DOCSLIB.ORG

Cloud Computing for Telecom Systems

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text

Load more

Master Thesis Electrical Engineering September 2011 CLOUD COMPUTING FOR TELECOM SYSTEMS SAGAR SAPKOTA KHAWAR SHEHZAD School of Engineering i Blekinge Institute of Technology 371 79 Karlskrona Sweden This thesis is submitted to the School of Computing at Blekinge Institute of Technology in partial fulfillment of the requirements for the degree of Master of Science in Electrical Engineering. The thesis is equivalent to 20 weeks of full time studies. Contact Information: Author(s): Sagar Sapkota E-mail: [email protected] Khawar Shehzad E-mail: [email protected] External advisor(s): Andrzej Lisowski Company/Organization name: Ericsson Telecommunicatie B.V., Netherlands Phone: + 311 6124 9154 Erik Brakkee Company/Organisation name: Ericsson Telecommunicatie B.V., Netherlands University advisor(s): Prof. Lars Lundberg School of Computing E-mail: [email protected] School of Computing Internet : www.bth.se/com Blekinge Institute of Technology Phone : +46 455 38 50 00 371 79 Karlskrona Fax : +46 455 38 50 57 Sweden i i ACKNOWLEDGEMENT We would like to thank our supervisor Prof. Lars Lundberg for giving us opportunity to work under his supervision and providing us with guidelines and suggestions throughout the project. We appreciate technical guidance, support, and encouragement given by our facilitators Jan Van Der Meer, Andrzej Lisowski and Erik Brakkee from Ericsson Telecommunicatie B.V., Netherlands. We would also like to thank survey participants, who contributed towards survey part of this thesis. And finally we would like to thank our families, and friends for their support. iii ABSTRACT Context: Cloud computing is reshaping the service-delivery and business-models in Information and Communications Technology (ICT). The Information Technology (IT) sector has benefited from it in the previous 3-5 years. Despite the attraction of cloud computing, it is required to have an effective application migration strategy. Cloud computing with its diverse provisioning models makes it possible for telecom vendors and service providers to decide effective service and business models. Currently, cloud computing contains security, performance and dimensioning considerations for telecom companies. Objectives: This thesis assesses the trends and issues associated with the cloud, with telecommunications perspective, while leveraging the cloud to come to a decision on a suitable cloud environment for telecom grade applications. Analysis of maturity of public cloud (in terms of compatibility, consolidation, compliance and standardization) in general and Amazon cloud in particular, is part of the thesis objective. While doing so, deployment of a telecom-grade product in the Amazon cloud will be evaluated against the current on-premise deployment. We want to identify architectural difference between the two domains, and what issues are faced when a migration is planned. This evaluation between two systems, i.e. on-premise and the cloud will significantly contribute to the research and can be used when making business decisions. Methods: We conducted literature review, survey, and a case study, assessing the above mentioned objectives. Research papers from academia and industry were chosen for literature review; personnel, with experience in cloud computing, were chosen for the survey; and a telecom-grade platform was used to assess the migration issues on Amazon cloud in the case study. The Ericsson Composition Engine (ECE) was used to check what deployment issues it can have on Amazon cloud. Its on-premise Reference Deployment Architecture was compared with the cloud-based Reference Deployment Architecture. This case study served as a confirmation to results obtained in the literature review and survey. Results: In the literature review and survey, we found motivations, trends, current applications, and challenges of cloud computing for telecom. It was found from the case study that Amazon Web Services (AWS) lacks application and network centric attributes that are required in ECE deployment. We propose recommendations that can be integrated with ECE while deploying it in a public cloud. Conclusions: Companies are choosing cloud vendors that uniquely give ease of migration and control, based on application needs and compatibility. ECE cannot be directly migrated to AWS, unless we provide Amazon specific modifications in the architecture. The survey and literature review support a private and/or hybrid strategy for ECE, along with the inclusion of cloud networking into the ECE package. Keywords: Cloud Computing, Telecommunications, Amazon Web Services, Ericsson Composition Engine iv LIST OF ABBREVIATIONS API Application Programming Interface AWS Amazon Web Services CSP Cloud Service Providers DB Data Base EBS Elastic Block Storage EC2 Elastic Compute Cloud ECE Ericsson Composition Engine ELB Elastic Load Balancer IaaS Infrastructure as a Service ICT Information and Communications Technology LAN Local Area Network MNO Mobile Network Operator NGN Next Generation Network NIST National Institute of Standards and Technology OSS Operations Support System PaaS Platform as a Service PL Pay Load QoS Quality of Service RDA Reference Deployment Architecture RDS Relational Database Service RHEL Red Hat Enterprise Linux SaaS Software as a Service v SAIL Scalable and Adaptive Internet soLutions SC Service Control SCTP Stream Control Transmission Protocol SDK Software Development Kit SIP Session Initiation Protocol SLA Service Level Agreement SMB Small Medium Business SOA Service Oriented Architecture SPI Software Platform Infrastructure SQS Simple Queue Service VLAN Virtual Local Area Network VM Virtual Machine VPC Virtual Private Cloud VPN Virtual Private Network vi TABLE OF CONTENTS ACKNOWLEDGEMENT ............................................................................................................................................III ABSTRACT ................................................................................................................................................................... IV LIST OF ABBREVIATIONS ........................................................................................................................................ V INTRODUCTION ........................................................................................................................................................... 1 1.1 OVERVIEW ....................................................................................................................................................... 1 1.2 MOTIVATION AND RESEARCH QUESTIONS ....................................................................................................... 1 1.3 THESIS ORGANIZATION .................................................................................................................................... 2 BACKGROUND AND RELATED WORK.................................................................................................................. 3 2.1 CLOUD COMPUTING ................................................................................................................................................. 3 2.1.1 Definition ......................................................................................................................................................... 3 2.1.2 Deployment Models ..................................................................................................................................... 3 2.1.3 Service Delivery Models (a.k.a. Market Segments) ..................................................................................... 4 2.2 KEY TECHNOLOGIES AND PRACTICES IN THE CLOUD ....................................................................................... 5 2.2.1 Virtualization ............................................................................................................................................... 5 2.2.2 Load Balancing and Scalability .................................................................................................................. 6 2.2.3 Virtual Private Cloud (VPC) Provisioning ................................................................................................. 6 2.2.4 Identity and Access Management (IAM) ..................................................................................................... 6 2.2.5 High Performance Computing Technologies .............................................................................................. 6 2.3 CLOUD VENDORS AND PLATFORMS ......................................................................................................................... 7 2.3.1 Public Cloud Service Providers .................................................................................................................. 8 2.3.2 Private Cloud Platform Providers ............................................................................................................. 9 2.3.3 Open Platform Cloud Computing .............................................................................................................. 10 2.4 ECE AND AMAZON WEB SERVICES ................................................................................................................ 10 2.4.1 Ericsson Composition Engine ................................................................................................................... 10 2.4.1.1 Default Reference Deployment Architecture (RDA) ........................................................................................
Recommended publications
  • Oracle Solaris: the Carrier-Grade Operating System Technical Brief

    Oracle Solaris: the Carrier-Grade Operating System Technical Brief

    An Oracle White Paper February 2011 Oracle Solaris: The Carrier-Grade Operating System Oracle White Paper—Oracle Solaris: The Carrier-Grade OS Executive Summary.............................................................................1 ® Powering Communication—The Oracle Solaris Ecosystem..............3 Integrated and Optimized Stack ......................................................5 End-to-End Security ........................................................................5 Unparalleled Performance and Scalability.......................................6 Increased Reliability ........................................................................7 Unmatched Flexibility ......................................................................7 SCOPE Alliance ..............................................................................7 Security................................................................................................8 Security Hardening and Monitoring .................................................8 Process and User Rights Management...........................................9 Network Security and Encrypted Communications .......................10 Virtualization ......................................................................................13 Oracle VM Server for SPARC .......................................................13 Oracle Solaris Zones .....................................................................14 Virtualized Networking...................................................................15
  • Vsrx Deployment Guide for Google Cloud Platform

    Vsrx Deployment Guide for Google Cloud Platform

    vSRX Deployment Guide for Google Cloud Platform Published 2020-09-22 ii Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. vSRX Deployment Guide for Google Cloud Platform Copyright © 2020 Juniper Networks, Inc. All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of that EULA. iii Table of Contents About the Documentation
  • Tampere University Research Portal

    Tampere University Research Portal

    Tampereen teknillinen yliopisto. Julkaisu 800 Tampere University of Technology. Publication 800 Francis Tam Service Availability Standards for Carrier-Grade Platforms: Creation and Deployment in Mobile Networks Thesis for the degree of Doctor of Technology to be presented with due permission for public examination and criticism in Tietotalo Building, Auditorium TB222, at Tampere University of Technology, on the 15th of May 2009, at 12 noon. Tampereen teknillinen yliopisto - Tampere University of Technology Tampere 2009 ISBN 978-952-15-2134-8 (printed) ISBN 978-952-15-2158-4 (PDF) ISSN 1459-2045 Abstract The rapid development of the mobile network industry has raised considerably the expectations and requirements of the whole chain of stakeholders, from the end users through the mobile network operators and ultimately to the network equipment providers. A key expectation from an end user is service availability, which is a perception that services are continuously operational even in the presence of failures in the mobile network. Network equipment providers have been using carrier-grade platforms to provide various support functions including high availability as reusable assets for products creation. The term carrier-grade refers to a class of systems used in public telecommunications network that deliver up to five nines or six nines (99.999% or 99.9999%) availability. The convergence of communications and information technology in the industry has led to more competition and pressure to reduce development efforts. By creating a service availability standard, Commercial Off-The-Shelf (COTS) software can be bought and integrated into a carrier-grade platform, enabling a company to focus on the core business and concentrate the resource investment onto new innovations.
  • AWS Risk and Compliance Whitepaper for Additional Details - Policy Available At

    AWS Risk and Compliance Whitepaper for Additional Details - Policy Available At

    Amazon Web Services: Risk and Compliance January 2017 (Consult http://aws.amazon.com/compliance/resources for the latest version of this paper) Amazon Web Services Risk and Compliance January 2017 This document is intended to provide information to assist AWS customers with integrating AWS into their existing control framework supporting their IT environment. This document includes a basic approach to evaluating AWS controls and provides information to assist customers with integrating control environments. This document also addresses AWS-specific information around general cloud computing compliance questions. Table of Contents Risk and Compliance Overview .......................................................................................................................3 Shared Responsibility Environment ............................................................................................................................................... 3 Strong Compliance Governance ...................................................................................................................................................... 4 Evaluating and Integrating AWS Controls ...................................................................................................4 AWS IT Control Information ........................................................................................................................................................... 5 AWS Global Regions .........................................................................................................................................................................
  • Wireless Network Virtualization: Ensuring Carrier Grade Availability

    Wireless Network Virtualization: Ensuring Carrier Grade Availability

    ™ AN INTEL COMPANY Wireless Network Virtualization: Ensuring Carrier Grade Availability WHEN IT MATTERS, IT RUNS ON WIND RIVER WIRELESS NETWORK VIRTUALIZATION: ENSURING CARRIER GRADE AVAILABILITY EXECUTIVE SUMMARY The wireless industry’s battle to acquire new subscribers and retain existing ones is accelerating the need for new services. Profit margins are under pressure from the increased infrastructure and operations costs required to satisfy the growing demand. Network functions virtualization (NFV), a rapidly growing initiative in telecom networks, promises to revolutionize how networks are architected and managed. It allows communications service providers (CSPs) to virtualize network functions and consolidate them on standard off-the-shelf servers. Although 4G LTE is effective at meeting the increasing bandwidth demands at lower costs than its predecessors, its mobile base station, E-UTRAN Node B (eNB), located at the edge of the radio access network (RAN), is underutilized at certain times of the day and has grown in complexity, resulting in higher downtime and field maintenance costs. As a result, the eNB is a good candidate for NFV. Cloud-RAN (C-RAN) is the virtualization of the eNB’s control plane and data plane functions, consolidating it in one or more data centers. The result is significantly higher equipment utilization, cost-efficient redundancy to achieve high availability, and lower operations and maintenance costs. However, to realize these benefits, the foundation for virtualized eNBs must be a robust, carrier grade NFV platform that incorporates advanced fault management features. Poor implementation results in lower quality execution with excessive outage and maintenance costs. Wind River® Titanium Cloud is the industry’s first NFV-ready solution that incorporates advanced carrier grade fault, security, performance, and network management features.
  • Carrier Grade Virtualization

    Carrier Grade Virtualization

    Carrier Grade Virtualization Leveraging virtualization in Carrier Grade Systems Abstract Network Equipment Providers (NEPs) have been building networking infrastructure equipment able to deliver “carrier grade” services, typically mission-critical services such as voice telephony. In decades past, NEPs have achieved high degrees of availability through purpose-built hardware and software implementations. Today they increasingly build on COTS (Commercial Off The Shelf) hardware and Open Source Software (OSS), freeing their engineering resources to focus on core telephony competencies. The move to COTS and OSS requires that these hardware and software components be available from an ecosystem of suppliers, and that they interoperate seamlessly. Bodies such as The Linux Foundation (LF), the Service Availability Forum (SA Forum) and PICMG have defined standards and specifications such as carrier grade OSes (CGLinux), Service Availability Forum APIs and AdvancedTCA hardware to target carrier grade applications. Recent advances have made virtualization appealing for carrier class equipment by permitting significant cost reduction through consolidation of workloads and of physical hardware. Virtualization also transparently lets NEPs and other OEMs (Original Equipment Manufacturers) leverage multi-core processors to run legacy software designed for uniprocessor hardware. However, virtualization needs to meet specific requirements to enable network equipment deploying this technology to meet industry expectations for carrier grade systems. This
  • Energy Efficiency in Office Computing Environments

    Energy Efficiency in Office Computing Environments

    Fakulät für Informatik und Mathematik Universität Passau, Germany Energy Efficiency in Office Computing Environments Andreas Berl Supervisor: Hermann de Meer A thesis submitted for Doctoral Degree March 2011 1. Reviewer: Prof. Hermann de Meer Professor of Computer Networks and Communications University of Passau Innstr. 43 94032 Passau, Germany Email: [email protected] Web: http://www.net.fim.uni-passau.de 2. Reviewer: Prof. David Hutchison Director of InfoLab21 and Professor of Computing Lancaster University LA1 4WA Lancaster, UK Email: [email protected] Web: http://www.infolab21.lancs.ac.uk Abstract The increasing cost of energy and the worldwide desire to reduce CO2 emissions has raised concern about the energy efficiency of information and communica- tion technology. Whilst research has focused on data centres recently, this thesis identifies office computing environments as significant consumers of energy. Office computing environments offer great potential for energy savings: On one hand, such environments consist of a large number of hosts. On the other hand, these hosts often remain turned on 24 hours per day while being underutilised or even idle. This thesis analyzes the energy consumption within office computing environments and suggests an energy-efficient virtualized office environment. The office environment is virtualized to achieve flexible virtualized office resources that enable an energy-based resource management. This resource management stops idle services and idle hosts from consuming resources within the office and consolidates utilised office services on office hosts. This increases the utilisation of some hosts while other hosts are turned off to save energy. The suggested architecture is based on a decentralized approach that can be applied to all kinds of office computing environments, even if no centralized data centre infrastructure is available.
  • Vcloud Air Virtual Private Cloud Ondemand: Vmware, Inc

    Vcloud Air Virtual Private Cloud Ondemand: Vmware, Inc

    FREQUENTLY ASKED QUESTIONS VMware vCloud Air Virtual Private Cloud OnDemand Q. What is Virtual Private Cloud OnDemand? Sign up and you can be configuring VMs in minutes instead of the hours or days required to process a purchase order. For A. VMware vCloud® Air™ Virtual Private Cloud OnDemand is an more information, visit http://vcloud.vmware.com/service- industry-leading infrastructure-as-a-service (IaaS) offering offering/virtual-private-cloud-ondemand that allows customers to consume specific vCPU, vRAM, Storage, Network, IP and even Support as incremental Q. How is this service different from AWS or Microsoft Azure? pay-as- you-go services. Individuals can register to access A. While various IaaS providers share many common core these resources online with a credit card with no upfront capabilities, there are several areas where VMware resource commitment and no upfront cost. Charges will be differentiates itself: incurred as the resources are consumed (metered by minute) and billed on a monthly basis. • Fully Hybrid; Truly extends the customer data center with a hybrid platform that requires no VM conversions, offers Q. What does the service provide? seamless extensible networking, is optimized for BOTH A. Customers have the ability to create and manage new virtual existing apps as well as new apps, and leverages a single data centers and VMs using completely a-la-carte resources common set of management tools and processes. into the region of their choice. Customers can self-provision • Configurable: Enables you to choose exactly the VM amounts of compute, RAM, storage and public IPs as needed dimensions you want with any ratio of CPU, memory and and continue to benefit from the large list of supported disc, as opposed to being forced to choose among pre- Operating Systems and Applications.
  • THE EMERGING CLOUD ECOSYSTEM: Cyber Security Plus LI/RD

    THE EMERGING CLOUD ECOSYSTEM: Cyber Security Plus LI/RD

    Day 2, Thursday, 2012 Jan 19, 09.00 hrs SESSION 4: Security in the Cloud THE EMERGING CLOUD ECOSYSTEM: cyber security plus LI/RD Tony Rutkowski, Yaana Technologies 7th ETSI Security Workshop, 18‐19 Jan 2011 © ETSI 2012. All rights reserved Outline Security as a Business opportunity: A winning driver to ensure technology success and increase confidence and trust amongst end‐users ! CtCurrent Clou d dldevelopment s Cyber security and LI/RD developments Business opportunities 2 ETSI/Security Workshop (7) S4 The Basics: a new cloud‐based global communications infrastructure is emerging Global network architectures are profoundly, rapidly changing • PSTNs/mobile networks are disappearing • Internet is disappearing • Powerful end user devices for virtual services are becoming ubiquitous • End user behavior is nomadic • Huge data centers optimized for virtual services combined with local access bandwidth are emerging worldwide as the new infrastructure These changes are real, compelling, and emerging rapidly Bringing about a holistic “cloud” ecosystem is occupying idindustry in almost every venue around the world 3 ETSI/Security Workshop (7) S4 The Basics: a new cloud‐virtualized global communications architecture Virtualized Line or air Access, IdM & transport Intercloud Other cloud virtualization services, devices interfaces cloud virtualization services services especially for application support Access, IdM & transport General services Intercloud General Access, IdM & transport services General Intercloud Access, IdM & transport services
  • Data Protection and Collaboration in Cloud Storage

    Data Protection and Collaboration in Cloud Storage

    Technical Report 1210 Charting a Security Landscape in the Clouds: Data Protection and Collaboration in Cloud Storage G. Itkis B.H. Kaiser J.E. Coll W.W. Smith R.K. Cunningham 7 July 2016 Lincoln Laboratory MASSACHUSETTS INSTITUTE OF TECHNOLOGY LEXINGTON, MASSACHUSETTS This material is based on work supported by the Department of Homeland Security under Air Force Contract No. FA8721-05-C-0002 and/or FA8702-15-D-0001. Approved for public release: distribution unlimited. This report is the result of studies performed at Lincoln Laboratory, a federally funded research and development center operated by Massachusetts Institute of Technology. This material is based on work supported by the Department of Homeland Security under Air Force Contract No. FA8721-05- C-0002 and/or FA8702-15-D-0001. Any opinions, findings and conclusions or recommendations expressed in this material are those of the authors and do not necessarily reflect the views of Department of Homeland Security. © 2016 MASSACHUSETTS INSTITUTE OF TECHNOLOGY Delivered to the U.S. Government with Unlimited Rights, as defined in DFARS Part 252.227-7013 or 7014 (Feb 2014). Notwithstanding any copyright notice, U.S. Government rights in this work are defined by DFARS 252.227-7013 or DFARS 252.227-7014 as detailed above. Use of this work other than as specifically authorized by the U.S. Government may violate any copyrights that exist in this work. Massachusetts Institute of Technology Lincoln Laboratory Charting a Security Landscape in the Clouds: Data Protection and Collaboration in Cloud Storage G. Itkis B. Kaiser J. Coll W. Smith R.
  • Google Cloud Security Whitepapers

    Google Cloud Security Whitepapers

    1 Google Cloud Security Whitepapers March 2018 Google Cloud Encryption at Rest in Encryption in Transit in Application Layer Infrastructure Security Google Cloud Google Cloud Transport Security Design Overview in Google Cloud 2 Table of Contents Google Cloud Infrastructure Security Design Overview . 3 Encryption at Rest in Google Cloud . 23 Encryption in Transit in Google Cloud . 43 Application Layer Transport Security in Google Cloud . 75 3 A technical whitepaper from Google Cloud 4 Table of Contents Introduction . 7 Secure Low Level Infrastructure . 8 Security of Physical Premises Hardware Design and Provenance Secure Boot Stack and Machine Identity Secure Service Deployment . 9 Service Identity, Integrity, and Isolation Inter-Service Access Management Encryption of Inter-Service Communication Access Management of End User Data Secure Data Storage . 14 Encryption at Rest Deletion of Data Secure Internet Communication . 15 Google Front End Service Denial of Service (DoS) Protection User Authentication Operational Security . 17 Safe Software Development Keeping Employee Devices and Credentials Safe Reducing Insider Risk Intrusion Detection 5 Securing the Google Cloud Platform (GCP) . .. 19 Conclusion . 21 Additional Reading . 22 The content contained herein is correct as of January 2017, and represents the status quo as of the time it was written. Google’s security policies and systems may change going forward, as we continually improve protection for our customers. 6 CIO-level summary • Google has a global scale technical infrastructure designed to provide security through the entire information processing lifecycle at Google. This infrastructure provides secure deployment of services, secure storage of data with end user privacy safeguards, secure communications between services, secure and private communication with customers over the internet, and safe operation by administrators.
  • Web Application Hosting in the AWS Cloud AWS Whitepaper Web Application Hosting in the AWS Cloud AWS Whitepaper

    Web Application Hosting in the AWS Cloud AWS Whitepaper Web Application Hosting in the AWS Cloud AWS Whitepaper

    Web Application Hosting in the AWS Cloud AWS Whitepaper Web Application Hosting in the AWS Cloud AWS Whitepaper Web Application Hosting in the AWS Cloud: AWS Whitepaper Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. Web Application Hosting in the AWS Cloud AWS Whitepaper Table of Contents Abstract ............................................................................................................................................ 1 Abstract .................................................................................................................................... 1 An overview of traditional web hosting ................................................................................................ 2 Web application hosting in the cloud using AWS .................................................................................... 3 How AWS can solve common web application hosting issues ........................................................... 3 A cost-effective alternative to oversized fleets needed to handle peaks ..................................... 3 A scalable solution to handling unexpected traffic