Ccra 2.0
Ccra 2.0
0: Overview
Agenda
Executive Summary Introduction & Overview Historical evolution of the Reference Architecture Structure of the RA 2.0 Target audience How to apply the RA for cloud implementations Cloud Computing Reference Architecture Details
2 2011 IBM Corporation
Existing & 3rd party services, Partner Ecosystems Cloud Service Integration Tools
Business-Processas-a-Service
Sof tware-as-a-Service Operational Support Services (OSS) Platf orm-as-a-Service Business Support Services (BSS) Service Creation Tools
The CC RA focuses on cloud specifics such as radical cost reduction while achieving high degrees of security, reliability, scalability and control The CC RA consists of 21 detailed documents representing best-of-industry knowledge and insight on how to architect, design and implement clouds
3
Inf rastructure
The IBM Cloud Computing Reference Architecture ensures consistency & quality across IBM development and delivery projects The IBM Cloud Computing Reference Architecture
Is based on open standards Delivers enterprise-class security to meet local, regional and national compliance for privacy and governance Combines powerful automation and services management (low touch) with rich business management functions for fully integrated, top-to-bottom management of cloud infrastructure and cloud services Supports the full spectrum of cloud service models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS) and Business Process as a Service (BPaaS) Enables the flexible scaling and resiliency required for successful cloud economics and ROI Facilitates seamless integration into existing customers' environments Is based on our industry leading expertise with SOA for building services and serviceoriented architectures
4 2011 IBM Corporation
Derived from extensive client interaction combined with IBMs extensive capabilities and experience in building enterprise-class IT systems. The CC RA provides specifications for
the physical components of a cloud implementation (network, compute, storage, virtualization) Software components required to run management Operational processes Governance policies tailored for the environment or enterprise.
The IBM Cloud Computing Reference Architecture covers are broad range of important cloud-specific topics
Use Cases
Non-functional Requirements
Functional (=use cases) and non-functional requirements against the other RA work products
Architecture Overview
Defines architectural building blocks Product-agnostic
Service Flows
Standards
Cross-cutting work product encompassing all security aspects relevant in the context of the CC RA.
Security
Component Model
Refines architecture overview to the next level of detail
Operational Model
Deployment-level view of the reference architecture
Multi-tenancy
Production cloud
Virtualization Management
Hybrid Cloud
Resiliency
BSS Decomposition
Consumability
Guide for creating cloud services and how to exploit management functions.
Standards
Security
Component Model
Operational Model
Multi-tenancy
Production cloud
Virtualization Management
Hybrid Cloud
Resiliency
BSS Decomposition
Consumability
Example for how to implement a cloud management system for offering production-level cloud services
Definition for how to use virtualization management across server, storage and network 8
Details on metering, rating and accounting, including prescriptive guidance with respect to implementation
Detailed definition of BSS domains and how they should be implemented from a product perspective
How to optimize the end to end experiences related to cloud services 2011 IBM Corporation
The IBM Cloud Computing Reference Architecture Aggregating past & present experience and future requirements
CC RA
= Harvesting
(Learning from cloud deployments in the past?)
Refinement
(Improve the CC RA content presently available)
Forward looking
(Which future topics are relevant for cloud computing)
Harvest learnings & material from cloud implementations while factoring out short cuts taken by implementation team (e.g. due to constrained time lines). Continuously ongoing harvesting process due to additional learnings during each phase
9
Continuous improvement of CC RA content based on feedback from CC RA exploiters & stakeholder Be clear about which parts of the RA are already addressed in todays IBM cloud offerings and which aspects still have to be addressed
Todays cloud implementations are not necessarily optimal implementations (due to time & resource constraints) Need forward-looking guidance on ideal target implementation Examples are: generalization of CCMP services layered cloud services NFRs, e.g. security, resiliency Hybrid clouds
2011 IBM Corporation
How to implement a cloud using the IBM Cloud Computing Reference Architecture
1 There is a well-defined process for using the RA to implement a cloud service A cloud is constituted by a CCMP implementation and an arbitrary number of cloud services delivered and managed by it A dedicated presentation and document is available describing the process for using the RA to develop the management aspects for a cloud service RA work products also serve as authoritative reference on specific technical topics for education purposes
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
3a
Security Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting
Standards
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a cloud service & CCMP implementation
+
Consumability
10
Using the CC RA: Which work products have to be created on a per cloud service basis?
The RA contains two types of work products 1. Work products only serving as a reference documentation for specific aspects of implementing a new cloud: All domainspecific work products except Cloud service creation 2. Work products serving as the basis for a cloudspecific work product: All cross-domain work products plus Cloud Service Creation
11
Document cloud service-specific decisions made for each step of the cloud service creation process. Use the RA-level work product as a reference for step definitions and product recommendations Create cloud service / CCMP implementationspecific service flows. Refer to RA-level service flows. Create cloud service / CCMP implementationspecific architecture overview, based on RAlevel AOD Create cloud service / CCMP implementationspecific component model. Reference RAlevel component model
Define cloud-service / CCMP implementation-specific standards being used. Reference RA-level standard definitions
Service Flows
Create cloud service / CCMP implementationspecific operational model. Reference RAlevel operational model
+
Use Cases
Architecture Overview
Component Model
+
Non-functional Requirements
Document cloud service-specific use cases. Reference RA-level use cases serving as a basis
Standards
+
Consumability
Assess end to end experience creating, operating and managing this cloud service
12
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
13
Existing & 3rd party services, Partner Ecosystems Cloud Service Integration Tools
New
Service
Inf rastructure-as-a-Service
Inf rastructure
Outsourcers
Although having different motivations, software & process legacy and requirements, there is a common approach for creating cloud services across all segments
Yes
Want to own IT infrastructure & have runtime & mgmt software installed onpremise?
No
ISVs
Different scenarios for offering cloud services require - different delivery models for management software (buildit-yourself vs. IBM-hosted) - different levels of integration with existing management tools
No
15
Developing a cloud service means developing using & integrating runtime & management functions in a way that IT capabilities can be delivered as-a-service. defined in the CC Reference Architecture
delivers
delivers
E.g. automated delivery & self-service mgmt, entitlement, rating, provisioning, monitoring, metering, patch management, high availability, backup & restore, incident & problem management, etc.
operates
Runtime functions
E.g. compute power, hypervisors, storage capacity, network isolation zones, load balancers, web & application servers, database management systems, analytics engines, business process & portal engines, etc.
Cloud Service Consumer C Example Julieanswers.com cloud service: - Julieanswers ear file - IHS/WAS/DB2 running the julieanswers ear file - Virtual machines running IHS/WAS/DB2 - TivoliLive monitoring the health of the julieanswers app and the underlying IHS/WAS/DB2 installation - Billing tool - BCRS to backup the julieanswers db2 database 16
Examples: Select off-the-shelf hypervisor (VMaaS), implement custom app (e.g. LotusLive)
Examples: VM, file system, distributed app, virtual IP address, queue, web conference, RDBMS, 3-tier business app, etc.
Examples: Create VM, add more nodes to WAS cluster, change max # of seats for LotusLive web conf
Select existing agent / implement new agent for monitoring JVM heapsize, hypervisor swap file size, # of processes, etc.
Incident, problem & asset mgmt process is specific to cloud service customization needed
Examples: HA for management system, delivered WAS cluster must be highly available
1 11 1 1 11 * 1
* 1
11 * 11 1 1
1 * 1
* 1
$$ $
A cloud service must be registered to the service catalog to be externally accessible, entitlements need to be configured,
17
3. Define Unit of delivery & rating 4. Implement self-service delivery & management functionality 5. Implement monitoring metrics & event correlation rules 6. Implement incident, problem and asset mgmt processes 7. Implement resiliency SLA 8. Implement backup approach 9. Implement security functions 10. Implement cloud service specific billing metrics 11. Implement rates for charging cloud service consumption 12. Register cloud service to service catalog
18
Overview: Recommended management products, development tools and artifacts to be created on a per cloud service basis
Step Products & technologies Building a cloud service hosted within the providers premise Development/Config Tool Cloud service specific configuration / artifact
n/a (cross-cutting)
n/a
n/a
Rational Dev tools (for app artifacts), no image creation tools available today
n/a
n/a
TSAM SD app TPM ADPE Universal Agent Builder (ITM) Omnibus-internal tooling
TSRM-internal apps
HA policy
TUAM
TUAM
19
*Cloud Computing Reference Architecture (CC RA) Product & tooling mapping (on-prem products)
Cloud Service Provider
Cloud Services Common Cloud Management Platform
Golden master VM image (runtime) [see runtime]
Service Manager
Business Manager
Tivoli Service Automation Manager Workflows, job plans, escalations TSRM-internal apps Tivoli Service Request Manager
BPaaS
Job files, metering collectors Editor Tivoli Usage & Accounting Manager
SaaS
Provisioning
Consumer In-house IT
IaaS
Deployment Architect Transition Manager
Customer Care
Legend
<cloud servicespecific artifact created> <devToolForExploit ing mgmt/runtime component> <runtime/mgmt platform component>
Infrastructure
20
Walkthrough all 12 steps per applied pattern while describing implementation-specific decisions per step (incl. product selections) 1. ISV Example cloud service: Desktop Cloud 1. Enterprise: 1. WAS The applied patterns should serve as a guideline for anyone who wants to deliver IT capabilities as cloud services. It is acknowledged that many real-world implementations wont map exactly to the applied patterns described here many will be in a grey zone in between. However, the applied patterns serve as good guidelines and blueprints for these custom implementations There will be more applied patterns available in future versions of the RA
21
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
22
Offering Manager
Service Composer
Business Manager
Customer Account Manager, Business Office
Service Integrator
Service Manager
Consumer Administrator
Tenant Administrator, Workload Administrator, Data Administrator, Security Administrator
23
Main Goal
Main Responsibility
The focus of a Service Manager is to enable the smoothest service flow possible between all systems, from business support system to operational support system services. They ensure that the running service is well aligned with business and operational objectives and targets. Service Setup Provision service Service Runtime Managing compliance with services Service Level Agreements (SLA) Monitor third party supplier SLA Detect service faults Determine service impact (from infrastructure faults / degradation) Prioritise problems based on network impact Manage long and short term performance targets Ensure alignment of business and operational support systems Expert knowledge of the existing cloud infrastructure and good judgment of the impact of a new or changed solution on it Proficient understanding of the particular service offering and its service instances Expert automation knowledge Proficient understanding of capacity/performance issues within and across systems Operations Manager; Operator; Network Administrator; Customer Account Manager; Business Manager; Green IT Analyst; Deployment Architect; Cloud Service Creator
Skills
24
38 use cases, grouped into 10 packages, along the cloud service life cycle
Development & Test on the Cloud: Developing & testing applications, using development tool instances Desktop on the Cloud: Making use of Anytime, Anywhere access to applications, information and resources Collaboration in the Cloud: Using social networking services and online collaboration tools
Install & configure platform; Manage capacity, changes, events, security; Monitor infrastructure(s); Integrate Cloud & (non-) Cloud env.s
Request & View usage & billing reports; Administer secure access
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Non-functional requirements
26
27
Virtualization Management
SaaS
Performance& Scalability
Hybrid Cloud
Multi-tenancy
Resiliency
NF Rs
PaaS
NFRs
IaaS
28
29
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Consumability
30
Consumability framework
Key characteristics On-demand self-service Ubiquitous network access Location independent resource pooling Rapid elasticity Flexible pricing models Integration is critical Data Integration / Migration Process Integration UI Mashup Labor simplification drives efficiency Self Service Automation of Management Standardization of Workloads
31
Identify Easy to do business Evaluate Plan Acquire Positive first-use experience Configure Operate Rapidly integrates with existing environment Readily adapts to customer requirements Integrate Deploy Develop Customize Problem Mgmt Simplifies ownership and operation Admin & Maintain Fix & Upgrade
Describing who is interacting with a cloud service at the different stages of the cloud life cycle
Consumability Assessment
Using the consumability framework that is modified specifically for cloud solutions, identify the consumability goals for a particular solution, assess the solution, and work towards closing gaps.
Design
Stakeholder Feedback
32
Getting ongoing feedback from stakeholders is essential for designing a consumable solution. Understanding the user roles, the next step is to identify key stakeholders whose feedback you need to gather 2011 IBM Corporation
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
33
4. Define and Manage Cloud Services generically along their Lifecycle (Genericity Principle):
Define service templates and manage service instances generically along their lifecycle, across I/P/S/BPaaS. Support I/P/S/BPaaS cloud services in a generic fashion, with a single management platform
34 2011 IBM Corporation
Existing & 3rd party services, Partner Ecosystems Cloud Service Integration Tools
Business-Processas-a-Service
Sof tware-as-a-Service Operational Support Services (OSS) Platf orm-as-a-Service Business Support Services (BSS) Service Creation Tools
Inf rastructure
35
BPaaS
SaaS
The capability provided to the consumer is to use the provider's applications running on a cloud infrastructure and accessible from various client devices through a thin client interface such as a Web browser (e.g., web-based email). The consumer does not manage or control the underlying cloud infrastructure, network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
NIST1
PaaS
The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created applications using programming languages and tools supported by the provider (e.g., java, python, .Net). The consumer does not manage or control the underlying cloud infrastructure, network, servers, operating systems, or storage, but the consumer has control over the deployed applications and possibly application hosting environment configurations.
NIST1
IaaS
The capability provided to the consumer is to rent processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, deployed applications, and possibly select networking components (e.g., firewalls, load balancers).
NIST1
Note: Across all cloud service models the definition is determined by the management scope covered by the provider. For example, in IaaS the consumer does not manage or control the underlying cloud infrastructure [], in PaaS the consumer does not manage or control the underlying cloud infrastructure, network, servers, operating systems, or storage [], etc.. So this essentially about the tasks the operations staff of the provider takes on, it is not about the virtualization technology being used. For example, its possible to use hypervisor-level virtualization to realize PaaS, SaaS or BPaaS.
1. 2. 36 National Institute of Standards and Technologies; Draft NIST Working Definition of Cloud Computing, May 14, 2009 IBM MI and IPR definition bridge between Gartner and IDC, Aug 19, 2010 2011 IBM Corporation
Cloud Computing Reference Architecture Overview Diagram CCMP drill-down, highlighting some important topics
CCMP defines all management functions commonly needed for the automated delivery & management of any cloud service Components are grouped in two major categories: Operational Support Services (OSS) and Business Support Services (BSS) OSS: Responsible for managing the runtime components of cloud services BSS: Responsible for all business / finance related aspects of cloud services Economies of scale can be achieved by managing multiple cloud services with the same set of mgmt components (see architectural principles)
37
Interpret and Execute Existing &and Management Plans BuildServices 3 party BPaaS services, Orchestrate Management Componentry
rd
I A & a P t n m p o l D c i v r e S
I P A & l a t r o P r e m u s n o C e c i v r e S
SaaS
Order Management
Change & Configuration Management Incident & Problem Management IT Asset & License Management
Image Lifecycle Management IT Service Level Management Capacity & Performance Management Subscription Management Pricing Entitlement Management
Provisioning
PaaS
Metering
Rating
Billing
Consumer In-house IT
IaaS
Accounts Payable
Accounts Receivable
Image Management
Service Provider Portal & API Design, build and manage images for cloud services
Deployment Architect
Transition Manager
Operations Manager
Customer Care
Inf rastructure
Security
Governance
Design for Multi-Tenancy Protect assets through Isolation, integrity, image- risk and compliance management
2011 IBM Corporation
Pg BM s c a f r e t nt I m
I P A
Service Composer
I A & a P t n m p o l D c i v r e S
I A & l a t P m u s n o C c i v r e S
Service Integrator
SaaS
Order Management
Offering Manager
m g M e r a w t f o S s c a f r e t n I
I P A
Change & Configuration Management Incident & Problem Management IT Asset & License Management
Image Lifecycle Management Subscription Management Pricing Entitlement Management IT Service Level Management Capacity & Performance Management Metering Rating Billing
Provisioning
I P A
g M m r o f t a l P s c a f r e t n I
Consumer Inhouse IT
PaaS
Accounts Payable
Accounts Receivable
t m g n a M c i v r e S I P A
IaaS
e c u t s a r f n I s c a f r e n I t m g M
Middleware Infrastructure
Deployment Architect
Transition Manager
Operations Manager
Customer Care
Inf rastructure
Governance
Cloud Computing Reference Architecture (CC RA) Security, Resiliency, Performance & Consumability drill-down
Cloud Service Consumer
Cloud Services Existing & 3rd party services, Partner Ecosystems Business-Processas-a-Service
Software-as-a-Service
Infrastructure
Security
Security Event Management Security Policy Threat & Vulnerability Management
Software, System & Service Assurance Data and Information Protection Access & Identity Lifecycle Management
Resiliency
Data Resiliency Configuration for Resiliency
Resiliency Monitoring / Analysis Resiliency Compliance Assessment Resiliency Policy Management Availability & Continuity Management
Consumability
Ease of Doing Business Positive First Use Experience Rapidly Integrates Readily Adapts Simplified Operations
Security Entitlement
Governance
Business-Processas-a-Service
Software-as-a-Service
Infrastructure-as-a-Service
Consumer In-house IT
Server
Processor
Storage
Drives
Network
Internal
Facilities
Location
Memory
Ephemeral
External
Power
Nodes
Persistent
Inter-site
Governance
41
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Component Model
42
43
44
Service Manager
Business Manager
TSRM SPE
BP Mgmt Interfaces
API
BPaaS
Service Composer
Service Automation Management TSAM TSRM SPE CCMDB TADDM Incident & Problem Managemen t TSRM TSRM SPE TSRM SPE
Service Integrator
Offering Manager
API
SaaS
TPM IT Service Level Managemen TSLA t TNSQM TSRM SPE TSRM SPE TSRM SPE
Consumer Inhouse IT
Business Processes Applications Middleware Infrastructure Service Management
PaaS
TAMIT
TSRM SPE
Platform & Virtualization Management Infrastructure Mgmt Interfaces VMControl TPC Service Provider Portal & API
API
IaaS
Deployment Architect
Transition Manager
Operations Manager
Infrastructure
TAM
TDS TFIM
45
Governance
Service Manager
Business Manager
BP Mgmt Interfaces
API
BPaaS
Service Composer
Service Integrator
Offering Manager
API
SaaS
Tivoli Live Service Manager Incident & IT Service Problem Level Provisioning Managemen Managemen Tivoli Live t t Service Manager
Consumer Inhouse IT
Business Processes Applications Middleware Infrastructure Service Management
PaaS
Tivoli Live
API
IaaS
Deployment Architect
Transition Manager
Operations Manager
Infrastructure
BCRS
Governance
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Operational Model
47
48
49
Implementation guidance includes: Applied patterns showing how CC RA can be adapted to engagement-specific requirements Recommended tool selection aligned with component mappings in the Component Model Identification of architectural decisions and considerations of which practitioners need to be aware
50
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Service Flows
51
52
Configuration and Asset Mgmt Patch / Provisioning / Image Mgmt Incident / Problem Mgmt, Monitoring Performance and Capacity Mgmt Service Level Management / Metering Service Request Management Continuity Mgmt
2011 IBM Corporation
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Standards
54
Scop Existing Cloud Computing and Management e Standards Standards that are currently being defined Standards that need to be defined (recommended standards)
1 2 3
3 5 1 1 1 4 6 2 1 1 6 1 8 7 8 8 4 1
4 1 5 6 7 8
A standard can be defined as something with a pre-described specification, that is measurable, recognized as having authoritative value, and which an organization chooses to implement as a basis for 'good practice'.
2011 IBM Corporation
55
56
Create a central, authoritative domain model and terminology to be used consistently in cloud solutions Cover core concepts that are common across cloud solutions, and their touch points to specific disciplines Do not dive into specific domains to avoid duplication of work Strong focus on (1) defining core concepts/terms and (2) defining how those concepts are related to each other Collect input from RA 1.0 and RA 2.0 documents, and make consistent with RA 2.0 Make consistent with models that are defined or are being defined in IBM (e.g. CDM)
Security Roles Hybrid Cloud
Core Concepts
BSS
...
Virtualization
57
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Architectural Decisions
58
59
Scope Context - Capture ADs from key cloud offerings and architectural domains & TWPs Architectural Domain Subset*
Technical Work Products Cloud Delivery Models
SaaS
Managed Service Desk
Architecture Overview
PaaS
Security
Component Model
Operational Model
IaaS
(Public & private cloud)
Standards
60
Architectural Decision TWP Word Document Contains the following detailed ADs
In version 2 of the AD document we added decisions from the following areas on top of the decisions from version 1: Applied Pattern Architecture Decisions - IaaS - Public Cloud 14 ADs - IaaS - Private Cloud 18 ADs - SaaS Managed Service Desk 11 ADs Domain specific Ads - Hybrid Cloud 7 ADs - Resiliency 1 AD - Virtualization management 17 ADs - Metering / Accounting 4 ADs - Performance and scalability 5 ADs
61
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Security
62
Physical Infrastructure
Architectural Principles
63
Storage Security
Application Security
Network Security
Physical Security
Policies
Organizations need to adopt a strategy for cloud security that considers the unique attributes of the cloud as well as the activities and data the cloud is being utilized for.
Only by combining foundational controls with activity/data specific controls can organizations meet their cloud security needs.
64
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
65
Consumable outcomes
Roadmaps from Tivoli, Linux Technology Center (STG), and SoNAS (STG)
66 2011 IBM Corporation
Architectural Patterns
BSS
Business Support System
Deployment patterns for OSS components Multiple Virtualization Management domains Horizontal Scaling of Provisioning components Horizontal Scaling of Service Automation components Multiple OSS domains
OSS
Operational Support System
Virtualization Mgmt
Patterns and strategies for rapid provisioning CoW boot disk of remote read-only images Local caching of remote images and CoW root disk of local read-only image Local caching of remote images and only transferring image delta Use a combination of CoW, CoR, and Pre-fetching Pre-create/hibernate/resume VM 67 67
4 High Scale Low Touch virtualization management 4.1 Architecture 4.2 Functions 4.3 Results 4.4 Targeted scenarios and use cases 5 Virtual systems rapid provisioning strategies 5.1 CoW boot disk of remote readonly images 5.2 Local caching of remote images and CoW root disk of local read-only image 5.3 Local caching of remote images and only transferring image delta 5.4 Use a combination of CoW, CoR, and Pre-fetching 5.5 Pre-create/hibernate/resume VM 6 Applied Pattern: Compute Cloud 7 References
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
69
Details what functions/subcomponents should be part of the Virtualization/Platform Management component Definition of scope and functions What is important for implementation/options in cloud environments for these functions Considerations and what options are there, pros and cons Performance, scaling and architecture decisions Ex: local storage vs shared storage the implications there wrt Performance, scaling, resiliency of the VMs What standards/recommendations are there for implementations
70
Cloud Services
Service Manager
Business Manager
BPaaS
Service Delivery Catalog
I A & a P t n m p o l D c i v r e S
I A & l a t P m u s n o C c i v r e S
SaaS PaaS
Order Management
Change & Configuration Management Incident & Problem Management IT Asset & License Management
Image Lifecycle Management IT Service Level Management Capacity & Performance Management Subscription Management Pricing Entitlement Management
Provisioning
Metering
Rating
Billing
Accounts Payable
Accounts Receivable
IaaS
Deployment Architect Transition Manager
Operations Manager
Inf rastructure
Platform Management Discovery of physical resources Library or catalog of discovered resources Inventory such as options, firmware, OS Platform Software Maintenance Monitoring, reporting, and patching of system firmware and hypervisor software. Bare Metal installation/distribution Install and distribute OS and hypervisor software and agents Platform health monitoring and reporting Monitors health of physical systems and hypervisors Used for billing services and SLAs
71
Non-Functional Requirements
Mostly centers around performance and scaling which is critical in a cloud environment Details Documented in the NFR document Input provided to other work products for performance, resiliency, component model, etc
Applied Patterns
Private cloud, Cloudburst, Telco scenario
72
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
73
74
75
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Resiliency
76
CC RA 2.0 Resiliency
CC RA 2.0 Resiliency Defined cloud Resilience architecture Based on lessons learned from implementations Mapped architecture to proposed CCMP resilience implementation Identified required products NFRs enhancements
Key learning from existing cloud implementations OSS/BSS interdependencies and operational requirements must be considered in coordinated resilience and automation design
77
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
78
Metering, Rating and Accounting Domain addresses: Different types of metered usage data (3 Key types) and the need to meter both Allocated and Activity based data BSS-OSS mapping of runtime and design time data flows Product specific detailed functional gap analysis with tool recommendations Solution architecture along with implementation guidance 3 Applied Patterns from architecture as applicable to Public, Private clouds and an ISV context are explained
79
80
Allocation Usage
Service A Costs
Activity Usage
Cloud Service Provider
Server 1 CPU usage = 3,000 CPU mins * $.40/min Server 2 CPU usage = 2,500 CPU mins * $.60/min Server 1 software usage = 60 hrs * $15/hr
$3,060
Server 2 software usage = 40 hrs * $10/hr Server 1 labor costs = $40 Server 2 labor costs = $60
Profit
Loss
81
BSS
Cost/Price Accounting Usage Accounting Usage Reports
Billing Records
Accounting Structures
OSS
Service context
Manages
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
BSS Decomposition
83
84
Customer Account mgmt Customer Account mgmt Customer information mgmt Customer information mgmt User identity mgmt User identity mgmt User access mgmt User access mgmt
Customer Management
Contracts & agreements mgmt Contracts & agreements mgmt Register contract/agreement Billing Schedule Register contract/agreement Billing Schedule Contracted Rating Contracted Rating Contract generation Contract generation
Service Offering Management Service Offering Management Offering Lifecylce mgmt Offering Lifecylce mgmt Options configuration & rule mgmt Options configuration & rule mgmt
Pricing Pricing Price information mgmt Price information mgmt Price model Price model
Subscription Management
Entitlement mgmt Entitlement mgmt Entitlement tracking Entitlement tracking
Order management Order management Enter & manage order Delivery status monitoring Enter & manage order Delivery status monitoring Manage license/Entitlement Manage license/Entitlement
Clearing & settlement Clearing & settlement Royalty mgmt // payment Royalty mgmt payment ISV // Vendor payment ISV Vendor payment
Financial Management
Accounts Payable Accounts Payable Accounts Receivable Accounts Receivable Rating Rating
Billing Billing Financial data release Financial data release Process billing charges Create & release invoice Process billing charges Create & release invoice
Private Cloud Realization - using Tivoli Service Request Manager Service Provider Edition + Tivoli Usage and Accounting Manager TSRM-SP
provides all these functions
Notes on METERING TSRM provides Allocation & Activity-based Metering. TSRM tracks labor, materials, tools, services costs. TUAM provides Usage-based Metering
RATING & BILLING TSRM & TUAM provide partial rating functions & bill data generation but not direct invoicing
86
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
3b
Service Flows
Leverage architectural decisions d ocumented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Hybrid Cloud
87
Dimensions:
Integration: How to connect on-premise
services and data to off-premise counterparts business data mapping and service integration
Security: How to integrate on-premise/offpremise identities, policies, auditing systems; how to ensure proper security of off-premise cloud workload; How to secure management and payload interactions
Perspectives
Operating Perspective: Seamlessly move
peek workloads from on-premise to public Cloud Sourcing Perspective: Different types of workloads to be provisioned by the most effective Cloud from the perspective of cost, functionality, availability, performance, security, etc. Management Perspective: Unified view and capability to manage resources and information onpremise and in off-premise Clouds combined with management and integration of workloads and resources across hybrid cloud
88
Examples:
Hybrid Cloud Integration Connect off-premise monitoring events to on-premise monitoring system
IBM Cloud
Hybrid Monitoring Example Federate Monitoring info of Workload in IBM Public Cloud
Examples:
On-premise to off-premise Business Application Integration: Example: On-premise Database to Salesforce Cloud
Examples:
Hybrid Cloud Integration Mgmt and Capacity Overflow of/to Public Cloud
Hybrid Cloud Integration LDAP Directory Sync on-premise identity model and directory
Governance & Hybrid Workload Management Examples: Governance for acquiring Resources from IBM Compute Cloud and/or Amazon; Workload Management and capacity overflow from CCMP based private Cloud to IBM Compute Cloud ERP Data DB2
Hybrid Cloud Integration Query Access Replication
Examples:
Security: Directory Integration & Identity Federation Example Synchronize on premise ODW LDAP and LotusLive Domino directory info and facilitate SSO
Cognos Apps
DB2
Staging DB
Cognos BI
SIB Staging DB
Cognos and other Analytic Applications in the Cloud: Initial Load to Cloud; Change Data Capture Replication to & from Cloud; Query Access; Data Cleansing
89 2011 IBM Corporation
Cloud Management Platform * IBM Cloud Computing Reference Architecture Hybrid Cloud Model
Common Cloud Management Platform
BSS
Business Support Services Offering Mgmt Order Mgmt Accounting & Billing Contract Mgmt Customer Mgmt Entitlements Invoicing SLA Reporting Metering, Analytics & Reporting Pricing & Rating Subscriber Mgmt Peering & Settlement Service Offering Catalog
OSS
Operational Support Services Service Templates Service Request Management Provisioning Monitoring & Event Management
API
Service Automation Management Configuration Mgmt Incident, Problem & Change Management IT Asset & License Management Virtualization Mgmt Image Lifecycle Management IT Service Level Management Capacity & Performance Management
Private Cloud
Define requirements and use im plementation guidance for cloud service and CCMP im plementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture o verview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
s n o i s i c e D l a r u t c e t i h c r A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
s d r a d n a t S
+
Non-functional Requirements
Leverage guidance on specific technical areas as in put for developing a CCMP implementation
+
Consumability
Multi-tenancy
91
91
Multi-tenancy - scope
Multi-tenancy requirements and customer expectations
Don e Partia l
Requirements mapping to CC RA component for impact and gap analysis Multi-tenant patterns Leveraging existing multi-tenancy assets and capabilities Specification of how secure Multi-Tenancy should be implemented across the CC RA components
92
Multi-tenancy deliverables
Multi tenant NFRS Use Cases and extensions Component impact analysis Multi-tenancy definition Tenant definition Multi-tenant patterns whitepaper
adopted
adopted
adopted
93
93
Multi-tenant definition
Multi-tenancy refers to the ability of services to be offered to multiple user entities (tenants) in a way so that each tenant operates as logically isolated, while, in fact, using physically shared resources.
94
Tenant definition
1 Tenant 1 1 Consumer Business Manager 1:n 1 1:n Consumer Administrator 1 1:n Consumer End User 1:n 1 Service Instance 1
A role within the business entity that manages contracts and optionally approves commission of services from the Cloud The users of the Service
A business entity that is contractually responsible for the consumption of Cloud Service from a service provider.
A role within the business entity that will request commission and decommission services from the Cloud.
1:n
Virtual Machine
Storage
Network component
95
95
Multi-tenancy whitepaper
Multitenancy service considerations Standardisation Security risk Cost/tenant Low Low High
Tenant Tenant Tenant Tenant Tenant Tenant Tenant Tenant Tenant
App
App
App
App
App
App
App
App
Application
Platform Platform
Platform Platform
Platform Platform
Pla tform
Platform
1. Primitive set of patterns of multitenancy 2. Associated multi-tenant characteristics that will have to be supported in any Cloud implementation. 3. Multi-tenancy of managing and manage environments 4. Multi-tenancy needs of public and private clouds.
OS
OS
OS
OS
Operating System
Operating System
Operating System
Infrastr.
Infrastr.
I Physical-level multi-tenancy
Legend:
Dedicated Shared
II Hypervisor-level multi-tenancy
IV Platform-level multi-tenancy
96
Agenda
Executive Summary Introduction & Overview Historical evolution of the Reference Architecture Structure of the RA 2.0 Target audience How to apply the RA for cloud implementations Cloud Computing Reference Architecture Details
2 08/03/11 2011 IBM Corporation
Existing & 3rd party services, Partner Ecosystems Cloud Service Integration Tools
Business-Processas-a-Service
Sof tware-as-a-Service Operational Support Services (OSS) Platf orm-as-a-Service Business Support Services (BSS) Service Creation Tools
The CC RA focuses on cloud specifics such as radical cost reduction while achieving high degrees of security, reliability, scalability and control The CC RA consists of 21 detailed documents representing best-of-industry knowledge and insight on how to architect, design and implement clouds
3 08/03/11
Inf rastructure
Mike Buzzetti notes Existing legacy products and technology can be mapped to to the CCRA since the CCRA shows integration points between new cloud technologies and the existing ones
The IBM Cloud Computing Reference Architecture ensures consistency & quality across IBM development and delivery projects The IBM Cloud Computing Reference Architecture
Is based on open standards Delivers enterprise-class security to meet local, regional and national compliance for privacy and governance Combines powerful automation and services management (low touch) with rich business management functions for fully integrated, top-to-bottom management of cloud infrastructure and cloud services Supports the full spectrum of cloud service models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS) and Business Process as a Service (BPaaS) Enables the flexible scaling and resiliency required for successful cloud economics and ROI Facilitates seamless integration into existing customers' environments Is based on our industry leading expertise with SOA for building services and serviceoriented architectures
4 08/03/11 2011 IBM Corporation
SOA is defined by the open group as an architectural style that supports services orientation Service orientation is a way of thinking of services and services-based development and the outcomes of services. That basically means that cloud computing supports service orientation SOA solutions usually do not have all the characteristics of cloud simultaneously. SOA solutions usually have to have the management built from scratch SOA service reuse is generally only within the organization that delivers the service. Not all SOA solutions are cloud servers, since cloud requires automated deployment and management
Derived from extensive client interaction combined with IBMs extensive capabilities and experience in building enterprise-class IT systems. The CC RA provides specifications for
the physical components of a cloud implementation (network, compute, storage, virtualization) Software components required to run management Operational processes Governance policies tailored for the environment or enterprise. 08/03/11
The IBM Cloud Computing Reference Architecture covers are broad range of important cloud-specific topics
08/03/11
Use Cases
Non-functional Requirements
Functional (=use cases) and non-functional requirements against the other RA work products
Architecture Overview
Defines architectural building blocks Product-agnostic
Service Flows
Standards
Cross-cutting work product encompassing all security aspects relevant in the context of the CC RA.
Security
Component Model
Refines architecture overview to the next level of detail
Operational Model
Deployment-level view of the reference architecture
Multi-tenancy
Production cloud
Virtualization Management
Hybrid Cloud
Resiliency
BSS Decomposition
Consumability
Guide for creating cloud services and how to exploit management functions.
Standards
Security
Component Model
Operational Model
Multi-tenancy
Production cloud
Virtualization Management
Hybrid Cloud
Resiliency
BSS Decomposition
Consumability
Example for how to implement a cloud management system for offering production-level cloud services
Definition for how to use virtualization management across server, storage and network 8 08/03/11
Details on metering, rating and accounting, including prescriptive guidance with respect to implementation
Detailed definition of BSS domains and how they should be implemented from a product perspective
How to optimize the end to end experiences related to cloud services 2011 IBM Corporation
The IBM Cloud Computing Reference Architecture Aggregating past & present experience and future requirements
CC RA
= Harvesting
(Learning from cloud deployments in the past?)
Refinement
(Improve the CC RA content presently available)
Forward looking
(Which future topics are relevant for cloud computing)
Harvest learnings & material from cloud implementations while factoring out short cuts taken by implementation team (e.g. due to constrained time lines). Continuously ongoing harvesting process due to additional learnings during each phase
9 08/03/11
Continuous improvement of CC RA content based on feedback from CC RA exploiters & stakeholder Be clear about which parts of the RA are already addressed in todays IBM cloud offerings and which aspects still have to be addressed
Todays cloud implementations are not necessarily optimal implementations (due to time & resource constraints) Need forward-looking guidance on ideal target implementation Examples are: generalization of CCMP services layered cloud services NFRs, e.g. security, resiliency Hybrid clouds
2011 IBM Corporation
How to implement a cloud using the IBM Cloud Computing Reference Architecture
1 There is a well-defined process for using the RA to implement a cloud service A cloud is constituted by a CCMP implementation and an arbitrary number of cloud services delivered and managed by it A dedicated presentation and document is available describing the process for using the RA to develop the management aspects for a cloud service RA work products also serve as authoritative reference on specific technical topics for education purposes
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
3a
Security Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting
Standards
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a cloud service & CCMP implementation
+
Consumability
10
08/03/11
Using the CC RA: Which work products have to be created on a per cloud service basis?
The RA contains two types of work products 1. Work products only serving as a reference documentation for specific aspects of implementing a new cloud: All domainspecific work products except Cloud service creation 2. Work products serving as the basis for a cloudspecific work product: All cross-domain work products plus Cloud Service Creation
11 11 08/03/11
Document cloud service-specific decisions made for each step of the cloud service creation process. Use the RA-level work product as a reference for step definitions and product recommendations Create cloud service / CCMP implementationspecific service flows. Refer to RA-level service flows. Create cloud service / CCMP implementationspecific architecture overview, based on RAlevel AOD Create cloud service / CCMP implementationspecific component model. Reference RAlevel component model
Define cloud-service / CCMP implementation-specific standards being used. Reference RA-level standard definitions
Service Flows
Create cloud service / CCMP implementationspecific operational model. Reference RAlevel operational model
+
Use Cases
Architecture Overview
Component Model
+
Non-functional Requirements
Document cloud service-specific use cases. Reference RA-level use cases serving as a basis
Standards
+
Consumability
Assess end to end experience creating, operating and managing this cloud service
12
08/03/11
12
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
13
08/03/11
13
Existing & 3rd party services, Partner Ecosystems Cloud Service Integration Tools
Infrastructure-as-a-Service
Inf rastructure
Outsourcers
Although having different motivations, software & process legacy and requirements, there is a common approach for creating cloud services across all segments
Yes
Want to own IT infrastructure & have runtime & mgmt software installed onpremise?
No
ISVs
Different scenarios for offering cloud services require - different delivery models for management software (buildit-yourself vs. IBM-hosted) - different levels of integration with existing management tools
No
15
08/03/11
Developing a cloud service means developing using & integrating runtime & management functions in a way that IT capabilities can be delivered as-a-service. defined in the CC Reference Architecture
delivers
delivers
E.g. automated delivery & self-service mgmt, entitlement, rating, provisioning, monitoring, metering, patch management, high availability, backup & restore, incident & problem management, etc.
operates
Runtime functions
E.g. compute power, hypervisors, storage capacity, network isolation zones, load balancers, web & application servers, database management systems, analytics engines, business process & portal engines, etc.
Cloud Service Consumer C Example Julieanswers.com cloud service: - Julieanswers ear file - IHS/WAS/DB2 running the julieanswers ear file - Virtual machines running IHS/WAS/DB2 - TivoliLive monitoring the health of the julieanswers app and the underlying IHS/WAS/DB2 installation - Billing tool - BCRS to backup the julieanswers db2 database 16 08/03/11
Examples: Select off-the-shelf hypervisor (VMaaS), implement custom app (e.g. LotusLive)
Examples: VM, file system, distributed app, virtual IP address, queue, web conference, RDBMS, 3-tier business app, etc.
Examples: Create VM, add more nodes to WAS cluster, change max # of seats for LotusLive web conf
Select existing agent / implement new agent for monitoring JVM heapsize, hypervisor swap file size, # of processes, etc.
Incident, problem & asset mgmt process is specific to cloud service customization needed
Examples: HA for management system, delivered WAS cluster must be highly available
1 11 1 1 11 * 1
* 1
11 * 11 1 1
1 * 1
* 1
$$ $
A cloud service must be registered to the service catalog to be externally accessible, entitlements need to be configured,
17
08/03/11
3. Define Unit of delivery & rating 4. Implement self-service delivery & management functionality 5. Implement monitoring metrics & event correlation rules 6. Implement incident, problem and asset mgmt processes 7. Implement resiliency SLA 8. Implement backup approach 9. Implement security functions 10. Implement cloud service specific billing metrics 11. Implement rates for charging cloud service consumption 12. Register cloud service to service catalog
18
08/03/11
Overview: Recommended management products, development tools and artifacts to be created on a per cloud service basis
Step Products & technologies Building a cloud service hosted within the providers premise Development/Config Tool Cloud service specific configuration / artifact
n/a (cross-cutting)
n/a
n/a
Rational Dev tools (for app artifacts), no image creation tools available today
n/a
n/a
TSAM SD app TPM ADPE Universal Agent Builder (ITM) Omnibus-internal tooling
TSRM-internal apps
HA policy
TUAM
TUAM
19
08/03/11
*Cloud Computing Reference Architecture (CC RA) Product & tooling mapping (on-prem products)
Cloud Service Provider
Cloud Services Common Cloud Management Platform
Golden master VM image (runtime) [see runtime]
Service Manager
Business Manager
Tivoli Service Automation Manager Workflows, job plans, escalations TSRM-internal apps Tivoli Service Request Manager
BPaaS
Job files, metering collectors Editor Tivoli Usage & Accounting Manager
SaaS
Provisioning
Consumer In-house IT
IaaS
Deployment Architect Transition Manager
Customer Care
Legend
<cloud servicespecific artifact created> <devToolForExploit ing mgmt/runtime component> <runtime/mgmt platform component>
Infrastructure
20
08/03/11
Walkthrough all 12 steps per applied pattern while describing implementation-specific decisions per step (incl. product selections) 1. ISV Example cloud service: Desktop Cloud 1. Enterprise: 1. WAS The applied patterns should serve as a guideline for anyone who wants to deliver IT capabilities as cloud services. It is acknowledged that many real-world implementations wont map exactly to the applied patterns described here many will be in a grey zone in between. However, the applied patterns serve as good guidelines and blueprints for these custom implementations There will be more applied patterns available in future versions of the RA
21
08/03/11
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
22
08/03/11
22
Offering Manager
Service Composer
Business Manager
Customer Account Manager, Business Office
Service Integrator
Service Manager
Consumer Administrator
Tenant Administrator, Workload Administrator, Data Administrator, Security Administrator
23
23 23
Main Responsibility
The focus of a Service Manager is to enable the smoothest service flow possible between all systems, from business support system to operational support system services. They ensure that the running service is well aligned with business and operational objectives and targets. Service Setup Provision service Service Runtime Managing compliance with services Service Level Agreements (SLA) Monitor third party supplier SLA Detect service faults Determine service impact (from infrastructure faults / degradation) Prioritise problems based on network impact Manage long and short term performance targets Ensure alignment of business and operational support systems Expert knowledge of the existing cloud infrastructure and good judgment of the impact of a new or changed solution on it Proficient understanding of the particular service offering and its service instances Expert automation knowledge Proficient understanding of capacity/performance issues within and across systems Operations Manager; Operator; Network Administrator; Customer Account Manager; Business Manager; Green IT Analyst; Deployment Architect; Cloud Service Creator
Skills
24 24
08/03/11
24
38 use cases, grouped into 10 packages, along the cloud service life cycle
Development & Test on the Cloud: Developing & testing applications, using development tool instances Desktop on the Cloud: Making use of Anytime, Anywhere access to applications, information and resources Collaboration in the Cloud: Using social networking services and online collaboration tools
Install & configure platform; Manage capacity, changes, events, security; Monitor infrastructure(s); Integrate Cloud & (non-) Cloud env.s
Request & View usage & billing reports; Administer secure access
25
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Non-functional requirements
26
08/03/11
26
27
08/03/11
27
Virtualization Management
SaaS
Performance& Scalability
Hybrid Cloud
Multi-tenancy
Resiliency
NF Rs
PaaS
NFRs
IaaS
28
08/03/11
28
29
08/03/11
29
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Consumability
30
08/03/11
30
Consumability framework
Key characteristics On-demand self-service Ubiquitous network access Location independent resource pooling Rapid elasticity Flexible pricing models Integration is critical Data Integration / Migration Process Integration UI Mashup Labor simplification drives efficiency Self Service Automation of Management Standardization of Workloads
31 31 03.08.11
Identify Easy to do business Evaluate Plan Acquire Positive first-use experience Configure Operate Rapidly integrates with existing environment Readily adapts to customer requirements Integrate Deploy Develop Customize Problem Mgmt Simplifies ownership and operation Admin & Maintain Fix & Upgrade
31
Describing who is interacting with a cloud service at the different stages of the cloud life cycle
Consumability Assessment
Using the consumability framework that is modified specifically for cloud solutions, identify the consumability goals for a particular solution, assess the solution, and work towards closing gaps.
Design
Stakeholder Feedback
32 32
03.08.11
Getting ongoing feedback from stakeholders is essential for designing a consumable solution. Understanding the user roles, the next step is to identify key stakeholders whose feedback you need to gather 2011 IBM Corporation
32
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
33
08/03/11
33
4. Define and Manage Cloud Services generically along their Lifecycle (Genericity Principle):
Define service templates and manage service instances generically along their lifecycle, across I/P/S/BPaaS. Support I/P/S/BPaaS cloud services in a generic fashion, with a single management platform
34 08/03/11 2011 IBM Corporation
34
Existing & 3rd party services, Partner Ecosystems Cloud Service Integration Tools
Business-Processas-a-Service
Sof tware-as-a-Service Operational Support Services (OSS) Platf orm-as-a-Service Business Support Services (BSS) Service Creation Tools
Inf rastructure
35
08/03/11
35
BPaaS
SaaS
The capability provided to the consumer is to use the provider's applications running on a cloud infrastructure and accessible from various client devices through a thin client interface such as a Web browser (e.g., web-based email). The consumer does not manage or control the underlying cloud infrastructure, network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
NIST1
PaaS
The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created applications using programming languages and tools supported by the provider (e.g., java, python, .Net). The consumer does not manage or control the underlying cloud infrastructure, network, servers, operating systems, or storage, but the consumer has control over the deployed applications and possibly application hosting environment configurations.
NIST1
IaaS
The capability provided to the consumer is to rent processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, deployed applications, and possibly select networking components (e.g., firewalls, load balancers).
NIST1
Note: Across all cloud service models the definition is determined by the management scope covered by the provider. For example, in IaaS the consumer does not manage or control the underlying cloud infrastructure [], in PaaS the consumer does not manage or control the underlying cloud infrastructure, network, servers, operating systems, or storage [], etc.. So this essentially about the tasks the operations staff of the provider takes on, it is not about the virtualization technology being used. For example, its possible to use hypervisor-level virtualization to realize PaaS, SaaS or BPaaS.
1. 2. 36 36 National Institute of Standards and Technologies; Draft NIST Working Definition of Cloud Computing, May 14, 2009 IBM MI and IPR definition bridge between Gartner and IDC, Aug 19, 2010 08/03/11 2011 IBM Corporation
Cloud Computing Reference Architecture Overview Diagram CCMP drill-down, highlighting some important topics
CCMP defines all management functions commonly needed for the automated delivery & management of any cloud service Components are grouped in two major categories: Operational Support Services (OSS) and Business Support Services (BSS) OSS: Responsible for managing the runtime components of cloud services BSS: Responsible for all business / finance related aspects of cloud services Economies of scale can be achieved by managing multiple cloud services with the same set of mgmt components (see architectural principles)
37 08/03/11
Interpret and Execute Existing &and Management Plans BuildServices 3rd p arty BPaaS services, Orchestrate Management Componentry
Cloud Service Integration Tools
Partner Ecosystems
I P A & l a t r o P t n e m p o l e v e D e c i v r e S
I A & l a t P m u s n o C c i v r e S
SaaS
Order Management
Change & Configuration Management Incident & Problem Management IT Asset & License Management
Image Lifecycle Management IT Service Level Management Capacity & Performance Management
Subscription Management
Pricing
Entitlement Management
Provisioning
PaaS
Metering
Rating
Billing
Consumer In-house IT
IaaS
Accounts Payable
Accounts Receivable
Image Management
Service Provider Portal & API Design, build and manage images for cloud services
Deployment Architect
Transition Manager
Operations Manager
Customer Care
Inf rastructure
Security
Governance
Design for Multi-Tenancy Protect assets through Isolation, integrity, image- risk and compliance management
2011 IBM Corporation
BPaaS
P B s c a f r et tm ng IM
I P A
Service Composer
I P A & l a t r o P t n e m p o l e v e D e c i v r e S
I A & l a t P m u s n o C c i v r e S
m ga M ef rr ae w tt fn oI S s c
Service Integrator
SaaS
Order Management
Offering Manager
I P A
Change & Configuration Management Incident & Problem Management IT Asset & License Management
Image Lifecycle Management IT Service Level Management Capacity & Performance Management Subscription Management Pricing Entitlement Management
Provisioning
I P A
g M m re o ft tn a lI P s c a f r
Consumer Inhouse IT
PaaS
Metering
Rating
Billing
Accounts Payable
Accounts Receivable
e c u t s a s c a fr rf e n In tI m g M
Consumer Administrator
t n e m e g a n a M e c i v r e S I P A
IaaS
Deployment Architect
Transition Manager
Operations Manager
Customer Care
Inf rastructure
Governance
Cloud Computing Reference Architecture (CC RA) Security, Resiliency, Performance & Consumability drill-down
Cloud Service Consumer
Cloud Services Existing & party services, Partner Ecosystems 3 rd Business-Processas-a-Service
Software-as-a-Service
Infrastructure
Security
Security Event Management Security Policy Threat & Vulnerability Management
Software, System & Service Assurance Data and Information Protection Access & Identity Lifecycle Management
Resiliency
Data Resiliency Configuration for Resiliency
Resiliency Monitoring / Analysis Resiliency Compliance Assessment Resiliency Policy Management Availability & Continuity Management
Consumability
Ease of Doing Business Positive First Use Experience Rapidly Integrates Readily Adapts Simplified Operations
Governance
Business-Processas-a-Service
Software-as-a-Service
Infrastructure-as-a-Service
Consumer In-house IT
Server
Processor
Storage
Drives
Network
Internal
Facilities
Location
Memory
Ephemeral
External
Power
Nodes
Persistent
Inter-site
Governance
41
08/03/11
41
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Component Model
42
08/03/11
42
43
08/03/11
43
44
08/03/11
44
Service Manager
Business Manager
BP Mgmt Interfaces
API
BPaaS
Service Composer
Service Automation Management TSAM TSRM SPE CCMDB TPM TADDM Incident & IT Service Problem Level Managemen Managemen TSLA t t TSRM TNSQM TSRM SPE TSRM SPE
Service Integrator
Offering Manager
API
SaaS
TSRM SPE
TSRM SPE
TSRM SPE
Consumer Inhouse IT
Business Processes Applications Middleware Infrastructure Service Management
PaaS
TAMIT
TSRM SPE
Platform & Virtualization Management Infrastructure Mgmt Interfaces VMControl TPC Service Provider Portal & API
API
IaaS
Deployment Architect
Transition Manager
Operations Manager
Infrastructure
TAM
TDS TFIM
45
08/03/11
Governance
Service Manager
Business Manager
BP Mgmt Interfaces
API
BPaaS
Service Composer
Service Integrator
Offering Manager
API
SaaS
Tivoli Live Service Manager Provisioning Incident & IT Service Problem Level Managemen Managemen Tivoli Live t t Service Manager
Consumer Inhouse IT
Business Processes Applications Middleware Infrastructure Service Management
PaaS
Tivoli Live
API
IaaS
Deployment Architect
Transition Manager
Operations Manager
Infrastructure
BCRS
Governance
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Operational Model
47
08/03/11
47
48
08/03/11
48
49
49
Implementation guidance includes: Applied patterns showing how CC RA can be adapted to engagement-specific requirements Recommended tool selection aligned with component mappings in the Component Model Identification of architectural decisions and considerations of which practitioners need to be aware
50
50
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Service Flows
51
08/03/11
51
52
08/03/11
52
Configuration and Asset Mgmt Patch / Provisioning / Image Mgmt Incident / Problem Mgmt, Monitoring Performance and Capacity Mgmt Service Level Management / Metering Service Request Management Continuity Mgmt
2011 IBM Corporation
53 53
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Standards
54
08/03/11
54
Scop Existing Cloud Computing and Management e Standards Standards that are currently being defined Standards that need to be defined (recommended standards)
1 2 3
3 5 1 1 1 4 6 2 1 1 6 1 8 7 8 8 4 1
4 1 5 6 7 8
A standard can be defined as something with a pre-described specification, that is measurable, recognized as having authoritative value, and which an organization chooses to implement as a basis for 'good practice'.
08/03/11 2011 IBM Corporation
55
55
56
56
Create a central, authoritative domain model and terminology to be used consistently in cloud solutions Cover core concepts that are common across cloud solutions, and their touch points to specific disciplines Do not dive into specific domains to avoid duplication of work Strong focus on (1) defining core concepts/terms and (2) defining how those concepts are related to each other Collect input from RA 1.0 and RA 2.0 documents, and make consistent with RA 2.0 Make consistent with models that are defined or are being defined in IBM (e.g. CDM)
Security Roles Hybrid Cloud
Core Concepts
BSS
...
Virtualization
57
08/03/11
57
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Architectural Decisions
58
08/03/11
58
59
08/03/11
59
Scope Context - Capture ADs from key cloud offerings and architectural domains & TWPs Architectural Domain Subset*
Technical Work Products Cloud Delivery Models
SaaS
Managed Service Desk
Architecture Overview
PaaS
Security
Component Model
Operational Model
IaaS
(Public & private cloud)
Standards
60
08/03/11
60
Architectural Decision TWP Word Document Contains the following detailed ADs
In version 2 of the AD document we added decisions from the following areas on top of the decisions from version 1: Applied Pattern Architecture Decisions - IaaS - Public Cloud 14 ADs - IaaS - Private Cloud 18 ADs - SaaS Managed Service Desk 11 ADs Domain specific Ads - Hybrid Cloud 7 ADs - Resiliency 1 AD - Virtualization management 17 ADs - Metering / Accounting 4 ADs - Performance and scalability 5 ADs
61
08/03/11
61
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Security
62
08/03/11
62
Physical Infrastructure
This diagram is the CommandLevel view ofPolicy blueprint. The top layer is the IBM Top and Control the Security Risk and Compliance Physical Asset Management Management Assessment Security Framework, which provides the business context Management or business perspective of security. The framework is commonly represented by the graphic you see on the right. Security Services and Infrastructure the management of The blueprint separates security from the Info and implementation of security, whichCrypto, Keyrepresented in the are and Security Identity, Access and Security Policy Service Management Event Infrastructure Certificate Infrastructure Infrastructure middle and bottom layer Entitlement Infrastructure respectively. Infrastructure A product-agnostic and solution-agnostic approach to defining security capabilities. Identities and Events and Code and Policies Attributes Logs Images A common vocabulary to use in more detailed discussions Data Repositories Security Service Levels and Classification Config Operational IT Security Architectural principles that Designs valid Info and are across Context domains and deployment all Registry Knowledge environments 63 08/03/11 2011 IBM Corporation Based on researching many customer related scenarios A roadmap to assist in designing and deploying security solutions
Storage Security Host and End-point Security Application Security Network Security Physical Security
The security management layer represents the capabilities needed to translate the business view of security concerns into policies, operational procedures, and technical controls that can be deployed into the IT landscape and the organization. The Services and Infrastructures layer represents the security capabilities needed to enforce policies and their integration points into the IT infrastructure. By separating security management from security implementation, the IT organization can focus on getting the policy and needed controls correctly defined and can better monitor and assess how completely and effectively the policies are being enforced. Architecture Principles in the Blueprint 1. Openness 2. Security by default 3. Design for accountability 4. Design for regulations 5. Design for privacy 6. Design for extensibility 7. Design for sharing 8. Design for consumability 9. Multiple levels of protection 10. Separation of management, enforcement and accountability 11. Security is model-driven 12. Security-critical resources must be aware of their security context 13. Consistency in approaches, mechanisms and software components
Architectural Principles
Organizations need to adopt a strategy for cloud security that considers the unique attributes of the cloud as well as the activities and data the cloud is being utilized for.
Only by combining foundational controls with activity/data specific controls can organizations meet their cloud security needs.
64
08/03/11
64
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
65
08/03/11
65
Consumable outcomes
Roadmaps from Tivoli, Linux Technology Center (STG), and SoNAS (STG)
66 08/03/11 2011 IBM Corporation
66
Architectural Patterns
BSS
Business Support System
Deployment patterns for OSS components Multiple Virtualization Management domains Horizontal Scaling of Provisioning components Horizontal Scaling of Service Automation components Multiple OSS domains
OSS
Operational Support System
Virtualization Mgmt
Patterns and strategies for rapid provisioning CoW boot disk of remote read-only images Local caching of remote images and CoW root disk of local read-only image Local caching of remote images and only transferring image delta Use a combination of CoW, CoR, and Pre-fetching 67 Pre-create/hibernate/resume VM 67 08/03/11
67
4 High Scale Low Touch virtualization management 4.1 Architecture 4.2 Functions 4.3 Results 4.4 Targeted scenarios and use cases 5 Virtual systems rapid provisioning strategies 5.1 CoW boot disk of remote readonly images 5.2 Local caching of remote images and CoW root disk of local read-only image 5.3 Local caching of remote images and only transferring image delta 5.4 Use a combination of CoW, CoR, and Pre-fetching 5.5 Pre-create/hibernate/resume VM 6 Applied Pattern: Compute Cloud 7 References
68
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
69
08/03/11
69
Details what functions/subcomponents should be part of the Virtualization/Platform Management component Definition of scope and functions What is important for implementation/options in cloud environments for these functions Considerations and what options are there, pros and cons Performance, scaling and architecture decisions Ex: local storage vs shared storage the implications there wrt Performance, scaling, resiliency of the VMs What standards/recommendations are there for implementations
70 08/03/11
Cloud Services
Service Manager
Business Manager
BPaaS
Service Delivery Catalog
I P A & l a t r o P t n e m p o l e v e D e c i v r e S
I A & l a t P m u s n o C c i v r e S
SaaS
Order Management
Change & Configuration Management Incident & Problem Management IT Asset & License Management
Image Lifecycle Management IT Service Level Management Capacity & Performance Management Subscription Management Pricing Entitlement Management
Provisioning
PaaS
Metering
Rating
Billing
Accounts Payable
Accounts Receivable
IaaS
Deployment Architect Transition Manager
Operations Manager
Inf rastructure
70
Platform Management Discovery of physical resources Library or catalog of discovered resources Inventory such as options, firmware, OS Platform Software Maintenance Monitoring, reporting, and patching of system firmware and hypervisor software. Bare Metal installation/distribution Install and distribute OS and hypervisor software and agents Platform health monitoring and reporting Monitors health of physical systems and hypervisors Used for billing services and SLAs
71
08/03/11
71
Non-Functional Requirements
Mostly centers around performance and scaling which is critical in a cloud environment Details Documented in the NFR document Input provided to other work products for performance, resiliency, component model, etc
Applied Patterns
Private cloud, Cloudburst, Telco scenario
72
08/03/11
72
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
73
08/03/11
73
74
08/03/11
Virtualization driving changes in network infrastructure, creating new opportunities for network management Network requirements for virtualization and cloud are similar, especially for Enterprise/private clouds. Hybrid Clouds and CSP Clouds have additional requirements for scaling, concurrent updates, etc. These are the focus of several startups. We need to develop comprehensive capability for managing virtual networks, matching capabilities for physical networks - Leverage work from ITM, Director. -Lead in supporting optimization of new data center networks (e.g. Cisco FabricPath, TRILL, ) Competitors (HP, Solarwinds)
75
08/03/11
Virtualization driving changes in network infrastructure, creating new opportunities for network management Network requirements for virtualization and cloud are similar, especially for Enterprise/private clouds. Hybrid Clouds and CSP Clouds have additional requirements for scaling, concurrent updates, etc. These are the focus of several startups. We need to develop comprehensive capability for managing virtual networks, matching capabilities for physical networks - Leverage work from ITM, Director. -Lead in supporting optimization of new data center networks (e.g. Cisco FabricPath, TRILL, ) Competitors (HP, Solarwinds)
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Resiliency
76
08/03/11
76
CC RA 2.0 Resiliency
CC RA 2.0 Resiliency Defined cloud Resilience architecture Based on lessons learned from implementations Mapped architecture to proposed CCMP resilience implementation Identified required products NFRs enhancements
Key learning from existing cloud implementations OSS/BSS interdependencies and operational requirements must be considered in coordinated resilience and automation design
77
08/03/11
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
78
08/03/11
78
Metering, Rating and Accounting Domain addresses: Different types of metered usage data (3 Key types) and the need to meter both Allocated and Activity based data BSS-OSS mapping of runtime and design time data flows Product specific detailed functional gap analysis with tool recommendations Solution architecture along with implementation guidance 3 Applied Patterns from architecture as applicable to Public, Private clouds and an ISV context are explained
79
08/03/11
79
80
08/03/11
80
Allocation Usage
Service A Costs
Activity Usage
Cloud Service Provider
Server 1 CPU usage = 3,000 CPU mins * $.40/min Server 2 CPU usage = 2,500 CPU mins * $.60/min Server 1 software usage = 60 hrs * $15/hr
$3,060
Server 2 software usage = 40 hrs * $10/hr Server 1 labor costs = $40 Server 2 labor costs = $60
Profit
Loss
81
08/03/11
1. To determine if the service is Profit or Loss 2. To Maximize Cloud Utilization 3. Network bandwidth type service metrics require to measure usage
81
BSS
Cost/Price Accounting Usage Accounting Usage Reports
Billing Records
Accounting Structures
OSS
Service context
Manages
82
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
BSS Decomposition
83
08/03/11
83
84
08/03/11
84
Customer Account mgmt Customer Account mgmt Customer information mgmt Customer information mgmt User identity mgmt User identity mgmt User access mgmt User access mgmt
Customer Management
Contracts & agreements mgmt Contracts agreements mgmt Register contract/agreement Billing Schedule Register Billing Schedule Contracted Rating Contracted Rating Contract generation Contract generation
Service Offering Management Service Offering Management Offering Lifecylce mgmt Offering Lifecylce mgmt Options configuration & rule mgmt Options configuration rule
Pricing Pricing Price information mgmt Price information mgmt Price model Price model
Subscription Management
Entitlement mgmt Entitlement mgmt Entitlement tracking Entitlement tracking
Order management Order management Enter & manage order Delivery status monitoring Enter & manage order Delivery status monitoring Manage license/Entitlement Manage license/Entitlement
Clearing & settlement Clearing & settlement Royalty mgmt // payment Royalty mgmt payment ISV // Vendor payment ISV Vendor payment
Financial Management
Accounts Payable Accounts Payable Accounts Receivable Accounts Receivable Rating Rating
Billing Billing Financial data release Financial data release Process billing charges Create & release invoice Process billing charges Create & release invoice
Private Cloud Realization - using Tivoli Service Request Manager Service Provider Edition + Tivoli Usage and Accounting Manager TSRM-SP
provides all these functions
Notes on METERING TSRM provides Allocation & Activity-based Metering. TSRM tracks labor, materials, tools, services costs. TUAM provides Usage-based Metering
RATING & BILLING TSRM & TUAM provide partial rating functions & bill data generation but not direct invoicing
86 08/03/11
86
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
3b
Service Flows
Leverage architectural decisions documented in the RA and make implementationspecific ones throughout the entire process
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Hybrid Cloud
87
08/03/11
87
Dimensions:
Integration: How to connect on-premise
services and data to off-premise counterparts business data mapping and service integration
of on-premise with services in public cloud(s) Life-cycle: Identify and define workload migration and life cycle events for services in hybrid cloud Roles: Identify roles associated with hybrid cloud operations and services Decisions: Define architectural decisions for hybrid cloud integration framework and for hybrid cloud management services
Security: How to integrate on-premise/offpremise identities, policies, auditing systems; how to ensure proper security of off-premise cloud workload; How to secure management and payload interactions
Perspectives
Operating Perspective: Seamlessly move Sourcing Perspective: Different types of
peek workloads from on-premise to public Cloud
workloads to be provisioned by the most effective Cloud from the perspective of cost, functionality, availability, performance, security, etc. Management Perspective: Unified view and capability to manage resources and information onpremise and in off-premise Clouds combined with management and integration of workloads and resources across hybrid cloud
88
08/03/11
88 88
Examples:
Hybrid Cloud Integration Connect off-premise monitoring events to on-premise monitoring system
IBM Cloud
Hybrid Monitoring Example Federate Monitoring info of Workload in IBM Public Cloud
Examples:
On-premise to off-premise Business Application Integration: Example: On-premise Database to Salesforce Cloud
Examples:
Hybrid Cloud Integration Mgmt and Capacity Overflow of/to Public Cloud
Hybrid Cloud Integration LDAP Directory Sync on-premise identity model and directory
Governance & Hybrid Workload Management Examples: Governance for acquiring Resources from IBM Compute Cloud and/or Amazon; Workload Management and capacity overflow from CCMP based private Cloud to IBM Compute Cloud ERP Data DB2
Hybrid Cloud Integration Query Access Replication
Examples:
Security: Directory Integration & Identity Federation Example Synchronize on premise ODW LDAP and LotusLive Domino directory info and facilitate SSO
Cognos Apps
DB2
Staging DB
Cognos BI
SIB Staging DB
Cognos and other Analytic Applications in the Cloud: Initial Load to Cloud; Change Data Capture Replication to & from Cloud; Query Access; Data Cleansing
89 08/03/11 2011 IBM Corporation
89 89
Cloud Management Platform * IBM Cloud Computing Reference Architecture Hybrid Cloud Model
Common Cloud Management Platform
BSS
Business Support Services Offering Mgmt Order Mgmt Accounting & Billing Contract Mgmt Customer Mgmt Entitlements Invoicing SLA Reporting Metering, Analytics & Reporting Pricing & Rating Subscriber Mgmt Peering & Settlement Service Offering Catalog
OSS
Operational Support Services Service Templates Service Request Management Provisioning Monitoring & Event Management
API
Service Automation Management Configuration Mgmt Incident, Problem & Change Management IT Asset & License Management Virtualization Mgmt Image Lifecycle Management IT Service Level Management Capacity & Performance Management
Private Cloud
90 90
Define requirements and use implementation guidance for cloud service and CCMP implementation Cloud Service Creation
2
Create cloud service and CCMP implementationspecific architecture overview
Service Flows
+
Use Cases
Architecture Overview
Component Model
Operational Model
Security
n o s D l a us er td in ha ct rS A
3a
Performance & Scalability Virtualization Management Resiliency Metering, Rating and Accounting BSS De-composition Hybrid Cloud Multi-tenancy Production cloud
+
Non-functional Requirements
Leverage guidance on specific technical areas as input for developing a CCMP implementation
+
Consumability
Multi-tenancy
91
91 08/03/11
91
Multi-tenancy - scope
Multi-tenancy requirements and customer expectations
Don e Partia l
Requirements mapping to CC RA component for impact and gap analysis Multi-tenant patterns Leveraging existing multi-tenancy assets and capabilities Specification of how secure Multi-Tenancy should be implemented across the CC RA components
92
08/03/11
92
Multi-tenancy deliverables
Multi tenant NFRS Use Cases and extensions Component impact analysis Multi-tenancy definition Tenant definition Multi-tenant patterns whitepaper
adopted
adopted
adopted
93
93 08/03/11
93
Multi-tenant definition
Multi-tenancy refers to the ability of services to be offered to multiple user entities (tenants) in a way so that each tenant operates as logically isolated, while, in fact, using physically shared resources.
94
08/03/11
94
Tenant definition
1 Tenant 1 1 Consumer Business Manager 1:n 1 1:n Consumer Administrator 1 1:n Consumer End User 1:n 1 Service Instance 1
A role within the business entity that manages contracts and optionally approves commission of services from the Cloud The users of the Service
A business entity that is contractually responsible for the consumption of Cloud Service from a service provider.
A role within the business entity that will request commission and decommission services from the Cloud.
1:n
Virtual Machine
Storage
Network component
95
95 08/03/11
95
Multi-tenancy whitepaper
Multitenancy service considerations Standardisation Security risk Cost/tenant Low Low High
Tenant Tenant Tenant Tenant Tenant Tenant Tenant Tenant Tenant
App
App
App
App
App
App
App
App
Application
Platform Platform
Platform Platform
Platform Platform
Platform
Platform
1. Primitive set of patterns of multitenancy 2. Associated multi-tenant characteristics that will have to be supported in any Cloud implementation. 3. Multi-tenancy of managing and manage environments 4. Multi-tenancy needs of public and private clouds.
OS
OS
OS
OS
Operating System
Operating System
Operating System
Infrastr.
Infrastr.
I Physical-level multi-tenancy
Legend:
Dedicated Shared
II Hypervisor-level multi-tenancy
IV Platform-level multi-tenancy
96
08/03/11
96