CLOUD. Nik Zarina Nik Mat (Pasukan Perunding Pengurusan Rangkaian) 10 Mei 2011

Transcription

1 CLOUD COMPUTING Nik Zarina Nik Mat (Pasukan Perunding Pengurusan Rangkaian) 10 Mei 2011 Unit Pemodenan Tadbiran dan Perancangan Pengurusan Malaysia, Jabatan Perdana Menteri

2 Contents 1 What is Cloud Computing? 2 Why is Cloud Computing? 3 Cloud Computing in Public Sector 4 Government Future Planning 2

3 The challenge Add new services for your users quickly and cost effectively 3

4 Expand your Infrastructure! Buy new servers, increase your software costs, provision more datacenter capacity!! 4

5 Look to the cloud! Pay for the bandwidth and server resources that you need. When your push is done then turn the whole thing off! 5

6 What is the cloud? coud IT as a service Cloud allows access to services without user technical knowledge or control of supporting infrastructure What is Best described in terms of what happened to mechanical power over 100 yrs ago Cloud Computing? Now computers are simple devices connected to the larger cloud Data processing, storage and software applications that used to run locally are now being supplied by big central computing stations. They're becoming, in essence, computing utilities. 6

7 Definitions Cloud computing is an emerging approach to shared infrastructure t in which h large pools of systems are linked together to provide IT services. IBM press release on Blue Cloud a hosted infrastructure model that delivers abstracted IT resources over the Internet Thomas Weisel Partners LLC from Into the Clouds: Leveraging Data Centers and the Road to Cloud Computing Cloud computing describes a systems architecture. This particular architecture assumes nothing about the physical location, internal composition or ownership of its component parts. James Urquhart blog post 7

8 Cloud Computing is virtualized compute power and storage delivered d via platform-agnostic ti infrastructures t of abstracted hardware and software accessed over the Internet. These shared, on-demand IT resources, are created and disposed of efficiently, are dynamically y scalable through a variety of programmatic interfaces and are billed variably based on measurable usage. 8

9 What does it mean by cloud? 9

10 Multiple Delivery Models for Cloud Computing Outsourced Cloud Sourcing Models Government High and Data Pr rivacy) Pi Private Cloud dcommercially Hosted: Publically available Cloud Computing services offered through commercial sources that are dedicated and separate from the Public both physically and logically and must to remain to support heighted data security and privacy requirements. Access to these services are provided through a dedicated Government Intranet and is not accessible from the Public Internet. Private Commercially Hosted Cloud Government Dedicated Intranet Private Government Cloud : The cloud infrastructure is operated solely for an organization. It may be managed by the organization or a third party and may exist on premise or off premise. Private Government Cloud Tru ust (Security Low Public Cloud: The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services. Public Cloud Public Internet Hybrid Government Cloud Community Cloud Community Cloud: The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be managed by the organizations or a third party and may exist on premise or off premise. Hybrid Cloud: The cloud infrastructure is a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting). 10

11 3 Strategic Cloud Models 11

12 3 Cloud Stack SaaS (Software as a Service) PaaS (Platform as a Service) IaaS (Infrastructure as a Service) 12

13 SaaS : Software as a Service Most common cloud (Many providers of different services) Software delivery model Increasingly popular with SMEs No hardware or software to manage Service delivered through a browse Advantages Pay per use Easy Consumer Adoption Instant Scalability Security Reliability API Disadvantages Limited functionality No control or access to underlying technology Examples SalesForce Gmail Yahoo! Mail Quicken Online 13

14 PaaS : Platform as a Service Containers & Closed Environment Software delivery model Advantages Disadvantages Examples Platforms are built upon Infrastructure, which is expensive Estimating demand is not a science! Pay per use Instant Scalability Good for developers Reliability Restricted to what is available Other independencies Google Appllication Engine Mosso Amazon Web Services: S3 Platform management is not fun! More control than Saas Tightly configured Heroku SalesForces Dev Platform 14

15 IaaS : Infrastructure as a Service Computer infrastructure t Firewalls delivery model Access to infrastructure stack: Full OS access Fi ll Routers Load balancing Provide compute and storage clouds Virtualization layer (hardware/soft ware) Advantages Disadvantages Pay per use Instant Scalability Security Reliability Full control of environment and infrastructure Premium price point Limited competition Amazon: EC2 GoGrid Examples Amazon: S3 Nirvanix 15

16 Common Factors SaaS PaaS IaaS Pay per use Instant Scalability Security Reliability APIs 16

17 Advantages SaaS PaaS IaaS Lower cost of ownership Reduce infrastructure management responsibility Allow for unexpected resource loads Faster application rollout 17

18 Cloud Economics SaaS PaaS IaaS Multi-tenanted Virtualisation lowers costs by increasing utilisation Economies of scale afforded by technology Automated update policy 18

19 Examples of usage SaaS Your current CRM package is not managing the load or you simply don t want to host it inhouse.use a SaaS provider such as Salesforce.com Your is hosted on an exchange server in your office and it is very slow outsource outsource this using Hosted Exchange. 19

20 Examples of usage PaaS You need to host a large file (5Mb) on your website and make it available for 35,000 users for only two months duration. Use Cloud Front from Amazon. You want to start storage services on your network for a large number of files and you do not have the storage capacity use Amazon S3. 20

21 Examples of usage IaaS You want to run a batch job but you don t have the infrastructure necessary to run it in a timely manner. Use Amazon EC2. You want to host a website, but only for a few days. Use Flexiscale. 21

22 What is the cloud? coud Instant Scalability Pay per use IT as a service Cloud allows access to services without user technical knowledge or control of supporting infrastructure Why is Best described in terms of what happened to mechanical power over 100 yrs ago Cloud Computing? Now computers are simple devices connected to the larger cloud Security Data processing, storage and software applications that used to run locally are now being supplied by big central computing stations. They're becoming, APIs in essence, computing utilities. Reliability 22

23 The Cloud = 10X Improvements Ease of Use Scalability Risk Reliability Cost 23

24 Ease of Use Deploy infrastructure with a mouse or API No cabling, screwdrivers, racking, unboxing, buying Middle of the night Do it yourself remotely from anywhere anytime 24

25 Scalability See Ease of Use Control your infrastructure with your application Nothing to purchase and take delivery on Instant 25

26 Risk Nothing to buy Cancel immediately Change instantly, even operating systems Throw it out Rebuild it instantly after testing RISK 26

27 Reliability Based on enterprise grade hardware Design for failures: Automatically spin up replacements Use multiple clouds 27

28 Cost Turn off the lights = turn off servers you aren t using Ex: Turn off development and test environments Pay for only what you use No need to buy in advance Zero Capital Outlay No contracts 28

29 3 Global Mega Trends Evolving Business Models 1 Technology Advancements 2 3 Changing Workforce 29

30 The Instant-On Enterprise IT turns business and government On instantly tl Everything and everyone is connected Everyone expects immediate gratification and instant results Enterprise and IT one and the same Respond to continuous opportunity and competition Anywhere, any time, any way 30

31 Changing Government BUSINESS DRIVERS Business Need High Variability in Computing Needs Eliminate need to build out for peak capacity requirements Temporary Computing Capacity Require access to capacity for short periods of time Economic activity calculations e.g. CPI,GDP, Retail Sales Monthly Payroll Pension Funds / Superannuation Development / Staging Migrations Use Case Scenario Annual Enrollments Annual Taxes Marketing Promotions Major Events (APEC, IMF, other Gov events) Success Based Growth Leverage standardized infrastructure and OPEX to scale as your business grows Cost Management & Reduction Consolidate and improve utilization without sacrificing performance and security Operational Empowerment Transition from an IT Department to an Internal Central IT Service Provider Time to Market Accelerate launches and respond to rapidly changing markets SaaS/ISVs New ministries/reorganizations/ merged ministries/agencies Healthcare Government Predictable Fees National or Multi-Agency Public Security New government eservices Technology & Communications Stimulus package funding & administration Academic Grants Affordable HA Certification and Accreditation Social Security Internal Charge Back Census and Statistics Rapid Service Launch

32 Government Private Cloud Model Government Agencies high security private cloud Tax Public Social Health Education Transport Justice Defense Safety Security Government Apps Store ( ie. Service Catalog and Portal) Marketing & billing Service Request Layer Monitoring & SLAs rity Secu PaaS (Platform as a Services) IaaS (Infrastructure as a Services) Network Facility Mgmt/Service Mgmt Government Data Center SaaS (Software as a Services) Ser rvice Managemen nt/governanc ce 32

33 Desktop Services Messaging & Collaboration Services Workplace Services Deployment & Management Services Collaboration Services Computing Provisioning Service File and Print Service Desktop Access Control Service Desktop Data Resiliency Service Desktop Data Encryption Service Desktop Security Service Central Asset & Configuration Management Services Compatibility Testing Service Software Delivery Service Short-Term Computing Provisioning Service Instant Messaging Service Desktop Conferencing Service Desktop Collaboration Service Presence Awareness Service Messaging Services Unified Mailbox Service Support Services Service Desk Desk-side Support Service Common Services SOE Computing Lifestyle Management Service Mobile Service Near-Line Storage Service Resilient Service Remote Desktop Support Service Self Help Portal SOE Change Management Service SOE Management Reports Service SOE Backup Service SOE Procurement Service SOE Billing Service Security Management Service Network Services Government Identity Management Service SOE Universal Monitoring and Management Service IP Telephony Service Government Internet Access Service Remote Access Service Network Infrastructure Local Area Network Connectivity Infrastructure Global Wide Area Network Connectivity Infrastructure Government Network Operators Centre (GNOC) Infrastructure 33

34 Why Common Operating environment for Government? 34

35 Cloud Capabilities Must be Tailored to Government s Unique Needs Cloud Computing Services Federal Government Considerations for Cloud Computing Security & Data Privacy Delivery & Operations Interoperability & Integration Software as a Service (SaaS) Citizen Engagement (Wikis, Blogs, Data.gov) Government Productivity (Cloud based tools) Business Enablement (Salesforce.com) Enterprise Applications (Core Mission & Business Svcs) Platform as a Service (PaaS) Database and Database Management Systems Developer / Testing Tools Virtual Environments Infrastructure as a Service (IaaS) Computing Storage Application hosting Offer different Enable Develop levels of adoption of interoperability security and Cloud standards in data privacy Computing conjunction based on the services in with the application and nature of the services provided. Potential standardize Low, Med and High categories for Simplicity. different Cloud models including Public, Private, Hybrid and Community models. industry to provide interoperability at the data infrastructure, platform and application levels. 35

36 Cloud Functional Architecture 36

37 What is the cloud? coud IT as a service Cloud allows access to services without user technical knowledge or control of supporting infrastructure Cloud Computing Best described in terms of what happened to mechanical power over 100 yrs ago in Public Sector Now computers are simple devices connected to the larger cloud Data processing, storage and software applications that used to run locally are now being supplied by big central computing stations. They're becoming, in essence, computing utilities. 37

38 Government Initiatives GTP MAMPU have lead the initiatives to implement the EG programs and the utilization of ICT across government ministries and agencies NEM ICT infrastructure should be able to inter-connect the government agencies as well as cater to the needs and requirement of government bodies in delivering their services to the citizens 10 th M sia Plan The government aims to further reduce bureaucracy and ease the process for doing business in Malaysia for foreign investors National Green Tech Policy With the increasing number of servers and data centres across the public sector, the way to move forward would be to consolidate the ICT infrastructure towards reducing under-utilization of ICT hardware resources and improving the carbon footprint of the government s ICT operations 38

39 Current Environment Overview Disparate network services & connectivity Disparate data centre & disaster recovery centre infrastructure Non-standard enduser computing standards High cost of maintenance Inefficiencies in ICT infrastructure operations Non optimised resource utilisation 39 39

40 Current Environment Overview - Putrajaya Campus Network (PCN) 40

41 Current Environment Overview EG*Net Architecture 41

42 Case Study Infrastructure Consolidation and G-Cloud 42

43 G-CLOUD PROGRAMME VISION - SINGLE PRIVATE CLOUD COMPUTING Cloud platform services Desktop Standard desktop model provides users with access to G-Cloud Services Govt App Store Find Purchase Common Service Off the Shelf Shared services Office Apps VOIP ERP 1 ERP 2 HR 1 Hosting Infrastructure services Provisioning Billing Public Cloud 1 Promote as Common Service The App Store is the gateway to purchasing services from the G-Cloud Custom Services * Consolidated Data Centres Service management G-Cloud : bringing utility convenience to public sector ICT PSN efficient allocation of IT when it s needed, through sharing standardised resources * to reduce costs Application Store: enabling faster, cost-effective and consistent certified solutions to business challenges through reusing and sharing applications and services Data Centre Consolidation: delivering gpublic sector ICT services from the optimum number of high performing, energy-efficient, cost-effective and standards-based data centres Public Cloud 2 Public Cloud 3 *Source Intellect G-Cloud Stakeholder meeting, Jan

44 Case Study Desktop EUWS Management (end user work space)

45 A Government Case study Goals of EUWS consolidation: Lead to smarter purchasing of IT services by ensuring all departments benefit from the combined purchasing power of government, therefore reducing the unit cost of a desktop. Free up scarce, specialised IT resources to enable them to work on higher value-adding business change initiatives. Success Metrics: Reduce Cost Improve Productivity Improve Capability Improve Agility Enhance Mobility Improve Security Create a more productive and attractive work place environment, to ensure the government is competitive in attracting employees. Enhance workforce agility by enabling staff to login from any government computer. Reduce the effort, delays and costs associated with machinery of government changes, and Significantly improve infrastructure security, and position government tto respond dto increasing i demands d for advanced d information security. 45

46 What is the cloud? coud IT as a service Cloud allows access to services without user technical knowledge or control of supporting infrastructure Future Planning? Best described in terms of what happened to mechanical power over 100 yrs ago Now computers are simple devices connected to the larger cloud Data processing, storage and software applications that used to run locally are now being supplied by big central computing stations. They're becoming, in essence, computing utilities. 46

47 To Be Strategies Overview Objective To increase public sector productivity, add value to services and improve efficiencies through a whole-of-government approach on ICT infrastructure. Areas of Concern Public Sector ICT infrastructures are currently not fully optimised due to redundancies and inefficiencies resulting from disparate ICT Infrastructure. Strategy Consolidation of Public Sector Network (1Gov*Net) Consolidation of Data Centres and Disaster Recovery Centres Establishment of Public Sector Cloud Computing Infrastructure Standardise End User Computing Infrastructure Development of Common Security Infrastructure Deployment of Mobile Computing Solutions Increasing Usage of Open Source 47

48 Consolidation of Public Sector Network (1Gov*Net) To support policy purpose specified in RMK10 - Consolidation of WAN. Integrated whole-of-government network connecting federal, state and local government. Agencies may access government applications from any government office locations. Agencies may access all government applications from a single network access. Foundation to enable infrastructure consolidation & support future technology infrastructure (e.g. cloud computing). Key Benefits Reduced cost of procurement and services. Increased responsiveness to organisational change. Enhanced service standards. Greater assurance of interoperability and security. New opportunities for more efficient information sharing. 48

49 Establishment of Public Sector Cloud Computing Infrastructure Public Sector Cloud Computing Infrastructure Development of Private Cloud for the public sector for total control and security. Enables agencies to select and host ICT services from a secure, scalable and costeffective shared environment. Agencies will be able to obtain access to various cloud services through web portal which can be provided d on-demand d with rapid provisioning. i i Agencies procurement process will be faster. Key Benefits Substantial savings due to sharing of common services, applications and infrastructure. Enable services to be provided on demand. Enable faster provisioning of resources. Minimise redundancies. 49

50 Establishment of Public Sector Cloud Computing Infrastructure - Cloud Computing Dimensions Five distinct dimensions focused on key aspects, as necessary to plan and implement comprehensive cloud computing capabilities Finance - Cloud Computing Business Case - Chargeback Metrics & Models Controls - Laws, Regulations & Business Requirements Impacting Cloud Models - Audit Impact & Considerations - Application criticality - Cloud provider SLA contracts - Conformance to Standards, Continuous Improvement Technology - Technology Integration - Technology Architecture Standardization - POC Review - Application Rationalization - Technology Standardization 50 Organization - Operating in the Cloud - Organizational Changes - Organization Change Management - Skills, Roles and Responsibilities - Right-Sizing - Governance Framework Process - Impact on IT Service Management Processes - Change, Release, Config - Incident, Problem - Capacity Provisioning - Vendor Management - Process Metrics 50

51 ICT Infrastructure Roadmap 0-1 years Pilot Projects Establish pilot project for Public Sector Network, Cloud Computing Infrastructure, End-User Computing Standardisation and Mobile Computing deployment. 1-2 years Public Sector ICT Infrastructure Integration Consolidation of Data Centers within Putrajaya & Klang Valley areas (Federal agencies). Development of Federated Identity and Access Management to selected agencies. 2-5 years Public Sector ICT Infrastructure Optimisation Complete consolidation i of the Public Sector Network. Expansion of cloud computing services. Consolidation of regional Data Centers. Provisioning of Infrastructure as a Service. Provisioning of Platform as a Service. Provisioning of Software as a Service. 51

52 Unit Pemodenan Tadbiran dan Perancangan Pengurusan Malaysia, Jabatan Perdana Menteri