcomputers - were sold often in Electronic kit form and in limited volumes, and were of interest mostly to hobbyists and technicians. Minimal programming was done by toggle switches, and output was provided by front panel indicators. Practical uae required peripherals such as keyboards, computer terminals, disk drives, and printers.

22

23

24

25 DATA CENTERS AROUND THE WORLD HAD AN AVERAGE SERVER CPU UTILIZATION RATE OF ONLY 15%

26 THE HISTORY OF CLUSTER Consequently the history of early computer clusters is more or less directly tied into the history of early networks, as one of the primary motivation for the development of a network was to link computing resources, creating a de facto computer cluster. Packet switching networks were conceptually invented by the RAND corporation in Using the concept of a packet switched network, the ARPANET project succeeded in creating in 1969 what was arguably the world's first commodity-network based computer cluster by linking four different computer centers (each of which was something of a "cluster" in its own right, but probably not a commodity cluster). The first commercial clustering product was ARCnet, developed by Datapoint in ARCnet was not a commercial success and clustering per se did not really take off until DEC released their VAX cluster product in 1984 for the VAX/VMS operating system. The ARCnet and VAX cluster products not only supported parallel computing, but also shared file systems and peripheral devices. The idea was to provide the advantages of parallel processing, while maintaining data reliability and uniqueness. VAX cluster, now VMS cluster, is still available on OpenVMS systems from HP running on Alpha and Itanium systems.

27 Grids are usually computer clusters, but more focused on throughput like a computing utility rather than running fewer, tightly-coupled jobs. Often, grids will incorporate heterogeneous collections of computers, possibly distributed geographically, sometimes administered by unrelated organizations. Grid computing is optimized for workloads which consist of many independent jobs or packets of work, which do not have to share data between the jobs during the computation process. Grids serve to manage the allocation of jobs to computers which will perform the work independently of the rest of the grid cluster. Resources such as storage may be shared by all the nodes, but intermediate results of one job do not affect other jobs in progress on other nodes of the grid.

28 Operating system (OS) virtualization (sometimes called containers) runs on top of an existing host operating system and Provides a set of libraries that applications interact with, giving an application the illusion that it is running on a machine dedicated to its use. This approach to virtualization is extremely useful if you want to offer a similar set of operating system functionalities to a number of different user populations while using only a single machine.

29 the virtualization software (usually referred to as a hypervisor) presents an emulated hardware environment that guest operating systems operate upon. This emulated hardware environment is typically referred to as a virtual machine monitor or VMM. The hypervisor, which resides between the VMM and the physical hardware, translates the calls from the VMM to the specific resources of the physical machine.

30 Cloud Computing is a style of computing in which dynamically Scalable and often virtualized resources are provided as a service over the internet. Users need not have knowledge of, expertise in, or control over the technology in the cloud wikipedia

31 Eucalyptus is an open-source infrastructure for the implementation of cloud computing on computer clusters. Its name is an acronym for "Elastic Utility Computing Architecture for Linking Your Programs To Useful Systems". The current interface is compatible with Amazon Web Services cloud computing interface. Eucalyptus is available as a source package, RPM, and a Rocks disk image. Since the beta, it is also shipped with Ubuntu 9.04 as default cloud computing tool..

32 The Globus Toolkit is an open source software toolkit used for building grids. It is being developed by the Globus Alliance and many others all over the world. Nimbus is an open source toolkit that allows you to turn your cluster into an Infrastructure-as-a-Service (IaaS) cloud.

33 IBM CloudBurst supports workloads to simplify cloud computing acquisition and deployment. It s a prepackaged and selfcontained service delivery platform that can be implemented in a data center.

34

35

36

37

38

39

40

41 GOVERNMENT CHALLENGES BUILDING UP NEW ERA OF INFORMATION INFRASTRUCTURE TO OVERCOME CLOUD COMPUTING SECURITY ISSUES

42 2 KEY AREAS INFORMATION INFRASTRUCTURE SHIFTS 1 TRADITIONAL INFRASTRUCTURE CLOUD COMPUTING INFRASTRUCTURE 2 SECURITY CHANGES?

43 INFORMATION INFRASTRUCTURE COMPONENTS NO MATTER HOW COMPLEX OF THE TOPOLOGIES ARE COMPUTE STORAGE NETWORK ACCESS POINT PEOPLE TRANSFERED DATA COMPUTE AND STORAGE ARE LINKED WITH THE NETWORK AND PROVIDE SERVICES AND ACCESSES THROUGH THE NETWORK

44 TRADITIONAL INFORMATION INFRASTRUCTURE RUNNING ON PHYSICAL SERVERS AND NETWORK PROPRIETARY, CUSTOMIZED ECONOMY OF SCALE FULL CONTROL MOST SECURE LIMITED CAPACITY DEDICATED

45 MODERN INFORMATION INFRASTRUCTURE WHOLE OR PARTLY VIRTUALIZED DATA CENTER HYPERVISOR ARE IMPLEMENTED AND AT LEAST ONE SERVICE ENDPOINT BECOMES A MANAGEMENT INTERFACE THROUGH HTTPS HTTPS VIRTUAL SERVERS AND VIRTUAL APPLIANCES ARE IMPLEMENTED ON ONE OR MANY PHYSICAL SERVERS AND STORAGE CLUSTERS BUT EVERYTHING IS STILL ON PREMISE PICTURES FROM DEPARTMENT OF RURAL ROADS (DRR) VMWARE PRIVATE CLOUD, THAILAND.

46 MODERN INFORMATION INFRASTRUCTURE FROM VIRTUALIZED DATA CENTER TO PRIVATE CLOUD VMWARE PLATFORM VSPHERE VCLOUD DIRECTOR VSHIELD VCENTER ORCHESTRATOR VCENTER CHARGE BACK MICROSOFT HYPER-V PLATFORM HYPER-V SYSTEM CENTER VIRTUAL MACHINE MANAGER DYNAMIC DATA CENTER TOOLKITS FOR HOSTER UBUNTU ENTERPRISE CLOUD PLATFORM UBUNTU ENTERPRISE CLOUD (EUCALYPTUS) UBUNTU LANDSCAPE OR MAKE-IT-YOURSELF PLATFORM

47 PRIVATE CLOUD INFRASTRUCTURE NEW FORM FACTOR DATA CENTER (CLOUD READY) AZURE CLOUD APPLIANCE BUY IT, GET DELIVERED AND POWER ON SUN BLACK BOX

48 PUBLIC CLOUD COMPUTING INFRASTRUCTURE RESOURCES ARE VIRTUALIZED AND SHARED WITH OTHERS MOVE BOTH COMPUTE AND STORAGE ONTO THE PUBLIC CLOUD 5 CHARACTERISTICS OF CLOUD SHARED RESOURCES PAY AS YOU GO LARGE AMOUNT OF SERVERS FLEXIBILITY AND ELASTICITY SELF PROVISIONING

49 HYBRID CLOUD COMPUTING INFRASTRUCTURE OR MOVE A PART ONTO THE CLOUD SERVICE ENDPOINT

50 SECURITY WHAT ARE WE PROTECTING? CIA TRIAD CONFIDENTIALITY INTRIGRITY AVAILABILITY

51 VARIOUS SOLUTIONS FOR SECURITY IN THE CLOUD

52 VIRTUAL INFRASTRUCTURE VIRTUALIZED DATA CENTER PRIVATE CLOUD PUBLIC CLOUD HYBRID CLOUD

53 NEW PERIMETER OF DEFENSE IN VIRTUAL INFRASTRUCTURE SAFE AND SECURED WITH THE SECOND LINE OF DEFENSE SECURITY PROTECTION WITH TRADITIONAL HARDWARE AND SOFTWARE REMAIN IMPORTANT TO ON-PREMISE DATA CENTER SECOND LINE OF DEFENSE IS NEEDED WHEN IMPLEMENTING THE VIRTUAL INFRASTRUCTURE

54 VIRTUAL INFRASTRUCTURE PROTECTION VIRTUAL APPLIANCES BECOME MORE COMMON VIRTUAL FIREWALL VIRTUAL ROUTER VIRTUAL LOAD BALANCER VIRTUAL SWITCH VIRTUAL DISTRIBUTED SWITCH VIRTUAL EVERYTHING

55 VIRTUAL FIREWALL / VIRTUAL ROUTER MONITOR, ANALYZE, FILTER TRAFFIC THROUGH ACCESS POINT SECURE & PROTECT CONNECTION TO ACCESS POINTS SECURE AND PROTECT TRANSFERRED DATA PROVIDE END POINTS SECURITY

56 VIRTUAL LOADBALANCER PROTECT COMPUTE AVAILABILITY

57 VIRTUAL SWITCH MANAGE NETWORK ISOLATE DATA AND COMPUTE TRAFFIC SHAPING TEAMING AND LOADBALANCING COMMONLY SEEN ON VIRTUALIZED INFRASTRUCTURE AND WILL BE SEEN MORE AND MORE ON CLOUD INFRASTRUCTURE

58 TRANSFERRED DATA MUST BE SECURED

59 TRANSFERRED DATA MUST BE ENCRYPTED

60 REPLICATE DATA MUST BE ENCRYPTED

61 STORED DATA MUST BE ENCRYPTED, TOO

62 NEEDED TECHNOLOGIES VM AND DATA ISOLATION IN VIRTUAL ENVIRONMENT AND CLOUD (FOR CONFIDENTIALITY AND PRIVACY) GLOBAL TRAFFIC MANAGEMENT CAPABILITIES (FOR HIGH AVAILABILITY DISASTER RECOVERY) VIRTUAL MACHINE INTEROPERABILITY (FOR MIGRATION BETWEEN DIFFERENT CLOUD INFRASTRUCTURE)

63 CASE STUDY

64 ก ก ก ก ,000, ,478, ,000, ,725, ,875, ,000, ,000, ,000, ,730, ,914, ,300, ,000, ,000, ,780, ,918, ก ก ก ,000, ,000, ,000, ,050, ,316, ,825, ,300, ,000, ,000, ,000, ,900, ,600, ,850, ,000, ,000,

65 VIRTUALIZATION MANAGEMENT

66 VIRTUALIZATION MANAGEMENT

67 VIRTUALIZATION MANAGEMENT

68 VIRTUALIZATION MANAGEMENT

69 VIRTUALIZATION MANAGEMENT

70 VIRTUALIZATION MANAGEMENT

71 VIRTUALIZATION MANAGEMENT

72 CLOUD MANAGEMENT

73 CLOUD MANAGEMENT

74 CLOUD MANAGEMENT

75 CLOUD MANAGEMENT

76 CLOUD MANAGEMENT