Cloud Computing Облачни услуги Delyan Genkov Ph D

Cloud Computing (Облачни услуги) Delyan Genkov, Ph. D

Why Cloud? Cloud is a symbol often used in network diagrams to present a network with unknown structure or unimportant in given context. n Often used to present the Internet. n

Cloud Computing Cloud computing delivers computing resources as a service, rather than a product For example, using Gmail rather than purchasing hardware and software (such as Microsoft Exchange)

What are the Benefits of ‘xxx as a Service’? Electricity as a service n Car as a service n ¨ Scalable ¨ Available when needed ¨ Pay-per-use ¨ No (or minimal) initial fees

Cloud Computing characteristics On-demand self-service (without human intervention from the cloud provider) n Always on n Rapidly provisioned n Elastic n Pooled resources n

Cloud Computing Benefits Replaces up front costs with pay-as-yougo (metered) service n Agile n Highly scalable n Highly available n Ubiquitous access (usually through a web browser) n

Types of Cloud

Infrastructure as a service (Iaa. S) Complete outsourcing of operations infrastructure, including storage, hardware, service and networking components (Amazon EC 2, Vmware v. Cloud). n Pros: Ability to spin-up servers on demand, quickly and cost-effectively. More control of systems with remote accessibility and complete flexibility. n Cons: An administrator is required with knowledge of systems/networking. n

Platform as a Service (Paa. S) n n n Creating applications from the Internet (Google App Engine, Microsoft Azure). Pros: Applications can be developed, tested and deployed without the cost and complexity of purchasing and managing hardware, software and hosting. This allows for faster time-to-market and cost control. Services are delivered like a utility, so you only use and PAY for what you need. Cons: Mostly suitable for Web applications as users have no authority over underlying infrastructure. This lack of control over data, physical location of hardware/software and availability make audit requirements and compliance impossible.

Software as a Service (Saa. S) Accessing applications from the Internet (online banking, Gmail). n Pros: Reduces your dependency on devices and the management that goes with them. Apps aren’t bound to the office closet (err data center) anymore. n Cons: Security is a concern for the enterprise. Applications are controlled by the provider and provide little to no customization. n

Cloud Deployment Models Private clouds can be offsite, hosted by a Cloud Service Provider (CSP) or Onsite, hosted in an corporation’s own physical datacenters Offsite private clouds usually means the CSP has dedicated hardware for the customer’s exclusive use

Cloud Deployment Models (Cont. ) Hosted offsite, at CSP’s datacenters. In a public cloud, resources are shared, raising issues of multitenancy, such as security and resource sharing

Cloud Deployment Models (Cont. ) For example, when demand is high the private cloud resources can be augmented with public cloud. Or some processing could be offloaded to a public cloud

Cloud Deployment Models (Cont. ) Some organizations act as cloud providers and some as cloud consumers. Can be private onsite or offsite clouds Raises issues of security Organizations with similar requirements

Economics of Cloud Users Resources Capacity Demand Resources • Pay by use instead of provisioning for peak Capacity Demand Time Static data center Time Data center in the cloud Unused resources Slide Credits: Berkeley RAD Lab

Economics of Cloud Users • Risk of over-provisioning: underutilization Capacity Resources Unused resources Demand Time Static data center Slide Credits: Berkeley RAD Lab

Economics of Cloud Users Resources • Heavy penalty for under-provisioning Capacity 3 Lost revenue Resources 3 Demand 2 1 Time (days) Capacity Demand 2 1 Time (days) 3 Lost users EDBT 2011 Tutorial

Cloud: The Technologies n The Cloud represents the convergence of several technologies, old and new ¨ Mainframe concepts Thin clients n Distributed computing n Client/Server models n ¨ Virtualization ¨ Networking ¨ High Availability ¨ Web enabled applications ¨ Enterprise datacenters ¨ Remote Access and Remote Desktop

Mainframe In 2012, NASA powered down its last mainframe

Virtualization Server virtualization n Desktop virtualization n

What’s in the data room? Businesses maintain groups of servers on-site to fulfill various business needs including: • Network Servers / Domain Controllers • File Storage • Application Servers (CRM, ERP, Databases, Billing) • Web Servers (Hosting of web sites and applications) These servers consume the same resources that any on-site IT resource consumes: • Space, Power, Cooling, Administrative time, Maintenance Fees, Capex

What’s missing from the data room? n These on-site servers generally need, but do not always get: ¨ Fire Suppression ¨ Backup Power ¨ Failover / Redundant equipment ¨ Monitoring ¨ 24 x 7 support

Traditional Server Environments n One Server for One Application n File Server n Web Server n Mail Server

Server Virtualization Pictorial Typical Model: One Server, One Application Virtual Machine: ONE server, Multiple Applications Virtual Infrastructure: Multiple Servers, Multiple and REDUNDANT Applications

Traditional Desktop Environments Each employee uses a desktop or laptop that IT must maintain. n Ability to run software is based on the equipment on which it is installed. n Local disk stores OS, applications and data. n Upgrades and software deployed on a one to one basis. n

Desktop Virtualization Pictorial Typical Desktop: One Desktop, One OS, One Employee Virtual Desktop: Access to a single desktop, from any device

n n n Top Reasons to Consider Desktop Virtualization Economics – Reduce the total cost of desktop ownership by almost 70% through remote troubleshooting, ease of deployment, and extended life of older equipment. Productivity – Users can gain access to their desktop from any location on any device, while administrators can support and deploy from a centralized location. Scalability – Meet new requirements by adding additional resources to the “virtual” PC rather than upgrading equipment Performance – Immediately rectify PC problems by remotely restarting, or reimaging the desktop saving IT time and putting employees back to work immediately. Security – Provide external users with secure access to company apps and data. Enforce end-to-end security, consistently, across all users, regardless of device.

Key Technology: Virtualization App App OS OS App Operating System Hypervisor Hardware Traditional Stack Vm. Ware ESXi n Microsoft Hyper. V n Citrix XEN n Hardware Virtualized Stack

Network Challenges Network node count n Number of hops n Transport protocol latency n Network congestion n

Traditional data center connectivity

Switching between virtual machines

VXLAN n Vendors such as Intel, VMware, Arista, and Broadcom have developed a technology that creates Layer 2 tunnels, the Virtual Extensible Local Area Network (VXLAN). VXLAN is an example of software-defined cloud networking (SDCN). Fundamentally, VXLAN provides Layer 2 tunneling connections between cloud services separated by Layer 3 network segmentation.

Cloud Network

Virtual Firewalls Virtual firewall is a software, used to monitor and control resources in virtual network environment. Can operate in bridge mode between VM’s inspecting packets from and to different IP addresses In Hypervisor mode it is built in the hypervisor and captures traffic from virtual machines in order to monitor data

Automation of Operations on Cloud The task of managing and provisioning infrastructure (Iaa. S), such a servers, network and storage, while centralizing the norms for security and usage The scope of Multi-tenancy (Saa. S), which is an added advantage, whereby multiple organizations can not only access an instance of software residing on a server, but also access databases and packaged applications A highly flexible architecture with advanced workload optimization and metering, service assurance, application lifecycle management, security and compliance

Microsoft Azure Iaa. S

Federated Cloud Services

Cloud. Switch A software appliance that make it possible to migrate services such as cloud-hosted virtual machines between private and public cloud hosting through the same type of web client

Researcher – real life example n n Ph. D student in Medicine for his Ph. D thesis has to analyze and render with 3 D software hundreds of thousands X-ray images. She has to finish her Ph. D work in 3 years, and the real analysis and modeling is scheduled for 6 months. For the research she needs four servers, each costs about 4000 EUR and a shared storage which costs 7000 EUR – total of 23000 EUR. Instead she rented resources from a Bulgarian cloud provider. One server with 4 CPUs, 8 GB RAM and 5 TB storage costs 0. 75 EUR/hour with VAT included. Four servers cost 3 EUR/hour. She worked 6 months X 20 working days X 8 hours per working day X 3 EUR, which totals of 2880 EUR, and now she is a Ph. D.

Penetration tester – real life examp. n n n n For effective penetration test you need at least 2000, sometimes 5000 users against one penetrated system. One computer may simulate effectively about 100 -200. So you need 10, sometimes 40 -50 powerful computers with stable Internet connection to perform a test. Sometimes you need to change the source IP addresses, that is impossible when you test from a fixed location, except if you buy many addresses (already impossible). You provide 1 – 2 tests in a month for average 5000$ If you own the equipment, you need to invest 50 PC’s X 1000$ = 50000$, and to pay monthly Internet fee for about 500$ In the cloud you need 0. 1$ per machine per hour. One test typically takes about 4 to 8 hours against one server. = 40$