Improving Security in The Cloud by Using Virtual Silos

Improving Security
in the Cloud by
Using Virtual Silos
Dale Wickizer,
CTO, U. S. Public Sector
NASA IT Summit 2010
National Harbor, MD
August 16-18, 2010
Maintaining a Proper Perspective
2010 NetApp. All rights reserved.
Maintaining a Proper Perspective
Server Virtualization
Network Virtualization
Storage Virtualization
Federal IT Being Asked to Transform

FY2012 Budget Guidance
Project Management
Identify and re-scope high-risk projects
IT Infrastructure
Execute FY2010 data center consolidation
plans
Adopt cloud computing if best value at
acceptable risk
Cyber Security
Fund tools for continuous monitoring of
agency IT systems
Vivek Kundra, U.S. CIO, http://cio.gov/pages.cfm/page/closing-the-it-gap
Cloud Computing? What Is It?

Its cloud illusions I recall. I really dont know clouds at
all.
--Joni Mitchell
Cloud
Generally, IT as a service
Cloud Computing A business model for

delivering IT as a Service
Cloud Services
The deliverable: what you get

SLAs
ITaaS
IaaS
PaaS
SaaS
StaaS
5
Cloud Delivery Vehicles
Non-IT
General access
Internet delivery
Low security
Low SLAs
Cheap or free
Examples:
Facebook,
iTunes
Traditional IT
Examples:
Yahoo! email (SaaS)
Google Apps (SaaS)
Private External
Examples:
Terremark (IaaS)
Public Clouds
Customers only
Private Internal
Employees only
Limited access
Internet/Intranet delivery
Security & firewalls
Enterprise SLAs
High value
Focus of this Talk
HYBRID
PUBLIC
Public Clouds
PRIVATE
High SLA
Low SLA
IT as a Service (ITaaS)
Examples:
USPTO Teleworks
NASA Nebula
New IT Organization Is The Service

Broker
Lower TCO
Other
Agencies
Internal
Users
Citizens
Business/Mission Requirements
IT Services and SLAs
IT Requirements/ Policies
Provider Services / SLAs
Internal Cloud
External Cloud
Shared Virtual Infrastructure
Acquisition cost
Operating cost
Simplify staff skill sets
Faster Time to Market

Provision faster
New services faster
Lower Business Risk

Consistent Backup/DR
Benefits
Efficient
Predictable (cost wise)
Elastic and Scalable
Always ON
Dynamic
The New IT Organization

Looking At Clouds From Both Sides

Service Consumers
Service Consumers Expect
Applications
Network
Storage
Federal IT Must Provide

Management
Servers
Data security and privacy

Self-service
Always on
Instant delivery
Capacity elasticity
Pay as you go
Secure multi-tenancy
Integrated data protection
Service automation and management
Data mobility
Storage efficiency
Cost Reduction & Flexibility
Path to Cloud (ITaaS)

Virtualization Is Necessary,
But Not Sufficient
Automate
Standardize
Offering
IT as a
Service
Self-service
Self-Managing
Chargeback
Virtualize &
Consolidate
Centralize IT,
Policy & Management
Assess Tasks Ahead;
Determine ROI
Where Does Your Journey Begin?

Time
From Physical to Virtual Silos

App &
Org Silos
Zones of
Virtualization on
Shared Storage
Internal
Multi-Tenant
Shared Virtual
Infrastructure
Separate
Separate
High
Low
Hours
Medium
Better
Better
Unified
Combined
High
High
Minutes
Low
Strong
Strong
Outsourced
Cloud Services
Apps
VMs
P Servers
Network
V Storage
P Storage
IT Gov
Separate
IT Budgets
Separate
Server Util
Low
Storage Util
Low
Provisioning Days/Wks
Costs
Very High
SLAs
Poor
Security
Inconsistent
Virtualized+ Multi-tenant &

Automated
Unified
Combined
High
High
Minutes
Lowest
Strong
Strong
+
Mobile
1 10
Security #1 Concern for Cloud
1 11
Secure Multi-Tenancy
Reference architecture and deployment guides at http://ImagineVirtuallyAnything.com

1 12
Transforming Federal Data Centers

Transformed Data Center
Traditional Data Center
Ordering System
Systems call API

E2E automated
User
manual
ticket
manual
Automate
service-levels
Departmental
Administrator
User
self-service
Analyze &
Ordering System
Ensure
Service Broker
Cost Effective
automated
Service
ticket
VMM1
System
Operations
At Scale
IP Adr. Sheet
manual
manual
SISM
CMDB
Level 1 Support
Datacenter
Infrastructure
From 1100*
Orchestration Layer
Service Delivery
CMDB &
Billing
Datacenter
Infrastructure
To ?? (A Lot Fewer)
*The Ones We Know About

1 SAP
The Layers of Virtualization
Policy-based Management
Server Virtualization
API
Network Virtualization
API
Storage Virtualization
API
NAS SAN - FCoE
Various 3rd Part

Storage Arrays
1 14
Data Center Automation

Service Catalog
High-level Abstraction
Web Service APIs
Offers Storage Services
Self
Service
Portal
Subscriber
Orchestration Tool
Dataset
Service Catalog
Product View
Assurance
Monitoring
Data Protection
Provisioning
Services
SLA Tool
Monitoring Tool
Protection Tool
Provisioning Tool
Workflow Automation
Storage
Architect
Logical View
1 15
Storage Automation & Analytics:

Language
Box-level Management
Service Level Management
1 16
Service Catalog Model

I need three
800GB Oracle
instances at the
Gold service level
Service Catalog
Network
Orchestration
Framework
Application
Admin
Reduce opex and capex

Increase agility
Eliminate errors
Gold
Silver
Bronze
Server
Storage
Protection
policies
Provisioning
policies
Resource pool
Chargeback
metrics
Change
backup policy
for Gold
service level
to every 4
Storage/Backup
hours
Admin
1 17
Conclusion
Smart IT organizations and service providers
will virtualize application stacks and run them
on shared infrastructure to drive out cost and
provide their customers the control they desire
These virtual silos will enable multiple tenants
to run securely in a shared, service-based
infrastructure
Unified architectures at each level in the stack
minimize skill sets and processes (lowest cost)
and improve architectural flexibility
Integrated security and data protection are
foundational, to minimize risk
1 18
Thank you!
Dale Wickizer
Chief Technology Officer,
U. S. Public Sector, NetApp, Inc.
[email protected]
No IT personnel were harmed in the making of this presentation.
1 19

Improving Security in The Cloud by Using Virtual Silos

Uploaded by

Copyright:

Available Formats

Improving Security in The Cloud by Using Virtual Silos

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Improving Security in The Cloud by Using Virtual Silos

Uploaded by

Copyright:

Available Formats

Improving Security

Maintaining a Proper Perspective

2010 NetApp. All rights reserved.

Maintaining a Proper Perspective

Federal IT Being Asked to Transform

Cloud Computing? What Is It?

Cloud Computing A business model for

The deliverable: what you get

2010 NetApp. All rights reserved.

Cloud Delivery Vehicles

2010 NetApp. All rights reserved.

Focus of this Talk

New IT Organization Is The Service

Shared Virtual Infrastructure

Faster Time to Market

Lower Business Risk

The New IT Organization

Looking At Clouds From Both Sides

Service Consumers Expect

2010 NetApp. All rights reserved.

Federal IT Must Provide

Data security and privacy

Cost Reduction & Flexibility

Path to Cloud (ITaaS)

Where Does Your Journey Begin?

2010 NetApp. All rights reserved.

From Physical to Virtual Silos

Virtualized+ Multi-tenant &

2010 NetApp. All rights reserved.

Security #1 Concern for Cloud

2010 NetApp. All rights reserved.

Reference architecture and deployment guides at http://ImagineVirtuallyAnything.com

Transforming Federal Data Centers

Traditional Data Center

Systems call API

*The Ones We Know About

The Layers of Virtualization

NAS SAN - FCoE

2010 NetApp. All rights reserved.

Various 3rd Part

Data Center Automation

Storage Automation & Analytics:

Service Level Management

2010 NetApp. All rights reserved.

Service Catalog Model

Reduce opex and capex

You might also like