Cloud Computing, Openstack*, and Intel by Don Dugger

Total Page:16

File Type:pdf, Size:1020Kb

Cloud Computing, Openstack*, and Intel by Don Dugger Cloud Computing, OpenStack*, and Intel by Don Dugger Cloud computing The cloud is a very hot topic in computing today but, unfortunately, because there isn’t much agreement even on what cloud computing truly is, it winds up being many different things to many different people. Fortunately, it’s easy to cut through the buzz word clutter and focus on three simple concepts that make up the basis of any cloud offering: Client/server. All clouds consist of a set of clients that initiate requests and a set of servers that process those requests. Network delivery. Given that there are a separate set of clients and servers, they need to talk together, so a network to provide that connection is essential. Metered service. The ability to measure how many resources are being consumed by a client is essential for charging in a public cloud where people pay for access, and for capacity planning in a private cloud, where clients and servers might be paid for by different departments in a company. Cloud Systems There are three main types of cloud systems: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Infrastructure as a Service is the most basic form of cloud. The cloud provider offers a basic machine (typically a virtualized machine) with storage and network access, then the application provider installs a complete operating system and set of applications on that machine. In an IaaS, the application provider is responsible for almost all software from the operating system, through and including the entire application. Amazon’s* Elastic Compute Cloud (EC2) is an example of an IaaS. Platform as a Service goes one step up and provides a complete application environment, including the operating system. In a PaaS environment, the application provider only has to provide the application. The runtime environment for that application is provided by the service provider. AppEngine from Google* is a PaaS that is available today. Software as a Service provides only the application to the client. Distinguishing between PaaS and SaaS is a little tricky because they provide pretty much the same thing – access to an application. The difference is that, for SaaS, the same entity is acting as service provider and application provider, while for PaaS, those roles are handled by different entities. OpenStack overview Having defined a cloud, we can now look at OpenStack*, an open source IaaS project. Note that OpenStack is more a collection of different technologies rather than a single, monolithic project. The components are separate, but are well integrated to work together. The seven major components are: 1. Nova – provides computing services 2. Neutron – provides network connectivity[1] 3. Cinder – provides persistent volume storage [1] The Neutron project used to be called Quantum until trademark issues forced a name change. 4. Swift – provides object storage 5. Glance – provides image storage 6. Horizon – provides an administrative GUI 7. Keystone – provides an authentication service All of these components are linked together as shown in the diagram below. Note that this diagram has been slightly simplified. Given that Horizon (the GUI) needs to control all components in the system there should be lines between Horizon and all the other blocks in the diagram. Similarly, Keystone (the authentication services) needs to validate all components so it should have lines to all other blocks. Adding in those connections makes the diagram too confusing so we’ll just accept that those phantom lines exist. Nova This is the heart of the OpenStack system and has primary responsibility for coordinating the entire system and for scheduling virtual machines on individual compute nodes. Nova provides a service similar to Amazon EC2. In fact, there are two independent APIs into Nova, an OpenStack native API and an Amazon EC2 compatible API. Nova provides a flexible scheduler, along with support for multiple different hypervisors, including KVM*, Xen*, VMware*, LXC*, and others. Cinder Cinder provides persistent block storage that can be used by individual virtual machines. Note that this is network-accessible block storage, not a network-attached file system like NFS. There are pluggable drivers, available for different backend storage providers, including Linux* iSCSI*, SolidFire*, NetApp*, and others. Swift The service provides persistent object storage, similar to Amazon Simple Storage Service (S3), again with two APIs: a native API and an S3 compatible API. Objects in swift are just blobs of data of arbitrary size that can be stored and retrieved in a single operation. Note that objects cannot be updated. You can replace an entire object but you can’t update parts of it. The Swift service also provides reliability in that it provides triple replication of all objects, by default. Glance Glance provides an image storage service to hold the bootable images that will be used by the virtual machines. The main need for Glance is to provide metadata that is associated with these images. Glance supports multiple storage backends. You can use the Swift service by default, or you can use a local file system. Neutron Neutron provides network connectivity as a service providing the ability to create networks and attach devices. It’s important to recognize that while Neutron sets up the network topology for the application provider, once that topology is set up, Neutron is not involved in the actual transport of data packets. Neutron provides a pluggable architecture that supports many popular network vendors and technologies, such as Linux bridging, Open vSwitch*, OpenFlow*, and many others. Keystone Keystone provides a common authorization framework, based around tokens, that is used for all requests inside OpenStack. Users provide credentials to Keystone and receive a token based upon those credentials. The token is then used with requests to verify that that user has appropriate authorization to make that request. As with most other services in OpenStack, Keystone supports pluggable backends that provide the actual authentication. The backend can be based upon Linux’s Pluggable Authentication Modules (PAM), or Lightweight Directory Access Protocol (LDAP), or just a simple KVS (key value store), or even an SQL database. Horizon Horizon provides a user friendly GUI that allows the service provider to control resources that make up the cloud and also allows the application provider to control the resources that make up an application. The administrator can add and subtract compute resources, data stores, network services – all of the components that make up the cloud. The application provider can add and delete virtual machines and monitor the status of the virtual machines that are currently providing the application. Note that Horizon provides the GUI, but all of the system management can be separately controlled by command line tools, also. Intel contributions to OpenStack Intel has been very active in the OpenStack community (we were one of the top 10 contributors to the Grizzly release) and have added things like: Trusted Compute Pools (TCP) for Nova. This was a multi-project effort to add a new trusted filter to the Nova scheduler, make changes to Horizon to provide an interface to TCP, and add an attestation service to verify that compute nodes were booted properly. Filter scheduler for Cinder. This enables the Cinder scheduler to allocate storage based upon workloads, giving the service provider more control over performance vs. cost for storage. COSBench for Swift. Having an object storage system is good, but the ability to measure the performance of that system is critical. The common object storage benchmark provides such a measurement capability. For the future we expect to be adding new capabilities, such as: Enhanced platform awareness. We expect to enhance the current Nova scheduler to consider CPU and platform capabilities when placing new virtual machines. CPU capabilities include requiring a host that supports things like AES instructions for efficient encryption, and platform capabilities include creating a virtual machine on a host with SR/IOV hardware, so that devices can be directly assigned to it. Key Manager. We expect to provide a common service for storing and obtaining keys used for encryption services. Erasure code. We expect to improve reliability while reducing overhead. Swift provides reliability with triple replication, which adds high storage overhead. We expect our new erasure code can provide the same level of reliability with a much reduced overhead (think RAID 5 for object storage). Lean more about Intel and OpenStack < http://software.intel.com/en-us/articles/open-source- openstack#page=resources> *Other names and brands may be claimed as the property of others. .
Recommended publications
  • BEST PRACTICE GUIDE for CLOUD and AS-A-SERVICE PROCUREMENTS Executive Summary 1 Introduction
    BEST PRACTICE GUIDE FOR CLOUD AND AS-A-SERVICE PROCUREMENTS Executive Summary 1 Introduction Specific Models and Understanding Cloud Procurement Service Models Data EXECUTIVE SUMMARY Breach Notification Personnel Security While private companies rapidly move systems and Vendors share blame, too. Lots of cloud providers are new to Encryption applications to the cloud, public agencies still struggle to adopt public sector business, having grown up selling to consumers Audits Operations hosted services that could save money and provide better value. and private firms. These companies don’t always understand Hybrid Cloud Environments legitimate demands that make government contracting Preparation for Migrating Yet states and localities have much to gain from the different from selling to other markets. Failure to accommodate Workloads to the Cloud technology industry’s “as-a-service” revolution. Many unique government requirements can be a deal-breaker for jurisdictions face huge legacy system replacement challenges. agencies charged with protecting the public’s interests. Conclusion They’re also under pressure to provide new classes of digital services. The cloud can offer a better path toward All too often, government and industry aren’t on the same page Workgroup Members modernization — there’s no hardware to buy, you’re always when it comes to cloud services. They may not even speak the and Contributors on the latest version of the software and system capacity same language. can be adjusted almost instantly based on your needs. Appendix 1 Bridging the Gap Model Terms and Conditions Templates So why is government lagging behind? The fact is that These pressures led us to release the first version of this guide Software-as-a-Service governments often struggle to buy cloud-based services because two years ago.
    [Show full text]
  • Software As a Service
    Software as a Service Haojie Hang Ogheneovo Dibie Executive Summary • In this presentation, we go through the Software as a Service Methodology, examine its benefits and drawbacks and talk about two state-of-art SaaS systems– Amazon Web Service and Google App Engine • We also look into Service Oriented Architecture powering SaaS applications and its impact on modern web 2.0 applications • Finally, we examine hybrids of traditional and SaaS applications Overview • What is Software as a Service (SaaS) • Background o Brief history o Concept o Big picture o Related terms • Computing Today o SasS is everywhere o The SaaS Market • Benefits of SaaS • Drawbacks of SaaS o Robustness o Privacy o Security o Reliability • Service Oriented Architectures (SOA) o Guiding principles of SOA • Case studies o Amazon Web Services (AWS) o Google App Engine • Influence of SOA on Web 2.0 development o Zend Framework • Hybrids of Traditional and SaaS applications o Dropbox o Microsoft Office • Summary • References What is SaaS? • Definition: Software as a Service (SaaS), a.k.a. on- demand software, is a software delivery model in which software and its associated data are hosted centrally and accessed using a thin-client, usually a web browser over the internet. – Wikipedia • Simply put, SaaS is a method for delivering software that provides remote access to software as a web- based service. The software service can be purchased with a monthly fee and pay as you go. What is SaaS? • Where does the term SaaS come from? o The SAAS acronym allegedly first appeared
    [Show full text]
  • Model to Implement Virtual Computing Labs Via Cloud Computing Services
    S S symmetry Article Model to Implement Virtual Computing Labs via Cloud Computing Services Washington Luna Encalada 1,2,* ID and José Luis Castillo Sequera 3 ID 1 Department of Informatics and Electronics, Polytechnic School of Chimborazo, Riobamba 060155, EC, Ecuador 2 Department of Doctorate in Systems Engineering and Computer Science, National University of San Marcos, Lima 15081, Peru; [email protected] 3 Department of Computer Sciences, Higher Polytechnic School, University of Alcala, 28871 Alcala de Henares, Spain; [email protected] * Correspondence: [email protected]; Tel.: +593-032-969-472 Academic Editor: Yunsick Sung Received: 1 May 2017; Accepted: 3 July 2017; Published: 13 July 2017 Abstract: In recent years, we have seen a significant number of new technological ideas appearing in literature discussing the future of education. For example, E-learning, cloud computing, social networking, virtual laboratories, virtual realities, virtual worlds, massive open online courses (MOOCs), and bring your own device (BYOD) are all new concepts of immersive and global education that have emerged in educational literature. One of the greatest challenges presented to e-learning solutions is the reproduction of the benefits of an educational institution’s physical laboratory. For a university without a computing lab, to obtain hands-on IT training with software, operating systems, networks, servers, storage, and cloud computing similar to that which could be received on a university campus computing lab, it is necessary to use a combination of technological tools. Such teaching tools must promote the transmission of knowledge, encourage interaction and collaboration, and ensure students obtain valuable hands-on experience.
    [Show full text]
  • Openstack: the Path to Cloud
    OpenStack: The Path to Cloud Considerations and recommendations for businesses adopting cloud technology openstack.org Table of Contents Executive Overview 1 Enterprise Cloud Strategy 2 Approaches to an OpenStack Private Cloud 5 Forming the OpenStack Team 9 Organization and Process Considerations 13 Choosing Workloads for Your Cloud 16 Implementation Phases 22 Post-deployment 30 Summary 32 References 33 Glossary 34 *Underlined gray bold words and concepts are defined in the Glossary at the end. CONTRIBUTORS Carol Barrett, Cloud Software Planner, Intel Corporation Tyler Britten, Technical Advocate, Blue Box, an IBM company Kathy Cacciatore, Consulting Marketing Manager, OpenStack Foundation Pete Chadwick, Senior Product Manager, SUSE Paula Phipps, Senior Manager, Infrastructure Software Marketing, Hitachi Data Systems Gerd Prüßmann, Director Cloud Solutions, Mirantis Megan Rossetti, Cloud Infrastructure Operations, Walmart Yih Leong Sun, PhD, Senior Software Cloud Architect, Intel Corporation Shamail Tahir, Offering Manager, IBM Heidi Joy Tretheway, Senior Marketing Manager, OpenStack Foundation Susan Wu, Director of Technical Marketing, Midokura Executive Overview This book is written to help enterprise architects implement an OpenStack® cloud. With architects with one foot in information technology and the other in business operations in mind, we want to offer insights and best practices to help you achieve multiple (and sometimes competing) goals. If you’re looking for vendor-neutral answers about planning your path to an OpenStack cloud, you’re in the right place. Members of the OpenStack community—technologists, business leaders and product managers—collaborated on this book to explain how to get started with an OpenStack cloud. We’ve included pros and cons to help you make better choices when setting up your cloud, along with anticipated investments of both time and money.
    [Show full text]
  • Software As a Service for Data Scientists
    Doi:10.1145/2076450.2076468 Globus Online manages fire-and-forget file transfers for big-data, high-performance scientific collaborations. By BRyce Allen, John BResnahan, Lisa childeRs, ian fosTeR, GoPi KanDasWaMy, RaJ KettiMuThu, JacK Kordas, MiKe LinK, Stuart Martin, Karl PicKett, anD SteVen TuecKe software as a service for Data scientists As Big Data emerges as a force in science,2,3 so, too, do new, onerous tasks for researchers. Data from specialized instrumentation, numerical simulations, and downstream manipulations must be collected, indexed, archived, shared, replicated, and analyzed. These tasks are not new, but the complexities involved in performing them for terabyte or when data volumes were measured larger datasets (increasingly common in kilobytes. The result is a computa- across scientific disciplines) are quite tional crisis in many laboratories and different from those that applied a growing need for far more powerful data-management tools, yet the typi- key insights cal researcher lacks the resources and expertise to operate these tools. The costs of research data life-cycle The answer may be to deliver re- management are growing dramatically as search data-management capabili- data becomes larger and more complex. ties to users as hosted “software as a saas approaches are a promising service,” or SaaS,18 a software-delivery solution, outsourcing time-consuming model in which software is hosted research data management tasks to third-party services. centrally and accessed by users using a thin client (such as a Web browser) Globus online demonstrates the potential over the Internet. As demonstrated in of saas for research data management, simplifying data movement for research- many business and consumer tools, ers and research facilities alike.
    [Show full text]
  • Cloud Solutions – Infrastructure, Platform Or Software: Where Should You Go? Arlene F Minkiewicz PRICE Systems, LLC [email protected]
    Cloud Solutions – Infrastructure, Platform or Software: Where should you go? Arlene F Minkiewicz PRICE Systems, LLC [email protected] © 2016 PRICE Systems, LLC All Rights RReeserrvveedd | DecaDecaddeess ooff CoCostst MMaannaaggemeemenntt ExcellExcellenencece Agenda . Introduction . Cloud Computing . Picking the right ‘as a Service’ . Case Study . Discussion and Final Thoughts © 2016 PRICE Systems, LLC All Rights Reserved | Decades of Cost Management Excellence 2 Introduction . Cloud Computing as defined by National Institute of Standards and Technology (NIST “Cloud computing is a model for enabling ubiquitous, convenient, on- demand network access to a shared pool of configurable computing resources (e.g. networks, servers, storage, applications and services) that can be rapidly provisioned and release with minimal management effort or service provider interaction” . PRNewswire reports that 90% of medium to large enterprises plan to increase or maintain annual spend on cloud for 2016 . According to CIO Magazine, the battle of the infrastructure is over – organizations have embrace outsourcing their hardware . The new battle will be in the application space © 2016 PRICE Systems, LLC All Rights Reserved | Decades of Cost Management Excellence 3 Application Migration comes with Management and Planning Challenges . How does an organization determine the right solutions to migrate to (or host in) the cloud? . How do they identify the right platform for migration? . What challenges do the various cloud solutions present? –
    [Show full text]
  • Understanding the Cloud Computing Landscape
    Chapter 1 Understanding the Cloud Computing Landscape Lamia Youseff, Dilma M. Da Silva, Maria Butrico, and Jonathan Appavoo Contents 1.1 Introduction .................................................................................................2 1.2 Cloud Systems Classifications ......................................................................2 1.3 SPI Cloud Classification ...............................................................................2 1.3.1 Cloud Software Systems ...................................................................3 1.3.2 Cloud Platform Systems ....................................................................3 1.3.3 Cloud Infrastructure Systems ...........................................................4 1.4 UCSB-IBM Cloud Ontology .......................................................................4 1.4.1 Applications (SaaS) ...........................................................................5 1.4.2 Cloud Software Environment (PaaS) ................................................7 1.4.3 Cloud Software Infrastructure ..........................................................8 1.4.4 Software Kernel Layer .......................................................................9 1.4.5 Cloud Hardware/Firmware ...............................................................9 1.5 Jackson’s Expansion on the UCSB-IBM Ontology .....................................10 1.6 Hoff’s Cloud Model ...................................................................................11 1.7 Discussion ..................................................................................................13
    [Show full text]
  • The Reality of Cloud Computing Chris Rose, Walden University, USA
    International Journal of Management & Information Systems – Fourth Quarter 2011 Volume 15, Number 4 A Break In The Cloud? The Reality Of Cloud Computing Chris Rose, Walden University, USA ABSTRACT Cloud computing is on the forefront of the technological landscape with Google, Microsoft and Amazon, among others, building up their server capacity to handle the next perceived leap in technological innovation. However, not only does the security of cloud computing have to be seriously addressed, but SOA governance and the capacity in the core, connectivity and fiber layers of the Internet to absorb the increased bandwidth will also have to be considered. INTRODUCTION he term ―cloud computing‖ has many different meanings. A discussion at the 2008 IEEE International Conference on Web Services (ICWS), in Beijing, concluded that the definition depends T on whom you ask. For application and IT users, it’s IT as a service (ITaaS)—that is, delivery of computing, storage, and applications over the Internet from centralized data centers. For Internet application developers, it’s an Internet-scale software development platform and runtime environment. For infrastructure providers and administrators, it’s the massive, distributed data center infrastructure connected by IP networks (Lin et al, 2009). Everyone sees the cloud and uses the cloud differently. Some people offload ordinary desktop software and instead use web-based applications, others want on-demand computing with instant availability of extra processing power and extra storage. Nevertheless, the inescapable fact is that companies of all sizes are increasingly using the cloud to increase their businesses, perhaps by enabling remote working or simply to cut costs or even to create entirely new business models (Marshall, 2009).
    [Show full text]
  • Virtual Desktop Services (VDS) : Netapp Solutions
    Virtual Desktop Services (VDS) NetApp Solutions NetApp October 06, 2021 This PDF was generated from https://docs.netapp.com/us-en/netapp-solutions/vdi- vds/hcvdivds_use_cases.html on October 06, 2021. Always check docs.netapp.com for the latest. Table of Contents Virtual Desktop Services (VDS) . 1 TR-4861: Hybrid Cloud VDI with Virtual Desktop Service . 1 Virtual Desktop Services (VDS) TR-4861: Hybrid Cloud VDI with Virtual Desktop Service Suresh Thoppay, NetApp The NetApp Virtual Desktop Service (VDS) orchestrates Remote Desktop Services (RDS) in major public clouds as well as on private clouds. VDS supports Windows Virtual Desktop (WVD) on Microsoft Azure. VDS automates many tasks that must be performed after deployment of WVD or RDS, including setting up SMB file shares (for user profiles, shared data, and the user home drive), enabling Windows features, application and agent installation, firewall, and policies, and so on. Users consume VDS for dedicated desktops, shared desktops, and remote applications. VDS provides scripted events for automating application management for desktops and reduces the number of images to manage. VDS provides a single management portal for handling deployments across public and private cloud environments. Customer Value The remote workforce explosion of 2020 has changed requirements for business continuity. IT departments are faced with new challenges to rapidly provision virtual desktops and thus require provisioning agility, remote management, and the TCO advantages of a hybrid cloud that makes it easy
    [Show full text]
  • Cisco Fog Computing Solutions: Unleash the Power of the Internet of Things
    White Paper Cisco Fog Computing Solutions: Unleash the Power of the Internet of Things Connect things. Analyze and act on the data they produce in milliseconds. Then send the right data to the cloud for big-data analytics and storage. Benefits The Internet of Things (IoT) speeds up awareness and Only Cisco Fog computing solutions provide the response to events. It’s transforming whole industries, including following benefits: manufacturing, oil and gas, utilities, transportation, public safety, ● Data privacy: When necessary, analyze sensitive data within the building instead of and local government. sending it to a remote data center. Cisco Fog Data Services applies your policy to determine But the IoT requires a new kind of infrastructure. The cloud by the best place for analysis. ● Comprehensive security: Protect fog nodes itself can’t connect and analyze data from thousands and millions using the same Cisco physical security and of different kinds of things spread out over large areas. Capturing cybersecurity solutions you use to protect other IT assets. These solutions provide the the power of the IoT requires a solution that can: capabilities you need before, during, and after an attack. ● Connect new kinds of things to your network. Some of them ● Business agility: Gain business insights more quickly by hosting applications closer to might be in harsh environments. Others might communicate your IoT devices and analyzing data closer to the source. using industrial protocols, not IP. ● Rapid innovation: Create and deploy new applications more quickly by using our ● Secure the things that produce data. And secure the data as it infrastructure-as-a-service (IaaS) and travels from the network edge to the cloud.
    [Show full text]
  • Shared Responsibilities for Cloud Computing
    Shared Responsibilities for Cloud Computing Disclaimer Published April 2017 Version 2.0 This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. This document is provided “as-is.” Information and views expressed in this document, including URL and other Internet website references, may change without notice. You bear the risk of using it. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred. NOTE: Certain recommendations in this white paper may result in increased data, network, or compute resource usage, and may increase your license or subscription costs. © 2017 Microsoft. All rights reserved. Acknowledgements Author: Frank Simorjay Reviewers: Alan Ross, Tom Shinder, Katie Jackson (CELA), Joel Sloss, Eric Tierling, Steve Wacker Executive Summary Microsoft® Azure™ provides services that can help customers meet the security, privacy, and compliance needs. This white paper helps explain the relationship between cloud service providers (CSPs) and their customers, and notes their roles and responsibilities. Standards such as National Institute of Standards and Technology (NIST) (Special Publication 500-292) and the PCI Standards Council (Information Supplement: PCI DSS Cloud Computing Guidelines) provide considerations for shared responsibilities. This paper also examines the relationships between CSPs and their customers in more detail. In addition, this paper helps explain the shared roles and responsibilities an organization needs to consider when selecting a cloud model, such as IaaS, PaaS, and SaaS.
    [Show full text]
  • Hp Cloud Service Automation Documentation
    Hp Cloud Service Automation Documentation Garrott is baronial: she upraised reprovingly and muzzles her demoiselles. Visitatorial Diego never beatify so tactlessly or nominate any inharmonies infamously. Gilburt never feudalise any Walt melodramatise determinably, is Leslie misbegotten and allodial enough? Cloud Provisioning and Governance is integrated with both private and scale cloud providers including Amazon Web Services Microsoft Azure and VMware. Aws Resume. Read or installed or omissions contained herein should work together with your business analytics to make it teams on this example. All users around securing access hpe software engineer job is out serial number of any two simple photo application deployment on so you will try it. Free HP HP0-D14 Exam Questions HP HP0 Exam-Labs. Aws sam command interface. We use Asana to capture all this our documents notes and next steps so only keep consistency. Request body that customers, will help them with hundreds of cloud infrastructure components are created when access point enterprise organizations can use? File management console help troubleshoot issues for which should be available via email directly for cheat happens. Download the free BirdDog RESTful API and program your own automation for all. Download aws resume template in your membership is automatically generated by matching results. See your browser's documentation for specific instructions HP Cloud Service Automation HP CSA is cloud management software from Hewlett Packard. Pc instructions how do not be able to your browser that you will donate! In HP CSA documentation specified that SiteMinder is supported and integration must be implemented using SiteMinder Reverse Proxy Server. HP Targets High growth Document Automation Market with.
    [Show full text]