Cloud Computing Flying High (or not) Ben Roper IT Director City of College Station
What is Cloud Computing? http://www.agent-x.com.au/
Wikipedia - the use of computing resources (hardware and software) that are delivered as a service over a network (typically the Internet). IBM - the delivery of on-demand computing resources everything from applications to data centers over the Internet and on a pay-for-use basis. Google Developers - taking applications and running them on infrastructure other than your own
Cloud Deployment Models Private cloud. The cloud infrastructure is operated solely for an organization. It may be managed by the organization or a third party, and may exist on or off the premises. Community cloud. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be managed by the organizations or a third party and may exist on premise or off premise.
Cloud Deployment Models (cont) Public cloud. The cloud infrastructure is made available to the general public or a large industry group, and is owned by an organization selling cloud services. Hybrid cloud. The cloud infrastructure is a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.
Cloud Computing One Approach
Cloud Deliver Models Software as a Service (Saas) Platform as a Service (PaaS) Infrastructure as a Service (Iaas).
Software as a Service (SaaS) Software and data are hosed centrally by a provider. Software is usually accessed via a web browser Other Methods of Delivery may include Remote Desktop or Native application Minimize or eliminate need to locally manage software or hardware. Examples: Google Docs, Salesforce, Gmail, Microsoft Office 365
Platform as a Service (PaaS) Is the delivery of a computing platform Developers to sustain cloud applications (internal & client services) Database integration Sharing data across multiple environments. Scalability Allowing for server, network & process expansion Examples: Force.com, Microsoft Azure
Infrastructure as a Service (IaaS) Complete outsourcing of operations infrastructure, including storage, hardware, server and networking components. Examples: Rackspace.com, Amazon Web Services
Cloud Computing Advantages CAPEX versus OPEX May lower maintenance costs Rapid scalability and deployment capabilities (providing just-in-time computing power and infrastructure) Improved resource utilization elasticity, flexibility, efficiencies Potential for improved economies of scale
Cloud Computing Advantage (cont) Ability to engage in usage-based pricing, making computing a variable expense, rather than a fixed capital cost with high overhead Reduced information technology (IT) infrastructure needs both up-front and support costs
Cloud Computing Challenges Increased internet bandwidth Monthly recurring service fees Provider managed updates (SaaS) Data accessibility and management (Security & DR) In the PaaS Model, lack of control over data, physical location of hardware/software and availability makes audit requirements and compliance difficult if not impossible
Cloud Computing Challenges (cont) In house technical expertise still needed, e.g. IaaS Model Limited or no control over outages or service interruptions
Considerations before moving to the Cloud Understand that moving to the cloud relinquishes direct control over many aspects of security and privacy Security requirements Payment Card Industry (PCI) Criminal Justice Information (CJIS) HIPPA Texas Public Information Act/E-Discovery The physical location of the infrastructure is determined by the cloud provider.
Questions to Ask Cloud Providers Can I see your data center? How do I move my apps to the cloud? How are my apps and data protected from other users on the same cloud servers? Can I speak with some of your customers? Can I move an existing app from my private cloud to your public cloud without massive reconfiguration?
Questions to Ask Cloud Providers How do I get my data back? How do you address government regulations? What will I really pay? How am I assured of data ownership? http://csrc.nist.gov/publications/nistpubs/800-144/sp800-144.pdf
References Guidelines on Security and Privacy in Public Cloud Computing http://csrc.nist.gov/publications/nistpubs/800-144/sp800-144.pdf Best Practice Guide, Cloud and As-A- Service Procurements http://www.govtech.com/library/papers/best- Practice-Guide-for-Cloud-and-As-A-Service- Procurements.html
Questions?