Professional Documents
Culture Documents
Moving t o t he Cloud
Siddhart h Chavali
NewYorkChicagoSanFrancisco
LisbonLondonMadridMexicoCity
MilanNewDelhiSanJuan
SeoulSingaporeSydneyToronto
Copyright © 2010 by The McGraw-Hill Companies. All rights reserved. Except as permitted under the United States Copyright Act of 1976,
no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without
the prior written permission of the publisher.
ISBN: 978-0-07-162695-8
MHID: 0-07-162695-6
The material in this eBook also appears in the print version of this title: ISBN: 978-0-07-162694-1, MHID: 0-07-162694-8.
All trademarks are trademarks of their respective owners. Rather than put a trademark symbol after every occurrence of a trademarked name,
we use names in an editorial fashion only, and to the benefit of the trademark owner, with no intention of infringement of the trademark. Where
such designations appear in this book, they have been printed with initial caps.
McGraw-Hill eBooks are available at special quantity discounts to use as premiums and sales promotions, or for use in corporate training
programs. To contact a representative please e-mail us at bulksales@mcgraw-hill.com.
Information has been obtained by McGraw-Hill from sources believed to be reliable. However, because of the possibility of human or
mechanical error by our sources, McGraw-Hill, or others, McGraw-Hill does not guarantee the accuracy, adequacy, or completeness of any
information and is not responsible for any errors or omissions or the results obtained from the use of such information.
TERMS OF USE
This is a copyrighted work and The McGraw-Hill Companies, Inc. (“McGraw-Hill”) and its licensors reserve all rights in and to the work. Use
of this work is subject to these terms. Except as permitted under the Copyright Act of 1976 and the right to store and retrieve one copy of the
work, you may not decompile, disassemble, reverse engineer, reproduce, modify, create derivative works based upon, transmit, distribute,
disseminate, sell, publish or sublicense the work or any part of it without McGraw-Hill’s prior consent. You may use the work for your own
noncommercial and personal use; any other use of the work is strictly prohibited. Your right to use the work may be terminated if you fail to
comply with these terms.
THE WORK IS PROVIDED “AS IS.” McGRAW-HILL AND ITS LICENSORS MAKE NO GUARANTEES OR WARRANTIES AS TO THE
ACCURACY, ADEQUACY OR COMPLETENESS OF OR RESULTS TO BE OBTAINED FROM USING THE WORK, INCLUDING ANY
INFORMATION THAT CAN BE ACCESSED THROUGH THE WORK VIA HYPERLINK OR OTHERWISE, AND EXPRESSLY
DISCLAIM ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MER-
CHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. McGraw-Hill and its licensors do not warrant or guarantee that the
functions contained in the work will meet your requirements or that its operation will be uninterrupted or error free. Neither McGraw-Hill nor
its licensors shall be liable to you or anyone else for any inaccuracy, error or omission, regardless of cause, in the work or for any damages
resulting therefrom. McGraw-Hill has no responsibility for the content of any information accessed through the work. Under no circumstances
shall McGraw-Hill and/or its licensors be liable for any indirect, incidental, special, punitive, consequential or similar damages that result from
the use of or inability to use the work, even if any of them has been advised of the possibility of such damages. This limitation of liability shall
apply to any claim or cause whatsoever whether such claim or cause arises in contract, tort or otherwise.
ForAvaHolder—Agirlsosmallwhoshouldnothavetobesostrong,butsheis.
—ATV
ForDr.JonGottesman—Abrilliantmindandgreatmentorwhonever
losessightofthebigpicture.
—TJV
ForBryanReynolds—afellowwriterandgreatcousin.
—RCE
AbouttheAuthors
AnthonyT.Velte,CISSP,CISA,hasspentover20yearsintheinformationsystemsindustry.
Heisco-founderofVeltePublishing,Inc.andtheco-authorofmorethanadozenbooks,
includingtheawardwinningGreenIT:ReduceYourInformationSystem’sEnvironmentalImpact
WhileAddingtotheBottomLineandMicrosoftVirtualizationwithHyper-V.Mr.Veltealsoworks
foranindustry-leadingsecuritysoftwarecompany.Heconsultswithcompanieslargeand
small,helpingthemoptimizeandprotecttheirinformationsystemsinfrastructures.Hecan
bereachedatatv@velte.com.
TobyJ.Velte,Ph.D.,isaninternationalbest-sellingauthorofbusinesstechnologyarticles
andbooks.Heisco-founderofVeltePublishing,Inc.andtheco-authorofmorethanadozen
books,includingtheawardwinningGreenIT:ReduceYourInformationSystem’sEnvironmental
ImpactWhileAddingtotheBottomLineandMicrosoftVirtualizationwithHyper-V.Dr.Velteis
currentlypartofMicrosoft’sNorthCentralpracticefocusedonhelpingthrivingcompanies
withtheirtechnology-basedinitiatives.HeworkswithlargeorganizationstocreateITroadmaps
thatarebusinessfocusedandpracticallyimplemented.Hecanbereachedattjv@velte.com.
RobertElsenpeterisanaward-winningauthorandjournalist,freelancewriter,and
authorofmorethanadozentechnologybooks.He’sco-authoroftheaward-winningbook
GreenIT:ReduceYourInformationSystem’sEnvironmentalImpactWhileAddingtotheBottom
Line.Hehasabachelor’sdegreeinInformationTechnology.
AbouttheTechnicalEditor
CharlesBabcockisformertechnicaleditorofComputerworldandtechnologyeditorat
InteractiveWeek.Heiscurrentlyaneditor-at-largeatInformationWeekinSanFrancisco.
Hehasspent25yearscoveringvarioustechnologiesandtrendsinthecomputerindustry,
andholdsabachelor’sdegreeinjournalismfromSyracuseUniversity.
Contents
Acknowledgments ................................................ xiii
Introduction ...................................................... xiv
PartI GettingStarted
1 CloudComputingBasics .......................................... 3
CloudComputingOverview ....................................... 3
Disambiguation—JustWhatIsCloudComputing? .............. 3
CloudComponents ......................................... 6
Infrastructure .............................................. 8
Services ................................................... 11
Applications ..................................................... 16
Storage .................................................... 16
DatabaseServices ........................................... 17
IntranetsandtheCloud ............................................ 19
Components ............................................... 20
HypervisorApplications ..................................... 20
FirstMoversintheCloud .......................................... 21
Amazon ................................................... 21
Google .................................................... 22
Microsoft .................................................. 22
2 YourOrganizationandCloudComputing ........................... 23
WhenYouCanUseCloudComputing ............................... 23
Scenarios .................................................. 23
WhenYouShouldn’tUseCloudComputing .................... 25
Benefits .......................................................... 29
Scalability .................................................. 30
Simplicity .................................................. 30
KnowledgeableVendors ..................................... 30
MoreInternalResources ..................................... 31
Security ................................................... 31
Limitations ....................................................... 31
YourSensitiveInformation ................................... 31
ApplicationsNotReady ..................................... 33
DevelopingYourOwnApplications ........................... 34
v
vi Cloud Computing: A Practical Approach
SecurityConcerns ................................................. 35
PrivacyConcernswithaThirdParty .......................... 35
AreTheyDoingEnoughtoSecureIt? .......................... 36
SecurityBenefits ............................................ 37
RegulatoryIssues ................................................. 39
NoExistingRegulation ...................................... 39
GovernmenttotheRescue? .................................. 39
3 CloudComputingwiththeTitans .................................. 41
Google .......................................................... 41
GoogleAppEngine ......................................... 42
GoogleWebToolkit ......................................... 43
EMC ............................................................ 45
Technologies ............................................... 45
VMwareAcquisition ........................................ 46
NetApp ......................................................... 46
Offerings .................................................. 46
CiscoPartnership ........................................... 47
Microsoft ........................................................ 48
AzureServicesPlatform ..................................... 48
WindowsLive .............................................. 49
ExchangeOnline ............................................ 51
SharePointServices ......................................... 52
MicrosoftDynamicsCRM .................................... 53
Amazon ......................................................... 54
AmazonElasticComputeCloud(AmazonEC2) ................ 54
AmazonSimpleDB .......................................... 55
AmazonSimpleStorageService(AmazonS3) ................... 55
AmazonCloudFront ........................................ 55
AmazonSimpleQueueService(AmazonSQS) .................. 55
ElasticBlockStore ........................................... 56
Salesforce.com .................................................... 57
Force.com .................................................. 58
Salesforce.comCRM ......................................... 59
AppExchange .............................................. 59
IBM ............................................................. 61
Services ................................................... 61
MovementtotheCloud ...................................... 62
Security ................................................... 63
Partnerships ..................................................... 63
Yahoo!Research ............................................ 63
SAPandIBM ............................................... 64
HP,Intel,andYahoo! ........................................ 65
IBMandAmazon ........................................... 67
Contents vii
4 TheBusinessCaseforGoingtotheCloud .......................... 69
CloudComputingServices ......................................... 69
InfrastructureasaService .................................... 69
PlatformasaService ........................................ 72
SoftwareasaService ........................................ 74
SoftwareplusServices ....................................... 77
HowThoseApplicationsHelpYourBusiness ......................... 77
OperationalBenefits ......................................... 77
EconomicBenefits .......................................... 78
TipsforEvaluatingSaaS ..................................... 79
StaffingBenefits ............................................ 80
DeletingYourDatacenter .......................................... 81
WhatYouCanDelete ........................................ 82
WhatYouShouldKeep ...................................... 82
Steps ...................................................... 82
AppZero ................................................... 82
Salesforce.com .................................................... 83
WhyIt’sGoodforBusiness ................................... 84
BestBusinessPractices ....................................... 84
ThomsonReuters ................................................. 85
TheirCloudUse ............................................ 85
UsingtheCloud ............................................ 86
CloudComputingandWeb2.0 ............................... 86
ApplicationsandtheCloud .................................. 86
GettingStarted ............................................. 87
BeRealistic ................................................. 87
PartII CloudComputingTechnology
5 HardwareandInfrastructure ...................................... 91
Clients .......................................................... 91
Mobile .................................................... 92
Thin ....................................................... 92
Thick ...................................................... 93
Security ......................................................... 93
DataLeakage ............................................... 94
OffloadingWork ............................................ 94
Logging ................................................... 95
Forensics .................................................. 95
Development ............................................... 95
Auditing ................................................... 95
Network ......................................................... 100
BasicPublicInternet ......................................... 101
TheAcceleratedInternet ..................................... 102
viii Cloud Computing: A Practical Approach
PartIII CloudComputingatWork
9 SoftwareasaService ............................................. 173
Overview ........................................................ 173
Advantages ................................................ 174
SoftwareConsiderations ..................................... 175
VendorAdvantages ......................................... 175
Limitations ................................................. 175
DrivingForces .................................................... 176
Popularity ................................................. 176
VirtualizationBenefits ....................................... 177
SaaSandSOA .............................................. 177
EconomicImpact ........................................... 177
CompanyOfferings ............................................... 178
Intuit ...................................................... 178
Google .................................................... 179
Microsoft .................................................. 180
IBM ....................................................... 183
Industries ........................................................ 184
Healthcare ................................................. 184
Collaboration—WebEx ...................................... 188
Construction—CMiC ........................................ 188
Retail—Epicor .............................................. 189
Banking—OpenChannel ..................................... 190
x Cloud Computing: A Practical Approach
W
ewerefortunateenoughtobeabletotalkwithalotofverytalentedpeoplewhile
preparingthisbookforyou.Wespokenotonlytopeoplewhoimplementedtheir
owncloudsolutions,butalsothosewhohelpdevelopcloudsolutions,aswellas
officersofseveralmajorcloudsolutionproviders.
First,wewanttothankDarrenBoeckofMcNeilusSteel.Hetoldushowhewasableto
buildavirtualizedenvironmentfortheclientsonhisnetwork,allowingustosummarize
hisexperiencesforyou.
WealsohadthepleasureofspeakingagainwithJohnEngates,CTOofRackspaceHosting.
HetalkedwithusaboutRackspace’scloudcomputingservicesandexplainedtheirvisionof
howtheyseecloudcomputingasitexiststodayandhowitwillcontinuetoevolve.
SteveFisher,seniorvicepresidentofAppExchangeatSalesforce.com,wasawonderful
resource,talkingtousnotonlyaboutwhatSalesforce.combringstothecloudparty,but
alsohowbusinessesareusingitandhowheseesitevolving.
RyanCollier,memberofAccenture’sCitrixXenServerCapabilityGroup,enlightened
usaboutthemeritsoftheCitrixXenServer,aswellashowheseestheclouddeveloping.
ChristopherCrowhurst,VicePresidentofArchitecture&BSIatThomsonReuters,
sharedhisthoughtsoncloudcomputing.Healsosharedacasestudyoutliningavery
forward-thinkingimplementationofacloud-basedserviceatThompsonReutersthatwas
successfullycompletedbackwhenthewords“CloudComputing”wererarelyuttered.
CharlesBabcock,ourTechnicalEditor,helpeduskeepthefactsstraightandtheoverall
contentalignedwithyourexpectations.Weappreciateeveryeditandsuggestionandknow
thatitisabetterbookbecauseofhisinput.
WealsoacknowledgethepatienceandhardworkofthepeopleatMcGraw-Hill,
notablythoseinvolvedintheprocessofbringingthisbooktofruition.Thanksto
WendyRinaldi,SponsoringEditorandEditorialDirector;PattyMon,EditorialSupervisor;
JeanBodeaux,SeniorProductionSupervisor;VipraFauzdar,ProductionProjectManager;
JoyaAnthony,AcquisitionsCoordinator;andMargaretBerson,CopyEditor.Youcanalso
flipbackafewpagestoseetherestofthefolkswhoworkedtheirmagicthroughoutthe
processofcreatingthisbookforyou.Weacknowledgeallofthemandappreciatetheirefforts.
xiii
Introduction
WhoShouldReadThisBook
Thisbookistargetedatabroadaudience,butinanutshell–toanyonewhowantstolearn
moreaboutcloudcomputing.Cloudcomputinghasbecomeahottopicinrecentyears,
andpeopleatdifferentlevelsinyourorganizationneedtounderstandcloudcomputingin
differentways.
Thisbookisforanyonewhomayhaverecentlyheardtheterm“cloudcomputing”
forthefirsttimeandneedstoknowwhatitisandhowithelpsthem.Thisbookisalsofor
C-levelexecutives,managers,analysts,andallmannerofITprofessionals.Thegoalsofthe
bookrangefromjustwantingtobeabletocutthroughthehype,toevaluatingcloud-based
solutionsagainstthetime,energy,andexpenserequiredtoleveragethem.Wehaveattempted
tofillthisbookwithabroadrangeofresourcesandinformation.
Thisbookexplainssomeofthenutsandboltsofcloudcomputingandhowcompanies
canusecloudcomputingtools.NotonlywilltheITdepartmentfinditselfusingthecloud
tosupporttheorganization’sobjectives,butwithproperlyselectedcloudsolutions,theywill
spendlesstimemaintainingserversandclients,runningaroundwithpatchesandservice
packs,andspendmoretimeoninnovativeactivitiesthathelptheorganizationthrive.
Onthefrontlines,workersmayfindthisbookhelpfulwhenseekingtounderstand
cloudcomputing.Movingfromatraditionalnetworkinfrastructuretoacloudsolution
mightbeatoughsellforsomeworkers.Understandingtheplayers,thepieces,andwhythe
moveisnecessarywillhelpwiththetransition.
WhatThisBookCovers
Cloudcomputingisthebiggestbuzzinthecomputerworldthesedays—maybetoobigof
abuzz.Cloudcomputingmeansdifferentthingstodifferentpeople,andifyouaretryingto
wrapyourbrainaroundthetopic,askingonequestionwillleadtotenmore.Thisbookaims
tomaketheissuesmoreunderstandable.
Cloudcomputingisnotasmall,undevelopedbranchofIT.ResearchfirmIDCthinksthat
cloudcomputingwillreach$42billionin2012.GartnerInc.predictsworldwidecloud-services
revenuewillrise21.3percentin2009to$56.3billion.
Bignamesthatyouknowarejockeyingforpositioninthecloud.Amazon,forexample,
offersseveralcloudsourcesfromitsElasticComputeCloud(EC2)toitsSimpleStorage
Services(S3),whichispartofitsAmazonWebServices(AWS).Googlehasalsoputa
xiv
Introduction xv
numberofapplicationsonline.Atabasicleveltheyarefree,butmorerobustapplications
canbeaccessedwithasubscription.Microsoftisbettingbigwithmassivenewdatacenters
toservicemillionsofcloudusers.
Forallthestuffyoucandoonthecloudnow,wearereallyjustinthecloud’sinfancy
stage.ThinkaboutwhentheWorldWideWebwasjustpickingupinpopularity.Everyweb
pagehadthesameHTMLlookandwhenframescamealong,thatwasheraldedasan
innovation.Butlookwherewehavecomesincethen.Webpagesareexciting,dynamic
thingsthatdonotlookanythingliketheyusedtoin1994.Weareinthatsamestageof
developmentwithcloudcomputing.In10or15yearsfromnow,cloudcomputingisnot
goingtolookanythinglikeitdoesnow.
Butthatdoesnotmeanthatthecloudoftodayisnotuseful.Infact,quitetheoppositeis
true.Youcandoalotonthecloud.Youcandoeverythingfromrunningapplicationsto
storingdataoff-site.Youcanrunentireoperatingsystemsonthecloud.Inthisbook,we
willtalkaboutthesortsofthingsthatcloudcomputingallowsyoutodo.
Butforalltheusefulnessthecloudprovides,therearealsothingsyoudonotwantto
turntothecloudfor.Therearesimplysomeapplicationsthatyouwanttorunlocally.For
instance,mission-criticalbusinessprocessesmaybestbemaintainedlocally.Thereisalso
anissueofsecurityandregulation.Becauseofgovernmentregulations,yousimplymaynot
beallowedtostoresomedataonthecloud.Thisbookcoverstherangeofchallenges,too.
Securityisasmuchofanissueinthecloudasitisanywhereelse.Peoplecometothe
cloudcomputingtopicfromdifferentpointsofview.Somebelievethecloudtobeanunsafe
place.Afterall,onceyousendyourdatatothecloud,youlosecompletecontroloverit
anditrunsagreaterriskofbeingcompromised.Buttheothersideofthatcoinisthatcloud
vendorsgooutoftheirwaytoensuresecurity.Manycloudvendorshaveteamsdedicated
toensuringthattheircloudsaresecure.Thisonlymakessense—allittakesisforone
breachtooccurbeforeclientsstartjumpingship.Wewilltalkaboutsecurityanditscloud
considerationsinmoredepthlaterinthisbook.
CloudComputingserviceprovidersarethosecompaniesthatyouturntoforcloud
services.TherearebignameslikeAmazonandMicrosoftofferingcloudservices,andthere
aresmallercompaniestoo.Theyareallstrivingtooffercutting-edge,innovativesolutions
thatarecompellingenoughthatyouwillconsidermakingyourmovetothecloud.
ConsiderSalesforce.com;ithasgrowndramaticallyoverthelastseveralyearsthanksto
theirwidelyadoptedcloudofferings.Weintroduceyoutoanumberofcloudcomputing
solutionsprovidersinthisbookandtalkaboutsomeinnovativepartnershipsthatare
helpingthecloudevolve.
PartI:GettingStarted
Chapter1:CloudComputingBasics Thischaptersetsthestagetoexplainwhatisgoingonin
theworldofcloudcomputing.Thischapterexplainswhatcloudcomputingis,what
componentscompriseacloudsolution,andthedifferentapplicationsyoucanexpect,as
wellasthecloud’srelationshiptotheInternet.Wealsotalkaboutcloudinfrastructureand
howitisbuilt.
Chapter2:YourOrganizationandCloudComputing Areyourorganizationanditsfunctions
suitedforthecloud?Whiletheanswermightseemlikeabig“Yes”here,thefactofthe
matteristhatnoteverybusinessfunctionissuitedforthecloud.Whileyoucandoanawful
xvi Cloud Computing: A Practical Approach
lotonthecloud,thereareissuesyouneedtoconsiderbeforemakingthemove.Inthis
chapterwetalkaboutsuchissuesaswhenyoucanuseacloudsolution,thebenefitstoyour
organization(mostlyfinancial,butthereareothers,too),securityissues,regulatory
concerns,andlimitations.Honestly,thepointofthischapterisnottoscareyouoff,butjust
topresentthecounterpointtotheissue.
Chapter3:CloudComputingwiththeTitans Somewell-knowncompanieshavejoinedthe
cloudcomputingpartywiththeirownofferings.Whiletherearehundredsofvendors
offeringcloudcomputingsolutions,therearesomebignameslikeGoogle,Microsoft,
Amazon,Yahoo,andSalesforce.comthathavebeenabletoleveragetheirnames,expertise,
andclientbasetobuildouttheircloudcomputingservices.Whetherornotyoudecidetogo
withoneofthesecompaniesisamatterofyourorganization’sneedandbusinessstrategy.
Wearenotpushingthesebigcompaniesoversmallerones,butwantedtosharewhat
prominentnamesaredoing.Inthischapterwewilllookatwhatthebigdogsofferandthe
directiontheywouldliketotakethecloud.
Chapter4:TheBusinessCaseforGoingtotheCloud Whyshouldyouconsidermakingamove
tothecloud?Whatisthebusinessbenefitformakingthemove?Inthischapterwewilltalk
notonlyaboutsomeofthemonetarysavings,butsomeoftheoperationalandorganizational
benefitsyouwillrealizebyputtingsomeofyourbusinessfunctionsonthecloud.Wewill
giveanoverviewofPlatformasaService(PaaS),SoftwareasaService(SaaS),andSoftware
plusServices(S+S),aswellassomeothercloudservicesthatmightbenefityourorganization.
Wewillalsotalkaboutdeletingyourdatacenterandwhatyoushouldgetridofandwhatyou
shouldkeep.
PartII:CloudComputingTechnology
Chapter5:HardwareandInfrastructure Inthischapterwerollupoursleevesandtakea
closerlookatthecomponentsusedtobuildyourcloudsolution.Thiswillincludethe
hardwareyouwilluse—mobileclients,thinclients,andfatclients—aswellasthesecurity
issuessurroundingthecloud.Wewilltalkabouthowyouandyourvendorscankeepyour
informationsafethroughlogging,forensics,andauditing.Fromtherewewilltalkaboutthe
constructionofthenetworksyoucanusetoaccessyourcloud.Finally,wewilltalkabout
someoftheservicesthatareavailabletoyouonthecloud.
Chapter6:AccessingtheCloud Accesstothecloudcanbeprettysimple;openaweb
browserandgototheapplication’sURL.Butthatsaid,youcandomorethanjustpopopen
InternetExplorerorFirefoxtogetgoing.Inthischapterwewilltalkaboutthedifferent
platformsyoucanuse,localuserinterfaces,webapplications,andwebAPIs.Wewillalso
talkaboutsomeofthemostprevalentwebbrowsersoutthere.WhileInternetExploreris
themostprevalentbrowserinthemarket,itisnottheonlygameintown.Wewilltalk
aboutthemeritsofFirefox,theMac’sfavorite,Safari,andthebrowserseeminglybeing
groomedforthecloud—Google’sChrome.
Chapter7:CloudStorage Oneoftheareaswherethecloudshinesisinmakingyourdata
available,simplybyvirtueofstoringitoff-site.Whyisthisabigdeal?Thinkaboutthe
datacentersthatwereinNewOrleansafewyearsago.Iftheyhadnotmaintainedtheirdata
Introduction xvii
off-site(many,manymilesoff-site),thenitwasalllost.Andthatistrueforanydisaster.If
keydataisnotstoredinasecurelocationoff-site,thenyouruntheriskoflosingitall.Butit
isnotjustamatterofdatasecurity;therearealsoissuesofworkersbeingabletoaccessthe
dataremotely,andbeingabletouseapplicationsthatrelyonthatdatainthecloud.Inthis
chapterwewilltalkaboutthebasicsofcloudstorage,someproviders,securityconcerns,
reliabilityconcerns,advantages,andcautions.Wewillalsolookatsomeprovidersandtalk
aboutthefunctionalityofsuchservicesasAmazonSimpleStorageService(S3),Nirvanix,
GoogleBigtableDatastore,Apple’sMobileMe,andMicrosoft’sLiveMesh.
Chapter8:Standards ItisnoshockerthatstandardsmaketheITworldturn.Whilecloud
computingisstillsomewhatnew,standardsexisttomakesurethatyoucanworkandplay
wellwithyourvendors.Giventheextenttowhichcloudcomputingreliesontheweb,it
shouldbenoshockthatmanyofthestandardsarethingslikeHTTP,HTML,andXMPP.
Andwhilewewilltalkaboutthosestandards,wewillalsodelveintothestandardsthat
existformakingcloudservices,includingJSON,SML,REST,andSOAP.Wewillexplain
thatalphabetsouplaterinthischapter.
PartIII:CloudComputingatWork
Chapter9:SoftwareasaService SoftwareasaService(SaaS)is,inessence,utilizingan
applicationonline.Thatmeansyoudonotneedtohavetheapplicationhousedlocallyon
yourserverorclients.Rather,youaccesstheapplicationthroughacloudvendor.Inthis
chapterwewilltalkaboutthebasicsofSaaS:itsadvantages,softwareconsiderations,
advantagestovendors,andlimitations.Fromtherewewilltalkaboutsomelimitations,
andthenshiftgearstotalkaboutwhatcompaniesandindustriesofferintermsofSaaS.
Whilethelistisfarfromcomprehensive,wewillgobelowthesurfaceandshowyouwhat
isoutthere.
Chapter10:SoftwareplusServices Goingtothecloudisnotanall-or-nothingproposal.
Whileyoudonotneedtosendallofyourapplicationstothecloud,youalsodonotneedto
sendanentireapplicationtolivesolelyonthecloud.Intheeventyourconnectiongoes
downorthereisanoutageattheprovider,SoftwareplusServicesallowsyoutokeep
workinguntileverythingisbacktonormal.Inthischapterwewilldiscusstheupsand
downsofSoftwareplusServices,alongwithwhatsomevendorsareoffering.Wewillalso
spendalotofspacediscussingMicrosoft’sSoftwareplusServicesmodel,whichisaleader
inthisfield.
Chapter11:DevelopingApplications Ideally,thevendoryoupickwillhaveexactlythe
applicationthatyouwant.Withinafewminutesyoucanbeupandrunning.Butthefactof
thematteristhattheymightnothaveexactlywhatyouwant.Inthiscaseyoucanbuild
yourownapplications.Inthischapterwewilltalkaboutwhatprominentvendorsofferin
termsofapplicationdevelopmentandthenwewillwalkyouthroughthestepsofcreating
yourownapplicationsusingtheGoogleAppEngine,Salesforce.com’stools,andMicrosoft’s
CloudOS,Azure.
Chapter12:LocalCloudsandThinClients Anotherapproachtotheclouddoesnotinvolve
shippingallyourdatatoavendor.Youcandevelopalocalcloudtooffloadprocessing
xviii Cloud Computing: A Practical Approach
dutiesfromclientstoalocalserver.Virtualizationisanotherincreasinglypopulartrend
withofferingsfromsuchcompaniesasMicrosoftandVMWare.Inadditiontotheserver
technologythatletsyourunyourclients’softwareinacentralizedlocation,wewillalsotalk
aboutthethinclientsthatwillfindhomesonyourusers’desks.Wewillalsotalkaboutthe
virtualizationeffortsthatMcNeilusSteelunderwenttostreamlinetheirITinfrastructure.
Chapter13:MigratingtotheCloud Gettingtothecloudisonethingwhenyouarestarting
fromscratch,butitisanotherthingcompletelywhenyouneedtomigrateexistingdata.In
thischapterwewilltalkaboutmethodstomakethemove.Wewilltalkaboutsomeservices
forindividuals,mid-sizeorganizations,andenterprises.Wewilllookatsometoolsto
migratetothecloudandsomemethodologyformakingamove.
Chapter14:BestPracticesandtheFutureofCloudComputing Likeanything,thereisaright
waytodosomethingandawrongway.Inordertomitigateyour“wrongway”attempts,
thischaptertalksaboutbestpracticesforusingacloudcomputingsolution.Wewilltalk
aboutanalyzingyourserviceandsometools,aswellasthewaytofindthebestvendorfor
you.Wewillalsotalkaboutthebestwaytomoveyourdatatothecloud.Towrapitallup,
wewilllookintotheproverbialcrystalballandtalkabouthowcloudcomputingisexpected
toevolve.
Appendix Cloudcomputingissonewandsofreshthatitiscomingwithitsownterminology
thatatfirstseemsclever,butthemoreyouhearitwithoutknowingwhatitmeans,itbecomes
veryfrustrating.IntheAppendix,we’llgiveyouaglossaryofterms(don’tworry,newones
arestillpoppingupallthetime—feelfreetopenciltheminthemargins).TheAppendixalso
hasaquickreferenceforsomepopularcloudcomputingresources.
PART
I
Getting Started CHAPTER 1
CloudComputingBasics
CHAPTER 2
YourOrganizationand
CloudComputing
CHAPTER 3
CloudComputingwith
theTitans
CHAPTER 4
TheBusinessCaseforGoing
totheCloud
This page intentionally left blank
CHAPTER
1
Cloud Computing Basics
C
loudcomputingiseverywhere.PickupanytechmagazineorvisitalmostanyIT
websiteorblogandyou’llbesuretoseetalkaboutcloudcomputing.Theonly
problemisthatnoteveryoneagreesonwhatitis.Asktendifferentprofessionals
whatcloudcomputingis,andyou’llgettendifferentanswers.Andiscloudcomputing
evenworthallthehype?Somepeopledon’tthinkso.Infact,in2008OracleCEOLarry
Ellisonchastisedthewholeissueofcloudcomputing,sayingthatthetermwasoverused
andbeingappliedtoeverythinginthecomputerworld.
“Thecomputerindustryistheonlyindustrythatismorefashion-driventhanwomen’s
fashion,”hesaidtoagroupofOracleanalysts.
Solet’stalkaboutwhatcloudcomputingisandtightenupourdefinitionand
understandingofthisimplementation.
CloudComputingOverview
Inthisfirstsection,we’lltalkaboutwhatcloudcomputingis,andhowitisdevelopedand
deployed.We’llclearupsomemisconceptionsandmakesureweallhaveacommon
understandingofthetopic.
Disambiguation—JustWhatIsCloudComputing?
CloudcomputinggetsitsnameasametaphorfortheInternet.Typically,theInternetis
representedinnetworkdiagramsasacloud,asshowninFigure1-1.Thecloudicon
represents“allthatotherstuff”thatmakesthenetworkwork.It’skindoflike“etc.”forthe
restofthesolutionmap.Italsotypicallymeansanareaofthediagramorsolutionthatis
someoneelse’sconcern,sowhydiagramitallout?It’sprobablythisnotionthatismost
applicabletothecloudcomputingconcept.
NOTE Applicationsrunonhostedserversasaservice.We’lldefinethattermlaterinthischapter,
anddiscussthedifferenttypesof“asaservice”applicationsthatareprevalent.
Cloudcomputingpromisestocutoperationalandcapitalcostsand,moreimportantly,
letITdepartmentsfocusonstrategicprojectsinsteadofkeepingthedatacenterrunning.
3
4 Part I: Getting Started
Internet
Router
Switch
Server
Client PCs
WhatWorks
Butthere’smoregoingonunderthehoodthantosimplyequatecloudcomputingtothe
Internet.Inessence,cloudcomputingisaconstructthatallowsyoutoaccessapplications
thatactuallyresideatalocationotherthanyourcomputerorotherInternet-connected
device;mostoften,thiswillbeadistantdatacenter.Therearemanybenefitstothis.For
instance,thinkaboutthelasttimeyouboughtMicrosoftWordandinstalleditonyour
organization’scomputers.EitheryouranaroundwithaCD-orDVD-ROMandinstalledit
onallthecomputers,oryousetupyoursoftwaredistributionserverstoautomatically
installtheapplicationonyourmachines.AndeverytimeMicrosoftissuedaservicepack,
youhadtogoaroundandinstallthatpack,oryouhadtosetupyoursoftwaredistribution
serverstodistributeit.Oh,anddon’tforgetthecostofallthelicenses.Petedownthehall
probablyusesWordonceamonth,buthislicensecostjustasmuchaseveryoneelse’s.
Thebeautyofcloudcomputing,asshowninFigure1-2,isthatanothercompanyhosts
yourapplication(orsuiteofapplications,forthatmatter).Thismeansthattheyhandlethe
costsofservers,theymanagethesoftwareupdates,and—dependingonhowyoucraftyour
contract—youpaylessfortheservice.
Don’tforgettheequipmentthatyouwon’tneedtobuy—whichwillresultinfewer
capitalexpenditures—therebycausingtheCFOtoactuallysmilewhensheseesyou.By
havingsomeoneelsehosttheapplications,youneednotbuytheserversnorpayforthe
electricitytopowerandcoolthem.
It’salsoconvenientfortelecommutersandtravelingremoteworkers,whocansimply
loginandusetheirapplicationswherevertheyare.
Chapter 1: Cloud Computing Basics 5
PART I
Internet
FIGURE 1-2 With cloud computing, other companies host your applications.
WeakLinks
Soitallsoundsgreat,right?Notsofast.AswitheverythinginIT,thereareprosandcons.
Cloudcomputingisnotexempt.Let’stakeaquicklookatafewareasofpotentialtrouble.
Thefollowingillustrationshowspotentialpointsoffailure.
Internet
Service provider
Your company
WhileanInternetoutageorproblemswithyourInternetserviceprovider(ISP)arerare,
youmaynotbeabletoaccessyourapplicationsanddoyourwork.Notthateveryonesitsin
oneofficemuchanymore,butifyoucurrentlyhavetheapplicationonyourownlocal
6 Part I: Getting Started
servers,andallthosewhoaccessitarenotremote,you’dbeatleastsomewhatassuredthat
anInternetoutagewouldn’taffectyourapplication.
Butitisn’tyourconnectiontotheInternetthatcanbepronetooutages.Whatifthesite
you’reaccessinghasproblems?It’shappenedalready.InJuly2008,Amazon’sS3cloud
storageservicewentdownforthesecondtimethatyear.Alotofapplicationswerehosted
bythecompanyandallthoseservicescouldnotbeaccesseduntiltechscouldfixthe
problem.Someapplicationsweredownforeighthours.
Also,theremaysimplybeapplicationsordatathatyouwantlocatedon-site.Ifyou
havesensitiveorproprietaryinformation,yourITsecuritygroupmaysimplymandatethat
younotstoreitonsomeoneelse’smachines.
ApplicationIntegrationIssues
Youmightalsofindthatit’smoredifficulttointegrateyourapplicationsiftheyare
geographicallydispersed.Thatis,itiseasiertomanageandaccessyourdataifitisnearby,
andnotundersomeoneelse’scontrol.
Forinstance,ifyouneedtwoapplicationstoexchangeinformation,it’seasiertodoif
theybothresideinthesameplace.Ifyouhaveoneapplicationin-houseandithastocontact
anotherapplicationonthecloud,itbecomesfarmorecomplicated,andmoreproneto
failure.
CloudComponents
Inasimple,topologicalsense,acloudcomputingsolutionismadeupofseveralelements:
clients,thedatacenter,anddistributedservers.AsshowninFigure1-3,thesecomponents
makeupthethreepartsofacloudcomputingsolution.
Eachelementhasapurposeandplaysaspecificroleindeliveringafunctionalcloud-
basedapplication,solet’stakeacloserlook.
Internet
Datacenter
Client computers
Distributed servers
Clients
Clientsare,inacloudcomputingarchitecture,theexactsamethingsthattheyareinaplain,
old,everydaylocalareanetwork(LAN).Theyare,typically,thecomputersthatjustsiton
PART I
yourdesk.Buttheymightalsobelaptops,tabletcomputers,mobilephones,orPDAs—all
bigdriversforcloudcomputingbecauseoftheirmobility.
Anyway,clientsarethedevicesthattheendusersinteractwithtomanagetheir
informationonthecloud.Clientsgenerallyfallintothreecategories:
• Mobile MobiledevicesincludePDAsorsmartphones,likeaBlackberry,Windows
MobileSmartphone,oraniPhone.
• Thin Clientsarecomputersthatdonothaveinternalharddrives,butratherletthe
serverdoallthework,butthendisplaytheinformation.
• Thick Thistypeofclientisaregularcomputer,usingawebbrowserlikeFirefox
orInternetExplorertoconnecttothecloud.
Thinclientsarebecominganincreasinglypopularsolution,becauseoftheirpriceand
effectontheenvironment.Somebenefitstousingthinclientsinclude
• Lowerhardwarecosts Thinclientsarecheaperthanthickclientsbecausetheydo
notcontainasmuchhardware.Theyalsolastlongerbeforetheyneedtobe
upgradedorbecomeobsolete.
• LowerITcosts Thinclientsaremanagedattheserverandtherearefewerpoints
offailure.
• Security Sincetheprocessingtakesplaceontheserverandthereisnoharddrive,
there’slesschanceofmalwareinvadingthedevice.Also,sincethinclientsdon’t
workwithoutaserver,there’slesschanceofthembeingphysicallystolen.
• Datasecurity Sincedataisstoredontheserver,there’slesschancefordatatobe
lostiftheclientcomputercrashesorisstolen.
• Lesspowerconsumption Thinclientsconsumelesspowerthanthickclients.This
meansyou’llpaylesstopowerthem,andyou’llalsopaylesstoair-conditiontheoffice.
• Easeofrepairorreplacement Ifathinclientdies,it’seasytoreplace.Theboxis
simplyswappedoutandtheuser’sdesktopreturnsexactlyasitwasbeforethefailure.
• Lessnoise Withoutaspinningharddrive,lessheatisgeneratedandquieterfans
canbeusedonthethinclient.
Datacenter
Thedatacenteristhecollectionofserverswheretheapplicationtowhichyousubscribeis
housed.Itcouldbealargeroominthebasementofyourbuildingoraroomfullofservers
ontheothersideoftheworldthatyouaccessviatheInternet.
AgrowingtrendintheITworldisvirtualizingservers.Thatis,softwarecanbeinstalled
allowingmultipleinstancesofvirtualserverstobeused.Inthisway,youcanhavehalfa
dozenvirtualserversrunningononephysicalserver.
NOTE Thenumberofvirtualserversthatcanexistonaphysicalserverdependsonthesizeand
speedofthephysicalserverandwhatapplicationswillberunningonthevirtualserver.
8 Part I: Getting Started
DistributedServers
Buttheserversdon’tallhavetobehousedinthesamelocation.Often,serversarein
geographicallydisparatelocations.Buttoyou,thecloudsubscriber,theseserversactasif
they’rehummingawayrightnexttoeachother.
Thisgivestheserviceprovidermoreflexibilityinoptionsandsecurity.Forinstance,
Amazonhastheircloudsolutioninserversallovertheworld.Ifsomethingweretohappen
atonesite,causingafailure,theservicewouldstillbeaccessedthroughanothersite.Also,if
thecloudneedsmorehardware,theyneednotthrowmoreserversinthesaferoom—they
canaddthematanothersiteandsimplymakeitpartofthecloud.
Infrastructure
Cloudcomputingisn’taone-size-fits-allaffair.Thereareseveraldifferentwaystheinfrastructure
canbedeployed.Theinfrastructurewilldependontheapplicationandhowtheproviderhas
chosentobuildthecloudsolution.Thisisoneofthekeyadvantagesforusingthecloud.Your
needsmightbesomassivethatthenumberofserversrequiredfarexceedsyourdesireor
budgettorunthosein-house.Alternatively,youmayonlyneedasipofprocessingpower,so
youdon’twanttobuyandrunadedicatedserverforthejob.Thecloudfitsbothneeds.
GridComputing
Gridcomputingisoftenconfusedwithcloudcomputing,buttheyarequitedifferent.Grid
computingappliestheresourcesofnumerouscomputersinanetworktoworkonasingle
problematthesametime.Thisisusuallydonetoaddressascientificortechnicalproblem.
Awell-knownexampleofthisistheSearchforExtraterrestrialIntelligence(SETI)@Home
project.Inthisproject,peopleallovertheworldallowtheSETIprojecttosharetheunused
cyclesoftheircomputerstosearchforsignsofintelligenceinthousandsofhoursof
recordedradiodata.ThisisshowninFigure1-4.
Anotherwell-usedgridistheWorldCommunityGrid—BerkeleyOpenInfrastructurefor
NetworkComputing(BOINC;seewww.worldcommunitygrid.org).Hereyoucandedicate
asmuchoraslittleofyouridleCPUprocessingpowerasyouchoosetohelpconduct
protein-foldingexperimentsinanefforttocreatebetterandmoredurablericecropstofeed
theworld’shungry.Ibetyoudidn’tknowyoucouldfeedtheneedywithyourcomputer.
Gridcomputingnecessitatestheuseofsoftwarethatcandivideandthensendout
piecesoftheprogramtothousandsofcomputers.Itcanbedonethroughoutthecomputers
ofanorganization,oritcanbedoneasaformofpubliccollaboration.
SunMicrosystemsoffersGridEnginesoftwarethatallowsengineersatcompaniesto
poolthecomputercyclesonupto80workstationsatatime.
Gridcomputingisappealingforseveralreasons:
• Itisacost-effectivewaytouseagivenamountofcomputerresources.
• Itisawaytosolveproblemsthatneedatremendousamountofcomputingpower.
• Theresourcesofseveralcomputerscanbesharedcooperatively,withoutone
computermanagingtheother.
Sowhatdogridcomputingandcloudcomputinghavetodowithoneanother?Notmuch
directly,astheyfunctioninfundamentallydifferentways.Ingridcomputing,alargeprojectis
dividedamongmultiplecomputerstomakeuseoftheirresources.Cloudcomputingdoesjust
theopposite.Itallowsmultiplesmallerapplicationstorunatthesametime.
Chapter 1: Cloud Computing Basics 9
PART I
FIGURE 1-4 SETI@Home is a well-known use of grid computing.
FullVirtualization
Fullvirtualizationisatechniqueinwhichacompleteinstallationofonemachineisrunon
another.Theresultisasysteminwhichallsoftwarerunningontheserveriswithinavirtual
machine.
Internet
In a fully virtualized deployment, the software running on the server is displayed on the clients.
NOTE Fullvirtualizationdatesbackto1967withIBM’sCP-40researchsystem.
Thissortofdeploymentallowsnotonlyuniqueapplicationstorun,butalsodifferent
operatingsystems.
10 Part I: Getting Started
Virtualizationisrelevanttocloudcomputingbecauseitisoneofthewaysinwhichyou
willaccessservicesonthecloud.Thatis,theremotedatacentermaybedeliveringyour
servicesinafullyvirtualizedformat.
Inorderforfullvirtualizationtobepossible,itwasnecessaryforspecifichardware
combinationstobeused.Itwasn’tuntil2005thattheintroductionoftheAMD-Virtualization
(AMD-V)andIntelVirtualizationTechnology(IVT)extensionsmadeiteasiertogofully
virtualized.
Fullvirtualizationhasbeensuccessfulforseveralpurposes:
• Sharingacomputersystemamongmultipleusers
• Isolatingusersfromeachotherandfromthecontrolprogram
• Emulatinghardwareonanothermachine
Paravirtualization
Paravirtualizationallowsmultipleoperatingsystemstorunonasinglehardwaredeviceat
thesametimebymoreefficientlyusingsystemresources,likeprocessorsandmemory.
Infullvirtualization,theentiresystemisemulated(BIOS,drive,andsoon),butin
paravirtualization,itsmanagementmoduleoperateswithanoperatingsystemthathas
beenadjustedtoworkinavirtualmachine.Paravirtualizationtypicallyrunsbetterthanthe
fullvirtualizationmodel,simplybecauseinafullyvirtualizeddeployment,allelements
mustbeemulated.
Internet
Service Provider
Your Company
PART I
Full Virtualization 5 10% (50% total) 10% (50% total) 100%
Paravirtualization 8 2% (16% total) 10% (50% total) 96%
Thetrade-offisreducedsecurityandflexibility.Forinstance,flexibilityisreduced
becauseaparticularOSordistributionmaynotbeabletowork.Forexample,anew
WindowsdeploymentmaynotbeavailableasaguestOSforthesolution.Securitycanbeat
riskbecausetheguestOShasmorecontroloftheunderlyinghardware,andthereisarisk
ofimpactingthehardwareandalltheguestsystemsonthehost.
Paravirtualizationalsoallowsforbetterscaling.Forexample,ifafullyvirtualized
solutionrequires10percentofprocessorutilization,thenfivesystemsareaboutthemost
thatcouldberunonasystembeforeperformancetakesahit.Paravirtualizationrequires
only2percentofprocessorutilizationperguestinstanceandstillleaves10percentofthe
guestOSavailable.ThisisillustratedinTable1-1.
Paravirtualizationworksbestinthesesortsofdeployments:
• Disasterrecovery Intheeventofacatastrophe,guestinstancescanbemovedto
otherhardwareuntiltheequipmentcanberepaired.
• Migration Movingtoanewsystemiseasierandfasterbecauseguestinstances
canberemovedfromtheunderlyinghardware.
• Capacitymanagement Becauseofeasiermigrations,capacitymanagementis
simplertoimplement.Itiseasiertoaddmoreprocessingpowerorharddrive
capacityinavirtualizedenvironment.
Services
Thetermservicesincloudcomputingistheconceptofbeingabletousereusable,fine-
grainedcomponentsacrossavendor’snetwork.Thisiswidelyknownas“asaservice.”
Offeringswithasaserviceasasuffixincludetraitslikethefollowing:
• Lowbarrierstoentry,makingthemavailabletosmallbusinesses
• Largescalability
• Multitenancy,whichallowsresourcestobesharedbymanyusers
• Deviceindependence,whichallowsuserstoaccessthesystemsondifferent
hardware
SoftwareasaService
SoftwareasaService(SaaS)isthemodelinwhichanapplicationishostedasaserviceto
customerswhoaccessitviatheInternet.Whenthesoftwareishostedoff-site,thecustomer
doesn’thavetomaintainitorsupportit.Ontheotherhand,itisoutofthecustomer’shands
whenthehostingservicedecidedstochangeit.Theideaisthatyouusethesoftwareoutof
theboxasisanddonotneedtomakealotofchangesorrequireintegrationtoothersystems.
12 Part I: Getting Started
Theproviderdoesallthepatchingandupgradesaswellaskeepingtheinfrastructure
running.
Application
Internet
Service provider
offering SaaS
Costscanbesortofadouble-edgedsword.Ontheonehand,costsforaccessingthe
softwarecanbeanongoingthing.Ratherthanpayforitonceandbedonewithit,themore
youuseit,themoreyou’llbebilled.Ontheotherhand,insomecasesyoudon’thavetopay
asmuchupfrontandyouareonlybilledbasedonyouruseoftheapplication.
Forvendors,SaaShastheappealofprovidingstrongerprotectionoftheirintellectual
propertyaswellascreatingacontinuousstreamofincome.
TherearemanytypesofsoftwarethatlendthemselvestotheSaaSmodel.Typically,
softwarethatperformsasimpletaskwithoutmuchneedtointeractwithothersystems
makesthemidealcandidatesforSaaS.Customerswhoarenotinclinedtoperformsoftware
developmentbuthaveneedofhigh-poweredapplicationscanalsobenefitfromSaaS.Some
oftheseapplicationsinclude
• Customerresourcemanagement(CRM)
• Videoconferencing
• ITservicemanagement
• Accounting
• Webanalytics
• Webcontentmanagement
SaaSapplicationsdifferfromearlierdistributedcomputingsolutionsinthatSaaSwas
developedspecificallytousewebtools,likethebrowser.Thismakesthemweb-native.It
wasalsobuiltwithamultitenantbackendinmind,whichenablesmultiplecustomersto
useanapplication.
SaaSprovidesnetwork-basedaccesstocommerciallyavailablesoftware.Sincethe
softwareismanagedatacentrallocation,customerscanaccesstheirapplicationswherever
theyhavewebaccess.
Aswe’lldiscussinthenextsection—PaaS—SaaSisoftenusedinconjunctionwithother
software.Whenusedasacomponentofanotherapplication,thisisknownasamashupora
plugin.
Chapter 1: Cloud Computing Basics 13
Benefits OneofthebiggestbenefitsofSaaSis,ofcourse,costinglessmoneythanbuying
theapplicationoutright.Theserviceprovidercanoffercheaper,morereliableapplications
thanorganizationscanbythemselves.Someotherbenefitsincludethefollowing:
PART I
• FamiliaritywiththeWorldWideWeb Mostworkershaveaccesstoacomputer
andknowhowtouseitontheWorldWideWeb.Assuch,thelearningcurvefor
usingexternalapplicationscanbemuchsmaller.
• Smallerstaff ITsystemsrequiretheoverheadofsalaries,benefits,insurance,and
buildingspace.Theabilitytofarmoutapplicationsreducestheneedforasmuch
ITstaff.
• Customization Olderapplicationsweredifficulttocustomizeandrequired
tinkeringwiththecode.SaaSapplicationsaremucheasiertocustomizeandcan
giveanorganizationexactlywhattheywant.
• Bettermarketing Aproviderwhohaddevelopedanapplicationforaverynarrow
marketmighthavehadproblemsmarketingthatapplication.However,withSaaS,
theentireworldisopentotheproviders.
• Webreliability WetalkedearlierabouthowtheWorldWideWebcanbeseenasa
sourceoffailure.Andwhilethatissporadicallytrue,thefactofthematteristhatthe
Webisgenerallyquitereliable.
• Security SecureSocketsLayer(SSL)iswidelyusedandtrusted.Thisallows
customerstoreachtheirapplicationssecurelywithouthavingtoemploycomplex
back-endconfigurations,likevirtualprivatenetworks(VPNs).
• Morebandwidth Bandwidthhasincreasedgreatlyinrecentmonthsandquality
ofserviceimprovementsarehelpingdataflow.Thiswillalloworganizationstotrust
thattheycanaccesstheirapplicationswithlowlatenciesandgoodspeeds.
Obstacles Likeanything,SaaSfacesobstaclestoitsimplementationanduse.Thefirstis
thatanorganizationthathasaveryspecificcomputationalneedmightnotbeabletofind
theapplicationavailablethroughSaaS.Inthatcase,theymaydiscoverthattheyneedtobuy
thesoftwareandinstallitontheirlocalmachines.Thatsaid,companieswithuniqueneeds
maybeabletofindsomeofthecomponentsinaSaaS.
Thereisalsoanelementof“lock-in”withvendors.Thatis,thecustomermightpaya
providertouseanapplication,butoncetheydo,theymaybeunabletoportthatapplication
toanewvendor.Or,itmightbepossibletomovetoanewvendor,buttheoldvendormight
chargeaheftymovingfee.
Finally,SaaSalsofaceschallengesfromtheavailabilityofopensourceapplicationsand
cheaperhardware.Ifcompaniesaresoinclined,theycanputtheiropensourceapplications
onhardwarethatperformsbetterandcostslessthanitusedto.
PlatformasaService
FollowingontheheelsofSaaS,PlatformasaService(PaaS)isanotherapplicationdelivery
model.PaaSsuppliesalltheresourcesrequiredtobuildapplicationsandservicescompletely
fromtheInternet,withouthavingtodownloadorinstallsoftware.
14 Part I: Getting Started
NOTE PaaSisalsoknownascloudware.
Platform
Internet
Service provider
offering PaaS
PaaSservicesincludeapplicationdesign,development,testing,deployment,and
hosting.Otherservicesincludeteamcollaboration,webserviceintegration,database
integration,security,scalability,storage,statemanagement,andversioning.
AdownfalltoPaaSisalackofinteroperabilityandportabilityamongproviders.Thatis,
ifyoucreateanapplicationwithonecloudprovideranddecidetomovetoanother
provider,youmaynotbeabletodoso—oryou’llhavetopayahighprice.Also,ifthe
providergoesoutofbusiness,yourapplicationsandyourdatawillbelost.
NOTE ThiswasthecasewiththeproviderZimki.Thecompanystartedin2006andbymid-2007
wasoutofbusiness,causingapplicationsandclientdatatheyhostedtobelost.
PaaSgenerallyofferssomesupporttohelpthecreationofuserinterfaces,andis
normallybasedonHTMLorJavaScript.
BecausePaaSisexpectedtobeusedbymanyuserssimultaneously,itisdesignedwith
thatsortofuseinmind,andgenerallyprovidesautomaticfacilitiesforconcurrency
management,scalability,failover,andsecurity.
PaaSalsosupportswebdevelopmentinterfacessuchasSimpleObjectAccessProtocol
(SOAP)andRepresentationalStateTransfer(REST),whichallowtheconstructionof
multiplewebservices,sometimescalledmashups.Theinterfacesarealsoabletoaccess
databasesandreuseservicesthatarewithinaprivatenetwork.
PaaSOptions PaaSisfoundinoneofthreedifferenttypesofsystems:
• Add-ondevelopmentfacilities TheseallowexistingSaaSapplicationstobe
customized.Often,PaaSdevelopersandusersarerequiredtopurchase
subscriptionstotheadd-onSaaSapplication.
• Stand-aloneenvironments Theseenvironmentsdonotincludelicensing,
technical,orfinancialdependenciesonspecificSaaSapplicationsandareusedfor
generaldevelopments.
Chapter 1: Cloud Computing Basics 15
• Applicationdelivery-onlyenvironments Theseenvironmentssupporthosting-
levelservices,likesecurityandon-demandscalability.Theydonotinclude
development,debugging,andtestcapabilities.
PART I
TrendsTowardAdoption PaaSfacesthesamesortsoffactorsinitsadoptionasSaaSdid,asit
isinitsearlyphase.Someotherfactorsinfluencingadoptioninclude
• Theabilityofgeographicallyisolateddevelopmentteamstoworktogether
• Theabilitytomergewebservicesfrommultiplesources
• Theabilitytorealizecostsavingsfromusingbuilt-ininfrastructureservicesfor
security,scalability,andfailover,ratherthanhavingtoobtainandtestthem
separately
• Theabilitytorealizecostsavingsfromusinghigher-levelprogrammingabstractions
Hurdles TherearetwomainobstaclesthatdevelopersfacewhenconsideringPaaS.
Becausevendorsuseproprietaryservicesordevelopmentlanguages,somedevelopers
areafraidofbeinglockedintoasingleprovider.Thevendormayallowtheapplicationtobe
broughttoadifferentprovider;however,thecostsaretypicallyhigherascomparedto
movingapplicationsbetweenconventionalhosts.
HardwareasaService
HardwareasaService(HaaS)isthenextformofserviceavailableincloudcomputing.
WhereSaaSandPaaSareprovidingapplicationstocustomers,HaaSdoesn’t.Itsimply
offersthehardwaresothatyourorganizationcanputwhatevertheywantontoit.
NOTE HaaSissometimesalsocalledInfrastructureasaService(IaaS).
– Data processing
Internet – CPU cycles
– Memory
– Storage
Service provider
offering HaaS
Clients
HaaS allows service providers to
rent hardware resources.
Ratherthanpurchaseservers,software,racks,andhavingtopayforthedatacenter
spaceforthem,theserviceproviderrentsthoseresources.
16 Part I: Getting Started
HaaSallowsyouto“rent”suchresourcesas
• Serverspace
• Networkequipment
• Memory
• CPUcycles
• Storagespace
Additionally,theinfrastructurecanbedynamicallyscaledupordown,basedonthe
applicationresourceneeds.
Further,multipletenantscanbeontheequipmentatthesametime.
Resourcesaretypicallybilledbasedonautilitycomputingbasis,soproviderschargeby
howmanyresourcesareconsumed.
HaaSinvolvesseveralpieces:
• Servicelevelagreements Thisisanagreementbetweentheproviderandclient,
guaranteeingacertainlevelofperformancefromthesystem.
• Computerhardware Thesearethecomponentswhoseresourceswillberented
out.Serviceprovidersoftenhavethissetupasagridforeasierscalability.
• Network Thisincludeshardwareforfirewalls,routers,loadbalancing,andsoon.
• Internetconnectivity Thisallowsclientstoaccessthehardwarefromtheirown
organizations.
• Platformvirtualizationenvironment Thisallowstheclientstorunthevirtual
machinestheywant.
• Utilitycomputingbilling Typicallysetuptobillcustomersbasedonhowmany
systemresourcestheyuse.
Applications
Sonowwegettothequestion—whatdoescloudcomputingactuallydo?Well,wehave
applicationsrunningonourlaptops,servers,phonesandthelike.Cloudcomputingeither
hasthemtooorhasthepotentialtobringthemtoyou.Socloudcomputingbringsyou
applications,awayofviewing,manipulating,andsharingdata.Liketheirdesktop
brethren,many“staple”applicationsexistincloudcomputing,butwhatwilldifferforyou
ishowyouinteractwiththoseapplications.Themostcommonarestorageanddatabase.In
thissection,we’lltakeacloserlookatstorageanddatabasefunctionality.
NOTE We’lltalkaboutdevelopingyourowninterfacestoworkwithstorageanddatabasesin
Chapter6.
Storage
SomewhatsimilartoHaaS,oneoftheusesforcloudcomputingissimplystorage.The
benefitsareinlinewiththegeneralbenefitsofcloudcomputing—ifyouleasestoragespace
Chapter 1: Cloud Computing Basics 17
fromavendor,youarenotresponsibletobuyequipment,paytorunit,andpaytocoolit.
That’sallonthevendor.
Buttherearedifferentoptionswhenitcomesdowntocloudstorage.
PART I
Database
Databases(whichwewilltalkmoreaboutlaterinthischapter)arerepositoriesfor
informationwithlinkswithintheinformationthathelpmakethedatasearchable.
Distributeddatabases,likeAmazon’sSimpleDB,spreadinformationamongphysically
dispersedhardware.Buttotheclient,theinformationseemstobelocatedinoneplace.
Theadvantagesofsuchadatabaseincludethefollowing:
• Improvedavailability Ifthereisafaultinonedatabasesystem,itwillonlyaffect
onefragmentoftheinformation,nottheentiredatabase.
• Improvedperformance Dataislocatednearthesitewiththegreatestdemandand
thedatabasesystemsareparallelized,whichallowstheloadtobebalancedamong
theservers.
• Price Itislessexpensivetocreateanetworkofsmallercomputerswiththepower
ofonelargeone.
• Flexibility Systemscanbechangedandmodifiedwithoutharmtotheentire
database.
Naturallytherearedisadvantages,including
• Complexity Databaseadministratorshaveextraworktodotomaintainthe
system.
• Laborcosts Withthataddedcomplexitycomestheneedformoreworkersonthe
payroll.
• Security Databasefragmentsmustbesecuredandsomustthesiteshousingthe
fragments.
• Integrity Itmaybedifficulttomaintaintheintegrityofthedatabaseifitistoo
complexorchangestooquickly.
• Standards Therearecurrentlynostandardstoconvertacentralizeddatabaseinto
acloudsolution.
Synchronization
Synchronization,aswithMicrosoft’sLiveMeshorApple’sMobileMe,allowscontenttobe
refreshedacrossmultipledevices.Forinstance,ifyouhaveaspreadsheetonyourcomputer
andthenuploadittothestorageservice,thenexttimeyoucheckyourPDA,thatfilewillbe
downloadedontoit.
DatabaseServices
Another“asaservice”offeringthatisbecomingprevalentintheworldofcloudcomputing
isDatabaseasaService(DaaS).TheideabehindDaaSistoavoidthecomplexityandcostof
runningyourowndatabase.
18 Part I: Getting Started
DaaSoffersthesebenefits:
• Easeofuse Therearenoserverstoprovisionandnoredundantsystemstoworry
about.Youdon’thavetoworryaboutbuying,installing,andmaintaininghardware
forthedatabase.
• Power Thedatabaseisn’thousedlocally,butthatdoesn’tmeanthatitisnot
functionalandeffective.Dependingonyourvendor,youcangetcustomdata
validationtoensureaccurateinformation.Youcancreateandmanagethedatabase
withease.
• Integration Thedatabasecanbeintegratedwithyourotherservicestoprovide
morevalueandpower.Forinstance,youcantieitinwithcalendars,email,and
peopletomakeyourworkmorepowerful.
• Management Becauselargedatabasesbenefitfromconstantpruningand
optimization,typicallythereareexpensiveresourcesdedicatedtothistask.With
someDaaSofferings,thismanagementcanbeprovidedaspartoftheservicefor
muchlessexpense.Theproviderwilloftenuseoffshorelaborpoolstotake
advantageoflowerlaborcoststhere.Soit’spossiblethatyouareusingtheservice
inChicago,thephysicalserversareinWashingtonstate,andthedatabase
administratorisinthePhilippines.
Thereareanumberofprovidersoutthere,butlet’stakeacloserlookattwoofthe
biggestplayers.
MSSQL
AnyonewhohasworkedwithdatabasesisnostrangertoMicrosoft’spremieroffering,
SQLServer.Theyannouncedthecloudextensionofthattoolinthespringof2008by
introducingMicrosoftSQLServerDataServices(SSDS).Itisexpectedtobeinapublic
betabyspring2009.
SSDSlooksverysimilartoAmazon’sSimpleDB,withastraightforward,schema-free
datastorage,SOAPorRESTAPIs,andapay-as-you-gopaymentsystem.Itisalsoableto
startsmallandscalelargerasneeded.
WhileitlookssimilartoSimpleDB,itvariesgreatly.First,oneofthemainsellingpoints
ofSSDSisthatitintegrateswithMicrosoft’sSyncFramework,whichisa.NETlibraryfor
synchronizingdissimilardatasources.
MicrosoftwantsSSDStoworkasadatahub,synchronizingdataonmultipledevicesso
theycanbeaccessedoffline.
TherearethreecoreconceptsinSSDS:
• Authority Anauthorityisbothabillingunitandacollectionofcontainers.
• Container Acontainerisacollectionofentitiesandiswhatyousearchwithin.
• Entity Anentityisapropertybagofnameandvaluepairs.
SSDSisbasedonSQLServer,butitisnotasimpleretoolingofit.Microsoftbuiltitwith
large-scaledeploymentinmind.
Chapter 1: Cloud Computing Basics 19
SSDSisabitofatwistbecauseitbackstepsfrombeingmorecomplex,ratherbeing
simpleandflexible.
Oracle
PART I
Inthefallof2008Oracleintroducedthreeservicestoprovidedatabaseservicestocloud
users.Customerscanlicense
• OracleDatabase11g
• OracleFusionMiddleware
• OracleEnterpriseManager
TheproductsareavailableforuseonAmazonWebServices’ElasticComputeCloud
(AmazonEC2).OracledeliveredasetoffreeAmazonMachineImages(AMIs)toits
customerssotheycouldquicklyandefficientlydeployOracle’sdatabasesolutions.
Developerscantakeadvantageoftheprovisioningandautomatedsoftwaredeployment
torapidlybuildapplicationsusingOracle’spopulardevelopmenttoolssuchasOracle
ApplicationExpress,OracleJDeveloper,OracleEnterprisePackforEclipse,andOracle
WorkshopforWebLogic.Additionally,OracleUnbreakableLinuxSupportandAWS
PremiumSupportisavailableforOracleEnterpriseLinuxonEC2,providingseamless
customersupport.
“ProvidingchoiceisthefoundationofOracle’sstrategytoenablecustomerstobecome
moreproductiveandlowertheirITcosts—whetherit’schoiceofhardware,operating
system,orondemandcomputing—extendingthistotheCloudenvironmentisanatural
evolution,”saidRobertShimp,vicepresidentofOracleGlobalTechnologyBusinessUnit.
“WearepleasedtopartnerwithAmazonWebServicestoprovideourcustomersenterprise-
classCloudsolutions,usingfamiliarOraclesoftwareonwhichtheirbusinessesdepend.”
Additionally,Oraclealsointroducedasecurecloud-basedbackupsolution.Oracle
SecureBackupCloudModule,basedonOracle’spremiertapebackupmanagement
software,OracleSecureBackup,enablescustomerstousetheAmazonSimpleStorage
Service(AmazonS3)astheirdatabasebackupdestination.Cloud-basedbackupsoffer
reliabilityandvirtuallyunlimitedcapacity,availableondemandandwithnoup-front
capitalexpenditure.
TheOracleSecureBackupCloudModulealsoenablesencrypteddatabackupstohelp
ensurecompleteprivacyinthecloudenvironment.It’sfullyintegratedwithOracle
RecoveryManagerandOracleEnterpriseManager,providinguserswithfamiliarinterfaces
forcloud-basedbackups.
Forcustomerswithanongoingneedtoquicklymoveverylargevolumesofdataintoor
outoftheAWScloud,Amazonallowsthecreationofnetworkpeeringconnections.
IntranetsandtheCloud
WhileyouroperationisnotbigasAmazonS3cloudcomputing,youcanusethesamesorts
ofprincipleswithinyourorganizationtodevelopyourITinfrastructure.Bysettingupthin
clientstorunapplicationsandservicesonalocalserver,ratherthanontheirdesktops,you
easethecostsofdeploymentandmaintenance,aswellasreducingpowercosts.
20 Part I: Getting Started
NOTE Ironically,someorganizationsusecloudcomputingtodelivertheircorporateintranet.
Intranetsarecustomarilyusedwithinanorganizationandarenotaccessiblepublicly.Thatis,a
webserverismaintainedin-houseandcompanyinformationismaintainedonitthatothers
withintheorganizationcanaccess.However,nowintranetsarebeingmaintainedonthecloud.
Toaccessthecompany’sprivate,in-houseinformation,usersarehavingtologontotheintranet
bygoingtoasecurepublicwebsite.
Inthissectionwe’lltalkaboutthemeritsofdevelopingyourownin-house“cloud”and
whatisusedinitscomposition.
Components
Therearetwomaincomponentsinclient/servercomputing:serversandthinorlight
clients.ThenetworkmapinFigure1-5showshowtheyaredeployed.
Theservershousetheapplicationsyourorganizationneedstorun,andthethin
clients—whichdonothaveharddrives—displaytheresults.
HypervisorApplications
ApplicationslikeVMwareorMicrosoft’sHyper-Vallowyoutovirtualizeyourserversso
thatmultiplevirtualserverscanrunononephysicalserver.
Thesesortsofsolutionsprovidethetoolstosupplyavirtualizedsetofhardwaretothe
guestoperatingsystem.Theyalsomakeitpossibletoinstalldifferentoperatingsystemson
thesamemachine.Forexample,youmayneedWindowsVistatorunoneapplication,while
anotherapplicationrequiresLinux.It’seasytosetuptheservertorunbothoperating
systems.
Internet
Switch Router
Thin clients
Server
FIGURE 1-5 A client/server computing deployment consists of servers and thin clients.
Chapter 1: Cloud Computing Basics 21
Thinclientsuseanapplicationprogramtocommunicatewithanapplicationserver.
Mostoftheprocessingisdonedownontheserver,andsentbacktotheclient.
Thereissomedebateaboutwheretodrawthelinewhentalkingaboutthinclients.
PART I
Somethinclientsrequireanapplicationprogramorawebbrowsertocommunicatewith
theserver.However,othersrequirenoadd-onapplicationsatall.Thisissortofadiscussion
ofsemantics,becausetherealissueiswhethertheworkisbeingdoneontheserverand
transmittedbacktothethinclient.
FirstMoversintheCloud
Therearescoresofvendorswhooffercloudservices.Whattheyhavetooffervariesbased
onthevendorandtheirpricingmodelsaredifferent,aswell.Let’stakealookatsomeofthe
bignamesintheworldofcloudcomputingandtalk,briefly,aboutwhattheyhavetooffer.
NOTE We’lltalkaboutthemingreaterdetailinChapter11.
Cloudcomputingisagrowingfield,andtherewilllikelybenewplayersinthemarket
intheforeseeablefuture.Fornow,let’slookatthenamesyoualreadyknow:Amazon,
Google,andMicrosoft.
Amazon
Amazonwasoneofthefirstcompaniestooffercloudservicestothepublic,andtheyare
verysophisticated.Amazonoffersanumberofcloudservices,including
• ElasticComputeCloud(EC2) OffersvirtualmachinesandextraCPUcyclesfor
yourorganization.
• SimpleStorageService(S3) Allowsyoutostoreitemsupto5GBinsizein
Amazon’svirtualstorageservice.
• SimpleQueueService(SQS) Allowsyourmachinestotalktoeachotherusing
thismessage-passingAPI.
• SimpleDB Awebserviceforrunningqueriesonstructureddatainrealtime.This
serviceworksincloseconjunctionwithAmazonSimpleStorageService(Amazon
S3)andAmazonElasticComputeCloud(AmazonEC2),collectivelyprovidingthe
abilitytostore,process,andquerydatasetsinthecloud.
Theseservicescanbedifficulttouse,becausetheyhavetobedonethroughthe
commandline.Thatsaid,ifyouareusedtoworkinginacommand-lineenvironment,you
shouldn’thavemuchtroubleusingtheservices.
Amazon’svirtualmachinesareversionsofLinuxdistributions,sothosewhoare
experiencedwithLinuxwillberightathome.Infact,applicationscanbewrittenonyour
ownmachineandthenuploadedtothecloud.
Amazonisthemostextensivecloudservicetodate.YoucanseemoreaboutAmazon’s
cloudservicesathttp://aws.amazon.com.
22 Part I: Getting Started
Google
InstarkcontrasttoAmazon’sofferingsisGoogle’sAppEngine.OnAmazonyougetroot
privileges,butonAppEngine,youcan’twriteafileinyourowndirectory.Googleremoved
thefilewritefeatureoutofPythonasasecuritymeasure,andtostoredatayoumustuse
Google’sdatabase.
Googleoffersonlinedocumentsandspreadsheets,andencouragesdeveloperstobuild
featuresforthoseandotheronlinesoftware,usingitsGoogleAppEngine.Googlereduced
thewebapplicationstoacoresetoffeatures,andbuiltagoodframeworkfordelivering
them.Googlealsooffershandydebuggingfeatures.
GroupsandindividualswilllikelygetthemostoutofAppEnginebywritingalayerof
Pythonthatsitsbetweentheuserandthedatabase.LookforGoogletoaddmorefeaturesto
addbackgroundprocessingservices.
Itcanbefoundonlineatcode.google.com/appengine/.
Microsoft
Microsoft’scloudcomputingsolutioniscalledWindowsAzure,anoperatingsystemthat
allowsorganizationstorunWindowsapplicationsandstorefilesanddatausingMicrosoft’s
datacenters.It’salsoofferingitsAzureServicesPlatform,whichareservicesthatallow
developerstoestablishuseridentities,manageworkflows,synchronizedata,andperform
otherfunctionsastheybuildsoftwareprogramsonMicrosoft’sonlinecomputingplatform.
KeycomponentsofAzureServicesPlatforminclude
• WindowsAzure Providesservicehostingandmanagementandlow-levelscalable
storage,computation,andnetworking.
• MicrosoftSQLServices Providesdatabaseservicesandreporting.
• Microsoft.NETServices Providesservice-basedimplementationsof.NET
Frameworkconceptssuchasworkflow.
• LiveServices Usedtoshare,store,andsynchronizedocuments,photos,andfiles
acrossPCs,phones,PCapplications,andwebsites.
• MicrosoftSharePointServicesandMicrosoftDynamicsCRMServices Usedfor
businesscontent,collaboration,andsolutiondevelopmentinthecloud.
MicrosoftplansthenextversionofOfficetoofferabrowser-basedoptionsothatusers
canreadandeditdocumentsonlineaswellasoffertheabilityforuserstocollaborateusing
web,mobile,andclientversionsofOffice.
Microsoftisalittlelatetothecloudpartyandisn’taleaderincloudcomputing.That
honorgoestoGoogleandAmazon,andmoreandmorecompaniesareofferingcloud
services,soifMicrosoftwantstostaycompetitive,they’regoingtohavetopickupthepace.
Microsoft’scloudofferingscanbefoundonlineatwww.microsoft.com/azure/default
.mspx.
Forsome,theterm“cloudcomputing”issimplyhype.Butforotherswhowantto
embraceit,cloudcomputingisagreatwayforITprofessionalstofocuslessontheir
datacenters,andmoreontheworkofinformationtechnology.
CHAPTER
2
Your Organization
and Cloud Computing
C
loudcomputingisnotaone-size-fits-allaffair.Justasthehardwareandsoftware
configurationyouuseinyourorganizationisdifferentfromthatofthecompany
downthestreet,yourcloudcomputingneedswillbedifferentaswell.
Thischapterwillhelpyouunderstandhowyourorganizationcanbestusecloud
computing,andwhichsolutionsmightbemostappropriateforyourneeds.Andwhilewe
talkaboutwhatcloudcomputingisgoodfor,wealsotalkaboutcloudcomputinglimitations.
Thatis,cloudcomputingisnotperfect,andtherearetimeswhenyoushouldn’tturntoit.
We’llexaminethosecases,aswell.
WhenYouCanUseCloudComputing
Whetherornotyoushouldusecloudcomputingdependsonanumberoffactors,including
• Cost/benefitratio
• Speedofdelivery
• Howmuchcapacityyouwilluse
• Whetheryourdataisregulated
• Yourorganization’scorporateandITstructure
Theremaybetimeswhentheneedyouhaveisaperfectmatchforcloudcomputing.
Buttheremayalsobetimeswhencloudcomputingissimplynotagoodmatchforyour
needs.Inthissectionwe’lltakealookatbothwhatyoucanusecloudsfor,andwhenyou
shouldsteerclearofthem.
Scenarios
Therearethreedifferentmajorimplementationsofcloudcomputing.Howorganizations
areusingcloudcomputingisquitedifferentatagranularlevel,buttheusesgenerallyfall
intooneofthesethreesolutions.
23
24 Part I: Getting Started
ComputeClouds
Computecloudsallowaccesstohighlyscalable,inexpensive,on-demandcomputing
resourcesthatrunthecodethatthey’regiven.Threeexamplesofcomputecloudsare
• Amazon’sEC2
• GoogleAppEngine
• BerkeleyOpenInfrastructureforNetworkComputing(BOINC)
Computecloudsarethemostflexiblein
theirofferingsandcanbeusedforsundry
purposes;itsimplydependsontheapplication
theuserwantstoaccess.
Youcouldclosethisbookrightnow,signup
foracloudcomputingaccount,andgetstarted
rightaway.Theseapplicationsaregoodforany
sizeorganization,butlargeorganizationsmight
beatadisadvantagebecausetheseapplications
don’tofferthestandardmanagement,
monitoring,andgovernancecapabilitiesthat
theseorganizationsareusedto.
Enterprisesaren’tshutout,however.
Amazonoffersenterprise-classsupportand Compute clouds allow you to access applications
thereareemergingsetsofcloudofferingslike maintained on a provider’s equipment.
Terremark’sEnterpriseCloud,whicharemeant
forenterpriseuse.
CloudStorage
Oneofthefirstcloudofferingswascloudstorageanditremainsapopularsolution.Cloud
storageisabigworld.Therearealreadyinexcessof100vendorsofferingcloudstorage.
Thisisanidealsolutionifyouwanttomaintainfilesoff-site.
Securityandcostarethetopissuesinthisfieldandvarygreatly,dependingonthe
vendoryouchoose.Currently,Amazon’sS3isthetopdog.
Chapter 2: Your Organization and Cloud Computing 25
NOTE We’lltakeacloserlookatAmazonandothercloudprovidersinthenextchapter.
PART I
CloudApplications
Cloudapplicationsdifferfromcomputecloudsinthattheyutilizesoftwareapplications
thatrelyoncloudinfrastructure.CloudapplicationsareversionsofSoftwareasaService
(SaaS)andincludesuchthingsaswebapplicationsthataredeliveredtousersviaabrowser
orapplicationlikeMicrosoftOnlineServices.TheseapplicationsoffloadhostingandIT
managementtothecloud.
Cloudapplicationsofteneliminatetheneedtoinstallandruntheapplicationonthe
customer’sowncomputer,thusalleviatingtheburdenofsoftwaremaintenance,ongoing
operation,andsupport.
Somecloudapplicationsinclude
• Peer-to-peercomputing(likeBitTorrentandSkype)
• Webapplications(likeMySpaceorYouTube)
• SaaS(likeGoogleApps)
• Softwareplusservices(likeMicrosoftOnlineServices)
WhenYouShouldn’tUseCloudComputing
We’dberemissifwejustdidthecloudcomputingcheerleaderthing,suggestingyoucould
useitforabsolutelyeverything.Thefactofthematteristhereareplentyofcaseswhere
cloudcomputingmaynotbeappropriate,foranyreasonrangingfromcosttohardware
requirementstosimplynotneedingit.
MindingtheDetails
IfyouwanttousecloudcomputingandpostdatacoveredbyHealthInsurancePortability
andAccountingAct(HIPAA)onit,youareoutofluck.Well,let’srephrasethat—ifyou
wanttoputHIPAAdataonacloud,youshouldn’t.That’ssensitivehealthcareinformation
26 Part I: Getting Started
andthefactthatHIPAAdatacouldcommingleonaserverwithanotherorganization’sdata
willlikelygettheattentionofanobservantHIPAAauditor.
Evenso,GoogleandMicrosoftarebothmovingforwardonhealthrecordsservices:
MicrosoftisworkingonitsHealthVaultandGoogleHealthpromisestobeahuge
outpouringofprivatehealthdataonline.
Whiletheintentseemswell-meaning—togiveconsumersaccesstotheirhealthcare
data—allittakesisonetinybreachtoletsensitivedataloose.
Ifyouhavedatathatisregulated—likeHIPAAorSarbanes-Oxley—youarewelladvised
tobeverycarefulinyourplanstoplacedataonacloud.Afterall,ifyouhaveposteda
customer’sfinancialdataandthere’sabreach,willtheygoafterthecloudprovider,oryou?
Oh,andjusttoaddsometeethtowhatcanhappenifprivatedatagetsout,consider
Table2-1.Table2-1illustratespotentialpenaltiesifthelawsareviolated.
It’sprobablybesttoavoidapainfulfine,flesh-eatinglawyers,andpossiblejailtime.
LegislativeIssues
Anissueofmoreconcernforthesensitivityofprivatedataisthattherearelawsandpolicy
thatallowthegovernmentfreeraccesstodataonacloudthanonaprivateserver.
Forexample,theStoredCommunicationsActallowstheFBIaccesstodatawithout
gettingawarrantortheowner’sconsent.
GeopoliticalConcerns
Itmaysimplybeillegaltopostyourinformationonacloud.IfyouareinCanada(for
instance)andyouwanttopostyourdataonanAmericancloud,you’reoutofluck.
TheCanadiangovernmenthasdeclaredthatgovernmentITworkersmaynotuse
networkservicesthatareoperatingwithinU.S.borders.ThereasonisthattheCanadian
datastoredonthoseserverscouldbenegativelyimpactedbasedonthePatriotAct.
Sure,CanadamightbethefriendlyneighboroftheUnitedStatestothenorth,butatthis
pointintime,theyhaveagreatpolicy.AllitwouldtakeisfortheU.S.governmenttoseizea
serverwithforeigndataonit,andbeforeyoucansay“eh,”we’vegotanotherinternational
incidentonourhands.
AndthesamecanbesaidofcloudsoperatingoutsidetheUnitedStates.Youprobably
don’tknowthelaws(ifthereareany)governingyourprivacyandprotectioninaforeign
country.AllitwouldtakeistheGeneralissimoandhiscadreofwillingminionstorollinto
yourprovider’sofficeandcartofftheserverwithyourdataonit.
Chapter 2: Your Organization and Cloud Computing 27
HardwareDependencies
Ifyouhaveanapplicationthatrequiresspecifichardware,chips,ordrivers,acloudsolution
mightnotbeagoodfitforyou.
PART I
Internet
First,ifyouhavespecialhardwareneeds,thechancesarelowerthattheservice
providerwillhavetheprecisehardwareyouneed.Thatcansignificantlynarrowyour
optionswhenitcomestoshoppingaroundandfindingagooddeal.
Butlet’ssaytheplanetsareinperfectalignment,theprovideryoulikehasthehardware
youneed,andbeforelongyouarebothhummingaway.Thisisallblissfulnow,butifthe
providereverchangeschipsetsorothercriticalhardware,youmightbeoutofluck.
ServerControl
Ifyourapplicationdemandscompletecontrolovereverythingthatisrunning,acloud
solutionmaynotberightforyou.Ifyouneeddetailedcontrolovertheamountofmemory,
CPU,harddrivespecs,orinterfaces,thenthecloudisn’tanappropriatematchforyour
application.Afterall,theseareallthingsmanagedbytheserviceprovider.
NOTE Insomeclouds,youarenotevenallowedrootaccess.Ifyourequireadvancedlevelsofaccess,
makesureyouunderstandwhatyourprospectiveproviderwillallow.
Cost
Oneofthebigdrawsofcloudcomputingiscost.Thatis,ittendstobelessexpensivetorun
anapplicationonacloudthantoinvestintheinfrastructure,buytheapplicationoutright,
andthenmanageitdaytoday.
However,overtime,itmaycostmoretopaythecloudsubscriptionthantohavesimply
boughttheserversyourself,soitisimportanttofactorineverythingfromfacilities,staff,
software,andhardware.
Costandthewaycloudsoperateareamovingtarget.Somehavesuggestedthatthe
cloudmightbringserversintotheclient’sdatacenter.Anotherschoolofthoughtisaconcept
calledcloudbursting.Inthisscenario,on-demandcapacitycanbeprovisionedtoacloud.
LackofNeed
Anyonewithagrandfatherhasheardthephrase,“ifitain’tbroke,don’tfixit.”And
grandpaisright.Ifyourcurrentsolutionisgettingthejobdone,whytinkerwithit?
28 Part I: Getting Started
Now,therearecertainlycaseswherecloudcomputingisadvantageousforyou.Andin
thosecases,byallmeansuseit.However,ifyouarejustmovingapplicationstothecloud
forthefashionofit,takealookatsomeoldpicturesof“fashionable”people.You’llrealize
thosepolyesterleisuresuitsandmulletsmayhavebeenfashionableintheirday,butnotso
muchnow.
IntegrationwithExistingApplications
Ifyoumixoilandwater,yougetalavalamp.Giventheheadingofthissection,youalready
getwhatwe’realludingto.Thefactofthematteristhatifyouhavetwoapplicationsthat
needtointegrate,it’sbestforonenottobelocatedon-siteandasecondonthecloud.
Itcreatesproblemswithsecurity,speed,andreliability.Forinstance,ifyouhavetwo
databases—onewithsensitivedatahousedlocally,andonewithnonsensitivedataona
cloud—thechancesthatthesensitivedatawillfinditswaytothecloudareverygood.
Also,ifyouaretryingtorunahigh-speedapplicationin-houseandyourelyondata
fromthecloud,theapplicationwillonlyrunasfastasthecloudwillallow.Thisalsoleads
toquestionablereliability.Willdatabecompromisedordamagedfromalltheflyingaround
ithastodo?
LatencyConcerns
Sinceyourdataandapplicationarelocatedonaseriesofserversgeographicallydisparate
fromyourownsite,itisgoingtotakesometimeforthedatatoreachyou.Thisisn’tan
issueofhoursordays—orevenminutes.Butifyourequiredatainstantaneously,thecloud
mightnotbeyourbestoption.
Internet
Your users
There’sstilltraveltimeinvolvedwithyourdata.Now,itmightbethecasethataworker
canrequestgivendataanditcomesthroughinlessthanasecond,andthatspeedisfine.
However,ifthatsameworkerneedsthedatafasterthanasecond,itmightnotbecoming
PART I
throughfastenough.
ThroughputDemands
Sincecloudcomputingisgenerallybilledinautilityformat,youpayforwhatyouuse.
That’sgreatanditseemsfair,untilyoudeployapplicationsthatusealotofthroughputand
costsstarttorise.Forinstance,ifyouarestreaminghigh-definitionvideoover100sources,
yourcostsaregoingtospikesharply.
$$$
Internet
Your users
It’sbesttodothemathonthesesortsofthings.Takeintoaccountwhataserver,power,
andallotherhardwarewillcost.FigureinthepriceofmanagementandassociatedIT
personnelcostsandthencomparethatwithwhataserviceproviderwillchargeyou.Ifit’s
cheapertobuytheserver,itmightbebesttoforgetaboutthecloudfornow.Butevenifthe
costisthesame,youneedtoaskyourselfwhatbusinessyouwanttobein.
Benefits
Yourorganizationisgoingtohavedifferentneedsfromthecompanynextdoor.However,
cloudcomputingcanhelpyouwithyourITneeds.Let’stakeacloserlookatwhatcloud
computinghastoofferyourorganization.
30 Part I: Getting Started
Scalability
Ifyouareanticipatingahugeupswingincomputingneed(orevenifyouaresurprisedby
asuddendemand),cloudcomputingcanhelpyoumanage.Ratherthanhavingtobuy,
install,andconfigurenewequipment,youcanbuyadditionalCPUcyclesorstoragefrom
athirdparty.
Sinceyourcostsarebasedonconsumption,youlikelywouldn’thavetopayoutasmuch
asifyouhadtobuytheequipment.
Internet
Your users
Service provider
Onceyouhavefulfilledyourneedforadditionalequipment,youjuststopusingthe
cloudprovider’sservices,andyoudon’thavetodealwithunneededequipment.You
simplyaddorsubtractbasedonyourorganization’sneed.
Simplicity
Again,nothavingtobuyandconfigurenewequipmentallowsyouandyourITstafftoget
righttoyourbusiness.Thecloudsolutionmakesitpossibletogetyourapplicationstarted
immediately,anditcostsafractionofwhatitwouldcosttoimplementanon-sitesolution.
KnowledgeableVendors
Typically,whennewtechnologybecomespopular,thereareplentyofvendorswhopopup
tooffertheirversionofthattechnology.Thisisn’talwaysgood,becausealotofthose
vendorstendtoofferlessthanusefultechnology.Bycontrast,thefirstcomerstothecloud
computingpartyareactuallyveryreputablecompanies.
CompanieslikeAmazon,Google,Microsoft,IBM,andYahoo!havebeengoodvendors
becausetheyhaveofferedreliableservice,plentyofcapacity,andyougetsomebrand
familiaritywiththesewell-knownnames.
Chapter 2: Your Organization and Cloud Computing 31
MoreInternalResources
Byshiftingyournon-mission-criticaldataneedstoathirdparty,yourITdepartmentis
freeduptoworkonimportant,business-relatedtasks.Youalsodon’thavetoaddmore
PART I
manpowerandtrainingthatstemfromhavingtodealwiththeselow-leveltasks.
Also,sincenetworkoutagesareanightmarefortheITstaff,thisburdenisoffloaded
ontotheserviceprovider.True,outageshappen,butletAmazonworryaboutgettingthe
servicebackonline.
Whenyou’relookingatserviceproviders,makesureyoufindsomeonewhooffers
24-hourhelpandsupportandcanrespondtoemergencysituations.
Security
Thereareplentyofsecurityriskswhenusingacloudvendor,butreputablecompanies
strivetokeepyousafeandsecure.
NOTE We’lltalkaboutsomesecurityissueslaterinthischapter.
Vendorshavestrictprivacypoliciesandemploystringentsecuritymeasures,like
provencryptographicmethodstoauthenticateusers.
Further,youcanalwaysencryptyourdatabeforestoringitonaprovider’scloud.In
somecases,betweenyourencryptionandthevendor’ssecuritymeasures,yourdatamaybe
moresecurethanifitwerestoredin-house.
Limitations
Thereareothercaseswhencloudcomputingisnotthebestsolutionforyourcomputing
needs.Thissectionlooksatwhycertainapplicationsarenotthebesttobedeployedonthe
cloud.Wedon’tmeantomakethesecasessoundlikedeal-breakers,butyoushouldbe
awareofsomeofthelimitations.Ifyoucanworkaroundthem,that’sgreat,butyoushould
beawareoftheissuesbeforegettingintoodeep.
YourSensitiveInformation
We’vetalkedabouttheconcernofstoringsensitiveinformationonthecloud,butitcan’tbe
understated.Oncedataleavesyourhandsandlandsinthelapofaserviceprovider,you’ve
lostalayerofcontrol.
What’stheWorry?
Let’ssayafinancialplannerisusingGoogleSpreadsheetstomaintainalistofemployee
socialsecuritynumbers.Nowthefinancialplanningcompanyisn’ttheonlyonewho
shouldprotectthedatafromhackersandinternaldatabreaches.Inatechnicalsense,italso
becomesGoogle’sproblem.However,Googlemayabsolveitselfofresponsibilityinits
agreementwithyou.So,it’snolesscomplicatedatasktosortouthowsensitiveinformation
isgenuinelysecured.Also,thedooriswideopenforgovernmentinvestigatorstosubpoena
thatinformation.Ithasbecomemucheasierforthegovernmenttogetinformationfrom
thirdpartiesthanfromaprivatelyownedserver.
32 Part I: Getting Started
Also,lessscrupulousserviceprovidersmightevensharethatdatawithamarketing
firm.Andotherprovidersmay,bywayoftheiragreementwithyou,beallowedtoaccess
andcatalogyourinformationanduseitinwaysyouneverintended.Again,beabsolutely
certainyouunderstandfullyyouragreementwithanyserviceproviderandthatyou
approveandacceptthetermsoftheagreement.
What’simportantisthatyourealizewhattheprovider’spoliciesaregoverningthe
managementandmaintenanceofyourdata.Forexample,Google’spolicystatesthatthe
companywillsharedatawiththegovernmentifithasa“goodfaithbelief”thataccessis
necessarytofulfilllawfulrequests.
NOTE Insomecases,ifprovidersget“closed”subpoenas,theproviderislegallyprohibitedfrom
tellingtheircustomersthatdatahasbeengiventothegovernment.
Privatedatahascertainlybeenreleased.In2006,AOLreleasedsearchtermsof650,000
userstoresearchersonapublicwebpage.In2007,MicrosoftandYahoo!releasedsome
searchdatatotheU.S.DepartmentofJusticeaspartofachildpornographycase.Obviously,
noonewantspredatorstogetawaywiththeircrimes,butconsidertheimplicationifyour
datawasinnocentlymixedinwiththedatathatYahoo!andMicrosoftprovidedthe
government,andyouwerewronglypulledintoaninvestigation.
Andinthemediaweregularlyhearaboutretailersandotherslosingcreditcard
numbers.In2007,theBritishgovernmentevenmisplaced25milliontaxpayerrecords.
Thepointis,ifyouhavesensitiveorproprietarydata,thecloudmightnotbethesafest
placeforit.
ProtectYourData
Thatdoesn’tmeanyoucan’tmaintainyourdataonacloud;youjustneedtobesafe.The
bestwayistoencryptyourdatabeforeyousendittoathirdparty.ProgramslikePGP
(www.pgp.com)oropen-sourceTrueCrypt(www.truecrypt.org)canencryptthefilesothat
onlythosewithapasswordcanaccessit.
User-encrypted data
Internet
Your users
Service provider
Encrypting your data before it is sent to the service provider ensures that if
the provider’s security measures are breached, your data is still secure.
Encryptingyourdatabeforesendingitoutprotectsit.Ifsomeonedoesgetyourdata,
theyneedthepropercredentialsoralltheygetisgibberish.
Chapter 2: Your Organization and Cloud Computing 33
Ofcourse,thatjustappliestodatayoumanipulatein-houseandthensendtothecloud.
Ifyouuseword-processingfilesorspreadsheetsthatareeditedonlineratherthanjust
storedontheWeb,thenthedata,whensavedtothecloud,maynotbeencrypted.
PART I
Ingeneral,lookforpaidservices,ratherthanthosefundedbyadvertising.Thoseare
mostlikelytorummagethroughyourdatalookingtoassembleuserprofilesthatcanbe
usedformarketingorotherpurposes.Nocompanycanprovideyouwithfreetangible
goodsorservicesandstayinbusinessforlong.Theyhavetomakemoneysomehow,right?
Whenindoubt,alwayskeepyourdatawhereyoucanbemostcertainitissecure,even
ifthatmeanskeepingitinyourownserverroomuntilyoucandevelopanalternate
solutionyouknowyoucantrust.
ApplicationsNotReady
Insomecasestheapplicationsthemselvesarenotreadytobeusedonthecloud.Theymay
havelittlequirksthatpreventthemfrombeingusedtotheirfullestabilities,ortheymaynot
workwhatsoever.
First,theapplicationmightrequirealotofbandwidthtocommunicatewithusers.
Remember,sincecloudcomputingispaidbasedonhowmuchyouuse,itmightturnout
tobelessexpensiveinthelongruntosimplyhousetheapplicationlocallyuntilitcanbe
rewrittenorotherwisemodifiedtooperatemoreefficiently.
Theapplicationmightalsotakealotofefforttointegratewithyourotherapplications.
Ifyoutrytorelocateittoacloud,youmayfindthatthesavingsareerasedbytheadditional
effortrequiredtomaintaintheintegration.Inthiscaseitmayendupbeingmorecost-
effectivetocontinuetohostitlocally.
Iftheapplicationhastotalkwithadatabasethatyouhaveonsite,itmaybebetterto
alsohavetheapplicationhostedlocallyuntilyoucanmovetheentireinfrastructuretothe
cloud.Again,thishelpsyouavoidtheservicecostofhavingtotransfertoandfromthe
cloud.It’salsomoreefficient,becausetheapplicationcantalktothedatabasewithout
havingtoreachoutacrossthenetworktodoso.
SomeapplicationsmaynotbeabletocommunicatesecurelyacrosstheInternet.Ifthey
cannotcommunicatesecurelyorthroughatunnel,thenyourdataisatrisk.Intheeventthe
applicationcannotcommunicatesecurely,youwillneedtohostitlocallywhereyoucan
haveothermeansofsecuritytoprotectdataasitistransportedacrossnetworks.
Also,sinceyouaredisplayingtheapplicationresultsonaninterfacelikeawebbrowser,
youneedtoensurethatyourapplicationiscompatiblewithavarietyofbrowsersandwill
operateproperlyusingencryption,likeSSL,forsomeoralloftheinteractionyouruserhas
withintheapplication.Ifyouareunabletodisplaytheapplication’sresultssecurelywhen
necessary,thenacloud-basedsolutionwillbeessentiallyworthlesstoyou.
Ifyouarerelyingonapplicationstobeavailableonthecloud,thatmayormaynot
bethecase.Itdependsonwhetherthedeveloperhascreatedacloud-friendlyversionof
theapplicationyouwant.Intheeventthatyourapplicationisnotready,youmightbe
outofluck.
Butthatdoesn’tmeanthatyoucan’tstillgetwhatyouwantdone.Itisstillpossibleto
writeyourownapplication.
34 Part I: Getting Started
DevelopingYourOwnApplications
Often,theapplicationsyouwantarealreadyoutthere.However,itmaybethecasethatyou
needaveryspecificapplication.Andinthatcase,you’llhavetocommissionitsdevelopment
yourself.
RollingUpYourSleeves
Developingyourownapplicationscancertainlybeaproblemifyoudon’tknowhowto
program,orifyoudon’thaveprogrammersonstaff.Insuchacase,you’llhavetohirea
softwarecompany(ordeveloper)orbelefttousewhateverapplicationstheprovideroffers.
Anditisn’tjustapplicationsthatyoumightneedsomeprogrammingsavvytodeploy.
Ifyouhaveadatabaseonthecloud,you’llneedsomesortofcustomizedinterfaceandsome
knowledgeofStructuredQueryLanguage(SQL)toaccessandmanagethatdata.
Thisissortofaminorconcern,becausechancesaregoodthatyouhaveprogrammers
onstaffwhocanpoundoutwhatyouneedinnotime.Failingthat,youcanalwayshirea
firmoraprogrammertodoitforyou.Whoyou’llneedtohireandhowmuchyou’llneed
toinvestwilldependonthescopeofyourapplication.
ButThereAreBenefits
Thefactofthematteristhatputtingyourdatabaseneedsonacloudcanbeverybeneficial,
intermsofscalability.Atsomepoint,yourserversaregoingtohaveissuesiftherearetoo
manyuserstryingtoaccessthem,andtheinherentscalabilityofcloud-basedresourcescan
mitigatethatrisk.
ItisoftensaidthatthisgenerationofwebservicesgotitsstartfromLAMP.LAMPisa
stackofsimple,powerfulwebtechnologiesthatpoweralotofpopular,smallerwebsites.
LAMPstandsforthefollowingpopularitems:
• Linux Anopen-sourceoperatingsystem
• Apache Anopen-sourcewebserver
• MySQL Anopen-sourceStructuredQueryLanguage(SQL)relationaldatabasefor
webservers
• Perl Aprogramminglanguage
LAMPiswidelyusedbecauseitisverysimple.Becauseofitseaseofuse,youcangetan
applicationupandrunningveryquickly.
It’snotperfect,ofcourse.Thefirstproblemisoneofscalability.
Scalabilityissuescomefromthenumberofthreadsandsocketconnectionsinthe
Apachewebserver.Iftheserverisnotproperlytunedandaloadincreases,itcancause
problems.
AlargerscalabilityproblemcomesfromMySQL.Relationaldatabaseshaveahardtime
growingbeyondacertaincapacityduetothewaytheyrepresentinformation.Whenyou
reachthatlimit,databasemanagementbecomesmoredifficult.
Chapter 2: Your Organization and Cloud Computing 35
Youcanworkaroundthisthroughaprocedurecalleddatapartitioning.Usingthis
method,yousplityourdataintoindependentsets,andyoucanscaleindefinitely.Butifyou
can’tsplityourdata,thenyoumovetoadistributeddatabase,whichsendsyoutoacloud
PART I
solution.
Thisisbeneficialbecausethecloudallowsyoutoscaleindefinitely;itjustmeansthat
moreserversneedtobeadded.Essentially,youcanscalefrom1,000usersto1,000,000by
justaddingmoreservers.
SecurityConcerns
Aswithsomanyothertechnicalchoices,securityisatwo-sidedcoinintheworldofcloud
computing—thereareprosandtherearecons.Inthissection,let’sexaminesecurityinthe
cloudandtalkaboutwhat’sgood,andwhereyouneedtotakeextracare.
IDCconductedasurveyof244ITexecutivesaboutcloudservices.AsFigure2-1shows,
securityledthepackofcloudconcernswith74.5percent.
Inordertobesuccessful,vendorswillhavetotakedatalikethisintoconsiderationas
theyofferuptheirclouds.
PrivacyConcernswithaThirdParty
Thefirstandmostobviousconcernisforprivacyconsiderations.Thatis,ifanotherpartyis
housingallyourdata,howdoyouknowthatit’ssafeandsecure?Youreallydon’t.Asa
startingpoint,assumethatanythingyouputonthecloudcanbeaccessedbyanyone.There
arealsoconcernsbecauselawenforcementhasbeenbetterabletogetatdatamaintainedon
acloud,moresothantheyarefromanorganization’sservers.
Availability
Performance
Security
0 10 20 30 40 50 60 70 80
FIGURE 2-1 IDC’s findings show that security concerns are the number one issue facing cloud
computing.
36 Part I: Getting Started
Thatdoesn’tmeanthattherearen’treputablecompanieswhowouldneverthinkof
compromisingyourdataandwhoaren’tstayingonthecuttingedgeofnetworksecurityto
keepyourdatasafe.Inaglass-half-fullworld,that’swhatallthecompaniesaredoing.But
inreality,evenifprovidersaredoingtheirbesttosecuredata,itcanstillbehacked,and
thenyoursensitiveinformationisatthemercyofwhoeverbrokein.
Thebestplanofattackistonotperformmission-criticalworkorworkthatishighly
sensitiveonacloudplatformwithoutextensivesecuritycontrolsmanagedbyyour
organization.Ifyoucannotmanagesecurityatthatrigorouslevel,sticktoapplicationsthat
arelesscriticalandthereforebettersuitedforthecloudandmore“outofthebox”security
mechanisms.Remember,nobodycanstealcriticalinformationthatisn’tthere.
AreTheyDoingEnoughtoSecureIt?
Beforesigningonwithareputablevendor,keepinmind,also,thattheyaredoingallthey
cantoprotectyourdata.Now,thereisaschoolofthoughtthatsays,infact,thatvendors
willbegoingaboveandbeyondtoensurethatyourdataissecure.Thisisasimplematter
ofdoingbusiness.Ifwordgetsoutthattheydon’tprotectthedatatheyhouse,thennoone
willwanttodobusinesswiththem.
There’salsoanissueofperformanceandefficiency.Sinceyoupayasyougo,ifyou
spendaninordinateamountoftimeonCPUcyclesusingtheirsecuritytools,you’llgo
lookingtothecompetition.
Ultimately,whileweliketothinkthatthey’redoingtheirbest,theirbestsimplymight
notbegoodenough.Therearealotofwaysthattheircloudandyourdatacanbe
compromised.
Hackers
Hackersaren’tthenicepeoplethatHollywoodhasmadethemouttobe.Mostaren’tjust
sittingaround,drinkingMountainDewandtryingtobreakintoasecurenetworkjust
becausetheycan.Theywantsomething.
There’salottheycandoifthey’vecompromisedyourdata.Itrangesfromsellingyour
proprietaryinformationtoyourcompetitiontosurreptitiouslyencryptingyourstorage
untilyoupaythemoff.Ortheymayjusteraseeverythingtodamageyourbusinessand
justifytheactionbasedontheirideologicalbeliefs.Itcananddoeshappen.
Eitherway,hackersarearealconcernforyourdatamanagedonacloud.Becauseyour
dataisheldonsomeoneelse’sequipment,youmaybeatthemercyofwhateversecurity
measurestheysupport.
BotAttackers
Inacommonlyrecognizedworst-casescenario,attackersusebotnetstoperformdistributed
denialofservice(DDOS)attacks.Inordertogetthehackerstostopattackingyournetwork,
youfaceblackmail.
Chapter 2: Your Organization and Cloud Computing 37
PART I
Internet
Service provider is
overwhelmed by the attack.
Infact,inJapan,blackmailinvolvingDDOSisontherise.OnemajorTokyofirmhadto
pay3millionyen(aboutU.S.$31,000)afterthenetworkwasbroughttoascreechinghaltby
abotnetattack.Becausetheattackwassodispersed,policehavebeenunabletotrackdown
theattackers.
Intheworldofcloudcomputing,thisisclearlyahugeconcern.Ifyourdataisonthe
cloudbeingattacked,whowilltheransomerscometoformoney?Willitbeyou?Willitbe
thevendor?Andwilltheransomevenbepaid?
SecurityBenefits
Thisisnottosuggestthatyourdataisunsecureonthecloud.Providersdoendeavortoensure
security.Otherwise,wordofmouthandrepeatbusinesswillshrivelup.Buttheverynatureof
thecloudlendsittoneedingsomeverystrongsecuritypractices.
CentralizedData
We’vetalkedaboutthespecterofdatalossbybeinginoneplace.However,therearesome
goodsecuritytraitsthatcomewithcentralizingyourdata.Justinpractice,youmakeyour
systemmoreinherentlysecure.
38 Part I: Getting Started
ReducedDataLoss Morethan12,000laptopsarelostinAmericanairportseveryyear.It’s
badenoughtoloseyourdata,butit’sespeciallybadforcompanieswholoseproprietary
dataorothermission-criticalinformation.
Also,howmanylaptopsemployreallystrongsecuritymeasures,likewhole-diskdata
encryption?Ifthelaptopcanbeeffectivelycompromised,theinformationwillbeinthe
handsofthethief.
Bymaintainingdataonthecloud,employingstrongaccesscontrol,andlimiting
employeedownloadingtoonlywhattheyneedtoperformatask,cloudcomputingcan
limittheamountofinformationthatcouldpotentiallybelost.
Monitoring Ifyourdataismaintainedonacloud,itiseasiertomonitorsecuritythanhave
toworryaboutthesecurityofnumerousserversandclients.Ofcourse,thechancethatthe
cloudwouldbebreachedputsallthedataatrisk,butifyouaremindfulofsecurityand
keepuponit,youonlyhavetoworryaboutonelocation,ratherthanseveral.
InstantSwapover
Ifyourdataiscompromised,whileyouareconductingyourinvestigationtofindthe
culprits,youcaninstantlymoveyourdatatoanothermachine.
Youalsodon’tneedtospendthetimeexplainingtoyourC-levelmanagementthatthe
systemwillbedownduetoanincident.Whenyouperformtheswapover,it’sseamlessto
yourusers.Youdon’thavetospendhourstryingtoreplicatethedataorfixthebreach.
Abstractingthehardwareallowsyoutodoitinstantly.
Logging
Inthecloud,loggingisimproved.Loggingisusuallythoughtoflateinthegame,andissues
developwithstoragespace.Onacloud,youdon’tneedtoguesshowmuchstorageyou’ll
needandyouwilllikelymaintainlogsfromtheget-go,iffornootherreasonthantocheck
yourusage.
Also,youcanusemoreadvancedloggingtechniques.Forinstance,aC2audittrailcan
beemployed.Thisisgenerallyrarelyusedbecauseoftheperformancehityournetwork
wouldtake.However,inthecloud,youcanreachthatlevelofgranularity.
SecureBuilds
Whenyoudevelopedyourownnetwork,youhadtobuythird-partysecuritysoftwareto
getthelevelofprotectionyouwant.Withacloudsolution,thosetoolscanbebundledin
andavailabletoyouandyoucandevelopyoursystemwithwhateverlevelofsecurity
youdesire.
Also,youcanperformyourpatchesandupgradesoffline.Asyoupatchaserverimage,
youcankeepitsafeoffline,andwhenyouarereadytoputthevirtualmachineonline,you
canconvenientlydothat.
Finally,theabilitytotesttheimpactofyoursecuritychangesisenhanced.Yousimply
performandoffline-testtheversionofyourproductionenvironment.Thisallowsyouto
makesurethechangesyoumakearen’tdetrimentaltoyournetworkbeforeyouputit
online.
Chapter 2: Your Organization and Cloud Computing 39
ImprovedSoftwareSecurity
Vendorsarelikelytodevelopmoreefficientsecuritysoftware.Sinceyou’rechargedforyour
CPUcycles,you’regoingtonoticeandsquawkifthepriceistoohigh.Assuch,thevendor
PART I
doesn’twanttoloseyourbusinessandisgoingtobemoreinclinedtodevelopmoreefficient
securitysoftware.Additionally,thevendorwillbelikelytolookattheentiresecuritysetup
andtunewhereverpossibleforamoreefficientsystem.Theyknowthatthesecurityvendor
whodeliversthemoreefficientproductwillwinthegame.
SecurityTesting
SaaSprovidersdon’tbillyouforallofthesecuritytestingtheydo.It’ssharedamongthe
cloudusers.Theendresultisthatbecauseyouareinapoolwithothers(youneversee
them,buttheyarethere),yougettorealizelowercostsforsecuritytesting.
ThisisalsothecasewithPaaSwhereyourdeveloperscreatetheirowncode,butthe
cloudcode–scanningtoolscheckthecodeforsecurityweaknesses.
RegulatoryIssues
It’srarewhenweactuallywantthegovernmentinourbusiness.Inthecaseofcloud
computing,however,regulationmightbeexactlywhatweneed.Withoutsomerulesin
place,it’stooeasyforserviceproviderstobeunsecureorevenshiftyenoughtomakeoff
withyourdata.
NoExistingRegulation
Currentlythereisnoexistingregulation,butthereshouldbe.InSeptember2008,theUnited
StatesgovernmenttookcontrolofWashingtonMutual.Itwasviewedasthegreatestbank
failureinAmericanhistorytodate.Itremindsusthatnomatterhowhugeacompanyis,it
canstillcometumblingdown.
LookatacompanylikeGoogle,forinstance.It’sabigoneandrecentlyvaluedat$107
billion.Thatsizeandvaluewouldseemtomakethembulletproof.ButWaMuwasworth
$307billionwhenitfailed.
Whilecomparingcloudserviceproviderstobanksmightseemlikeanapples-to-oranges
comparison,itunderscorestheneedforregulation.Whilebanksdealinmoney,andcloud
serviceprovidersdealindata,bothareofimmensevaluetoconsumersandorganizations
alike.Thefactthattherewassomeregulationinplace(intheformofgovernment-backed
insurance)preventedarunonthebank.WhenWaMufailed,everyonegottokeeptheir
money,thankstothegovernment’sinsurance.Thereisn’tathirdpartyinsuringanyone’s
clouddata,andifaproviderdecidestocloseupshop,thenthatdatacanbelost.
GovernmenttotheRescue?
Isitthegovernment’splacetoregulatecloudcomputing?Aswementioned,thankstothe
GreatDepression,wehadregulationthatprotectedWaMu’scustomers’moneywhenthe
bankfailed.
Therearetwoschoolsofthoughtontheissue.First,ifgovernmentcanfigureoutaway
tosafeguarddata—eitherfromlossortheft—anycompanyfacingsuchalosswould
applaudtheregulation.Ontheotherhand,therearethosewhothinkthegovernment
shouldstayoutofitandletcompetitionandmarketforcesguidecloudcomputing.
40 Part I: Getting Started
WhoOwnstheData?
Thereareimportantquestionsthatgovernmentneedstoworkout.First,whoownsthedata?
Also,shouldlawenforcementagencieshaveeasieraccesstopersonalinformationoncloud
datathanthatstoredonapersonalcomputer?
Abigproblemisthatpeopleusingcloudservicesdon’tunderstandtheprivacyand
securityimplicationsoftheironlineemailaccounts,theirLinkedInaccount,theirMySpace
page,andsoforth.Whilethesearepopularsitesforindividuals,theyarestillconsidered
cloudservicesandtheirregulationwillaffectothercloudservices.
Sofar,U.S.courtshavetendedtorulethatprivatedatastoredintheclouddoesnot
havethesamelevelofprotectionfromlawenforcementsearchesthandatastoredona
personalcomputer.
ASeptember2008reportreleasedbythePewInternetandAmericanLifeprojectreported
that49percentofU.S.residentswhousecloudcomputingserviceswouldbeveryconcerned
ifthecloudserviceproviderssharedfileswithlawenforcementagencies.
Thesearesomeoftheothercloudcomputingconcernsthatwerereported:
• Eightypercentsaidthey’dbeveryconcernedifavendorusedtheirphotosandother
informationinmarketingcampaigns.
• Sixty-eightpercentsaidthey’dbeveryconcernedifthevendorusedtheirpersonal
informationtosendthempersonalizedads.
• Sixty-threepercentsaidthey’dbeveryconcernedifserviceproviderskepttheirdata
aftertheuserdeletedit.
GovernmentProcurement
Therearealsoquestionsaboutwhethergovernmentagencieswillstoretheirdataonthe
cloud.Procurementregulationswillhavetochangeforgovernmentagenciestobekeenon
jumpingonthecloud.
TheGeneralServicesAdministrationismakingapushtowardcloudcomputing,inan
efforttoreducetheamountofenergytheircomputersconsume.Hewlett-PackardandIntel
producedastudythatshowsthefederalgovernmentspends$480millionperyearon
electricitytorunitscomputers.
Infact,theGSAisworkingwithavendortodevelopanapplicationthatwillcalculate
howmuchenergygovernmentagenciesconsume.
Whilethisisaresponsible,ecologicallywisemove(nottomentionsavingmillionsof
taxpayerdollarseveryyear),governmentagenciesmaynotbemovingtothecloudquiteso
soon.Again,issuesofdataprivacyandownershipofdatamuststillbeaddressed.
Thereareprosandconstousingacloudcomputingsolution.Yourorganizationisa
uniqueanimalandthereisnoonerightanswerastowhetherornotyoushouldusea
cloud.However,consideryourorganization’sneedsandweightheprosandconsof
whetheryoushouldmovetothecloudornot.
Inthenextchapterwe’lltalkaboutsomeofthemoversandshakersinthecloudworld
andtakeacloserlookatwhattheyhavetooffer.
CHAPTER
3
Cloud Computing
with the Titans
T
herearescoresofcloudvendorsoutthere,butitshouldcomeasnosurprisethat
someofthebiggestnamesincloudcomputingaresomeofthebiggestnamesinthe
computerworld.
Inthischapterwe’lltakeacloserlookatsomeofthecloudcomputingheavyweights,
likeGoogle,Microsoft,Yahoo!,Salesforce.com,IBM,andothers.We’lltakesometimetotalk
aboutwhattheyoffer,andhowtheymightbenefityourowncloudefforts.
Google
Theredoesn’tseemtobeapiethatGoogledoesn’thavetheirfingersin.Thecloudiscertainly
oneofGoogle’sbiggestbusinessventures,andtheyofferacoupleoftoolstohelpdraw
customerstotheircloud.Inthissection,we’lltalkaboutwhatGoogleoffers.
41
42 Part I: Getting Started
GoogleAppEngine
GoogleAppEngineenablesdeveloperstobuildtheirwebappsonthesameinfrastructure
thatpowersGoogle’sownapplications.
Features
LeveragingGoogleAppEngine,developerscanaccomplishthefollowingtasks:
• Writecodeonceanddeploy Provisioningandconfiguringmultiplemachinesfor
webservinganddatastoragecanbeexpensiveandtime-consuming.GoogleApp
Enginemakesiteasiertodeploywebapplicationsbydynamicallyproviding
computingresourcesastheyareneeded.Developerswritethecode,andGoogle
AppEnginetakescareoftherest.
• Absorbspikesintraffic Whenawebappsurgesinpopularity,thesudden
increaseintrafficcanbeoverwhelmingforapplicationsofallsizes,fromstartupsto
largecompaniesthatfindthemselvesre-architectingtheirdatabasesandentire
systemsseveraltimesayear.Withautomaticreplicationandloadbalancing,Google
AppEnginemakesiteasiertoscalefromoneusertoonemillionbytaking
advantageofBigtableandothercomponentsofGoogle’sscalableinfrastructure.
• EasilyintegratewithotherGoogleservices It’sunnecessaryandinefficientfor
developerstowritecomponentslikeauthenticationandemailfromscratchforeach
newapplication.DevelopersusingGoogleAppEnginecanmakeuseofbuilt-in
componentsandGoogle’sbroaderlibraryofAPIsthatprovideplug-and-play
functionalityforsimplebutimportantfeatures.
Chapter 3: Cloud Computing with the Titans 43
“Googlehasspentyearsdevelopinginfrastructureforscalablewebapplications,”said
PeteKoomen,aproductmanageratGoogle.“We’vebroughtGmailandGooglesearchto
hundredsofmillionsofpeopleworldwide,andwe’vebuiltoutapowerfulnetworkof
PART I
datacenterstosupportthoseapplications.Todaywe’retakingthefirststepinmakingthis
infrastructureavailabletoalldevelopers.”
Cost
GoogleenticeddevelopersbyofferingtheAppEngineforfree,whenitlaunched,butaftera
fewmonthsslappedonsomefees.Asofthiswriting,developersusingGoogleAppEngine
canexpecttopay:
• Freequotatogetstarted:500MBstorageandenoughCPUandbandwidthforabout
5millionpageviewspermonth
• $0.10–$0.12perCPUcore-hour
• $0.15–$0.18perGB-monthofstorage
• $0.11–$0.13perGBofoutgoingbandwidth
• $0.09–$0.11perGBofincomingbandwidth
Inresponsetodeveloperfeedback,GoogleAppEnginewillprovidenewAPIs.The
image-manipulationAPIenablesdeveloperstoscale,rotate,andcropimagesontheserver.
ThememcacheAPIisahigh-performancecachinglayerdesignedtomakepagerendering
fasterfordevelopers.
MoreinformationaboutGoogleAppEngineisavailableathttp://code.google.com/
appengine/.
GoogleWebToolkit
WithGoogleWebToolkit,developerscandevelopanddebugwebapplicationsinthe
familiarJavaprogramminglanguage,andthendeploythemashighlyoptimizedJavaScript.
Indoingso,developerssidestepcommonAJAXheadacheslikebrowsercompatibilityand
44 Part I: Getting Started
enjoysignificantperformanceandproductivitygains.GoogleHealthisonerecently
launchedapplicationtouseGoogleWebToolkit.
GoogleWebToolkitincludesJava5languagesupportsothatdeveloperscanenjoy
usingthefullcapabilitiesoftheJava5syntax.ThesecapabilitiesincludeJavagenerics,
enumeratedtypes,annotations,auto-boxing,variableparameterlists,andmore.The
compilerinGoogleWebToolkit1.5producesfastercodethanever,deliveringperformance
gainsbigenoughforenduserstonotice.Indeed,oftenthecompilerproducesfaster
Chapter 3: Cloud Computing with the Titans 45
JavaScriptthanapersonwouldwritebyhandinJavaScript.GoogleWebToolkit1.5
accomplishesthisbyperformingdeepinlining,betterdead-codeelimination,andother
formsofenhancedstaticanalysis.
PART I
GoogleWebToolkitalsocontinuestoprovidearichandgrowingsetoflibrariesthat
helpdevelopersbuildworld-classAJAX,includingthoroughlytested,reusablelibraries
forimplementinguserinterfaces,datastructures,client/servercommunication,
internationalization,testing,andaccessibility.MoreinformationaboutGoogleWeb
Toolkitisavailableathttp://code.google.com/webtoolkit/.
EMC
EMCCorporationistheworldleaderinproducts,services,andsolutionsforinformation
storageandmanagementthathelporganizationsextractvaluefromtheirinformation.
Theyhavetheirfingersinallsortsofdifferentcloudcomputingandvirtualizationpies.
Forexample,inearly2009,EMCraisedthestakesinitsbetthatvirtualizationisgoing
tobethe“nextbigthing”intheworldofcomputing.ItintroduceditsSymmetricV-Max
systeminApril2009,claimingthatitisthefirstmanagementsystemtosupporthigh-end
virtualdatacenters.
Thesystemallowscustomerswithvaststorageneedstoeasilymanageandexpand
storagesystemswithoutinterferingwithday-to-dayoperations.Thissystemallows
multipledatacenterstoberunasiftheywereone,makingtheirmanagementmucheasier
andmoreefficient.
Technologies
ButEMC’sreachgoesfarbeyondvirtualizeddatacentermanagement.Theirotherfieldsof
expertiseinclude
• Archiving Creatingaccessibleonlinearchivesthatofferareducedoperationalcost
byshrinkingbackupwindowsandmakingrestoresfaster.
• Backupandrecovery DifferenttoolscombineEMC’srecoverymanagement
offerings,backuptechnologies,andmanagementstrategiestoensurethatyouhave
asolidbackupandrecoverypractice.
• Enterprisecontentmanagement Content-enabledsolutionshelpmitigaterisk
withoutimposingoverlycomplextechnologiesonyourorganization.
• Intelligentinformationmanagement Usingvarioustechnologiesallows
organizationstodiscover,store,andactoninformationinintelligentways.
• ITmanagement ITmanagementissimplifiedanditscostreducedthrough
automation,virtualization,andprocessefficiencies.
• Replication Dataprotectionandremotereplicationtechnologiesprovidedisaster
recoveryoptions.
• Security Organizationscandeployproductswithcapabilitiesforaccesscontrol,
dataprotection,andauditing.
46 Part I: Getting Started
• Storage Processesandtechnologiesthathelpmanagedataandefficientlymaintainit.
• Virtualization ProductsincludingVMwarebackupandotherEMCvirtualization
toolsimprovethemanagementandflexibilityforvirtualinfrastructures.
VMwareAcquisition
EMCexpandedtheirvirtualizationofferingsinearly2009whentheyacquiredPaloAlto–
basedVMware,Inc.,arapidlygrowing,privatelyheldsoftwarecompanyspecializingin
industry-standardvirtualcomputingsoftware.EMCacquiredVMwareinacashtransaction
withafinalvalueofapproximatelyUS$625million.
VMwarewillplayakeyroleinEMC’sstrategytohelpcustomerslowertheircostsand
simplifytheiroperationsbydeployingvirtualizationtechnologiesacrosstheirheterogeneous
ITinfrastructuretocreateasinglepoolofavailablestorageandcomputingresources.
VMware’sleadershipinservervirtualization,togetherwithEMC’sinnovationinstorage
virtualization,willserveasastrongfoundationfornext-generationinformationlifecycle
managementsolutions.Theirofferingsshouldbeonyourradarscreensaswemoveinto
thefuture.
EMCwilloperateVMwareasaseparatesoftwaresubsidiaryofEMC,headquarteredin
PaloAlto,California.TheVMwarename,brand,andproductswillallbemaintained,and
VMwareemployeeswillremainfocusedondeveloping,selling,andservicingVMware's
productsandsolutions.
NetApp
NetAppisanorganizationthatcreatesstorageanddatamanagementsolutionsfortheir
customers.Theirgoalistodelivercostefficiencyandacceleratebusinessbreakthroughs.
In1992theyintroducedtheworld’sfirstnetworkedstoragedevice.Thecompany
continuestointroducenewtechnologiesthatreducethecostsofIT.NetAppclaimstheycan
cutyourITcostsinhalf,useupto80percentlessstorage,holdoffondatacenterexpansion,
andspeedupyourtimetomarket.
Thecompanygrewfromaneight-employeestartupdoingresearchinaFry’sElectronics
storetoaUS$3billionpowerhousewithmorethan130officesaroundtheworld.
AnotherdriverforNetAppistheirbeliefinactingresponsiblybyprotectingandpreserving
theenvironmentbycreatingenergy-efficientproducts.
NOTE NetAppwaslistedbyFortuneasthebestcompanytoworkforinitsannualtop100list
in2009.
Offerings
NetAppwasoneofthefirstcompaniesinthecloud,offeringdatacenterconsolidationand
storageservices,aswellasvirtualization.TheirproductsincludeaplatformOS,storage
services,storagesecurity,softwaremanagement,andprotectionsoftware.
TheirsolutionsrunthegamutfromMicrosoftSQLServerandSharePointServicesto
seismicprocessingandreservoirdevelopmenttodesktopandservervirtualization.
Chapter 3: Cloud Computing with the Titans 47
Inadditiontotheseservices,theyalsopartnerwithotherindustryleaderstodevelop
newofferingsforNetApp’sclients.
PART I
CiscoPartnership
NetAppandCiscoareteaminguptoprovidecustomerswithunified,dynamicdatacenter
solutionsthatarebasedonCisco’sUnifiedComputingSystemandNetAppUnifiedStorage
Architecture.CiscoandNetAppareworkingtogethertocertifythecombinedsolution,and
thecompanieswillalsocollaborateoncustomersupportandmarketingactivities.
TheCiscoUnifiedComputingSystemunitescompute,network,storageaccess,and
virtualizationresourcesinacohesivenewdatacenterarchitecture.Thisallowscustomersto
reducethecomplexitiesoftenassociatedwithdatacentervirtualization,lowercosts,and
improveassetutilization.ThroughCiscoValidatedDesign,NetAppwillprovideflexible
andpowerfulstoragesolutionsfortheCiscoUnifiedComputingSystemthatwillbetested
forinteroperabilityinvirtualizeddatacenterenvironments.Customersbenefitfromthe
unifiedstoragemodelacrosstheentireNetAppproductportfolio,applicationintegration
technologiessuchastheNetAppSnapManagerproductsuite,andadvancedstorage
efficiencyfeatures.Asaresult,customerscantakeadvantageofNetApp’suniqueadvanced
storageefficiencycapabilitiestodrivedownrawstoragerequirements,lowercosts,improve
utilizationinvirtualizedenvironments,andsimplifyadministrativetasks.Additionally,
NetApp’sleadershipinEthernetstoragetechnologycomplementstheCiscoUnified
ComputingSystem,whichisbasedona10GBpersecondUnifiedFabricthatsupportsFibre
ChanneloverEthernet(FCoE).
CiscoandNetAppalsoplantocollaborateonjointmarketingefforts,suchasthe
multicity“VirtualizedDynamicDataCenterRoadshow”withVMwareandotherselect
solutionintegrationpartners.NetAppwillalsoparticipateinCisco’sDataCenterofthe
Futureprogram.BothoftheseprogramswillfocusoneducatingcustomersaboutNetApp
andCiscodatacenterofferings.
“Asmoreandmorecustomersmovetoavirtualizedinfrastructure,theyrequirethe
necessarystorage,compute,andnetworksolutionsneededtotransitiontoatrulydynamic
datacenter,”saidTomGeorgens,presidentandchiefoperatingofficerforNetApp.
“Throughourlong-standingcollaborationwithCisco,weareenablingcustomerstotap
deepintothepoweroftheirvirtualizedenvironmentthroughaunifiedandscalable
platformforamoreefficientandstreamlinedexperience.”
InMarch2009,CiscoannouncedthatNetAppisaparticipantinCisco’sopenecosystem
ofpartnersfortheUnifiedComputingSystem,whichisfocusedonstimulatinginnovation,
enhancingservicedelivery,andacceleratingthemarketadoptionofUnifiedComputing.
Inaddition,CiscoandNetApphavealonghistoryofcollaborationandmanycommon
customersthathavedeployedCiscoandNetApptechnologiesandsolutionsintheir
datacenters.NetAppsupportsandresellstheCiscoNexus5000andMDSdatacenter
switchingproducts,andin2008,CiscoandNetAppannouncedsupportfortheindustry’s
firstnativeFCoEstoragearray.
ThetwocompanieshavealsoworkedtogetheronanEthernetUnificationCenterof
Excellence,locatedatNetApp’scampusinResearchTrianglePark,NorthCarolina,which
wasannouncedinFebruary2009.ThecenterfeaturesEthernet-basedprotocolsrunningon
aCisco10GigabitEthernetbackbone.
48 Part I: Getting Started
Microsoft
Microsoftoffersanumberofcloudservicesfororganizationsofanysize—fromenterprises
allthewaydowntomom-and-popshopsorindividuals.AgoodportionofMicrosoft’s
cloudofferingsarecloudvariantsofproductsthatpeoplealreadyuse,socloudversions
aren’tthatdifficulttouse.
AzureServicesPlatform
ThecornerstoneofMicrosoft’sofferingsistheAzureServicesPlatform.TheAzureServices
PlatformisacloudcomputingandservicesplatformhostedinMicrosoftdatacenters.
TheAzureServicesPlatformsuppliesabroadrangeoffunctionalitytobuildapplications
toserveindividualsorlargeenterprises,andeveryoneinbetween.Theplatformoffersa
cloudoperatingsystemanddevelopertools.Applicationscanbedevelopedwithindustry
standardprotocolslikeRESTandSOAP.
Azureservicescanbeusedindividuallyorinconjunctionwithoneanothertobuild
newapplicationsortoenhanceexistingones.Let’stakeacloserlookattheAzureServices
Platformcomponents.
WindowsAzure
WindowsAzureisacloud-basedoperatingsystemthatenablesthedevelopment,hosting,
andservicemanagementenvironmentfortheAzureServicesPlatform.WindowsAzure
givesdevelopersanon-demandcomputeandstorageenvironmentthattheycanusetohost,
scale,andmanagewebapplicationsthroughMicrosoftdatacenters.
Tobuildapplicationsandservices,developerscanusetheVisualStudioskillstheyalready
have.Further,AzuresupportsexistingstandardslikeSOAP,REST,andXML.
WindowsAzurecanbeusedto
• Addwebservicecapabilitiestoexistingapplications
• BuildandmodifyapplicationsandthenmovethemontotheWeb
• Make,test,debug,anddistributewebservicesefficientlyandinexpensively
• ReducethecostsofITmanagement
SQLServices
MicrosoftSQLServicesextendsSQLServercapabilitiestothecloudasweb-basedservices.
Thisallowsthestorageofstructured,semistructured,andunstructureddata.SQLServices
deliversasetofintegratedservicesthatallowrelationalqueries,search,reporting,analytics,
integration,andsynchronizationofdata.Thiscanbedonebymobileusers,remoteoffices,
orbusinesspartners.
.NETServices
Microsoft.NETServicesareasetofMicrosoft-hosted,developer-orientedservicesthat
providethecomponentsrequiredbymanycloud-basedandcloud-awareapplications.
.NETServicesaresimilartothe.NETFramework,providinghigh-levelclasslibraries
thatmakedevelopmentmuchmorerobust..NETServicescanhelpdevelopersfocusmore
ontheirendproductthanonbuildinganddeployingtheirowncloud-basedinfrastructure.
.NETServicesarealsoavailabletootherdevelopmenttechnologiesthroughtheuseof
industry-standardprotocols,likeREST,SOAP,andHTTP.
Chapter 3: Cloud Computing with the Titans 49
LiveServices
LiveServicesisadevelopmentcenterandsupplierofsoftwaredevelopmentkitsfor
WindowsLiveandAzureServicesplatforms.Itgivesinformationaboutgettingstarted
PART I
withWindowsLiveservices,currentdocumentationandAPIs,andsamples.
WindowsLive
WindowsLiveisanintegratedsetofonlineservicesthatmakesiteasierandmorefunfor
consumerstocommunicateandsharewithothers.ThenewgenerationofWindowsLive
includesupdatedexperiencesforphotosharing,email,andinstantmessaging,aswellas
integrationwithmultiplethird-partysites.ThereleasealsoincludesWindowsLive
Essentials,freedownloadablesoftwarethatenhancesconsumers’Windowsexperienceby
helpingthemsimplifyandenjoydigitalcontentscatteredacrosstheirPC,phone,andon
websites.
NOTE Windowsproductswiththe“Live”monikerareallconsumer-oriented,likeXboxLive,
forinstance.Anythingwithan“Online”monikerisbusiness-oriented.We’lltalkaboutsome
ofMicrosoft’sOnlineofferingslaterinthissection.
50 Part I: Getting Started
FormoreinformationaboutWindowsLive,gotohttp://www.windowslive.com.
ConsumerscancreateonlinecontentandshareitinmanyplacesacrosstheWeb.
TohelpmakeitsimpleforWindowsLivecustomerstokeeptheirfriendsuptodate,
MicrosoftcollaboratedwithcompaniesincludingFlickr,LinkedInCorp.,PandoraMedia
Inc.,PhotobucketInc.,Twitter,WordPress,andYelpInc.tointegrateactivitiesonthird-party
sitesintoWindowsLivethroughanewprofileandWhat’sNewfeed.ThenewWindows
Livealsogivesconsumerstheaddedconvenienceofhavingacentralplacetoorganizeand
manageinformation.
“ThinkofWindowsLiveasthesingleplacewherepeopleusingoure-mail,messaging
andphoto-sharingservicescanstayconnected,”saidChrisJones,corporatevicepresident
ofWindowsLiveExperienceProgramManagementatMicrosoft.“Ourcustomershave
friendsacrosstheWeb.TheycommunicatethroughmanyunconnectedWebservicesand
wantaccesstoitallfromasinglelocation—withoutworryingabouthowit’sdone.Now,
WindowsLivetakescareofthat,withanintegratedpersonalcommunicationservicethat
worksacrosstheWebwithoptimizedexperiencesonthePCandmobilephone.”
ExtendingLive’sReach
TheabilityforWindowsLivecustomerstoaddthird-partysitestotheirprofilesandhave
thoseactivitiesappearinaWindowsLivefeedacrosstheirnetworkwasmadepossible
throughcollaborationwithmorethan50leadingwebcompanies,includingFlickr,LinkedIn,
Pandora,Photobucket,Twitter,WordPress,andYelp,amongothers.AsWindowsLive
customerssharephotos,updatetheirprofiles,andwritereviews,theseactivitieswill
automaticallypublishtotheirWindowsLivenetwork.
“Microsoft’sWindowsLiveisanexcitingnewplatformthatenablesnewexperiences
forbothPhotobucketandMicrosoftusersthatwouldnototherwisebepossible,”saidAlex
Welch,presidentofPhotobucket.“Onlinephotosharingisanimportantpartofpeople’s
everydaylivesand,astheleadingstand-alonephotoandvideo-sharingWebsite,
PhotobucketisthrilledtobeteamingupwithWindowsLivetomakethisexperienceeven
easierforusers.”
Inadditiontopartneringwithleadingwebcompanies,Microsoftannouncedalliances
withHPandChinaTelecomCorporationLtd.todeliverWindowsLiveservicestomore
peopleacrosstheglobe.HP,theworldwideleaderinprintingsolutions,willdistribute
WindowsLivePhotoGallerywithitsconsumerprinters,includingPhotosmartandDeskjet
lines,startingnextyear.ThecombinedofferprovidesHPcustomerswithWindowsLive
PhotoGallery,anend-to-endphotomanagementandprintingsolution.
“Beginningin2009,HPwillfeatureWindowsLivePhotoGalleryandHPCreativePrint
ProjectsacrosstheHPPhotosmartandHPDeskjetconsumerprintingportfolios,”saidSam
Greenblatt,generalmanagerofCoreTechnologies,ImagingandPrintingGroup,atHP.“We
arepleasedtobeworkingwithMicrosofttoprovideanenhanceduserexperienceforour
customers.Thisofferingwillallowuserstoprint,share,organizeandeditawidearrayof
creativeprintprojectsathome,suchasphotobooks,collages,cardsandcalendars.”
Chapter 3: Cloud Computing with the Titans 51
CommunicatingandCollaborating
WindowsLivemakesiteasierforconsumerstomanagetheirdigitallifeandkeeptheirlife
insync.Thesearesomeofthehighlights:
PART I
• WindowsLiveprovidessocialfeaturesavailabletoallcustomers,includingan
updatedprofile,a“what’snew”feedofactivitiesacrossthenetwork,andweb,
photosharing,andon-the-goaccessfromvirtuallyanydevicewithWindowsLive
SkyDrive.Onlinestorageisincreasingfrom5GBto25GB.
• WindowsLiveMessengerincludesmorepersonalization,a“what’snew”feed
withupdatesfromcontactsacrosstheWeb,drag-and-dropphotosharinginthe
conversationwindow,aFavoriteslisttodesignatethemostimportantcontacts,
andgroupIMtochatsimultaneouslywithupto20peopleatthesametime.
• WindowsLiveHotmailwasrecentlyupgradedandisnowfasterandhas80percent
moreeffectivespamfilteringcomparedwithpreviousversionsofHotmail.
Upcomingchangesincludetheabilitytobringmultipleemailaccountstogether,the
abilitytoputmultipleemailaddressesontoalmostanydevice,increasedstorage,
andarevampedcalendarthatmakesiteasiertosharecalendarswithothers,
subscribetomultiplecalendars,anduseyourcalendarwithMicrosoftOutlook.
• WindowsLiveGroups,aplaceforgroupstocollaborateonline,includesashared
calendar,sharedstorage,asharedemailaddress,andsharedinstantmessaging.
AlltheseservicesworkwithWindowsLiveEssentials,afreesuiteofapplicationsfor
communicationandsharingthatalsoworkswithleadingemail,photo,andblogging
servicesworldwide.
ExchangeOnline
Messagingisacrucialbusinessapplication,andtohelpfacilitatethatinacloudenvironment,
MicrosoftoffersExchangeOnline.
MicrosoftExchangeOnlineisaMicrosoft-hostedenterprisemessagingservicebasedon
MicrosoftExchangeServer2007.Becauseitisacloudservice,youandyouremployeescan
accessmessagesfromanywhere.
ExchangeOnlineserversaregeographicallydispersed.Theserviceisaimedateasing
IT’smanagementdutiesbyremovingyourneedtodeploy,configure,monitor,andupgrade
on-siteemailsolutions.
CustomersusingActiveDirectorycanuseasynchronizationtooltokeeptheonlineand
localActiveDirectoriesinsync.Thisallowsforamixofusers,fromon-siteuserstousers
travelingandcheckinginwithamobiledevice.
Thesearethekeyfeaturesoftheonlinestandardversionofthesolution:
• A5GBmailbox(additionalstorageavailableforpurchase—upto25GB),shared
calendar,contacts,tasks
• OutlookClientConnectivityincludingOutlookAnywhere
• OutlookWebAccess
52 Part I: Getting Started
• Virus/spamfilteringviaExchangeHostedFiltering
• PushemailforMicrosoftWindowsMobile6.0/6.1andExchangeActiveSync12devices
• EmailsynchronizationforNokiaEseriesandNseriesandiPhone2.0(no
ActiveSyncpush)
• Built-inbusinesscontinuityanddisasterrecoverycapabilities
• Scheduleduptimeof99.9percentwithfinanciallybackedservicelevelagreements
• UseofHTTPStohelpkeepInternetaccesssecure
• Tier2support24/7(webformandphonebased)forITadministrators
• Sign-InToolforsinglesign-oncapability
• DirectorySynchronizationTooltohelpkeepon-premiseandonlineActive
Directoriesinsync
• Coexistence,ortheabilityforsomeuserstobeonmailserversonpremisesandfor
sometobeonline
• MigrationToolstohelpyoumoveyourcurrentmailboxdataintotheonline
environment
SharePointServices
MicrosoftoffersitsSharePointServicestoaidcollaborationefforts.SharePointServices
providescommunitiesforteamcollaborationandmakesiteasyforuserstoworktogether
ondocuments,tasks,contacts,events,andotherinformation.Additionally,teamandsite
managerscancoordinatesitecontentsanduseractivity.
SharePointsitesaremadeupofWebPartsandWindowsASP.NET-basedcomponents.
WebPartsaredesignedtobeadd-onstowebpagesandconfiguredbysiteadministrators
anduserstocreatecompletepage-basedapplications.
NOTE SharePointshipswithseveralready-to-useWebParts,butmoreareexpectedtobeadded.
SharePointsitesareplaceswhereteamscanparticipateindiscussions,shareddocument
collaboration,andsurveys.Sitecontentcanbeaccessedfromawebbrowserandthrough
clientsthatsupportwebservices.Documentcollaborationcontrolsallowyoutocheckin,
checkout,andcontroldocumentversioning.
MicrosoftOfficeSystemprogramsuseSharePointsitecontent.Asite’scollaborative
content—likedocuments,lists,events,andsoforth—canbereadandeditedwithMicrosoft
OfficeWord.Pictureeditingisalsopossible.MicrosoftOfficeOutlookallowsSharePointsite
eventcalendarstobeviewedsidebysidewithpersonalcalendars.
SharePointalsoallowsmanagerstocustomizethecontentandlayoutofsitessothatsite
memberscanaccessandworkwithrelevantinformation.Members’activitycanalsobe
monitoredandmoderatedbymanagers.
Chapter 3: Cloud Computing with the Titans 53
SharePointServicescanscaletothousandsofsiteswithinanorganization.Itsupports
load-balancedwebfarmsandclustereddatabasedeployments.Forsiteandservemanagers,
quotascanbesetonstorage,sitesperserver,anduserspersite.Siteusagecanbemonitored
PART I
todetectandretireinactivesites.
SharePointServicesservers,sites,andsitecontentsaremanagedbyusinga.NET-based
objectmodel.SitescanbecustomizedevenbynondevelopersbyusingMicrosoftOffice
FrontPage.
MicrosoftDynamicsCRM
MicrosoftDynamicsCRMOnlineisanon-demandcustomerrelationshipmanagement
servicehostedandmanagedbyMicrosoft.TheInternetservicedeliversafullsuiteof
marketing,sales,andservicecapabilitiesthroughawebbrowserordirectlyintoMicrosoft
OfficeandOutlook.Itprovides“instant-on”accesstobusinessesthatwantafull-featured
CRMsolutionwithnoITinfrastructureinvestmentorsetuprequired.
“AtMicrosoft,we’rerevolutionizinghowcompaniesdeploymarketing,sales,and
servicesolutionstouserswithintheirorganization,”saidBradWilson,generalmanagerof
MicrosoftDynamicsCRMatMicrosoft.“MicrosoftDynamicsCRMdeliversthepowerof
choicetocustomers,withafamiliarandproductiveuserexperienceandamultitenant
platformthatenablesfaston-premiseimplementationsor‘instant-on’deploymentsoverthe
Internet.”
MicrosoftDynamicsCRMOnlinesupplementsMicrosoft’ssoftwareplusservices
strategyfordeliveringintegratedbusinesssolutionsovertheInternet,anditisapartof
Microsoft’smultibillion-dollarinvestmentinglobaldatacenters.Inadditiontofullaccess
throughazero-footprintbrowserclient,thenewservicedeliversmarketing,sales,and
serviceinformationwithinanativeMicrosoftOfficeexperience,integratedwiththedesktop
toolsthatemployeesalreadyuseeveryday,enablingbusinessestorampupend-user
adoptionandproductivityrapidly.
MicrosoftDynamicsCRMOnlineisinitiallypackagedintwoserviceofferings:
• MicrosoftDynamicsCRMOnlineProfessionaldeliversafullsuiteofCRM
capabilitieswithextensiveconfigurabilityandextensibilityoptions.Businessesget
5GBofdatastorage,100configurableworkflows,and100customentities.The
ProfessionaleditionispricedatUS$44peruserpermonth,withanintroductory
offerofUS$39peruserpermonth.
• MicrosoftDynamicsCRMOnlineProfessionalPlusdeliversallthecapabilitiesof
theProfessionalversionplusofflinedatasynchronizationwithexpandeddata
storage,workflow,andcustomizationoptionsthatgivebusinesses20GBofdata
storage,200configurableworkflows,and200customentities.TheProfessionalPlus
editionispricedatUS$59peruserpermonth.
TolearnaboutMicrosoftDynamicsCRMandtosignupforthenewonlineservice,
customerscanvisithttp://crm.dynamics.com.
54 Part I: Getting Started
Amazon
Amazonmaybethemostwidelyknowncloudvendor.Theyofferservicesonmanydifferent
fronts,fromstoragetoplatformtodatabases.Amazonseemstohavetheirfingerinanumber
ofcloudtechnologies.
AmazonElasticComputeCloud(AmazonEC2)
AmazonElasticComputeCloud(AmazonEC2)isawebservicethatoffersresizable
computecapacityinthecloudandisdesignedtomakewebscalingeasierfordevelopers.
AmazonEC2providesasimplewebinterfacethatallowsyoutoobtainandconfigure
capacitywithlittledifficulty.Itallowsyoucontrolofyourcomputingresources.Amazon
EC2cutsthetimeittakestoobtainandbootnewserverinstancestoafewminutes,
allowingyoutochangescaleasyourneedschange.
Forinstance,AmazonEC2canrunMicrosoftWindowsServer2003andisawayto
deployapplicationsusingtheMicrosoftWebPlatform,includingASP.NET,ASP.NETAJAX,
Silverlight,andInternetInformationServer(IIS).
Chapter 3: Cloud Computing with the Titans 55
AmazonEC2allowsyoutorunWindows-basedapplicationsonAmazon’scloud
computingplatform.Thismightbewebsites,web-servicehosting,high-performance
computing,dataprocessing,mediatranscoding,ASP.NETapplicationhosting,oranyother
PART I
applicationrequiringWindowssoftware.
EC2alsosupportsSQLServerExpressandSQLServerStandardandmakesthose
offeringsavailabletocustomersonanhourlybasis.
AmazonSimpleDB
Fordatabaseservices,AmazonoffersitsAmazonSimpleDB.Itprovidescoredatabase
functionsofdataindexingandquerying.ThisserviceworkscloselywithAmazonSimple
StorageService(AmazonS3)andAmazonEC2.Thisprovidestheabilitytostore,process,
andquerydatasetsinthecloud.
Amazonoffersthefeaturebecausetraditionalrelationaldatabasesrequireasizable
upfrontexpense.Theyarealsocomplextodesignandoftenrequiretheemploymentofa
databaseadministrator.AmazonSimpleDBis—asthenamesays—simpler.Itrequiresno
schema,automaticallyindexesdata,andprovidesasimpleAPIforstorageandaccess.This
makestheprocesseasiertomanageandeliminatestheadministrativeburdenofdata
modeling,indexmaintenance,andperformancetuning.
AmazonSimpleStorageService(AmazonS3)
AmazonSimpleStorageService(AmazonS3)isAmazon’sstoragesolutionfortheInternet.
Itisdesignedtomakeweb-scalecomputingeasierfordevelopers.
AmazonS3utilizesasimplewebservicesinterfacethatcanbeusedtostoreandretrieve
anyamountofdatafromanywhereontheWeb.Itgivesdevelopersaccesstothesamedata
storageinfrastructurethatAmazonusestorunitsownretailempire.
AmazonCloudFront
AmazonCloudFrontisawebserviceforcontentdelivery.Itworksinconjunctionwithother
AmazonWebServicestogivedevelopersandbusinessesaneasywaytodistributecontentto
clients.Amazonpromiseslowlatency,highdatatransferspeeds,andnocommitments.
Theservicedeliverscontentusingaglobalnetworkofedgelocations.Objectrequests
areautomaticallyroutedtothenearestedgelocation,socontentisdeliveredwiththebest
performancepossible.
AmazonSimpleQueueService(AmazonSQS)
AmazonSimpleQueueService(AmazonSQS)offersascalable,hostedqueueforstoring
messagesastheytravelbetweencomputers.Developerscanmovedatabetweendistributed
componentsoftheirapplicationsthatperformdifferenttasks,withoutlosingmessagesor
requiringeachcomponenttobealwaysavailable.
AmazonSQSallowsanautomatedworkflowtobecreatedandworkscloselywith
AmazonEC2andotherAmazonWebServices.
AmazonSQSexposesAmazon’sweb-scalemessaginginfrastructureasawebservice.
Assuch,anycomputerontheInternetcanaddorreadmessageswithoutanyspecially
installedsoftwareorspecialfirewallconfigurations.AmazonSQScomponentscanrun
independently,andneednotbeonthesamenetwork,developedwiththesame
technologies,orrunningatthesametime.
56 Part I: Getting Started
ElasticBlockStore
AmazonalsolauncheditsAmazonElasticBlockStore(AmazonEBS),apersistentstorage
featurefortheAmazonEC2.AmazonEC2isaninfrastructureservicethatprovidesresizable
computecapacityinthecloud.WithAmazonEBS,storagevolumescanbeprogrammatically
created,attachedtoAmazonEC2instances,andifevenmoredurabilityisdesired,canbe
backedwithasnapshottotheAmazonSimpleStorageService(AmazonS3).
PriortoAmazonEBS,storagewithinanAmazonEC2instancewastiedtotheinstance
itselfsothatwhentheinstancewasterminated,thedatawithintheinstancewaslost.With
AmazonEBS,userscanchoosetoallocatestoragevolumesthatpersistreliablyand
independentlyfromAmazonEC2instances.Additionally,forevenmoredurablebackups
andaneasywaytocreatenewvolumes,AmazonEBSprovidestheabilitytocreatepoint-in-
time,consistentsnapshotsofvolumesthatarethenstoredtoAmazonS3.
“Forovertwoyears,we’vefocusedondeliveringacost-effective,webscale
infrastructuretodevelopers,givingthemcompleteflexibilityinthekindsofsolutionsthey
deliver,”saidPeterDeSantis,generalmanagerofAmazonEC2.“Persistentblockstorage
hasbeenamongthetoprequestsofdevelopersusingAmazonEC2,andwe’reexcitedto
deliverAmazonElasticBlockStoragedesignedspecificallyforourcloud-based,elastic
computingenvironment.”
AmazonEBSiswellsuitedfordatabases,aswellasmanyotherapplicationsthat
requirerunningafilesystemoraccesstorawblock-levelstorage.AsAmazonEC2instances
arestartedandstopped,theinformationsavedinyourdatabaseorapplicationispreserved
inmuchthesamewayitiswithtraditionalphysicalservers.
“ShareThishasreceivedtremendousbenefitsfromworkingwithAmazonWebServices
forourleadingsharingplatform,”saidManuMurkerji,seniorsoftwaredeveloperfor
ShareThis,aserviceprovidingaone-clickwaytoinstantlypost,tag,andsendcontentvia
email,instantmessaging,andtextmessaging.“AmazonEBShasenabledustocreatelarge-
scale,enterprise-leveldatabasesthatallowustorunandmaintainvarious,disparate
applications.EC2andEBStogetherprovideacost-effective,flexiblesystemthatallowsusto
crunchdatafasterthanwehadbeenpreviouslyable—givingusamuchneededadvantage
forourbusiness.”
“Sun’sMySQListheoneofthemostpopulardatabasesonAmazonEC2.Withthe
introductionofEBS,MySQLuserswillbeabletoincreasethedurabilityandportabilityof
theirdatabaseapplicationsdeployedinthecloud,”saidJuanCarlosSoto,vicepresidentof
GlobalMarketDevelopmentatSunMicrosystems.“WithSunalsorecentlymakingthe
OpenSolarisplatformavailableonEC2,Webcompaniescannowaccesstheuniquefeatures
oftheZFSfilesystem—suchasRollbackand128-bitchecksumcapabilities—toenablethe
highestlevelofdataintegrityonEC2.”
“WiththereleaseofAmazonElasticBlockStore,theabilitytodeployanyapplication,
anywhere,includingthecloudisareality.Byprovidingapersistentandconsistentcompute
environment,bothon-premiseandinthecloud,RedHatEnterpriseLinuxandJBossEAP
onAmazonEC2willhelpachievethevisionofthevirtualdatacenter,”saidScottCrenshaw,
vicepresidentofPlatformBusinessUnit,RedHat.“Nowwiththehighlyanticipatedrelease
ofAmazonEBS,ourenterpriseEC2customershavetheabilitytopersistvirtualmachine
configurationandapplicationdataacrossinstantiationsandmanagetheircloudsolutionsin
asconsistentamannerastheiron-premisedeployments.”
Chapter 3: Cloud Computing with the Titans 57
Salesforce.com
Salesforce.commadeitsnamewiththesuccessofitsflagshipSalesforce.comautomation
PART I
application.Today,thecompanyhasthreeprimaryareasoffocus:
• TheSalesCloud Thepopularcloudcomputingsalesapplication
• TheServiceCloud Theplatformforcustomerservicethatletscompaniestapinto
thepowerofcustomerconversationsnomatterwheretheytakeplace
• YourCloud Powerfulcapabilitiestodevelopcustomapplicationsonitscloud
computingplatform,Force.com
Thecompanyhasmadeitsplatformavailabletoothercompaniesasaplacetobuildand
deploytheirsoftwareservices.Force.comoffers
• Arelationaldatabase
• Userinterfaceoptions
• Businesslogic
• Apex,anintegrateddevelopmentenvironment
• Workflowandapprovalsengine
• Programmableinterface
• Automaticmobiledevicedeployment
• Webservicesintegration
• Reportingandanalytics
UsingApex,programmerscantesttheirapplicationsinForce.com’sSandboxesandthen
offerthefinalizedcodeonSalesforce.com’ssite.
DevelopersinitiallyusedForce.comtocreateadd-onstotheSalesforceCRM,butnow
itispossibletodevelopapplicationsthatareunrelatedtoSalesforce.com’sofferings.For
instance,gaminggiantElectronicArtscreatedanemployee-recruitingapplicationon
Force.comandsoftwarevendorCodamadeageneralledgerapplication.Meanwhile,
Salesforce.compromotesitsownapplications,whichareusedbymorethan1.1million
people.
Salesforce.comisintoothercloudservices,aswell.InApril2007itmovedintoenterprise
contentmanagementwithSalesforce.comContent.Thismakesitpossibletostore,classify,
andshareinformationinamannersimilartoMicrosoftSharePoint.
Thecompanyemploysamultitenantarchitecture,similartoGoogle,Amazon,andeBay.
Assuch,serversandotherresourcesaresharedbycustomers,ratherthangiventoasingle
account.Itallowsforbetterperformance,betterscalability,bettersecurity,andfaster
innovationthroughautomaticupgrades.Multitenancyalsoallowsappstobeelastic—they
canscaleuptotensofthousandsofusers,ordowntojustafew—alwayssomethingto
considerwhenmovingtocloud-basedsolutions.Aswithotherproviders,upgradesare
takencareofbySalesforce.comfortheircustomers,soappsgetsecurityandperformance
enhancementsautomatically.
58 Part I: Getting Started
Becausethecompanygeneratesallitsincomebasedoncloudcomputing,Salesforce.com
isagoodbellwetherforassessingthegrowthrateoftheapplicationsideofcloudcomputing.
Salesforce.com’srevenuegrewtoUS$290millioninthequarterendingJanuary31,2009—
a34percentincreaseyear-over-year.
Force.com
Force.comisSalesforce.com’son-demandcloudcomputingplatform—billedbySalesforce
.comastheworld’sfirstPaaS.Force.comfeaturesVisualforce,atechnologythatmakesit
muchsimplerforendcustomers,developers,andindependentsoftwarevendors(ISVs)to
designalmostanytypeofcloudapplicationforawiderangeofuses.TheForce.com
platformoffersglobalinfrastructureandservicesfordatabase,logic,workflow,integration,
userinterface,andapplicationexchange.
Visualforceisessentiallyaframeworkforcreatingnewinterfacedesignsandenables
userinteractionsthatcanbebuiltanddeliveredwithnosoftwareorhardwareinfrastructure
requirements.Moreonthatlaterinthechapter.
PaaS
Force.comdeliversPaaS,awaytocreateanddeploybusinessappsthatallowscompaniesand
developerstofocusonwhattheirapplicationsdo,ratherthanthesoftwareandinfrastructure
torunthem.
TheForce.complatformcanrunmultipleapplicationswithinthesameSalesforce.com
instance,allowingallofacompany’sSalesforce.comapplicationstoshareacommon
securitymodel,datamodel,anduserinterface.Thisisamajorbenefitfoundincloud
computingsolutions.Addtothatanon-demandoperatingsystem,theabilitytocreateany
databaseondemand,aworkflowengineformanagingcollaborationbetweenusers,anda
programminglanguageforbuildingcomplexlogic.AwebservicesAPIforprogrammatic
access,mash-ups,andintegrationwithotherapplicationsanddataisanotherkeyfeature.
Visualforce
AspartoftheForce.complatform,Visualforceprovidestheabilitytodesignapplication
userinterfacesforpracticallyanyexperienceonanyscreen.VisualforceusesHTML,AJAX,
andFlex,forbusinessapplications.Visualforceprovidesapage-basedmodel,builton
standardHTMLandwebpresentationtechnologies,andiscomplementedwithbotha
componentlibraryforimplementingcommonuserinterfaceelements,andacontroller
modelforcreatingnewinteractionsbetweenthoseelements.
Visualforcefeaturesandcapabilitiesinclude
• Pages Enablesthedesigndefinitionofanapplication’suserinterface.
• Components Providestheabilitytocreatenewapplicationsthatautomatically
matchthelookandfeelofSalesforce.comapplicationsoreasilycustomizeand
extendtheSalesforce.comuserinterfacetospecificrequirements.
• LogicControllers Thecontrollerenablescustomerstobuildanyuserinterface
behavior.
Chapter 3: Cloud Computing with the Titans 59
Salesforce.comCRM
Salesforce.comisaleaderincloudcomputingcustomerrelationshipmanagement(CRM)
applications.ItsCRMofferingconsistsoftheSalesCloudandtheServiceCloudandcanbe
PART I
brokendownintofivecoreapplications:
• Sales Easilythemostpopularcloudcomputingsalesapplication,Salesforce.com
saysthatCRMSalesisusedbymorethan1.1millioncustomersaroundtheworld.
Itsclaimtofameisthatitiscomprehensiveandeasytocustomize.Itsvalue
propositionisthatitempowerscompaniestomanagepeopleandprocessesmore
effectively,sorepscanspendmoretimesellingandlesstimeonadministrativetasks.
• Marketing WithSalesforce.comCRMMarketing,marketerscanputthelatestweb
technologiestoworkbuildingpipelinewhilecollaboratingseamlesslywiththeir
salesorganization.Theapplicationempowerscustomerstomanagemultichannel
campaignsandprovideup-to-datemessagingtosales.Andsincetheapplicationis
integratedwiththeSalesforce.comCRMSalesapplication,thehandoffofleadsis
automated.
• Service TheServiceCloudisthenewplatformforcustomerservice.Companies
cantapintothepowerofcustomerconversationsnomatterwheretheytakeplace.
Becauseit’sontheWeb,theServiceCloudallowscompaniestoinstantlyconnectto
collaborateinrealtime,sharesalesinformation,andfollowjointprocesses.Connecting
withpartnersismadetobeaseasyasconnectingwithpeopleonLinkedIn:companies
instantlyshareleads,opportunities,accounts,contacts,andtaskswiththeirpartners.
• Collaboration Salesforce.comCRMcanhelpanorganizationworkmore
efficientlywithcustomers,partners,andemployeesbyallowingthemtocollaborate
amongthemselvesinthecloud.Someofthecapabilitiesinclude
• CreateandsharecontentinrealtimeusingGoogleAppsandSalesforce.com
• TrackanddeliverpresentationsusingContentLibrary
• GiveyourcommunityavoiceusingIdeasandFacebook
• TapintothecollectivewisdomofthesalesteamwithGenius
• Analytics Force.comoffersreal-timereporting,calculations,anddashboardssoa
businessisbetterabletooptimizeperformance,decisionmaking,andresource
allocation.
• CustomApplications Customapplicationscanbequicklycreatedbyleveraging
onedatamodel,onesharingmodel,andoneuserinterface.
AppExchange
Launchedin2005,AppExchangeisadirectoryofapplicationsbuiltforSalesforce.comby
third-partydevelopers.UserscanpurchaseandaddtotheirSalesforce.comenvironment.
Whenitlaunched,AppExchangeoffered70applications.AsofSeptember2008,therewere
over750applicationsavailablefromover450ISVs.
60 Part I: Getting Started
AppExchangeallowsISVstoacceleratetheirtime-to-marketandextendon-demand
successbeyondCRM.AppExchangeprovidesanon-demandplatformlicensethatincludes
everythingpartnersneedtobuildanddelivercompellingon-demandapplicationstotheir
customers.
WithAppExchange,companieshaveaccesstonewapplicationsthatpotentiallybring
thebenefitsofSalesforce.comtoanentirebusiness,lettingthemmanageandshareallofa
company’sinformationondemand.UsingAppExchange,companiesareabletoeasilyadd
newapplicationstotheirexistingSalesforce.comdeployments.
Thisallowsforthedevelopmentofapplicationsservingabroadrangeofbusiness
requirements:
• Finance
• Electronicsignatures
• Documentmanagement
• Projectmanagement
Chapter 3: Cloud Computing with the Titans 61
• Creditandcollections
• Mobileworkforcemanagement
• Datacleansing
PART I
• Professionalservicesmanagement
• Humanresources
Afeaturecalled“GetItNow”makesthatapplicationinstantlyavailabletoallsubscribers
withinthatcustomer’sSalesforce.comaccount.Onceinstalled,AppExchangeapplications
willsitalongsidetheirexistingon-demandapplications,andmaybefurthercustomizedto
meetcustomers’uniquebusinessneeds.
ApplicationsbuiltfortheForce.complatformcanrunentirelyondemand,eliminating
theneedfordevelopersorpartnerstocreateandmanagetheirowndatacenteror
infrastructure.
Force.comrepresentsacomprehensivesuiteofdevelopmentanddeploymenttechnologies
allavailabletopartnersondemand,throughtheirbrowser.Independentsoftwarevendors
canjump-starttheirentryintoon-demandcomputingwithoutriskingtheinitialinvestment.
Salesforce.comexpectsthatdevelopersandbusinessexpertsaroundtheworldwillbeable
tocontributeapplicationstotheAppExchangeandtakeadvantageofthemostcompelling
communityofsuccessinon-demandcomputing.
IBM
IBMofferscloudcomputingservicestohelpbusinessesofallsizestakeadvantageofthis
increasinglyattractivecomputingmodel.IBMisapplyingitsindustry-specificconsulting
expertiseandestablishedtechnologyrecordtooffersecureservicestocompaniesinpublic,
private,andhybridcloudmodels.
Someoftheirfeaturesinclude
• Industry-specificbusinessconsultingservicesforcloudcomputing IBMGlobal
BusinessServicesusesaneconomicmodelforassessingthetotalcostofownership
forbuildingprivateclouds,and/ormovingdataandapplicationsoff-siteinapublic
orhybridcloudmodel.
• Technologyconsulting,design,andimplementationservices IBMGlobal
TechnologyServicesoffersservicestohelpclientsinstall,configure,anddeliver
cloudcomputinginsidethedatacenter.
• Cloudsecurity SpanningIBMSystems,Software,ServicesandIBM’sResearch
andX-Forcearms,thiseffortisaimedatre-architectingandredesigning
technologiesandprocesses,toinfusesecurityandshieldagainstthreatsand
vulnerabilitiesinthecloud.
Services
IBM’sconsultingservicesuseeconomicmodelingtoassessthetotalcostofownershipfor
buildingandintegratingclouds.Initialresearchindicatesthatorganizationswillemploy
bothpublicandprivatecloudstoachievebusinessgoals,andIBMcanhelpcompaniesfind
themosteffectivebalance,andmanageitallasoneintegratedstrategy.
62 Part I: Getting Started
Inaddition,cloudtechnologyconsultingservicesareintendedtohelpclientscreate
roadmapsforreconstructingtheirITenvironments,sotheycantakeadvantageofcloud
computingmodelstoimproveoperationalefficiency,overallcarbonposture,andreturnon
investment.Withnewcloudimplementationservices,IBMwillapplyexpert-levelskills,
methods,guidance,andprojectmanagementtechniquestohelpclientsplan,configure,and
testtheservers,storage,andtechnologiesnecessarytosupportadynamictechnology
environment.
“Cloudstrategiesneedtobeinlinewithbusinessstrategies,”saidWillyChiu,vice
president,HighPerformanceonDemandSolutions,IBM.“Overthelastyearinour13
cloudcomputingcentersworldwide,we’veworkedwithclientstounderstandhowtohelp
themtakeadvantageofbothpublicandprivatecloudstogetthebesteconomics.”
MovementtotheCloud
Inadditiontoconsultingservices,IBMishelpingnewclientsmoveintothecloud.Oneof
Houston’slargestandfastest-growinghumanservicesagencies,NeighborhoodCenters
servesover200,000citizensinsouthwestTexasanddeliverskeyservicesincluding
economicdevelopmentservices,citizenship,andimmigrationservices,earlychildhood
developmentprograms,aK–5charterschool,andseniors’programs.Thenonprofit
organizationdependsonIBMcloudservicestobackupserverandPCdatafromdistributed
environments,andstoreitinsecureoff-sitelocations.
“NeighborhoodCentersisdedicatedtohelpingcitizenscopewithdisruptionandplan
forcontingenciesinlife—assecondrespondersinemergencieswesimplycannotaffordto
beshutdown,orsloweddown,byadataloss,”saidTomComella,CIO,Neighborhood
CentersInc.“IBMcloudserviceswerecriticalinourcommunityrecoveryeffortsfollowing
HurricaneIke.Sinceweexperiencednobusinessinterruptionsinanyofour20facilities,we
wereabletofocusonbringingthecommunity,ourservices,andourcitizensbackonline.
Butthebenefitsofcloudservicesreachfarbeyonddisasterrecovery.Betterdataprotection—
demonstratingthatwearegoodstewardsofinformation—hasbecomeasellingpointforus
inwillingcontracts.”
IBMResearchisworkingdirectlywithclientstocreatereplicable,cloud-delivered,
industry-specificserviceslikeLenderBusinessProcessServicesorHealthcareProcess
Services,aswellashorizontalbusinessserviceslikeCRMandsupplychainmanagement.
InChina,forexample,IBMResearchispilotinganewlydevelopedcloudcomputing
platform,code-namedProjectYun,whichisChinesefor“cloud,”forcompaniestoaccess
businessservices,designedtomaketheselectionandimplementationofnewcloudservices
aseasyasselectinganitemfromadrop-downmenu.Withnoneedforback-end
provisioning,theIBMplatformstandstocutthetimerequiredtodelivernewservices
dramatically.TheYunplatformallocatesstorage,server,andnetworkresourcesforthe
customerapplicationwithzerohumaninput,achievingtopperformance,availability,and
powerutilization.
OneofChina’slargestretailerswithmorethan10millioncustomersperday,WangFu
JingDepartmentStorehasdeployedseveralkeycloudservicesfromProjectYun,including
asupplychainmanagementsolutionforitsvastnetworkofretailstorestoeasilyshare
supplychaininformationandvisualizetheexecutionofbusiness-to-business(B2B)
processeswiththousandsoftheirownsmallandmedium-sizebusiness(SMB)suppliers
viathecloud.
Chapter 3: Cloud Computing with the Titans 63
Security
Toensurethewidespreadadoptionofcloudcomputingservices,IBMinitiatedacompany-
wideprojecttoformaunifiedandcomprehensivesecurityarchitectureforcloudcomputing
PART I
environments.Theeffort—whichspansSystems,Software,Services,andIBM’sResearch
andX-Forcearms—isaimedatre-architectingandredesigningtechnologiesandprocesses,
toinfusesecurityandshieldagainstthreatsandvulnerabilities.Securityisbuiltintothe
cloud,notaddedasanafterthought.
Theprojectincorporatesnext-generationsecurityandcloudservicemanagement
technologies,aswellassimplifiedsecuritymanagementandenforcement,offering
enterprisecustomersthesamesecurityandcomplianceguaranteesthatareequivalenttoor
betterthanwhattheycanexpectintraditionalcomputingenvironments.
BuiltuponIBM’sextensiveindustrysecurityleadership,theprojectfocuseson
developingtrustedvirtualdomains,authentication,isolationmanagement,policyand
integritymanagement,andaccesscontroltechnologiesdesignedspecificallyforcloud
computing.
Partnerships
Noteverybodyisintothecloudforthesamereasons.ItisclearthatGoogleandMicrosoft
(andmostotherproviders,tobehonest)aretryingtomakeabuck.Butnoteveryoneis.In
fact,acoupleofinterestingpartnershipsareshowinghowthecloudcanbeusedwithout
seeingmoneychangehands(atleastnotyet).
Yahoo!Research
Yahoo!takesadifferentapproachtothecloud—whileitdoesn’tofferthesamesortsof
servicesasGoogleandMicrosoft,Yahoo!hasfocuseditscloudenergiesonprovidinga
sciencethathelpsimprovebusinessprocesses.Itsscientistsexaminedata-drivenanalysis,
high-qualitysearch,algorithms,andeconomicmodels.Yahoo!manageslargedata
repositoriesandresearchersmineinformationfromthiscollection.Yahoo!strivesto
collaboratewithpeersfromacademicandresearchinstitutionsandprovidesanacademic
setting.
Collaboration
Yahoo!andComputationalResearchLaboratories(CRL)setoutinapartnershiptoresearch
cloudcomputing.Aspartoftheiragreement,CRLwillmakeavailabletoresearchersoneof
theworld’stopfivesupercomputers,whichhassubstantiallymoreprocessorsthanany
supercomputercurrentlyavailableforcloudcomputingresearch.
Thiseffortisthefirstofitskindintermsofthesizeandscaleofthemachine,andthe
firstinmakingavailableasupercomputertoacademicinstitutionsinIndia.TheYahoo!/
CRLeffortisintendedtoleverageCRL’sexpertiseinhigh-performancecomputingand
Yahoo!’stechnicalleadershipinApacheHadoop,anopen-sourcedistributedcomputing
projectoftheApacheSoftwareFoundation,toenablescientiststoperformdata-intensive
computingresearchona14,400-processorsupercomputer.
CalledtheEKA,CRL’ssupercomputerisrankedthefourthfastestsupercomputerinthe
world—ithas14,400processors,28terabytesofmemory,140terabytesofdiskspace,apeak
performanceof180trillioncalculationspersecond(180teraflops),andsustained
64 Part I: Getting Started
computationcapacityof120teraflopsfortheLINPACKbenchmark.Ofthetopten
supercomputersintheworld,EKAistheonlysupercomputerfundedbytheprivatesector
andisavailableforuseoncommercialterms.EKAisexpectedtorunthelatestversionof
Hadoopandotherstate-of-the-art,Yahoo!-supported,open-sourcedistributedcomputing
softwaresuchasthePigparallelprogramminglanguagedevelopedbyYahoo!Research.
Benefits
“TheTatagrouphasalwayscontributedtoscientificresearchinIndia,andtheEKAwill
strengthenthiscausefurtherinthefieldofcloudcomputing.Thispartnershipbrings
togetherYahoo!’sleadershiproleinthedevelopmentofHadoopandCRL’sexpertiseinhigh
performancecomputing,andwillhelpbridgethegapbetweentraditionalsupercomputing
andcloudcomputingresearchinIndia,”saidS.Ramadorai,chairmanofCRL.
“WeareexcitedtopartnerwithYahoo!toadvancecloudcomputingresearchinIndiaas
itopensupanewarenaofexcitingopportunities,”saidDr.GautamShroff,memberofthe
steeringcommitteeofCRL.“WeareinitiatingdialoguewithleadingIndianacademic
institutionstocollaborateonresearchusingcloudcomputing.”
“Wehavemadeourleadershipinsupportingacademic,cloudcomputingresearchvery
concretebysharinga4,000-processorsupercomputerwithcomputerscientistsatCarnegie
MellonUniversityforthelastthreemonths.Withthissupercomputingcluster,researchers
wereabletoanalyzehundredsofmillionsofWebdocumentsandhandletwoordersof
magnitudemoredatathantheypreviouslycould,”saidRonBrachman,vicepresident
andheadofacademicrelationsforYahoo!.“Launchingourcloudcomputingprogram
internationallywithCRLisanothersignificantmilestoneincreatingaglobal,collaborative
researchcommunityworkingtoadvancethenewsciencesoftheInternet.”
SAPandIBM
SAPhasalsopartneredwithanotherlarge,well-knowncompany—IBM.Intheirendeavor,
SAPisusingthecloudtomigrateSAPapplicationsliveacrossremoteIBMPOWER6systems.
Thetechnology,developedasapartoftheEuropeanUnion–fundedResourcesand
ServicesVirtualizationWithoutBarriers(RESERVOIR)cloudcomputingproject,isdesigned
toprovidecompanieswitharangeofcloudcomputingsolutionstomeettheirspecific
businessneeds.
ThecloudapproachtodeliveringandconsumingITprovidesanswerstothechallenges
manybusinessesfacetoday:theimmensecomplexityofsprawlingdatacenters,thegrowing
costofenergy,andtheneedtodynamicallyadapttheallocationofITresourcesto
constantlychangingworkloadsandbusinesspriorities.
Inatechnologydemonstration,IBMandSAPshowedhowuserscanrunenterprise
applicationsinthecloud,inparticulardemonstratingthemigrationofworkloadsacross
physicalserversandacrossdatacenters.
“Thebreakthroughwe’reshowingisthatapplicationscanflexiblymoveacrossremote
physicalservers,regardlessoflocation—whichmakesourworkastrongenablingtechnology
forthecloud,”explainedDr.JoachimSchaper,vicepresidentofSAPResearch.“Specifically,
incloud-scaleenvironments,serviceproviderswillneedtoprovideuserswithaccessto
servicesacrossthecloud.ServiceproviderswillneedtocompeteonperformanceandQuality
ofService—andsothefuturecloudwillneedtosupportapplicationmobilityacrossdisparate
datacenterstoenhanceperformance.”
Chapter 3: Cloud Computing with the Titans 65
“WithRESERVOIR,ouraimistoprovidecloudtechnologiesthatwillenableenergy-
efficient,borderlessdeliveryofITservicesthataredrivenbyactualdemands—withthe
goalofkeepingcostscompetitive,”saidDr.YaronWolfsthal,seniormanagerforsystem
PART I
technologiesatIBM’sResearchLabinHaifa,Israel,wherethetechnologywasdeveloped.
“Thenewtechnologyisallowingustorealizethevisionoftruecloudcomputingbymoving
applicationsacrossdisparateinterconnectednetworkstooptimizeloadbalancingacross
remoteservers.Whenchangesinworkloadoccur,thenewtechnologyautonomically
balancesresourceutilizationandpowerconsumptionacrossremoteservers.Thisisdone,
forexample,byevacuatingandturningoffunderutilizedservers(andpossiblyentire
datacenters)whendemanddrops,andpoweringonidleserverswhenloadincreases.”
Intheirdemonstration,themigrationofSAPworkloadsacrossthecloudissupported
byIBM’sPOWER6systems,whichenableuserstorunseparateapplicationsondifferent
virtualmachines,calledlogicalpartitions,onthesamephysicalserver.TheIBMPOWER6
system’sLivePartitionMobilitycapabilityfurtherallowsforthemovementofapartition
fromonePOWER6-basedservertoanotherPOWER6-basedserverinthedatacenterwithno
applicationdowntime,resultinginbettersystemutilization,improvedapplication
availability,andenergysavings.
ThecollaborativeresearchrelationshipbetweenSAPandIBMbeganin1999andhas
sincedevelopedarichportfolioofresearchactivities.Onaquarterlybasis,research
managementandkeyresearchersfrombothorganizationsmeettoidentifytopicsofmutual
interestandtoleveragetheopencollaborativeresearchmodel,includingtheEU-sponsored
FP7program,inordertodefinenewprojectareasthatwillleadtoexcitingnewresearch
results.Besidescloudcomputing,keyareasofinterestarebusinessprocessmanagement,
servicesscienceandengineering,model-drivensoftwaredevelopment,andsecurityand
compliance.
RESERVOIRisanIBM-ledjointresearchinitiativeof13Europeanpartnerstodevelop
technologiesthathelpautomatethefluctuatingdemandforITresourcesinacloud
computingenvironment.The17M-EuroEU-fundedinitiative,calledRESERVOIR—
ResourcesandServicesVirtualizationWithoutBarriers—exploresthedeploymentand
managementofITservicesacrossdifferentadministrativedomains,ITplatforms,and
geographies.Thiscloudcomputingprojectaimstodeveloptechnologiestosupporta
service-basedonlineeconomy,whereresourcesandservicesaretransparentlyprovisioned
andmanaged.
HP,Intel,andYahoo!
HP,IntelCorporation,andYahoo!havecreatedaglobal,multidatacenter,open-sourcetest
bedfortheadvancementofcloudcomputingresearchandeducation.Thegoalofthe
initiativeistopromoteopencollaborationamongindustry,academia,andgovernmentsby
removingthefinancialandlogisticalbarrierstoresearchindata-intensive,Internet-scale
computing.
TestBed
TheHP,Intel,andYahoo!CloudComputingTestBedprovidesagloballydistributed,
Internet-scaletestingenvironmentdesignedtoencourageresearchonthesoftware,datacenter
management,andhardwareissuesassociatedwithcloudcomputingatalargerscalethan
everbefore.Theinitiativewillalsosupportresearchintocloudapplicationsandservices.
66 Part I: Getting Started
HP,Intel,andYahoo!havepartneredwiththeInfocommDevelopmentAuthorityof
Singapore(IDA),theUniversityofIllinoisatUrbana-Champaign,andtheKarlsruhe
InstituteofTechnology(KIT)inGermanytoformtheresearchinitiative.Thepartnership
withIllinoisalsoincludestheNationalScienceFoundation.
Thetestbedwillinitiallyconsistofsix“centersofexcellence”atIDAfacilities,the
UniversityofIllinoisatUrbana-Champaign,theSteinbuchCentreforComputingofthe
KarlsruheInstituteofTechnology,HPLabs,IntelResearch,andYahoo!.Eachlocationwill
hostacloudcomputinginfrastructure,largelybasedonHPhardwareandIntelprocessors,
andwillhave1,000to4,000processorcorescapableofsupportingthedata-intensive
researchassociatedwithcloudcomputing.Thetestbedlocationsareexpectedtobefully
operationalandmadeaccessibletoresearchersworldwidethroughaselectionprocesslater
thisyear.
ThetestbedleveragesYahoo!’stechnicalabilityinopen-sourceprojectsbyrunning
ApacheHadoop—anopen-source,distributedcomputingprojectoftheApacheSoftware
Foundation—andotheropen-source,distributedcomputingsoftwaresuchasPig,the
parallelprogramminglanguagedevelopedbyYahoo!Research.
“TheHP,Intel,andYahoo!CloudComputingTestBedfurthersourcommitmenttothe
global,collaborativeresearchcommunitythatisadvancingthenewsciencesoftheInternet,”
saidPrabhakarRaghavan,headofYahoo!Research.“Withthistestbed,notonlycan
researcherstestapplicationsatInternetscale,theywillalsohaveaccesstotheunderlying
computingsystemstoadvanceunderstandingofhowsystemssoftwareandhardware
functioninacloudenvironment.”
ResearchersatHPLabs,thecentralresearcharmofHP,willusethetestbedtoconduct
advancedresearchintheareasofintelligentinfrastructureanddynamiccloudservices.HP
LabsrecentlysharpeneditsfocustohelpHPanditscustomerscapitalizeontheindustry’s
shifttowardcloudcomputing,adrivingforcebehindHP’svisionofEverythingasaService.
WithEverythingasaService,devicesandserviceswillinteractseamlesslythroughthecloud,
andbusinessesandindividualswilluseservicesthatanticipatetheirneedsbasedonlocation,
preferences,calendar,andcommunities.
“Torealizethefullpotentialofcloudcomputing,thetechnologyindustrymustthink
aboutthecloudasaplatformforcreatingnewservicesandexperiences.Thisrequiresan
entirelynewapproachtothewaywedesign,deploy,andmanagecloudinfrastructureand
services,”saidPrithBanerjee,seniorvicepresidentofresearchatHPanddirectorofHP
Labs.“TheHP,Intel,andYahoo!CloudComputingTestBedletsustapthebrightestminds
intheindustry,academiaandgovernmenttodriveinnovationinthisarea.”
CurrentplatformfeaturessuchasDataCenterManagementInterface(DCMI),Node
Manager(NM),andvirtualizationhavebeendesignedtoimprovethemanageabilityand
energyefficiencyofdatacenters.Thisopen,collaborativeresearcheffortwillgive
researchersfullaccesstothesystem’shardwareforfurtherinnovationofexistingandfuture
platformfeatures.
“Wearepleasedtoengagewiththeacademicresearchcommunity—opencollaboration
withtheacademiaisinourDNAatIntelResearch,”saidAndrewA.Chien,vicepresident
anddirectorofIntelResearch.“Creatinglarge-scaletestbedsisimportantbecausethey
lowerbarrierstoinnovationandprovidetheopportunitytoexperimentandlearnatscale.
Intel’ssupportofTashi,anopen-sourceclustermanagementsystemforcloudcomputing,
andthisHP,Intel,Yahoo!CloudComputingTestBedareanaturalextensionofour
Chapter 3: Cloud Computing with the Titans 67
ongoing,mutuallybeneficialpartnershipswiththeresearchcommunity,suchasthe
UniversalParallelComputingResearchCenters.”
IDAfacilitatesresearchinthetestbedbyprovidingitsuserswiththecomputing
PART I
resourcesrequiredtodevelopcloudcomputingsoftwareandapplications.IDAwillalso
leveragethetestbedanditsindustrypartnershipstotrainlocalstudentsandprofessionals
onthetechnologiesandprogramsassociatedwithcloudcomputing.
“WiththereadyandavailableInternet-scaleresourcesinSingaporetosupportcloud
computerresearchanddevelopmentwork,wecancollaboratewithlike-mindedpartnersto
advancethefield,”saidKhoongHockYun,assistantchiefexecutiveoftheInfrastructure
DevelopmentGroupattheInfocommDevelopmentAuthorityofSingapore.“Cloud
computingisconsideredbymanytobethenextparadigmshiftincomputertechnology,
andthismaybethenext‘platform’forinnovativeecosystems.Partnershipslikethiswill
allowSingaporetoleveragethisnewparadigmforgreatereconomicandsocialgrowth.”
DeeperintotheCloud
TheCloudComputingTestBedisthenextstepinexpandingeachcompany’songoing
initiativesincloudcomputing.InNovember2007,Yahoo!announcedthedeploymentofa
supercomputing-classdatacenter,calledM45,forcloudcomputingresearch;Carnegie
MellonUniversitywasthefirstinstitutiontotakeadvantageofthissupercomputer.
In2008,HPannouncedtheformationofitsScalableComputing&Infrastructure
Organization(SCI),whichincludesadedicatedsetofresourcesthatprovideexpertiseand
spearheaddevelopmenteffortstobuildscalablesolutionsdesignedforhigh-performance
andcloudcomputingcustomers.Thecompanyintroducedscalablecomputingofferings
includingtheIntelXeon-basedHPProLiantBL2x220cG5,theworld’sfirstserverbladeto
combinetwoindependentserversinasingleblade,andtheHPStorageWorks9100Extreme
DataStorageSystem(ExDS9100),ahighlyscalablestoragesystemdesignedtosimplifythe
managementofmultiplepetabytes.HPalsointroducedtheHPPOD(Performance-
OptimizedDatacenter),anopen-architecture,compact,shipped-to-orderalternativefor
deployingITresources.
IBMandAmazon
IBMalsoenteredintoanagreementwithAmazonWebServicestodeliverIBM’ssoftwareto
clientsanddevelopers.Thepay-as-you-gomodelprovidesclientswithaccesstodevelopment
andproductioninstancesofIBMDB2,InformixDynamicServer,WebSpherePortal,Lotus
WebContentManagement,WebSpheresMash,andNovell’sSUSELinuxoperatingsystem
softwareintheAmazonEC2environment,providingacomprehensiveportfolioofproducts
availableonAWS.
Businessesarelookingforwaystoquicklybuild,deploy,andtakeadvantageofthe
flexibilitythatcloudcomputingenvironmentscanbring.Thisischallengingfororganizations
thatareconstrainedbylimitedresources,technicalskills,andcapital,astheylooktotheirIT
infrastructuretohelpthemgainacompetitiveadvantage.IBMandAmazonWebServices
arehelpingtoaddressthesechallengesbymakingiteasierforsoftwaredeveloperstobuild
solutionsbasedonopenstandardsandbackedupbythenecessarytechnicalresourcestohelp
simplifytheprocess.
IBMismakingavailablenewAmazonMachineImages(AMIs)atnochargefordevelopment
andtestpurposes,enablingsoftwaredeveloperstoquicklybuildpreproductionapplications
68 Part I: Getting Started
basedonIBMsoftwarewithinAmazonEC2.Thenewportfoliowillovertimeextendtoinclude
ServiceManagementcapabilitiesfromIBMTivolisoftwareforAmazonEC2tohelpclientsbetter
controlandautomatetheirdynamicinfrastructuresinthecloud.
Additionally,customerswillalsobeabletoruntheiralready-purchasedIBMsoftware
onAmazonEC2.
“IBMisofferingyetanotherwayforourpartnersandcustomerstobuildsolutions
thatcanhelpthemmeettheirbusinessgoals,”saidDaveMitchell,directorofstrategyand
emergingbusiness,IBMSoftwareGroup.“ThisrelationshipwithAmazonWebServices
providesourcustomerswithanewwaytouseIBMsoftwareandbroadensourdistribution
channels.”
“WearepleasedtobeworkingwithIBMtoextendthisnewmodelforbuildingand
deployingapplicationstocompaniesofallsizes,”saidTerryWise,directorofbusiness
developmentforAmazonWebServices.“ExtendingIBMsoftwaretothecloudviaAmazon
EC2willhelpevenmorebusinessestakeadvantageofthebenefitsofthereliable,scalable,
andcostefficientinfrastructureinthecloud.”
Wesimplydon’thavethespacetowriteaboutallthecloudcomputingplayers,butthis
isasamplingofsomeofthebiggestnamesandtheirbiggestinitiatives.Inthenextchapter
we’lltalkmoreaboutthebusinesscaseformovingsomeofyourresourcestothecloud,
whichonestomove,andhowyoucanbestusethecloud.
CHAPTER
4
The Business Case for
Going to the Cloud
W
hetherornotyoumovetotheclouddependsonyourorganization,whatyou
needtoaccomplish,andwhetherornotthecloudcanhelpyoudoit.Whilethis
bookisallaboutcloudcomputing(youcantellfromthetitle),we’renottelling
youthatyouabsolutelyshouldmovetothecloud.Infact,thereareinstanceswhereyou
shouldnotmovetothecloud.Buttherearealsoinstanceswhenyoucertainlyshouldadd
cloudcomputingtoyourITrepertoire.
Inthischapterwe’lltalkabouthowyourorganizationwouldbenefitfromacloudmove.
We’llalsotalkabouthowdifferentcloudservices(PaaS,SaaS,andsoon)canserveyou.
WehadtheopportunitytotalktoSteveFisher,seniorvicepresidentofAppExchangeat
Salesforce.com,aboutwhathiscompanyoffersandaboutmovingyourbusiness’sprocesses
tothecloud.WewerefortunateenoughtogetsometimewithChristopherCrowhurst,VP
ofStrategicTechnologyatThomsonReuters.Wetalkedwithhimabouthowbusinessescan
identifyviableapplicationsfrommigrationtoacloud-basedplatform.Healsooutlinedsome
ofthetrendshe’sseeingnow,andsomeheexpectstoseeinthefuture.
CloudComputingServices
Yourorganizationcanbenefitfromthecloudindifferentguises.Inthissectionwe’lltalk
aboutthedifferentwaysyourorganizationcanutilizedifferentservicesaswellashowsome
organizationsaredoingjustthat.
InfrastructureasaService
Let’sfirsttalkaboutInfrastructureasaService.Inthisscenario,you’reusingthecloud
provider’smachines.AnothertermforthistypeofcomputingisEverythingasaService.
Thatis,youareusingavirtualizedserverandrunningsoftwareonit.Oneofthemost
prevalentisAmazonElasticComputeCloud(EC2).AnotherplayerinthefieldisGoGrid.
Inthissectionwe’lltakeacloserlookatbothAmazonandGoGrid.
69
70 Part I: Getting Started
AmazonEC2
AswenotedinChapter3,AmazonElasticComputeCloud(http://aws.amazon.com/ec2)
isawebservicethatprovidesresizablecomputingcapacityinthecloud.AmazonEC2’s
simplewebserviceinterfaceallowsbusinessestoobtainandconfigurecapacitywith
minimalfriction.Itprovidescontrolofcomputingresourcesandletsorganizationsrunon
Amazon’scomputingenvironment.
AmazonEC2reducesthetimerequiredtoobtainandbootnewserverinstancesto
minutes,allowingquickscalingcapacity,bothupanddown,ascomputingrequirements
change.AmazonEC2changestheeconomicsofcomputingbyallowingyoutopayonlyfor
capacitythatyouactuallyuse.
“WhenwelaunchedAmazonEC2overtwoyearsago,theideaofaccessingcomputing
poweroverthewebwasstillanovelidea.Todayadiversearrayofbusinessesdrawnbythe
benefitsofcloudcomputing—costsavingswithoutgivingupspeed,reliability,flexibility,
andperformance—arerunningEC2foralltypesofapplications,”saidPeterDeSantis,
generalmanagerofAmazonEC2.“We’velistenedcloselytoourcustomersforthepasttwo
yearsandworkedbackwardfromtheirrequirements,addingimportantnewfeaturessuch
asthoseweareannouncingtoday—WindowssupportandaServiceLevelAgreement.”
EliLillyandCompanyisonecompanythathasmovedtoAmazonEC2aspartoftheir
IToperations.AsapartofLilly’seffortstofindnewandimprovedmethodstosupport
research,LillybeganusingAmazonWebServices(AWS).
“AmazonEC2hasgivenustheabilitytoeasilyspinuptailoredcomputingenvironments
thatcanquicklyandcost-effectivelyprocesstremendousamountsofresearchdata,”said
DavePowers,associateinformationconsultantatEliLillyandCompany.“Thisisahugestep
forwardinmaximizingourresultsrelativetoITspend,andnowthatAmazonEC2runs
WindowsandSQLServer,wehaveevengreaterflexibilityinthekindsofapplicationswecan
buildintheAWScloud.”
WindowsandSQLServerSupportforAmazonEC2 CustomerscanemployAmazonEC2
runningWindowsServerorSQLServerwithallofthebenefitsofAmazonEC2.Windows
withAmazonEC2hasbeenacommonrequestofAWScustomerssincetheservice
launched.AmazonEC2providesanenvironmentfordeployingASP.NETwebsites,high-
performancecomputingclusters,mediatranscodingsolutions,andmanyotherWindows-
basedapplications.
“RenderRocketdeliversprofessional-levelrenderingpoweron-demandto3-Dproduction
teams.Welaunchintensive3-DrenderingjobsforfilmsandTVonAmazonEC2totake
advantageofAmazon’smassivecomputepower.Wepayonlyfortheresourcesweconsume,
andcanexpandouruseofAmazonEC2inrelationtothegrowthofourbusiness.Amazon
EC2runningWindowsServeroffersadditionalopportunitiestogrowourbusinessbyoffering
Windows-basedservicestoourcustomers,”saidRubenPerez,CEOofRenderRocket.
NOTE FormoreinformationaboutAmazonEC2runningWindowsorSQLServer,pleasegoto
aws.amazon.com/windows.
AmazonEC2ServiceLevelAgreement WithovertwoyearsofoperationAmazonEC2exited
itsbetaintogeneralavailabilityandofferscustomersaServiceLevelAgreement(SLA).
TheAmazonEC2SLAguarantees99.95percentavailabilityoftheservicewithinaregion
Chapter 4: The Business Case for Going to the Cloud 71
overatrailing365-dayperiod,orcustomersareeligibletoreceiveservicecreditsback.
TheAmazonEC2SLAisdesignedtogivecustomersadditionalconfidencethateventhe
mostdemandingapplicationswillrundependablyintheAWScloud.
PART I
RecentFeatures In2009,AWSannouncedplansforseveralnewfeaturesthatmakemanaging
cloud-basedapplicationseasier.Thousandsofcustomersemploythecomputepowerof
AmazonEC2tobuildscalableandreliablesolutions.AWSwilldeliveradditionalfeaturesthat
automatecustomerusageofAmazonEC2formorecost-efficientconsumptionofcomputing
powerandprovidegreatervisibilityintotheoperationalhealthofanapplicationrunningin
theAWScloud.Thesefeaturesinclude
• Loadbalancing Enablescustomerstobalanceincomingrequestsanddistribute
trafficacrossmultipleAmazonEC2computeinstances.
• Auto-scaling AutomaticallygrowsandshrinksusageofAmazonEC2compute
capacitybasedonapplicationrequirements.
• Monitoring EnablescustomerstomonitoroperationalmetricsofAmazonEC2,
providingevenbettervisibilityintousageoftheAWScloud.
• ManagementConsole Providesasimple,point-and-clickwebinterfacethatlets
customersmanageandaccesstheirAWScloudresources.
NOTE FormoreinformationaboutAmazonEC2andotherAWSservices,gotohttp://aws.amazon.com.
GoGrid
GoGridisaserviceproviderofWindowsandLinuxcloud-basedserverhosting,andoffers
32-bitand64-biteditionsofWindowsServer2008withinitscloudcomputinginfrastructure.
ParentcompanyServePathisaMicrosoftGoldCertifiedPartner,andlaunchedWindows
Server2008dedicatedhostinginFebruaryofthisyear.
GoGridbecomesoneofthefirstInfrastructureasaService(IaaS)providerstooffer
WindowsServer2008“inthecloud.”TheWindowsServer2008operatingsystemfrom
Microsoftoffersincreasedserverstability,manageability,andsecurityoverprevious
versionsofWindowsServer.Assuch,interestfromWindowsServercustomerswantingto
tryitouthasbeenhigh.GoGridcustomerscandeployWindowsServer2008serversinjust
afewminutesforaslittleas19centsanhour,withnocommitment.
GoGridenablessystemadministratorstoquicklyandeasilycreate,deploy,load-balance,
andmanageWindowsandLinuxcloudserverswithinminutes.GoGridofferswhatitcalls
ControlintheCloudTMwithitsweb-basedGraphicalUserInterface(GUI)thatallowsfor
“pointandclick”deploymentofcomplexandflexiblenetworkinfrastructures,which
includeloadbalancingandmultiplewebanddatabaseservers,allsetupwithiconsthrough
theGUI.
InitialWindowsServer2008offeringsonGoGridincludeboth32-bitand64-bit
preconfiguredtemplates.GoGridusersselectthedesiredoperatingsystemandthen
choosepreconfiguredtemplatesinordertominimizetimetodeploy.Preconfigurations
include
• WindowsServer2008StandardwithInternetInformationServices7.0(IIS7)
• WindowsServer2008StandardwithIIS7andSQLServer2005ExpressEdition
72 Part I: Getting Started
• WindowsServer2008StandardwithIIS7,SQLServer2005ExpressEdition,and
ASP.NET
WindowsServer2008StandardincludesTerminalServicesGateway,RemoteDesktop
ClientforTerminalServices,ApplicationServer,ActiveDirectoryDomainServices,DHCP
Server,DNSServer,andSMTP.
PlatformasaService
PlatformasaService(PaaS)isawaytobuildapplicationsandhavethemhostedbythe
cloudprovider.Itallowsyoutodeployapplicationswithouthavingtospendthemoneyto
buytheserversonwhichtohousethem.Inthissectionwe’lltakeacloserlookatcompanies
RightScaleandGoogle.We’lltalkabouttheirservices,whattheyoffer,andwhatother
companiesaregettingoutofthoseservices.
RightScale
RightScaleenteredintoastrategicproductandpartnership,broadeningitscloud
managementplatformtosupportemergingcloudsfromnewvendors,includingFlexiScale
andGoGrid,whilecontinuingitssupportforAmazon’sEC2.RightScaleisalsoworking
withRackspacetoensurecompatibilitywiththeircloudofferings,includingMossoand
CloudFS.RightScaleoffersanintegratedmanagementdashboard,whereapplicationscan
bedeployedonceandmanagedacrosstheseandotherclouds.
Businessescantakeadvantageofthenearlyinfinitescalabilityofcloudcomputingby
usingRightScaletodeploytheirapplicationsonasupportedcloudprovider.Theygainthe
capabilitiesofbuilt-inredundancy,faulttolerance,andgeographicaldistributionof
resources—keyenterprisedemandsforcloudproviders.
CustomerscanleveragetheRightScalecloudmanagementplatformtoautomatically
deployandmanagetheirwebapplications—scalingupwhentrafficdemands,andscaling
backasappropriate—allowingthemtofocusontheircorebusinessobjectives.RightScale’s
automatedsystemmanagement,prepackagedandreusablecomponents,leadingservice
expertise,andbestpracticeshavebeenprovenasbest-of-breed,withcustomersdeploying
hundredsofthousandsofinstancesonAmazon’sEC2.
“Cloudcomputingisadisruptiveforceinthebusinessworldbecauseitprovidespay-
as-you-go,on-demand,virtuallyinfinitecomputeandstorageresourcesthatcanexpandor
contractasneeded,”saidMichaelCrandell,CEOofRightScale,Inc.“Anumberofpublic
providersarealreadyadoptingcloudarchitectures—andwealsoseeprivateenterprise
cloudscomingonthehorizon.Today’sannouncementofRightScale’spartnershipswith
FlexiScaleandGoGridisanexcitingindicationofhowmid-marketandenterprise
organizationscanreallytakeadvantageofmulticloudarchitectures.Therewillbehuge
opportunitiesforapplicationdesignanddeployment—weareatthebeginningofatidal
shiftinITinfrastructure.”
FlexiScaleistheonlyUK-basedcloudcomputingproviderandoffersaunique
infrastructureondemandwith99.99percentSLAandmanyspecialfeatures.Forexample,
eachcustomergetstheirownvirtualdisksothatdataissegregatedandtheycandotheir
ownlow-levelencryption,whilevirtualnetworktrafficisalsosegregatedtodeliveradded
security.FlexiScaleuniquelyofferspermanenton-demandstorageandwasthefirstcloud
providertosupportWindows.Withastrongreputationforcustomerservice,italsoenables
thecreationofcustompackagessuchasgoldenimages.
Chapter 4: The Business Case for Going to the Cloud 73
TonyLucas,CEOofXCalibreandcreatorofFlexiScale,commented:“Withoutthisnew
abilitytomoveswiftlyandeasilybetweenplatforms,customerscouldfeellockedinand
muchmorehesitanttotryandusecloudcomputing.RightScale’spartnershipinitiativeisa
PART I
greatexampleofhowhavingnearinteroperabilitybetweensystemswillenablecustomers
tobelesshesitantofmovingtoanewtechnology,whichisgreatforeveryone.Itmeansthe
industrycanandwillgrowquickerthanifitwasonlyahandfulofindividualcompanies
providingdistinctservicesthatweren’tcompatiblewitheachother.”
GoGridoffershostedcloudcomputinginfrastructurethatenablessystemadministrators,
developers,andITprofessionalstocreate,deploy,andcontrolload-balancedcloudservers
andcomplexhostedvirtualservernetworks.GoGridalsodeliversportal-controlledservers
forWindows2003and2008andmultipleLinuxoperatingsystems,andsupportsapplication
environmentslikeRubyonRails.GoGridisuniqueincloudcomputingwiththeavailability
of32-bitand64-biteditionsofWindowsServer2008,andwasnamedwinnerofLinuxWorld
2008“BestofShow”inAugust2008.
“CloudcomputingfortheenterprisehasarrivedwiththeGoGridandRightScale
partnership,”saidGoGridCEO,JohnKeagy.“Corporationsnowhavefewexcusesnotto,
andmultiplereasonstodeployandmanagecomplexandredundantcloudinfrastructures
inreal-timeusingtheGoGrid,RightScale,andFlexiScaletechnologies.”
RackspaceHostingprovidesITsystemsandcomputing-as-a-servicetomorethan
33,000customersworldwide.CombiningRightScale’stechnologieswithRackspace’sfocus
onFanaticalSupportwillallowcompaniestofocusmoreontheirbusinessandnotspend
adisproportionateamountofresourcesonITdemands.
Salesforce.com
Salesforce.comoffersForce.comasitson-demandplatform.Force.comfeaturesbreakthrough
Visualforcetechnology,whichallowscustomers,developers,andISVstodesignanyapp,
foranyuser,anywherewiththeworld’sfirstUserInterface-as-a-Service.TheForce.com
platformoffersglobalinfrastructureandservicesfordatabase,logic,workflow,integration,
userinterface,andapplicationexchange.
“WithForce.com,customers,developersandISVscanchooseinnovation,not
infrastructure,”saidMarcBenioff,chairmanandCEO,Salesforce.com.“Google,Amazon,
andApplehaveallshownthatbyrevolutionizingauserinterfaceyoucanrevolutionizean
industry.WithVisualforcewe’regivingdevelopersthepowertorevolutionizeanyinterface,
andanyindustry,ondemand.”
AcapabilityoftheForce.complatform,Visualforceprovidesaframeworkforcreating
userexperiences,andenablesthecreationofnewinterfacedesignsanduserinteractionsto
bebuiltanddeliveredwithnosoftwareorhardwareinfrastructurerequirements.With
Visualforce,developershavecontroloverthelookandfeeloftheirForce.comapplications
enablingwideflexibilityintermsofapplicationcreation.Fromahandhelddeviceforasales
repinthefield,toanorder-entrykioskonamanufacturingshopfloor,Visualforceenables
thecreationofnewuserexperiencesthatcanbecustomizedanddeliveredinrealtimeon
anyscreen.
OnDemand Force.comPaaSprovidesthebuildingblocksnecessarytobuildbusinessapps,
whethertheyaresimpleorsophisticated,andautomaticallydeploythemasaserviceto
smallteamsorentireenterprises.TheForce.complatformgivescustomersthepowertorun
74 Part I: Getting Started
multipleapplicationswithinthesameSalesforceinstance,allowingallofacompany’s
Salesforceapplicationstoshareacommonsecuritymodel,datamodel,anduserinterface.
ThemultitenantForce.complatformencompassesafeaturesetforthecreationof
businessapplicationssuchasanon-demandoperatingsystem,theabilitytocreateany
databaseondemand,aworkflowengineformanagingcollaborationbetweenusers,the
ApexCodeprogramminglanguageforbuildingcomplexlogic,theForce.comWebServices
APIforprogrammaticaccess,mashups,andintegrationwithotherapplicationsanddata,
andnowVisualforceforaframeworktobuildanyuserinterface.
Delivery AspartoftheForce.complatform,Visualforcegivescustomersthemeansto
designapplicationuserinterfacesforanyexperienceonanyscreen.Usingthelogicand
workflowintelligenceprovidedbyApexCode,Visualforceofferstheabilitytomeetthe
requirementsofapplicationsthatfeaturedifferenttypesofusersonavarietyofdevices.
VisualforceusesInternettechnology,includingHTML,AJAXandFlex,forbusiness
applications.Visualforceenablesthecreationanddeliveryofanyuserexperience,offering
controloveranapplication’sdesignandbehaviorthatisonlylimitedbytheimagination.
Visualforceprovidesapage-basedmodel,builtonstandardHTMLandweb
presentationtechnologies,andiscomplementedwithbothacomponentlibraryfor
implementingcommonuserinterfaceelements,andacontrollermodelforcreatingnew
interactionsbetweenthoseelements.AspartofthelargerForce.complatform,theuser
experiencescreatedinVisualforcedirectlyleveragethedata,logic,andworkflowcreatedin
theotherForce.comfeatures.Visualforceincludesthefollowingfeaturesandcapabilities:
• Pages Thiscapabilityenablesthedesigndefinitionofanapplication’suserinterface.
Thisenablesdeveloperstocreatenewpagesusingstandardwebtechnologies
includingHTML,AJAX,andFlex.Pagesallowsdeveloperstocreateanyuser
experiencewithstandardwebtechnologiesthatwillbeimmediatelyfamiliartoany
webdeveloper.Visualforceautomaticallydetectsauser’sdevice,andgivesthemthe
abilitytoautomaticallydelivertherightexperiencetotherightdevice.
• Components Thisprovidestheabilitytocreatenewapplicationsthat
automaticallymatchthelookandfeelofSalesforceapplicationsorcustomizeand
extendtheSalesforceuserinterfacetospecificcustomeranduserrequirements.
Customerscanrapidlycreateauserexperiencebyassemblingexistinguser
interfaceelements.Visualforceprovidesthemeanstoreusepredefinedstandard
Salesforceandcustom-designedUIcomponents.
• Logiccontrollers Thecontrollerenablescustomerstobuildanyuserinterface
behavior.CustomersareabletouseVisualforcetoquicklycreateanewlookandfeel
thatleveragesexistingapplicationfunctionality.Customerscandefinecompletely
newUIinteractionsthatbenefitfromApexCode.Thestandardcontrollergives
customerstheabilitytoinheritandreuseanystandardSalesforceUIbehaviorlike
new,edit,andsave.
SoftwareasaService
WetouchedonSoftwareasaService(SaaS)abitinthepreviouschapter,butlet’stalkabout
itinmoredepth,withafurtherexaminationofSalesforceandGoogle.Inessence,SaaSis
simplythecloudvendorprovidingthegivenpieceofsoftwareyouwanttouse,ontheir
Chapter 4: The Business Case for Going to the Cloud 75
servers.Thatis,unlikePaaSinwhichyoudevelopedyourownapplication,SaaSprovides
theapplicationforyou.
ThelinebetweenSaaSandPaaSgetsalittleblurry,butthedelineationiswhetherthe
PART I
providersuppliestheapplication(SaaS)orsimplyprovidesamechanismtodevelopyourown
applications(PaaS).ThegrayareabecomesevenmoremarkedbycompanieslikeGoogleor
Salesforcethatofferbothtypesofservices.Forinstance,notonlycanyoubuildanapplication
withSalesforce,butyoucanalsoallowotherstousetheapplicationyoudeveloped.
Let’sdelvealittlemoredeeplyintoSalesforceandGoogle.
GoogleAppEngineandSalesforce
GooglehaspartneredwithSalesforcetomakeiteasyforcompaniesofallsizestoruntheir
businessinthecloudwithSalesforceforGoogleApps.ThecombinationoftheGoogleApps
suiteofproductivityapplicationsandtheSalesforcesuiteofCustomerRelationship
Management(CRM)applicationsenablesbusinessestoeffectivelycommunicateand
collaboratewithoutanyhardwareorsoftwaretodownload,install,ormaintain.Salesforce
forGoogleAppsalsoleveragestheForce.comPlatformandGoogle’sopenAPIs,opening
upevenmoredevelopmentopportunitiesfordevelopersandpartners.
NOTE Salesforce’sseniorvicepresidentofAppExchange,SteveFisher,talksabouttheircompany
andthebusinesscaseformovingyourorganizationtothecloudlaterinthischapter.
“GoogleandSalesforce.comhavealwayshadsimilarmodelsandphilosophiesabout
deliveringinnovationsmadepossiblebytheInternet,”saidEricSchmidt,CEOofGoogle.
“Salesforce.comwasapioneerinSoftware-as-a-Serviceandayearagowejoinedthemin
thismissiontobringthebenefitsofcloudcomputingtobusinessesofalltypes.Together,we
aremakingmoreapplicationsandservicesavailableonlinesocustomerscanfocuson
buildingtheircorebusinessratherthantheapplicationsthatsupportit.”
“Salesforce.comisthrilledtobeofferingGoogleAppsintegratedwithourSalesforce
applicationsandForce.comPlatform-as-a-Servicetothemillionsofbusinesseslookingto
managetheirentireofficeinthecloud,”saidMarcBenioff,chairmanandCEOofSalesforce
.com.“ThecombinationofourleadingCRMapplicationsandGoogle’sbusinessproductivity
applicationspushesforwardthetransformationoftheindustrytocloudcomputing.Theend
ofsoftwareishere.”
SalesforceforGoogleApps SalesforceforGoogleAppsisacombinationofessential
applicationsforbusinessproductivity(email,calendaring,documents,spreadsheets,
presentations,instantmessaging)andCRM(sales,marketing,serviceandsupport,partners)
thatenablesanentirelynewwayforbusinessprofessionalstocommunicate,collaborate,and
worktogetherinrealtimeovertheWeb.SalesforceforGoogleAppsoffersacompletewayfor
businessestoharnessthepowerofcloudcomputingwithoutthecostandcomplexityof
managinghardwareorsoftwareinfrastructure.Thefollowingfeaturesareincludedin
SalesforceforGoogleApps:
• SalesforceandGmail Businessescannoweasilysend,receive,andstoreemail
communication,keepingacompleterecordofcustomerinteractionsforbettersales
executionandimprovedcustomersatisfaction.
76 Part I: Getting Started
• SalesforceandGoogleDocs Create,manage,andshareonlineGoogle
Documents,GoogleSpreadsheets,andGooglePresentationswithinyoursales
organization,marketinggroup,orsupportteamforinstantcollaboration.
• SalesforceandGoogleTalk Instantlycommunicatewithcolleaguesorcustomers
fromSalesforceandoptionallyattachGoogleTalkconversationstocustomeror
prospectrecordsstoredinSalesforce.
• SalesforceandGoogleCalendar Exposesalestasksandmarketingcampaigns
fromSalesforceonGoogleCalendar.BuiltbyAppirio,thisapplicationisone
exampleofanewcategoryofpartnerextensionstoSalesforceforGoogleApps.
“WhileSalesforce.comhasalwaysenabledustoworkeasilywithclientdesktop
productivitytools,welovethatwenowhavethefreedomtorunourofficeinthecloud,”
saidPrasanVyasofUSTGlobal.
Force.comandGooglePlatform Salesforce.comandGoogle’salliancehascreatedtheworld’s
largestcloudcomputingplatformforbuildingandrunningapplications.TheForce.com
Platform-as-a-Serviceencompassesafeaturesetforthecreationofbusinessapplicationsand
Google’sopenAPIsenableintegrationandextensionoftheapplicationsinGoogleApps.
Theintegrationofthetwocreatesopportunitiesfordevelopersandpartnerstobuildandrun
businessapplicationsthathelpcustomersruntheirentirebusinesssmarterinthecloud.
Applicationslikesalesquotegenerationandbusinessforecastingarenoweasytobuildand
test,andcanbedeployedbycustomerswithjustafewclicksviatheAppExchange.
AppirioandAstadiaarethefirstcompaniestotakeadvantageofthesenewdevelopment
opportunitiesmadepossiblethroughtheGoogleandSalesforce.compartnership.Each
companyhasdevelopedseveralapplicationsthatenhanceSalesforceforGoogleApps,and
alloftheseapplicationsareavailableinacreatedAppExchangecategory,GoogleApps,at
http://www.salesforce.com/appexchange.
Google
Googleoffersahostofapplicationsthatbusinessescanuseimmediately,aswellasaplatform
onwhichtomakeyourown,business-specificapps.
Muchofabusiness’sdataisstoredonuserdesktops,laptops,orremovableUSBdrives.
GooglepromotestheirSaaSofferingsasawaytosecureyoursensitivedatabytakingUSB
anduserdiskdrivesoutoftheequation.Assuch,userscanaccesstheirdatafromtheoffice,
aremoteoffice,athome,orontheroad.Further,Googlepromises99.9percentuptime.
Googleoperatesononeofthelargestnetworksofdistributeddatacenters,andthey
strivefordatasecurity.Theysaytheircontrols,processes,andpoliciesthatprotectyour
dataundergoanSAS70TypeIIaudit.Securityfallsunderthreemaintopics:
• People Googleemploysafull-timeinformationsecurityteam,whichincludes
expertsininformation,application,andnetworksecurity.Thisteamhandlesthe
company’sperimeterdefensesystems,securityreviewprocesses,andcustomized
securityplans.
• Process EachGoogleapplicationisbuiltwithsecurityinmind.Applicationsare
constantlyreviewedforsecurityaspartoftheirSecureCodedevelopmentprocess.
Theapplicationdevelopmentenvironmentisalsorestrictedandmonitoredforan
additionallayerofsecurity.Externalsecurityauditsarealsoroutinelyconducted.
Chapter 4: The Business Case for Going to the Cloud 77
• Technology GoogleAppsdataisdividedbetweenmultipleserversanddisks,
whichmakesitimpossibletoread,ifsomeoneweretobreachaloneserver.Also,
thewayinwhichtheGoogleserversarebuiltmakesitpossibletorapidlydistribute
PART I
updatesandconfigurationchanges.
SoftwareplusServices
Microsoft’stakeonSaaSisslightlydifferentwiththeirSoftwareplusServices(sometimes
theyshortenittoS+S).Inthismodel,typicalSaaSisbolsteredwithsoftwarerunninglocally.
Thatis,yourunsomesoftwareon-siteandreachouttothecloudforadditionalservices.
Thisprovidestheflexibilityofusingacloudprovider,andalsothereliabilityofhavingdata
storedon-site,aswell.
Microsoft’sBusinessProductivityOnlineSuite,partofMicrosoftOnlineServices,is
availablefortrialtobusinessesofallsizesin19countries.Inaddition,Microsoftoffersits
MicrosoftOfficeCommunicationsOnline,forinstantmessagingandpresence,andthe
BusinessProductivityOnlineDesklessWorkerSuite,anemail,calendaring,and
collaborationservicefortheoccasionaluser.
“Theseservicesopenupnewpossibilitiesforbusinessestocontrolcostswhile
continuingtoenhancetheproductivityoftheiremployees,”saidStephenElop,presidentof
theMicrosoftBusinessDivision.“Customerscansavebetween10percentand50percentin
IT-relatedexpendituresasaresultofdeployingMicrosoftOnlineServices.”
TheworldwideavailabilityoftheDesklessWorkerSuiteofferscustomersanemailand
collaborationsolutionforoccasionalusers.Byprovidingthissubscriptionservice,Microsoft
wantstheDesklessWorkerSuitetomakeitpossiblefororganizationstogiveallemployees
accesstothesamemessagingandcollaborationsystems.Inorganizationsthathave
deployedemail,morethan40percentofemployeesdonothaveemail.
“GlaxoSmithKlinehasmorethan100,000employees,hundredsofbusinesspartners,
andlocationsaroundtheworld,soeffectivecollaborationiscriticaltoourbusiness,”said
BillLouv,CIO,GlaxoSmithKline.“WehavechosenMicrosoftOnlineServicesbecauseit
promisestodeliverasimpleintuitiveInformationWorkplacethatshouldnotonlyadd
valuetothecompanythroughsimplification,butprovideanimproveduserexperienceand
ultimatelycreateamoreproductiveGSK.”
HowThoseApplicationsHelpYourBusiness
Cloudcomputingoffersanumberofbenefitsthatyourorganizationcanrealize.There’sa
reasoncloudcomputingisthelatest“big”thingintheworldofcomputing.Ithelpsyour
organizationonanumberoflevels,nottheleastofwhichisthebottomline.Inthissection,
let’stalkalittlebitaboutwhyamovetothecloudhelpsyourorganization.
OperationalBenefits
Therearebenefitstothewayyouoperate.Youcanchangebusinessprocesses(forthe
better)bymovingsomeapplicationsandstoragetothecloud.Thefollowingaresomeofthe
operationalbenefits:
• Reducedcost Sincetechnologyispaidincrementally,yourorganizationsaves
moneyinthelongrun.
78 Part I: Getting Started
• Increasedstorage Youcanstoremoredataonthecloudthanonaprivatenetwork.
Plus,ifyouneedmoreit’seasyenoughtogetthatextrastorage.
• Automation YourITstaffnolongerneedstoworrythatanapplicationisupto
date—that’stheprovider’sjob.Andtheyknowtheyhavetokeepituptodateor
they’llstartlosingcustomers.
• Flexibility Youhavemoreflexibilitywithacloudsolution.Applicationscanbe
testedanddeployedwithease,andifitturnsoutthatagivenapplicationisn’t
gettingthejobdone,youcanswitchtoanother.
• Bettermobility UserscanaccessthecloudfromanywherewithanInternet
connection.Thisisidealforroadwarriorsortelecommuters—orsomeonewho
needstoaccessthesystemafterhours.
• BetteruseofITstaff ITstaffnolongerhastoworryaboutserverupdatesand
othercomputingissues.Theycanfocusondutiesthatmatter,ratherthanbeing
maintenancestaff.
EconomicBenefits
Wheretherubberreallymeetstheroadiswhenyouconsidertheeconomicbenefitsof
something.Andwithcloudcomputing,costisahugefactor.Butitisn’tjustinequipment
savings;itisrealizedthroughouttheorganization.Thesearesomebenefitstoconsider:
• People Wehatetosuggestthatanyonelosetheirjob,butthehonest-to-goodness
truth(we’resorry)isthatbymovingtothecloud,you’llrelyonfewerstaffers.By
havingfewerstaffmembers,youcanlookatyourteamanddecideifsuch-and-such
apersonisnecessary.Isheorshebringingsomethingtotheorganization?Aretheir
corecompetenciessomethingyoustillneed?Ifnot,thisgivesyouanopportunityto
findthebestpeopletoremainonstaff.
• Hardware Withtheexceptionofverylargeenterprisesorgovernments,major
cloudsupplierscanpurchasehardware,networkingequipment,bandwidth,andso
forth,muchcheaperthana“regular”business.Thatmeansifyouneedmore
storage,it’sjustamatterofuppingyoursubscriptioncostswithyourprovider,
insteadofbuyingnewequipment.Ifyouneedmorecomputationalcycles,you
needn’tbuymoreservers;ratheryoujustbuymorefromyourcloudprovider.
• Payasyougo Thinkofcloudcomputinglikeleasingacar.Insteadofbuyingthe
caroutright,youpayasmalleramounteachmonth.It’sthesamewithcloud
computing—youjustpayforwhatyouuse.But,alsolikeleasingacar,attheendof
theleaseyoudon’townthecar.Thatmightbeagoodthing—thecarmaybeapiece
ofjunk,andinthecaseofapurchasedserver,it’ssuretobeobsolete.
• Timetomarket Oneofthegreatestbenefitsofthecloudistheabilitytogetapps
upandrunninginafractionofthetimeyouwouldneedinaconventionalscenario.
Let’stakeacloserlookatthatandseehowgettinganapplicationonlinefastersaves
youmoney.Beforethecloud,launchingastartupmeantusingeitheranunderpowered
Chapter 4: The Business Case for Going to the Cloud 79
orinflexiblehostoranoverpricedself-host.Theformerwasabadoption,becauseit
wasinflexible.Thelattercostalotofmoney:Youhadtofindahost,configurethe
machine,shipthemachine,andmanagethemachine.Withacloud,youcanspinup
PART I
anewinstanceinseconds.
TipsforEvaluatingSaaS
BeforeemployingaSaaSsolution,therearefactorstoconsider.Youshouldevaluatenot
onlytheSaaSprovideranditsservice,butalsowhatyourorganizationwantsfromSaaS.Be
surethefollowingfactorsarepresentasyouevaluateyourSaaSprovider:
• Timetovalue Aswementionedearlier,oneofthegreatbenefitsofusingcloud
servicesistheabilitytoshortenthetimeittakestogetanewsystemorapplication
upandrunning.Unliketraditionalsoftwarethatmightrequirecomplexinstallation,
configuration,administration,andmaintenance,SaaSonlyrequiresabrowser.This
allowsyoutogetupandrunningmuchmorequicklythanbyusingtraditional
software.
• Trialperiod MostSaaSprovidersoffera30-daytrialoftheirservice.Thisusually
doesn’thappenwithtraditionalsoftware—andcertainlyyouwouldn’tmove
everyoneenmassetothetrial.However,youcantryouttheSaaSvendor’soffering
andifitfeelslikeagoodfit,youcanstartmakingthemove.
NOTE Bewaryofvendorswhodon’tofferafreetrial.It’snoskinoffthevendor’snosetoletyoutry
theirservicesforawhile.Infact,ifavendordoesn’tofferafreetrial,itmightbeindicativeof
otherproblemswithintheirorganization.
• Lowentrycosts AnotherappealofSaaSisthelowcosttogetstartedusingit.
Ratherthanlayingoutanenormousamountofmoney,youcangetstartedrelatively
inexpensively.UsinganSaaSsolutionismuchlessexpensivethanrollingouta
complexsoftwaredeploymentacrossyourorganization.
• Service InSaaS,thevendorservesthecustomer.Thatis,thevendorbecomesyour
ITdepartment—atleastfortheapplicationsthey’rehosting.Thismeansthatyour
own,in-houseITdepartmentdoesn’thavetobuyhardware,installandconfigure
software,ormaintainit.That’sallonyourSaaSvendor.Andifthevendorisn’t
responsivetoyourneeds,packupyourtoysandmovetoadifferentservice.Itisin
thevendor’sbestintereststokeepyouandothercustomershappy.
• Wiserinvestment SaaSoffersalessriskyoptionthantraditionalsoftwareinstalled
locally.Ratherthanspendalotofmoneyupfront,yourorganizationwillpayforthe
softwareasitisused.Also,thereisnolong-termfinancialcommitment.Themonetary
riskisgreatlylessenedinanSaaSenvironment.
• Security Earlierinthisbookwetalkedaboutthesecurityconcernswithgoingto
thecloud.Wementionedthoseissuesforthesakeofcompleteness,butinrealityitis
inyourvendor’sbestintereststokeepyouassecureaspossible.MostSaaSvendors
understandthatapplicationdatamustbebackedupoftenandthatsecurityisatop
80 Part I: Getting Started
concern.YourlocalITdepartmenthasalotgoingonandmightnotbeabletospend
asmuchtimeastheywouldlikeonsafetyandsecurity.Sincethecloudvendor
wantstokeepcustomerssafeandsecure,theywillhavestaffdedicatedtoensuring
thatyourdataissafe.
• Yourvoice When’sthelasttimeyoumadeasuggestionforachangeinMicrosoft
WordandRedmondlistened?We’renotjustpickingonMicrosofthere.Thefactof
thematteristhatcustomersoftraditionallyinstalledsoftwarehaveverylittleability
toinfluencethedevelopmentofnewproductfeatures.ButyourSaaSvendor
wantstokeepyouhappysothatyouwillnotjumpshipforanotherprovider.As
such,theywilllistentoyourwantsandrespond.Becauseyouwillhaveacloser
relationship,youhaveagreaterabilitytoinfluencetheproductanditsfeatures.
• Reducedcapitalexpense UsinganSaaSprovidereliminatestheneedforbuying
hardwareandsoftware.ThisnotonlymakesyourCFOhappy,butitmakesitfaster
togetapprovalforaprojectwhentheneedtobuyhardwareistakenoutofthe
equation.
• Meetshort-termneeds Quiteoftenorganizationsexperiencebusytimes,orthey
launchanewproduct,anewofficeopens,orsomethingelseoccursthatrequires
morecomputationalpower.Ratherthanbuynewhardwaretodealwithyour
capacityneeds,anSaaSprovidercaninstantlyexpandandofferyoumore
resources.Andwhenyou’redone,youscalebackwhatyouareusing.Thebestpart
isthatonceyou’redonepayingforthoseadditionalresources,yougobackto
payingforwhatyouneed.
StaffingBenefits
Thereareanumberofbenefitsthepeopleinyourorganizationwillrealizewhenyoushift
someapplicationstothecloud.Forthemostparttheirlivesshouldbeeasierwiththeease
andconveniencecloudcomputingoffers.Notonlydoyourworkersbenefit,butthereare
alsobenefitsinbeingacloudprovider.
FortheConsumer
Theconsumerbenefitsfromcloudcomputinginanumberofways,forexample:
• Nosoftwareinstallationormaintenance Thatmeansnomore1,000-page
planningandimplementationguides.
• Shorterdeploymenttime Ittakesonlyafewminutestospinupanewserver,
ratherthanthemonthsitwouldnormallytaketoplan,prepare,test,anddeploy.
• Worldwideavailability Byusingacloud,youruserscanaccessdataand
applicationsfromanywheretheyhaveInternetaccess.
• ServiceLevelAgreement(SLA)adherence IfyouhaveanSLA,thenyou’re
guaranteedthatlevelofservice.Andifyoureportanybugs,thevendorwillfix
them,butyoudon’thavetohasslewiththepatchyourself—it’lllikelybedonein
awaythatistransparenttoyou.
Chapter 4: The Business Case for Going to the Cloud 81
• Upgrades Theproviderwantstokeepyouhappy,soit’sintheirbestintereststo
ensuretheapplicationisconstantlyimproved.WithSaaSthiscanbeintheguiseof
smallchangesthatyoudon’tseethataddupovertime,ratherthangettinga
PART I
monstrouspatchthatcostsyoutimeandmoneytoimplement.
• MakelifeeasieronyourITstaff SaaSoffloadsalotofthemaintenanceduties
ontoyourcloudprovidersothatyourITstaffcanfocusonimprovingtheday-to-
daytechnicaloperationsofyourcompany,ratherthanbeingcalledtofixsomepiece
ofsoftwarethatisn’tplayingwellwiththeothersonthenetwork.
• Moremoney Yourorganizationsavesmoneybyusingacloudvendor,bothin
operationalcostsandtheITbudget.Thisismoneythatcanbeaddedtoyour
bottomlineorredistributedtootherdepartmentstoboostproductivity.
FortheProvider
Thegoalofthisbookistohighlighttheprosandconsofcloudcomputing,especiallyas
theypertaintoyou,the(potential)cloudcustomer.However,thereisbenefittothecloud
providersaswell,anditisn’tjustmoney.Herearesomeofthewaysthatcloudcomputing
isaplusfortheprovider:
• Operatingenvironment Theproviderownstheirdomain.Theyaren’tjust
sendingtechnicianstofixorcustomizesoftwarebecauseitdoesn’tfitonaclient’s
unique(orantique)infrastructure.Theproviderhasthecontroltooptimizean
infrastructuretotheirspecificSaaSneeds.
• Predictablerevenuestream Becausecustomerswillbepayingasubscriptionfor
theirclouduse,itiseasytogetahandleonforecastingrevenues.
• Studyuse TheproviderisabletostudyhowtheirSaaSisusedandisthenableto
givecustomersmoreofwhattheywant.Thisisn’tpossibleifsoftwareishousedon
customers’networks.
• Small,regularupgrades Thisisn’tjustabenefitforcustomers,buttheproviders,
aswell.Theprovider’sdevelopmentteamscanfocusonfixingbugswith
incrementalpatchrollouts,ratherthansavingthemforone,monstrousrollout.
• Customerrelationshipmanagement Providersalsomustdevelopstrong
relationshipswiththeircustomers.Sincetheyareprovidingasubscription-based
service,itisimportanttokeepcustomershappy,ratherthantrytoscorethenextbig
deal.Whileitisimportanttokeepcustomerscomingin,itisjustasimportantto
keepexistingcustomershappy.
DeletingYourDatacenter
Whenyoumovetothecloud,youwon’tneedtomaintainsomethingson-site.Butwhat
andwhenyoudeleteitisacomplicatedissue.Certainly,youcanbackupthedataandfileit
awayonsomeDVDssomewhere,butthat’sjustasnapshotintimeofyourorganization.As
youcontinuetousethecloud,yourdatawillevolveandchange.
Inthissectionwe’lltalkabouttheissueofdeletingyourdatacenter,whenyoucandoit,
andsomebestpracticesfordoingit.
82 Part I: Getting Started
WhatYouCanDelete
Desktopapplicationsareoneoftheareasperfectforamovetothecloud.Whatdrivessuch
amoveisthelowercostsforbothlargeandsmallcompanies.Movingtothecloudallows
companiestorealizethebenefitsofeconomiesofscalethatcomewithmanagingseveral
desktops.Thosewhospecializeindesktopmanagementaregoingtogetthebesteconomies
ofscale.
ItshouldcomeasnoshockthatdesktopmanagementisprettylowontheITstaff’slist
ofdesirablejobs.Infact,inlargeenterprisesdowntothehomeuser,theleastpleasurable
thingtodoisupdateoperatingsystems,patchapplications,orsetfirewallrules.
Akeycomponentinmakingdesktopscloudcapableandhelpingclientvirtualization
gomainstreamistheintroductionofso-calledbaremetalhypervisorsforclients.These
hypervisorsallowthedesktoptorunlocallywithoutnetworkaccesstotakeadvantageof
thePac’scomputingpower,ratherthanjustrelyingontheserver.
WhatYouShouldKeep
Aswehavenotedtimeandagain,securitymightbeanissueforyou.Areyoureally
comfortablemovingmission-criticalorsensitiveinformationtothecloud?Ifyouarehappy
withyourvendor’ssecuritymeasures,thenyoushouldhavenoproblemsmovingsensitive
datatothecloud.Butthat’sonlyifyouareabsolutelysatisfiedwiththeirsecuritymeasures.
Ifyouhaveevenaglimmerofdoubt,it’snotworththesleeplessnights,worryingaboutthe
potentialforcompromisedinformation.
Youshouldalsokeeplargefilesandthingslikemediaon-site.Ifyouarestoringmore
thanyouaccessonline,yougetabiggerbillfromthevendoreachmonth.Bettertoletthose
infrequentlyaccessedfilessitonalocaldrivethantopaythevendorbilleachmonth.
Steps
Doesyourvendorhaveasoliddisasterrecoveryplaninplace?Thisisimportantbecause,
obviously,youdon’twanttoloseimportantdata.Havingdowntimeisonething—losing
importantdataissomethingelse.Whenyoutalktopotentialvendors,besuretoaskabout
disasterrecovery,andifyouaren’tsatisfiedwiththeirsafeguards,movetothenextcandidate.
Therearealotofreasonstomakeamovetothecloud,butinevitablycostistheway
thatcompaniesgetintothecloud.However,oncethey’rethere,convenienceandreliability
iswhatwillkeepthem.Havingthevendortorelyonforhardwaremaintenanceisahuge
bitofconvenience.Forinstance,allyouneedtodoiscallupawebbrowserandmake
adjustmentstotheamountofprocessingpower,memory,anddiskspaceeachvirtualserver
gets.Youcantuneyournetworktothepreciseconfigurationyouneed,withouthavingto
popinnewbladesoraddadditionalmachines.
AppZero
AppZeroprovidesasetoftoolsforcreatingVirtualApplicationAppliances(VAAs).
Thisapproachtoprovisioninganddeployingapplicationsonphysicalorvirtualservers
runninganywhereisdesignedforthecloudenvironmentandformovementofserver
applicationsanddatacentertocloud,hostingenvironment,orcloudtocloud.VAAspackage
aserverapplicationwithallofitsdependencies,butnooperatingsystemcomponent
(zeroOS).AppZero’sfirstpublicdemonstrationofitsVAAtechnologyshowedalive
Chapter 4: The Business Case for Going to the Cloud 83
productionapplicationprovisionedinsecondsonanAmazonEC2cloud,andmovedin
lessthanoneminutetoaGoGridcloudcomputingenvironment.
Designedforinstantserver-basedapplicationprovisioninganddeployment,VAAs
PART I
enableanapplicationtorunwhereverthebusinessrequireswithoutthelicensingissues
thatinclusionofanoperatingsystemintroduces—VAAscontainzeroOS.AppZeroVAAs
workwithapplicationsacrossalltiers:webservers,applicationservers,anddatabase
servers.EnterprisemiddlewarefromMicrosoft,Oracle,IBM,andopen-sourceserverslike
MySQLaswellasin-housedevelopedapplicationscanallbeeasilytransformedintoVAAs
withoutchanginganycode.
AppZeroVAAsencapsulateapplicationsatalevelabovetheoperatingsystem,turning
serverapplicationsintodiscreteobjectsthatrunprotectedfromotherapplicationsandthe
underlyingoperatingsystems.InavirtualenvironmentsuchasVMware,Xen,and
MicrosoftHyper-V,AppZerodriveshigherserverconsolidationratiosbyprovisioning
applicationstovirtualmachineswithalmostnooverhead.VAAssignificantlyreduceVM
sprawlandspeedthetimetogetanapplicationupandrunning.AppZeroVAAsalso
simplifytheuseofexistingconfigurationandserverprovisioningsolutions,suchasHP-
OpswareandBMC’sBladelogic,allowingthesesystemstomanageserverapplicationsas
discreteobjects.
AppZero’sVAAtoolsetrunsonWindows,Solaris,andLinuxandincludesthreetools:
theAppZeroCreatorforbuildingaVAA;theAppZeroDirector,aruntimesystem;and
AppZeroAdministratorforadministeringaVAA.
Salesforce.com
Salesforce.comoffersSaaSwithahostofdifferentapplications,manyofwhicharecreatedand
sharedbyotherSalesforcecustomers.SteveFisher,seniorvicepresidentofAppExchangeat
Salesforce.com,talkedabouthiscompanyaswellasthebestwayforcompaniesconsidering
amovetothecloudtogetthemostoutoftheirmove.
FisheremphasizesthedifferencesbetweenSalesforceandothercloudvendors.
“WehaveadifferenttakeonthecloudthanAmazonorGoogle,”notedFisher.“Maybe
it’sbecausewestartedwithapplications.Butforwhateverreason,wealloffersomething
different.”
Thechiefdifferenceisinwhatthevendorssupplyandhowtheysupplyit.
“AmazonhasLinuxboxes,weofferdifferentapplications,”observedFisher.“Ifyou’re
abusinessthatwantstouseanapplication,that’swhereweshine.”
Salesforcehasthegoodfortunetohaveabroadvarietyofcustomers,existingin
differentindustriesandhavingdifferentneeds.
“Youlookatourcustomerbaseandit’severycompany,everysize,andeverylocation,”
saidFisher.
Henotesthatthecompanyhasoneproductthatservescompaniesofallsizes.Forinstance,
theyserve30,000usersatDell,whilesomeothercompaniesmayonlyhave25users.
“Wehavecustomersineveryindustry,”addedFisher.
Theredoesn’tseemtobeoneappthateveryoneusesorismoreprevalentthanothers.
Salesforceseescustomersusingdifferentapplications.
“Wehavecustomerswithapplicationsallovertheboard,”saidFisher.“Anythingfrom
projectmanagementtofinancials,torecruiting.”
84 Part I: Getting Started
Fisherseesthecloudexpanding.Thesystemisscalableandsecure,andasmorepeople
join,itgivesthecloudmorecredenceandlegitimacy.
“Wedon’tseethetechnicalbarriers,”saidFisher.
WhyIt’sGoodforBusiness
Workingonthecloudcomeswithgreatadvantages,andFishernotedseveral.
“Obviously,thelowerupfrontcostishuge,”saidFisher.
Agreatadvantageisthatitdrivesthevendortokeepthecustomerhappy.
“Becausethevendorisrunningtheapplications,they’reconstantlytunedandimproved
on,”saidFisher.
Inamultitenantenvironment,thevendorcanseewhatandhowusersaretaking
advantageofapplicationsandcanmakechangesbasedontheirobservations.
“That’snottypicalinthetraditionalmodel,”saidFisher.
Gettingstartedisespeciallyeasy,especiallywhencomparedtotraditionaldeployments.
“Theabilitytogetstartedisthere,”observedFisher.“Youdon’thavetobuysoftware.
It’ssomucheasierthandeployingconventionalsoftware.”
Butcost—asitisforsomanyotherbusinessconcerns—iswheretherubbermeetstheroad.
“Thebiggestvalue,ifyouthinkofthetraditionalmodel,isyoudon’tneedtoshipthe
upgrade,testit,andrewritecode,”saidFisher.“Youcanupgradeeverythingatonceand
it’sseamless.”
BestBusinessPractices
Sowhat’sthebestwayforacompanytomovetothecloud?Afterresearchingvendor
companies,Fisheradvisesaskingforafreetrial.
“YoucangotoSalesforce.comandgetafreetrial,”saidFisher.“Infact,Iwoulddemand
afreetrialwhoeveryoudecidetouse.”
Pilotitfirstwithasingledepartment.
“Tryitatasmalllevelfirst,”advisedFisher.“Haveadivisionoradepartmenttryit
first.Bringon25to100userstotestitout.”
ButFisherwarnsnottojumptothecloudifyoudon’tneedto.Don’tfollowtrendsor
doitjustbecausetheotherguyisdoingit.
“Onlydoitifthereisaneed,”saidFisher.“Don’tdoitjusttodoit.”
Onceyouareonthecloud,don’texpecttohaveastaticexperience.Yourapplications
andhowyouusethemwillevolve.
“Havethemindsetofitbeingagradualiteration,”saidFisher.“Expectthatthingswill
change.”
Anotherbenefitistheabilitytoreallygetwhatanorganizationwantsoutofan
application.
“Traditionalsoftwareishardtocustomize,”observedFisher.“Youcanreallymold
[cloudapplications]asyougo.”
Butisanycompany100percentinthecloud?
“Iknowoftwocompaniesthathavethatagenda,certainlytherearemore,”saidFisher.
“Butwecertainlybelievethat’llbethefuture.”
Fishercomparescloudcomputingwithelectricalutilities.Veryfeworganizationsrely
ontheirowngeneratorsforpower,withelectricitydeliveredbypowercompanies.Fisher
believesonedayallcomputingwillbedoneonthecloud.Butit’lltaketime.
Chapter 4: The Business Case for Going to the Cloud 85
“Theelectricgridhashad120years,”saidFisher.“We’reonlyacoupleyearsintocloud
computing.”
ConcludesFisher,“We’reordersofmagnitudeawayfromwherewewerefiveyearsago.
PART I
Youcanonlyimaginewherewe’llbeinfiveortenyearsfromnow.”
ThomsonReuters
ThomsonReutersisacompanythatprovidesinformationtoawiderangeofclients—
lawyers,accountants,scientists,reporters,andahostofothers.Forthemostpart,theyhave
nothingincommonbuttheneedtogetinformation.Providingthatinformationiswhat
ThomsonReutersisallabout.ThomsonReuterscallsitself“theworld’sleadingproviderof
‘intelligentinformation’forbusinessesandprofessionals.”Toliveuptothatbilling,they
needtodomorethansimplydeliversearchengineresults,alotmore.Theypulldistributed
informationtogether;theyanalyzetheinformationfirsttoensureitiswhatthecustomer
wants;andtheyprovidemethodsofdatadeliveryandretrievalthathelptheircustomers
getwhattheywant.
TheirCloudUse
ThomsonReuterswantedtogiveitscustomersabetter,moreintelligentwaytosearchfor
informationthantheywereprovidingatthetime.TheirsolutionwastoadoptaMicrosoft
Software-plus-Servicessolution.TheyintegratedMicrosoftLiveSearchwiththeirownsearch
enginesanddatabases.Wheninformationisrequested,bothLiveSearchandThomson
Reuters’sdatabasesarescannedfortheinformation,andThomsonReutersanalyzesthe
resultstoreturnthebestinformationtotheclient.
ThomsonWeboutlineditsrequirementsforteamingwithanexistingwebsearchengine
provider:
• Thecompanyneededanenginethatcouldreturnresultsin200milliseconds.This
gaveThomsonReuterstimetoapplybusinesslogictomaketheresultsmore
meaningful.
• Theenginealsoneededtoaccepthundredsofthousandsofsearchrequestsfroma
singleIPaddress—theirs—withoutitbeingseenasaDenialofServiceattack.
Thesystemworksthisway:
1. AcustomeraccessestheThomsonReutersinformationservice,whichcanbeaweb
applicationoraWindows-basedapplication.
2. Onceasearchisinitiated,thatrequestispassedtotheThomsonReutersintranetto
theThomsonReutersWebPlusservicelayer.
3. Theservicelayerbeginstwoactionsconcurrently:Itappliesitscustombusiness
logictotherequest,cullingrelevantinformationfromit.
4. Theservicelayerreturnstheinformationtotheclient.
86 Part I: Getting Started
UsingtheCloud
ThomsonReutersisacompanymakinggooduseofcloudcomputingsolutions.Christopher
Crowhurst,VPofStrategicTechnology,talkedabouthowhe’sseeingthecloudshapingup
andhowcompaniescanbesttakeadvantageoftheopportunities.
Heseesdifferenttypesofbusinessesonthecloud—notjustasingletype.
“The(infrastructure)cloudduetoitson-demandnatureisallowingrapiddevelopment
ofnovelbusinesspropositionsinwaysthatpreviouslywouldnothavebeeneconomic,
assuchpeopleareabletobuildmassivelyscalablearchitecturesinthecloudwithout
theinvestmentthatpre-clouddevelopmentrequired,”saidCrowhurst.“Whenplatforms
likeMySpacewerefirstcreated,theirbuildershadnoideahowquicklytheusagewould
explode.Thisresultedinthemhavingtoscaleoutrapidly.Manywarstoriesofinstability
andoverloadinghavebeentoldabouttheseexplosivegrowthplatformsduringtheirinfancy.
Arguably,ifthecloudhadexistedasanoptionforthemtoexploittheywouldhaveresponded
farquickerwithlowerinvestment.”
Web2.0hasproventogohand-in-handwithcloudcomputing.Becauseoftheflexibility
ofthecloud,thesetypesofwebsiteshaveabetterchanceofsuccess.
“SocialNetworksitegrowth—aswithmanyotherbusinessmodels—ishighly
unpredictable.Thisunpredictablegrowthlendsitselftoafastprovisioningcloudmodel,”
notedCrowhurst.“Otherexamplesofgreatcloudopportunitiesarethosethatmayneed
largestorageordatabaseinfrastructure;thinkFlickrasanexample.Itwouldnowbealot
easiertorecreatethesesocialsites(Facebook,MySpace,Flickr,Twitter,etc.)inthecloud
andbeinapositiontorespondtogrowthondemand.”
CloudComputingandWeb2.0
CrowhurstlikenssocialnetworkingsitestositeslikeYahooandGoogle,intermsoftheir
resourcedemand.
“Arguably,MySpaceandFacebook—likeHotmail,LiveSearch,YahooandGoogle—are
nowapplicationcloudsintheirownright.Theirsheerscale,themassivecomputeplatform
theyresideuponisanapplicationon-demand,whichisanotherdefinitionofcloud
computing,”observedCrowhurst.“Itisinterestingthatalloftheseapplicationsarefunded
throughadvertisingrevenue.Therelationshipbetweenmassivescale,massiveuser
populationsresultsinlargemultimillion—ifnotbillion—pageviewcountsthatenablethe
microtransactionsofadvertisingrevenuetoadduptothevastincomeswenowsee
reportedbythesecompanies.
“Salesforce.comandotherbusinessapplicationsareanothercategoryofon-demand
computinginthecloud.Thesemodelsaremainlyfocusedaroundbusinessprocessautomation,
useraccessbasedpricingandindividualbusinessprocesscustomization.Substantial
proportionsofthesecompanies’revenuecomesfromthecustomizationandintegrationof
theircloudplatformsintothecustomer’sapplicationsandbackofficesystems.”
ApplicationsandtheCloud
Whenitcomestowhattypeofapplicationisbestsuitedforthecloud,Crowhurstdidn’t
identifyatypeofprogram(likeawordprocessor),althoughherecognizesthearchitecture
ofsuchapplications.
“Statelessarchitecturesarefarmoretolerantofmassivelyscaledoutinfrastructure
withoutneedingcustomstatemanagementsoftwaredevelopment,”saidCrowhurst.
Chapter 4: The Business Case for Going to the Cloud 87
“Additionally,statelessarchitecturescansurvivehardwarefailureverycleanly.Cloud’s
relativelylowSLAandunknownqualityofinfrastructurerequireapplicationstobe
designedforsurvivabilityofdataandtransactions.Goingbeyondthebasicarchitecture,
PART I
Ithinkthedecisionismoreoneofbusinessmodelandgrowthpredictability;theless
predictablethedemandfortheapplication,themorelikelythecloudwillbeagoodplace
tostart.Alsoamajorfactorwillbethefundinglevelrequiredtostart.Clouddevelopment
canbedoneatalowercostinitiallythandedicatedinfrastructurebuildouts.”
Togetstartedonthecloud,herecommendsbusinessesstartwithbusinesssystems
clouds,likehostedemailservicesandcollaborationsuites.
“Thecostofentryformostcompaniesisrelativelycomparablewiththecostoftraditional
upgrades,suchasupgradingMicrosoftExchangeto2010,”saidCrowhurst.“Companies
shouldlookattheeconomicsofthesetransitiontimesasopportunitiesto‘outsource’the
infrastructureproblemandreaptherewardsofthescalethatthesesolutionscanprovidethem.”
Anotherbuzzwordintheworldofcomputingthesedaysis“virtualization.”Anditis
simplythat—virtualization—thatcanhelpabusinessmovetothecloud.
“Currentserverinfrastructurecloudsaremostlyhostedvirtualizedenvironments,”he
observed.“Businessesshouldstartdevelopingapplicationsdesignedtorunwithinvirtual
machines;theyshouldbecomecomfortablewiththeagilitycreatedbybeingabletospinup
anddownVMsondemandandadapttheirapplicationarchitecturestoallowforthis.”
GettingStarted
Startingsmallisanotherrecommendation.
“Fromabusinesssystemsperspective,branchofficespresentopportunitiestotakesmall
segmentsofabusinessofftraditionalinfrastructure,”saidCrowhurst.“Mosthostedemail
systems,forexample,offertheabilitytohaveamixofhostedandcloudenvironments
enablingagentletransition.”
Butmovingtothecloudisnotalwaysaclean,easyexperience—especiallyfora
businessthathasneverdoneitbefore.Buthehasn’tseenanycommonmistakesbeingmade
repeatedly.
“Ithinkthat,duetothecloudstillbeinginitsinfancy,Iamnotyetseeingatrendin
mistakes,”observedCrowhurst.“Factorsthatvarybetweencloudandtraditionalhosted
infrastructureincludebandwidthutilizationandservicelevels,forexample.Bandwidth
betweenthecloud,yourowndatacentersandyourstaffs’desktopscanbecomethe
bottleneckformovinglargedatasetsforbatchprocessing.Thisisobviouslylesscriticalin
transactionalprocessingscenarios.Thisbecomesnoticeableincloudemailsystems.Simply
comparethetimetakentouploadalargedocumentorimagetoHotmailorGmailand
compareitwiththeeaseofemailingusingyourlocalExchangeserver.”
BeRealistic
SLAsareimportanttohaveinplace,butCrowhurstdoesn’tseethemasbeinggreatly
binding,andtheytendtobesomethingthatisnoteasilyactedupon.
“Servicelevelsarenowbeingdefinedforcloudinfrastructure,butgenerallyyour
recourseisminimal(arefundofhostingfeesasanexample),”hesaid.“Youareunlikelyto
beabletorecoverlostrevenueforexample.Also,whenhostingyourowninfrastructure,
yougettodecidehowtomaintainit,howtoensureitisresilientandrobust.Inthecloud
88 Part I: Getting Started
youdon’t.It’samatterofbuyerbeware.Thatsaid,manycommercialcloudsare
maintaininghighuptimes.”
Andwhilemostcompanieshavenothinginthecloud,Crowhursthasseenmany
companiesthathavefullyembracedthecloud.Andothercompaniesareembracingcloud
technologytohelpmitigatecosts.
“Manysmallerstartuptechnologycompaniesarecompletelyinthecloud,”henoted.
“Iamalsoseeingatrendforcompaniestobemovingtheirstafftothinclient,lowperformance,
desktopPCs,asmorecompaniesoptforofficeproductivitysolutionslikeGoogleDocs,
andhostedOfficesolutions.Iexpectthistrendtocontinueduetothesubstantialcostto
corporationsofmaintainingtheequipmentanddesktopsoftwareenvironmentsfordistributed
employees.SoonIanticipatecompaniesnolongersupplyingemployeeswithlaptops,but
expectingthemtoprovidetheirownandsimplyusingbrowserandotherremoteapplication
accesstechnologiestohostedofficeproductivityandbusinessprocessapplications.”
Inthischapterwetalkedabouthowdifferentcloudvendorsoffertheirservicesand
howyourbusinesscanutilizethoseservices.Wealsolookedatsomebusinessesthathave
alreadydecidedtomakethemoveandtalkedabouthowyourbusinesscanmakea
successfulmove.Inthenextchapterwe’lltalkaboutthehardwareandinfrastructurethat
areinvolvedinacloudcomputingsolution.
II
PART
Cloud Computing CHAPTER 5
HardwareandInfrastructure
Technology CHAPTER 6
AccessingtheCloud
CHAPTER 7
CloudStorage
CHAPTER 8
Standards
This page intentionally left blank
CHAPTER
5
Hardware and Infrastructure
I
nordertogetthemostoutofyourcloudcomputingsolution,it’simportanttohave
therighthardwareandinfrastructureinplace.Inthischapterwe’lltalkaboutwhat
equipmentyouneedonyourendandhowitshouldbeconfiguredforthebest
interactionwithyourcloud.
Clients
Ultimately,theclientsonyourendusers’desksarehowyouwillinteractwiththecloud.
Inthissectionwe’lltalkaboutthedifferenttypesofclientsandhowtheycanbeconfigured
tocommunicatewiththecloud.We’llalsotalkaboutsomesecuritymeasuresandhowyou
cankeepyourdatasafeonthecloud.
Therearedifferenttypesofclientsthatcanlinktothecloud,andeachoneoffersadifferent
wayforyoutointeractwithyourdataandapplications.Dependingonyourorganizationand
itsneeds,youmayfindyourselfusinganycombinationofthesedevices.Howyouinteract
withyourdatabasedontheseclientswillbeacombinationoffactors—whatyourneedsare,
andthebenefitsandlimitationsoftheseclienttypes.
91
92 Part II: Cloud Computing Technolog y
Mobile
MobileclientsrunthegamutfromlaptopstoPDAs
andsmartphones,likeaniPhoneorBlackBerry.You’re
notlikelytoutilizeaparticularlyrobustapplicationon
aPDAorsmartphone,butlaptopuserscanconnectto
thecloudandaccessapplicationsjustasiftheywere
sittingattheirdesk. Page title
Mobileclients,ofcourse,havesecurityandspeed https://www.url.com/iphone
concerns.Becausetheclientswillbeconnectingtothe
cloudfromvariouslocationsthatmaynothavean Enter search term.
optimizedconnection,asinahotel,youcan’texpect
thespeedthatadesk-boundclientwillachieve.But Cancel Submit
notallapplicationsneedspeedyconnections,and
mobileusersprobablyaren’tinputtinggigabytes
Q W E R T Y U I O P
worthofdataintoadatabase.Further,sinceyoucan
createyourownapplicationsinthecloud,theycanbe A S D F G H J K L
craftedwithamobileclientinmind.Whileamobile
userwon’tputtonsofinformationintoadatabase,an Z X C V B N M
applicationcanstillbedevelopedtoletthemaccessit.
.?123 space return
Securityisamajorconcern,butit’satwo-sided
issue.Ontheonehand,it’seasiertoloseormisplacea
laptop,andwhateverinformationisonitcouldbe
compromised.Ontheotherhand,ifdataismaintained
onthecloudandtheuseronlyhasselectfilesonhisor
herlaptop,ifthelaptopweretobestolen,onlya
minimalsetofdatawouldbecompromised.
Thin
Thinclients,aswe’vementionedbefore,areclient
computersthathavenoharddrives,noDVD-ROM
drives,andsimplydisplaywhat’sontheserver.
Thinsmayhavearoleinyourorganization,but
likelyonlyifyouhaveanin-housecloud.Ofcourse,
itdependsonwhatapplicationsandservicesyou’re
accessingonthecloud.Ifaclientonlyneedsto
accesscloud-basedservicesorisaccessinga
virtualizedserver,thenthinclientsareagreat
option.They’relessexpensivethanthickclients,
aremuchlessexpensivetomaintain,anduseless
energy.
There’salsoahighlevelofsecurity,becausenodataisstoredonthethinclient.Allthe
dataresidesinyourdatacenteroronthecloud,sotheriskofaphysicalbreachissmall.
Chapter 5: Hardware and Infrastructure 93
NOTE Wetalkmoreaboutbuildingyourownin-housecloudinChapter12.
Thick
Chancesarethatthickclientsaretheclientsyoualreadyuseandarelikelytousetoconnect
toapplicationsinthecloud.Youlikelyalreadyhaveapplicationsinstalledonyourendusers’
machines.Whileyoucanoffloadsomeofyourapplicationstothecloud,chancesarethere
arestillgoingtobesomemission-criticalapplicationsthatsimplyneedtostayin-house.
PART II
Thesemachinescancertainlystillconnecttoavirtualizedserver,andifyoudon’twantto
spendanymoremoneyforclients,justusethemachinesthatyoualreadyhave.Thickclients
aregoodchoicesifusersneedtomaintainfilesontheirownmachinesorrunprogramsthat
don’texistonthecloud.
Security-wise,thickclientsaremorevulnerabletoattackthanthins.Sincedataisstored
onthemachine’sharddrive,ifthemachineisstolenthenthedatacouldbecompromised.
There’salsoanissueofreliability.Ifathinclientfails,allittakesisforanotherthintoget
pluggedinandtheuser’sworkenvironmentisrightthere.Ifathickclientfails,whateverdata
isstoredonthemachine,includingtheoperatingsystemandalltheconfigurationsettings,is
lostandanewcomputerwillhavetobeconfiguredfortheuser.
Security
Securityisthenumberoneissuewhenitcomestocloudcomputing,andthatonlymakes
sense.Sinceathirdpartystoresyourdata,youdon’tknowwhat’sgoingonwithit.It’seasy
toworryaboutthesecurityrisksofacloudsolution,butlet’snotoverlooktheinherent
securitybenefits,aswell.
94 Part II: Cloud Computing Technolog y
DataLeakage
Thebiggestbenefitisthecentralizationofdata.Organizationshaveanissuewithasset
protection,innosmallpartbecauseofdatabeingstoredinnumerousplaces,likelaptops
andthedesktop.
Thickclientsareapttodownloadfilesandmaintainthemontheharddrive,andthere
areplentyoflaptopsouttherewithnonencryptedfiles.Usingthinclientscreatesabetter
chanceforcentralizeddatastorage.Assuch,there’slesschancefordataleakage.
Switch
Server
Client
Centralizationalsoprovidestheopportunityforbettermonitoring.Thatdataisinone
placemakesiteasiertocheckinonyourdataandseethateverythingisokay.
OffloadingWork
Anothersecuritybenefitisn’tsomuchatechnology,butthefactthatyoudon’thavetodoit
yourself.It’suptothecloudprovidertoprovideadequatesecurity.Afterall,canyour
organizationafford24/7ITsecuritystaffing?Thefactofthematteristhatyourcloud
providermightoffermoresecurityfeaturesthanyouhadbefore.
Thefactthatsomanyclientsarepayingallowscloudproviderstohavebeefiersecurity,
simplybecauseoftheeconomyofscaleinvolved.Thatis,therearemanypayingclientsso
theproviderisabletodomore,becausethereismoremoneyinthepot.Plusit’stothe
provider’sbenefittooffermore,becausetheywanttogetagoodreputation.
Chapter 5: Hardware and Infrastructure 95
Logging
Loggingisalsoimproved.It’ssomethingthat,in-house,usuallygetstheshortendofthe
stick.Butinthevirtualizedworldofcloudcomputing,providerscanaddasmuchmemory
astheyneedtoextendlogging.
Forensics
Ifthereisabreach,thecloudprovidercanrespondtotheincidentwithlessdowntimethan
ifyouhadtoinvestigatethebreachlocally.Itiseasytobuildaforensicserveronline,andit
costsalmostnothinguntilitcomesintouse.
Ifthereisaproblem,thevirtualmachinecanbeclonedforeasyofflineanalysis.
PART II
Further,manycompaniesdon’thaveadedicatedin-houseincidentresponseteam.If
thereisaproblem,ITstaffhavetoquicklyfigureouttheirnewjoboftakingtheserver
down,quicklyinvestigating,andgettingitbackonlineforminimalproductiondowntime.
Development
Evenmoregoodnewsisthatsecurityvendorsaren’tinthedarkaboutthiswholecloudthing.
Theyareactivelydevelopingproductsthatcanapplytovirtualmachinesandthecloud.
Securityvendorsalsohaveauniqueopportunityinthecloud.Sinceit’snewground,
therearenewopportunitiesforthevendorswhoareopen-mindedenoughtoimaginethem.
Auditing
AsanITprofessional,youalreadyknowtheheadacheofsecuringyourownlocalnetwork.
Butwhenyousendyourdatatothecloud,awholenewsetofissuesarise.Thisislargely
becauseyourdataisbeingstoredonsomeoneelse’sequipment.
Compliance
ThesamesecurityissuesthatyourorganizationdealswitharethesortsofissuesthatSaaS
providersface—securingthenetwork,hardwareissues,applications,anddata.But
complianceaddsanotherlevelofheadache.RegulationslikeSarbanes-Oxley(SOX),
Gramm-Leach-Bliley(GLBA),andHIPAA,andindustrystandardslikethePaymentCard
IndustryDataSecurityStandard(PCIDSS)makethingsparticularlychallenging.
PriortoSaaS,compliancecouldbemanagedbyafewtasks:
• Identifyusersandaccessprivileges
• Identifysensitivedata
• Identifywhereit’slocated
• Identifyhowitisencrypted
• Documentthisforauditorsandregulators
SaaSmakesthesestepsevenmorecomplicated.Ifyoustorecompliance-sensitivedata
withanSaaSprovider,itisdifficulttoknowwherethedataisbeingstored.Itcouldbeon
theprovider’sequipment,oritcouldevenbeontheequipmentofoneoftheprovider’s
partners.
96 Part II: Cloud Computing Technolog y
SaaSbringswithitanumberofregulations,includingPCIDSS.WithinPCIDSSare
regulationsforserviceproviders.Requirement12.8ofPCImandatesthatserviceprovidersbe
compliantandcontractuallyacknowledgetheirresponsibilityforprotectingcreditcarddata.
ThePCIDSSAppendixAgoesintoevenmoredepthlayingoutrulesandregulations.
ThePCIAppendixA
RequirementA.1ofAppendixAhasfoursubprovisionsthatregulatehowdatais
maintainedbyaserviceprovider.Let’stakeacloserlookatthisappendix.
RequirementA.1.1—UnauthorizedExposure Thefirstsubsectionrequiresthateachclientofthe
provideronlyhasaccesstotheirowndata.TheimportantquestiontoaskishowtheSaaS
provider’ssystemarchitecturepreventstheunauthorizedexposureofdatatoothersubscribers
usingthesameservice.
Sincecloudprovidersareinthebusinessofhavingasmanyclientsastheycanget,that
meansyourdatacouldbesittingonaserverwithanotherclient’sdata—maybeevenyour
competitor’s.
Chapter 5: Hardware and Infrastructure 97
AppendixA.1.2—CredentialManagement ThissectionofAppendixArequiresthataccess
controlsbeheldbytheserviceproviderandthatthecontrolsonlyallowtheclienttobeable
toaccessthatdataandtoprotectthedatafromothers.Eithertheprovidercanmaintain
thosecontrolsormaintenancecanbedonebyconnectingtotheclient’saccessmanagement
system.IftheSaaSproviderhandlesaccesscontrols,theauthenticationcredentialsare
storedontheprovider’sservers.Whileprovidersgenerallyclaimthismethodissafeand
secure,useextracaution.Ifthereisabreachattheprovider,thennotonlycouldyourdata
becompromised,butalsoyourauthenticationcredentials.Further,iftheproviderhandles
theauthentication,youmustkeepcarefulcontrolofuseraccounts.Ifauserleavesyour
organization,theircredentialsneedtoberevoked,andthat’seasiertodoin-housebyyour
ownITstaffthanbyrelyingonaserviceprovider.
PART II
Thebestmethodistohaveadirectconnectionwiththecompany’sdirectoryservices,
likeActiveDirectoryorLDAPforauthenticationtotheSaaS.ManySaaSvendorsofferthis
service.
AppendixA.1.3—Logging LoggingandaudittrailsarecoveredbyAppendixA.1.3.Thisis
alsomandatedbyRequirement10ofPCI.Logsandaudittrailsareusedforinvestigating
incidents.
AppendixA.1.4—Reporting ThefinalrelevantportionoftheAppendixisAppendixA.1.4.In
thissection,serviceprovidersmust“providefortimelyforensicinvestigation”ifthereisa
breach.
TheSaaSprovider’slogsareinternalandmostlikelynotaccessiblebyclients,so
monitoringisnearlyimpossible.AccesstologsisrequiredforPCIcompliance,andauditors
orregulatorsmayrequestaccesstothem.Assuch,youshouldbesuretonegotiateaccessto
theprovider’slogsaspartofyourserviceagreement.
WebApplicationBreaches Becauseserviceprovidersusesomanywebconnections,
theyshouldbeaskedaboutthesecurityoftheirwebapplications.Thisshouldinclude
whethertheyfollowOpenWebApplicationSecurityProject(OWASP)guidelinesfor
secureapplicationdevelopment.ThisissimilartoRequirement6.5ofPCI,whichrequires
compliancewithOWASPcodingprocedures.
Whendealingwithaprovider,youshouldseekoutthosewhoareable(willing)totalk
abouthowtheyhandlebreachesamongtheirstaffaswellaswheredataisstored.Giventhe
widerangeofserverdeployment,yourdatacouldbesittingonaserverinBrazil,Germany,
orThailand.ThisharkensbacktothejurisdictionalissueswediscussedinChapter2,butit
alsoaddscomplianceandlegalissuesindifferentcountries.
VPNs
Withapplicationsbeingmovedtothecloud,itmakesitpossibleforeachandeveryworker
tobeatelecommuter.Thus,theorganizationdoesn’thavetoleaseasmuchspace,payas
muchforutilities,andthosestupidholidaypartiescanbeeliminated.
98 Part II: Cloud Computing Technolog y
True,yourorganizationmightnotlenditselftotelecommutingsimplybytheworkyou
do,ormaybeyoulikethoseholidaypartiesandwarmbodiesinchairs.Butthemore
applicationsgetoffloadedtothecloud,thefewerthingsyouhavetoworryaboutin-house.
Cloud Vendor
Your Organization
VPN Connection
Telecommuter
Also,thereiscertainlymoretoyourdatacenterthanwebapplications.Youhavefile
storage,email,productivityapplications,andanythingelsethatdoesn’tlenditselftobeing
web-based.
Butinanyevent,whetheryouremployeesaccessthecloudacrossthepublicInternetor
fromyouroffice,youneedasecureremoteaccesssolution,likeanSSLVPN.
WhatSSLIs AnSSLVPN(SecureSocketsLayervirtualprivatenetwork)isaVPNthatcan
beusedwithastandardwebbrowser.AscomparedtothetraditionalIPsec(Internet
ProtocolSecurity)VPN,anSSLVPNdoesnotrequireyoutoinstallspecializedclient
softwareonendusers’computers.
SSL VPN
Cloud Vendor
Your Organization
SSLisaprotocolformanagingthesecurityofmessagetransmissionontheInternet.SSL
isincludedaspartofpopularwebbrowsersandmostwebserverproducts.Itemploysa
publicandprivatekeyencryptionsystemfromRSA.
NOTE YoumightalsohearSSLVPNsreferredtoasTLSVPNs.ThisisbecauseTransportLayer
Security(TLS)isarefinementofSSLandisreplacingit.
AnSSLVPNcloudcomputingconnectionbetweenyourdatacenterandthecloud
providersecuresyourdatawithoutalotofthePublicKeyInfrastructure(PKI)overhead
thatcomesfromanIPsec-basedVPNsolution.
MostSSLVPNgatewaysprovideanon-demandclient,sothere’sverylittlemanagement
PART II
overheadontheclientsideandit’seasyfortheendusertouse.
BetterSecurityPractices AnSSLVPNalsomakessurethatendusersarecompliantwith
yourorganization’ssecuritypoliciesthroughtheuseofendpointsecurity.Thosemeasures
include
• Requiringantivirussoftwaretoberunning
• VerifyingthatOSpatcheshavebeeninstalled
• Checkingtoseeifmalwareorbotsarerunning
TheSSLVPNisagreatsecuritysolutionbecauseitsecuresaccesstoyourapplications
inasimple,inexpensive,andefficientway.Andifyouweresoinclined,youcanofferyour
employeesmorechancetotelecommute.
KeyManagement
Withyourdatastoredoff-site,there’scertainlyopportunityforyourdatatobecompromised.
Yourapplications,computecycles,andstoragearenotunderyourdirectcontrol,sowhile
cloudvendorsaspiretokeepyourdatasafe,youcanneverreallybe100percentsurethatit’s
notatrisk.
Addtothatthepossibilitythattheremayjustbeanaccidentthatcausesyourdata
tobeseenbyothers.Further,whenyouaredonewithdataandtrytopurgeit,there’sno
guaranteethatitwillbeeradicated.That’sbecausemanycloudservicessimplydonot
erasefreedstorageandsomedonoteveninitializestoragewhentheyassignittoyou.
Andintheeventofahardwareorsoftwarefailure,somecloudprovidersmaynotdestroy
dataonfailedmachines.
Additionally,it’snotjustthecloudproviderwhomightbeatfaultifyourdatagetsout.
Therearealsoconcernsstemmingfromman-in-the-middleattacks.
Thepointhereisnottoscareyouawayfromcloudcomputing,buttoremindyouthat
safeguardsmustbetakenandthetoughquestionsasked.Andinthiscase,it’simperative
thatyoucryptographicallyauthenticateremoteservicesandservers.
Thisisaccomplishedthroughclientandservercertificatesthatletyouknowyouare
connectingsecurelytoyourcloudassets.
Remoteservicesmustalsobecryptographicallyprotected.Youuseanauthorization
infrastructure,likeKerberos,toensurethatyouareproperlyauthenticated.
100 Part II: Cloud Computing Technolog y
Your Clients
Local Datacenter
Cloud Vendor
Your Organization
Withcloudstorage,besuretoprotectitcryptographicallyaswell.Thisincludesencrypting
thedatayoustoreandensuringthatdataissetuptobedestroyedwhenthestoragekeyis
destroyed.
Thisprocesswillmakeyourdatamoresecure,butitalsorequiresalotofkeys.Consider
thenetworkdiagraminFigure5-1.
Obviouslythisdoesn’tshoweveryelementofyournetwork,butyou’llnoticeakey
managementserver,whichiscriticaltohavetokeeptrackofallyourkeys.Keysonthe
serverinclude
• Transportkeys
• Authenticationkeys
• Authorizationtokens
• Fileencryptionkeys
• Hardwarestoragekeys
• Revocationkeys
• Certificates
Network
We’vetalkedaboutaccessingthecloudviatheInternet,andthatisthecase,inageneralsort
ofway.Inorderforthecloudtodeliveritsbestresources,therearedifferinglevelsof
connectivityneeded.
Chapter 5: Hardware and Infrastructure 101
ResearchfirmGartneridentifiedfourdifferentlevelsinaJune2008study.
Inthestudy,Gartnernotesthatdifferentorganizationsrequiredifferentthingsfromthe
cloud,andassuchtheywillhavetoconnectindifferentways.Whatworksforoneorganization
mightnotnecessarilybethebestmeansofconnectivityforanother.
NOTE Gartneralsonotesthatoneorganizationdoesn’tneedtolockintoonesolution.Theymight
haveone,two,three,orallfourconnectivitytypes,basedontheirneed.
BasicPublicInternet
Thefirstoptionisthepipemostofushavecomingintoourofficeorhomes.Thepublic
PART II
Internetisthemostbasicchoiceforcloudconnectivity.
ThisisthetypeofaccessthatyoubuyfromanInternetserviceprovider(ISP)and
connectwithviabroadbandordial-up,basedonyourlocation.
NOTE Cloudcomputingoveradial-upconnectionisdifficulttodo,butdependingonthelocation
ofyoursiteoraremotesite,itmaybeallyouhave.We’lltalkaboutitlaterinthischapter.
But“basicpublicInternet”isjustthat—basic.TherearenoextraslikeTransmission
ControlProtocol(TCP)acceleration,advancedcompression,orapplication-specific
optimization.
Thismodelhasthefollowingadvantages:
• There’salargeaudience.AnyonewithInternetaccesscanusethissolution.
• It’shighlyfaulttolerant.
• Manyprovideroptionsareavailable.
• SecureSocketsLayer(SSL)–based,HypertextTransportProtocolOverSecure
SocketsLayer(HTTPS),encryptedaccessprovidesconfidentiality.
• It’scost-effective.
Italsohasthefollowingdisadvantages:
• Lackofend-to-endqualityofservice(QoS),thusmakingend-to-endservice-level
agreements(SLAs)difficulttoreach.
• Probabilityofpoorresponseoverhigh-latencyconnections.Thisisworsenedby
protocolinefficienciesinTCP,HTTP,andwebservices.
• Downtimethatmightbeoutofyourcontrol(cablecuts,problemsattheISP,and
soforth).
Utilizingthismethod,organizationsshouldconsidersubscribingwithmultipleISPs,
andcloudprovidersshouldalsogetbandwidthfrommultiplesources.Ideally,theclient
wouldgetbandwidthfromoneofthesameISPsasthevendor.Thisaidsinspeed,
reliability,andabetterchanceofsuccesswithanSLA.
102 Part II: Cloud Computing Technolog y
TheAcceleratedInternet
EmployingadvancedapplicationdeliveryfeaturesontopofyourInternetconnectioncan
benefitboththeserviceproviderandtheclient.Cloudimprovementcanincreaseby20percent
to50percentbyoffloadingnetwork-relatedfunctionsfromtheserver.
SSLterminationandTCPconnectionmanagementremoveasignificantamountof
processingfromthefront-lineservers.Additionally,dynamiccaching,compression,and
prefetchingresultsinbetterthana50percentperformanceincreaseforendusers.
Someprovidersofferingthisserviceinclude
• AT&THosting
• CitrixNetScaler
• F5’sWebAccelerator
Thismethodismostlyorientedtowardthecloudserviceprovider,butintheenditbenefits
theenduser.OrganizationsoptingforthismethodofconnectivityshouldlookatSLAsand
monthlybandwidthcharges,ratherthanworryaboutwhataccelerationmethodstheservice
providerisadding.
Atthecloud,thismethodofaccelerationrequirestheinstallationofaserver-sideappliance.
Attheenduser,itnormallyrequirestheinstallationofadownloadableclient.
NOTE WhilethisisanaccelerationofthebasicpublicInternetoption,itdoesnotaddressanyofits
networkconnectivityissues.
OptimizedInternetOverlay
AnoptimizedInternetoverlayapproachallowscustomerstoaccessthecloudviathepublic
Internet,butenhancementoccursontheprovider’scloud.Enhancementsatthesepointsof
presence(POP)include
• Optimizedreal-timerouting.Thishelpsavoidslowdowns,helpingtomakeSLAs
easiertoattain.
• AnSSLsessioncanbestoppedsothatprotocolsandpayloadcanbeoptimizedand
re-encrypted.
• SomeoftheapplicationlogiccanresideonthePOP.Thisallowsforbetter
scalability,faulttolerance,andresponsetime,usuallyinexcessof80percent.
• Contentthatisfrequentlyaccessedcanbedeliveredfromlocalcaches.
Disadvantagesofthismethodinclude
• ItiscostlierthanpublicInternetconnectivity,sometimesasmuchasfourtimes
asmuch.
• Thereisastrongvendorlock-iniftheapplicationisdistributedintothecarrier’s
network.
Chapter 5: Hardware and Infrastructure 103
Site-to-SiteVPN
Thefourthoptionistoconnecttotheserviceproviderdirectlyusingaprivatewidearea
network(WAN)(normallyanMPLS/VPNconnection).Thissetupallowsconfidentiality,
guaranteedbandwidth,andSLAsforavailability,latency,andpacketloss.MPLScanalso
scaletomeetchangingbandwidthneeds,andQoScanalsobewrittenintotheSLAs.
Onthedownside,privateWANsarenotnormallymorereliablethanInternet
connections,especiallyredundantconnectionstomultipleISPs.
Table5-1comparesallfourconnections.
CloudProviders
PART II
Cloudprovidersthatuseservicesdispersedacrossthecloudneedarobustconnection
method.Privatetunnelsmakesurethatbandwidth,latency,andlossaren’taslikelytoaffect
performance.Plus,encryptionandstrongauthenticationofferanotherbenefit.
Cloudprovidersthataregrowingmightfacebigcostsasnetworkbandwidthcharges
increase.Thistrafficisfromtrafficbothtoandfromclientsaswellastrafficamongprovider
sites.Bigproviders,likeGoogle,areabletosidestepthesechargesbybuildingtheirown
WANswithmultiplepeeringpointswithmajorISPs.Unfortunately,mostcloudproviders
aren’tabletodothis.SmallerproviderscanuseWANoptimizationcontrollers(WOCs)to
reducebandwidthrequirementsbyupto80percent.
Performancecanbeimprovedandbandwidthchargesreducedifprovidersuse
asymmetricaloptimization.Thisrequiresanapplianceattheproviderandaclientapplet.
Thiscanreduceresponsetimebyupto70percentandbandwidthrequirementsbyupto
80percent.Thebenefitisthatadditionalequipmentisnotneededatclientsites.
CloudConsumers
LargecompaniescanbuildtheirownscalabledistributedITinfrastructureinwhichdatacenters
areconnectedwiththeirownprivatefiberopticconnections.Thisdependsondistance,
bandwidthrequirements,and—ofcourse—theirbudgets.Thisinfrastructurestartstolooklike
acloudcomputingservice.
ClientslocatedatmajorsitesnormallyaccessapplicationsoverthecorporateWAN.
Forsmallerofficesormobileworkers,VPNconnectionsacrossoptimizedandaccelerated
Internetservicesprovideamorerobustsolution.VPNtunnelsacrosstheInternetarebest
asaprimarylinkonlywhenhighperformanceisnotcrucial.
PipeSize
Bandwidthis,simplyput,thetransmissionspeedorthroughputofyourconnectiontothe
Internet.But,measuringbandwidthcanbedifficult,sincethelowestpointofbandwidth
betweenyourcomputerandthesiteyou’relookingatiswhatyourspeedisatthatmoment.
Therearethreefactorsthataresimplyoutofyourcontrolwhenitcomestohowmuch
bandwidthyouneed:
• TheInternetbandwidthbetweenyourorganizationandthecloud
• Theround-triptimebetweenyourorganizationandthecloud
• Theresponsetimeofthecloud
Upstream/Downstream
Anotherfactortoconsideriswhetheritisokayforthetransferstobesymmetricor
asymmetric.Ifyourconnectionwiththecloudissymmetric,thenthatmeansyouare
sendingandreceivingdataatthesamerate.Ifyourconnectionisasymmetric,thendatais
sentfromyourorganizationataslowerratethanyou’rereceivingit.
Cloud Vendor
Your Organization
Forinstance,ADSLconnectionssendandreceivedataatdifferentrates.The“A”in
ADSLstandsforasymmetric.Dependingonwhatservicewe’retalkingabout,datacanbe
receivedat1.5Mbpswhileitissentat750Mbps.
YourorganizationislikelyconnectingtoitsISPusingsomethingmorerobustthanDSL,
andinmostcasesthoseconnectionsaresymmetrical.
ConsideralsothattheInternetchangesfromonemomenttothenextinwaysthatare
impossibletopredict.Datamovesthroughdifferentroutersandnetworkappliances,so
yourspeedwillvaryfromtimetotime.Itmaynotbenoticeable,butitdoesfluctuate.As
such,eventhoughyou’repayingforaT1line,don’tcallthephonecompanytocomplain
rightaway—there’salwaysadelaysomewhere.
Thebestruleofthumbisthatifyouareconsistentlymeasuring85percentofyour
PART II
nominalbandwidth,thenyou’redoingokay.
PerformanInternetconnectiontestseveraltimesaday.Tryitfirstthinginthemorning,
atlunchtime,andclosetotheendofbusiness.Generallyspeaking,bandwidthmeasurement
at7A.M.willgivebetterresultsthanintheevening.
HowMuchDoWeNeed?
Thiscanbeacomplexquestion,basedonwhatyou’llbedoingonthecloud.Whatyouhave
todoisfigureouthowmuchdatawillbemovinginandoutofthecloudatanygiventime,
andthendecidehowbigofapipeyouneedtomovethatdata.
ChancesaregoodthatyouhaveabeefyenoughInternetconnectiontomakecloud
computingviable.However,realizethatthemoreyoudoonthecloud,themoredemandwill
beplacedonyourInternetconnection.Ifyoudonothaveenoughcapacity,theneveryonewill
experienceaslowdown.
Takethetimetofigureouthowmuchcapacityyou’lluse,andmakesureyouhaveenough
resourcestoaccommodatethatneed.Ifnot,youarelikelytohaveanotherexpensethatyou
hadn’tplannedon,intheguiseofafasterInternetconnection.
Cloud Vendor
Your Organization
Figure out how much capacity all your clients will use when accessing the cloud,
and ensure you have a big enough pipe to accommodate that need.
106 Part II: Cloud Computing Technolog y
It’simportanttosecureanSLAthatmeetsyourbandwidthrequirements.Thisnotonly
ensuresthatyouaregettingthespeedthatyouneed,butiftheISPfailstomeetthoselevels,
therecanbesomesortofremediationinitforyou.
Redundancy
Whenformulatingyourcloudinfrastructure,besuretoconsidertheissueofreliabilityand
uptimeandaskyourserviceprovidertoconfigureyourcomputinginfrastructurefor
redundancyandfailover.
InyourLAN,redundancyusedtomeanthatanotherserverortwowereaddedtothe
datacenterincasetherewasaproblem.Thesedayswithvirtualization,redundancymight
meanavirtualserverbeingclonedontothesamedevice,orallthevirtualserversofone
machinebeingclonedontoasecondphysicalserver.
Your Replicated
Your Replicated Data
Data Data Data
Your Replicated
Data Data
Itbecomesmorecomplexinthecloud.Whileyoumaythinkofyourserverbeinghosted
atthedatacenterofyourcloudprovider,it’snotaseasytonaildown.Partsofyourdata
maybehousedinonelocationandotherpartsscatteredthroughoutthecountry(possibly
eventheworld).Andwhentheprovideraddsaredundantsystem,againthedatais
scatteredthroughouttheircloud.Soit’snotanissueoftheserviceproviderwheelingina
newservertoprovideredundantservices.Rather,theysimplyreallocateresourcestogive
youaredundantsystem.
NOTE Thisisoneofthesellingpointsforcloudcomputing—thefactthatfailoverandredundancy
areinherentpartsofthearchitecture.However,it’sbesttoaskaboutthesefeaturesandmakesure
theyareincluded.
PART II
Services
Therearedifferentservicesyouwillneedtorun,dependingonyourcloudproviderand
whatyourorganizationdoes.Also,theseserviceswilllikelyaffecthowyourcloud
infrastructureisdeployed.
Identity
Nomatterwhereanapplicationruns—in-houseoronthecloud—itneedstoknowaboutits
users.Toaccomplishthis,theapplicationasksforadigitalidentity—asetofbytes—to
describetheuser.Basedonthisinformation,theapplicationcandeterminewhotheuseris
andwhatheorsheisallowedtodo.
In-houseapplicationsrelyonserviceslikeActiveDirectorytoprovidethisinformation.
Clouds,however,havetousetheirownidentityservices.Forinstance,ifyousignonto
Amazoncloudservices,youhavetosignonusinganAmazon-definedidentity.Google’s
AppEnginerequiresaGoogleaccount,andWindowsusesWindowsLiveIDforusewith
Microsoft’scloudapplications.
Identityservicesneednotbeproprietary.OpenIDisanopen,decentralized,singlesign-
onstandardthatallowsuserstologintomanyservicesusingthesamedigitalidentity.
AnOpenIDisintheformofauniformresourcelocator(URL)anddoesnotrelyona
centralauthoritytoauthenticateauser’sidentity.Sinceaspecifictypeofauthenticationis
notrequired,nonstandardformsofauthenticationmaybeused,includingsmartcards,
biometric,orpasswords.AnOpenIDregistrationisshowninFigure5-2.
OpenIDauthenticationisusedbymanyorganizations,including:
• Google
• IBM
• Microsoft
• Yahoo!
108 Part II: Cloud Computing Technolog y
FIGURE 5-2 OpenID is a means to keep login information consistent across several sites.
Integration
Applicationstalkingamongthemselveshavebecomehighlycommon.Vendorscomeup
withallsortsofon-premisesinfrastructureservicestoaccomplishit.Theserangefrom
technologieslikemessagequeuestocomplexintegrationservers.
Integrationisalsoonthecloudandtechnologiesarebeingdevelopedforthatuse,as
well.Forexample,Amazon’sSimpleQueueService(SQS)providesawayforapplications
toexchangemessagesviaqueuesinthecloud.
SQSreplicatesmessagesacrossseveralqueues,soanapplicationreadingfromaqueue
maynotseeallmessagesfromallqueuesonagivenrequest.SQSalsodoesn’tguarantee
in-orderdelivery.Thesesoundlikeshortcomings,butinfactit’sthesesimplificationsthat
makeSQSmorescalable,butitalsomeansthatdevelopersmustuseSQSdifferentlyfrom
on-premisesmessaging.
Anotherexampleofcloud-basedintegrationisBizTalkServices.Insteadofusingqueuing,
BizTalkServicesutilizesarelayserviceinthecloud,allowingapplicationstocommunicate
Chapter 5: Hardware and Infrastructure 109
throughfirewalls.Sincecloud-basedintegrationrequirescommunicatingthroughdifferent
organizations,theabilitytotunnelthroughfirewallsisanimportantproblemtosolve.
BizTalkServicesalsoutilizessimplifiedworkflowsupportwithawayforapplicationsto
registertheservicesitexposes,andthenletsthoseservicesbeinvokedbyotherapplications.
Integrationservicesinthecloudisgoingtogaininprominenceasitbecomesmoreand
moreimportant,especiallygivenhowimportantitisin-house.
Mapping
Mapsarebecomingmoreandmorepopularinwebapplications.Forinstance,hoteland
restaurantwebsitesshowtheirlocationsontheirwebsitesandallowvisitorstoentertheir
addressestogetcustomizeddirections.
PART II
Buttheguywhodevelopedthewebsitelikelydidn’thavethetimeormoney(notto
mentiontheinterest)tomakehisownmappingdatabase.Enoughorganizationswantthis
functionality,however,soitisofferedasacloudapplication.
SuchservicesasGoogleMapsandMicrosoft’sVirtualEarthprovidethiscloud-based
function,allowingdeveloperstoembedmapsinwebpages.
Theseservicesarereallyjustadditionstoexistingwebsites.
110 Part II: Cloud Computing Technolog y
Payments
Anothercloudservicethatyoumightwanttoplanforandconfigureyourhardware
appropriatelyforispayments.Dependingonyourorganization,youmayormaynotwantto
acceptonlinepaymentsfromcustomers.Luckily,thereisnolackofwaystogetpaidonline.
Youcansimplysignupwithaservicetoacceptcreditcards,oryoucangotheroute
ofPayPal.Withanonlinepaymentservice,customerscansendmoneydirectlytoyour
organization.
Search
Theabilitytoembedsearchoptionsinawebsiteiscertainlynothingnew,butitisarich
featurethatyoumightwanttoemployinyourownweborapplicationdevelopment.
Microsoft’sLiveSearchallowson-siteandcloudapplicationstosubmitsearchesandthen
gettheresultsback.
Searchabilityislimitedonlytotheorganizationandwhatitdoes.Forinstance,acompany
mightdevelopanapplicationthatdoesboth.Forinstance,let’ssayacompanyhasadatabase
ofmovieinformation.Bytypinginthenameofthemovie,youcansearchitsowndatabaseas
wellasasearchoftheInternettogiveyoutwotypesofresults—what’sstoredinthecompany
databaseaswellaswhat’sontheentireWeb.
Ifyouweretouseasinglecomputertoaccessthecloud,therequirementsarepretty
minimal—allyouneedisacomputerandanInternetconnection.However,whenyoustart
planningcloudsolutionsforyourorganization,youneedtospendmoretimefiguringout
whichhardwareandinfrastructureisbestforyou.
Inthenextchapterwe’lltalkabouthowyoucanuseyournewlyconfigurednetworkto
accessthecloudandabouthowyourclientsaresetup.
CHAPTER
6
Accessing the Cloud
H
owyouwillinteractwithyourcloudwilldependonmanyfactors,nottheleastof
whichistheprovideryouuse.Thereareanumberofdevelopmenttoolsthatallow
youtobuildyourapplicationsandseveralbrowseroptionsthatyoucanuseto
accessthoseapplications.
Inthischapterwe’lltakeacloserlookatthetoolsyoucanusetoconnectwiththecloud
soyoucanrealizewhichtoolswillworkbestforyourorganizationandyourparticular
needs.
Platforms
Aplatformishowacloudcomputingenvironmentisdeliveredtoyou.Inthissectionwe’ll
takeacloserlookathowthecloudcanbeproducedandpresentedtoyou.
WebApplicationFramework
Awebapplicationframeworkisusedtosupportthedevelopmentofdynamicwebsites,
webapplications,andwebservices.Thepointofaframeworkistoreducetheoverhead
thatcomeswithcommonactivitiesinwebdevelopment.Forinstance,frameworksprovide
111
112 Part II: Cloud Computing Technolog y
librariesthatarealreadywrittensothedeveloperdoesn’thavetoreinventthewheelevery
timeawebsiteisdeveloped.
Pre-existing code
libraries
EarlyintheWeb’slife,hypertextwasmostlyhand-codedHypertextMarkupLanguage
(HTML)thatwaspublishedonWebservers.Ifapublishedpageneededtobechanged,it
hadtobedonebythepage’sauthor.AstheWebgrewup,itbecamemoredynamicwiththe
additionoftheCommonGatewayInterface(CGI).Thisallowedexternalapplicationsto
interfacewithwebservers.
AJAX
AsynchronousJavaScriptandXML(AJAX)isagroupofwebdevelopmenttechniquesused
forcreatinginteractivewebapplications.ByusingAJAX,webapplicationscanretrievedata
fromtheserverasynchronously.Becauseitisbeingdoneinthebackground,itwon’t
interferewiththedisplayandbehaviorofthecurrentpage.
Technologies AJAXisatermthatrepresentsawiderangeofwebtechnologiesthatcanbe
usedtohelpwebapplicationscommunicatewithaserver,butwithoutinterferingwiththe
currentstateofthatpage.AJAXreferstothesetechnologies:
• ExtensibleHypertextMarkupLanguage(XHTML)andCascadingStyleSheets
(CSS)forpresentation
• TheDocumentObjectModelfordynamicdisplayofandinteractionwithdata
• XMLandExtensibleStyleSheetLanguageTransformations(XSLT)forthe
interchangeandmanipulationofdata,respectively
• TheXMLHttpRequestobjectforasynchronouscommunication
• JavaScripttobringthesetechnologiestogether
Chapter 6: Accessing the Cloud 113
AJAXcontinuestoevolve.Forinstance,whileJavaScriptclaimsaplaceintheacronym
forAJAX,itisnottheonlyclient-sidelanguagethatcanbeusedfordevelopinganAJAX
application.LanguageslikeVBScriptcanbeused,aswell.Further,XMLisnotrequiredfor
dataexchange.JavaScriptObjectNotation(JSON)isawidelyusedalternative.HTMLand
plaintextcanalsobeused.
ProsandCons AJAXdoessomethingsright,butstruggleswithothers.Amongits
advantagesarethefollowingcapabilities:
• Often,multiplepagesonawebsitecontainthesameinformation.Ifthosepages
werecodedbyhand,thesamecontentwouldhavetobewrittenintoeachandevery
page.AJAXallowsawebapplicationtosimplyretrievenewinformationandadjust
PART II
howthecontentispresented.Thisisveryefficientandreducestheamountof
bandwidthconsumedandreducesloadtimes.
• Usingasynchronousrequestsallowstheclient’swebbrowsertobemoreinteractive
andrespondquicklytouserinputs.Theusermayevenperceivetheapplicationto
befaster.
• Connectionstotheserverarereduced,becausescriptsandstylesheetsneedonlybe
downloadedonce.
DisadvantagestoAJAXinclude
• Dynamicallycreatedwebpagesdonotshowupinthebrowser’shistoryengine,so
clickingontheBackbuttonwouldnotre-createthelastseenpage.
• Itisdifficulttobookmarkadynamicallycreatedwebpage.
• IfabrowserdoesnotsupportAJAXorifJavaScriptisdisabled,AJAXfunctionality
cannotbeused.
• ThereisnostandardsbodybehindAJAX,sothereisnowidelyadoptedbest
practicetotestAJAXapplications.
PythonDjango
Djangoisanopen-sourcewebapplicationframeworkwritteninPython.Originallyitwas
createdtomanagenewssitesforTheWorldCompanyandreleasedpubliclyunderaBSD
licenseinJuly2005.InJune2008itwasannouncedthattheDjangoSoftwareFoundation
willbetheauthorityforDjango.
NOTE DjangowasnamedforjazzguitaristDjangoReinhardt.
Djangowasdevelopedtoeasethecreationofdatabase-drivenwebsitesanduses
reusabilityofcomponents.DjangoutilizestheprincipleofDRY(Don’tRepeatYourself).
ItalsousesanadministrativeCRUD(create,read,update,anddelete)interfacethatis
dynamicallygenerated.
114 Part II: Cloud Computing Technolog y
Includedinthecoreframeworkare
• Alightweight,stand-alonewebserverfordevelopmentandtesting
• Acachingframework,whichcanuseanyofseveralcachemethods
• Aninternaldispatchersystemthatallowsanapplication’scomponentsto
communicateusingpredefinedsignals
• AninternationalizationsystemthattranslatesDjango’scomponentsintomultiple
languages
• Aschemeforextendingthecapabilitiesofthetemplateengine
NOTE TheGoogleAppEngineincludesDjango.
ThereisafreeDjangobook,releasedundertheGNUFreeDocumentLicense,which
tellsmoreabouttheframework.ItwaspublishedinDecember2007andcanbefoundat
http://www.djangobook.com.
WebHostingService
Youwillneedawebhostingservicethatwillallowyoutostoreyourdataandapplications.
Thisiswhatwethinkofwhentheterm“cloudprovider”isused.Thisistheorganization
thatwillhostyourdata.
SomewebhostingservicesincludeAmazonElasticComputeCloudandMosso.
AmazonElasticComputeCloud
AmazonElasticComputeCloud(http://aws.amazon.com/ec2)isawebservicethat
providesresizablecomputecapacityinthecloud.AmazonEC2’swebserviceinterface
allowsyoutoobtainandconfigurecapacitywithminimalfriction.
ItprovidescompletecontrolofyourcomputingresourcesandletsyourunonAmazon’s
computingenvironment.AmazonEC2reducesthetimerequiredtoobtainandbootnew
serverinstancestominutes,allowingyoutoquicklyscalecapacity,bothupanddown,asa
client’scomputingrequirementschange.AmazonEC2changestheeconomicsofcomputing
byallowingyoutopayonlyforcapacitythatyouactuallyuse.
EC2usesXenvirtualization.Eachvirtualmachine,calledaninstance,isavirtualprivate
serverandcanbeoneofthreesizes:small,large,orextralarge.Instancesaresizedbasedon
EC2ComputeUnits,whichistheequivalentCPUcapacityofphysicalhardware.
OneEC2ComputeUnitequalsa1.0–1.2GHz2007Opteronor2007Xeonprocessor.The
availableinstancesizesareshowninTable6-1.
TheserviceinitiallyofferedSunMicrosystemsOpenSolarisandSolarisExpress
CommunityEdition.InOctober2008,EC2addedtheLinuxandWindowsServer2003
operatingsystemstoitsofferings.
Mosso
MossoisthehomeofTheHostingCloudandCloudFS,providingenterprise-gradehosting
andstorageservices.Mossoprovidesaneasilymanagedinterfacesothatdevelopers,
designers,andITmanagerscandeployreliablewebapplicationsquicklyandeasilyaswell
asahigh-performancecloud-basedstorageservice.
Chapter 6: Accessing the Cloud 115
Instance Size Small Large Extra Large High CPU–Medium High CPU–Extra Large
EC2 1 4 8 5 (two virtual cores 20
Compute with 2.5 Compute
Units Units each)
Memory 1.7GB 7.5GB 15GB 1.7GB 7GB
Storage 160GB 850GB 1,690GB 350GB 1,690GB
Platform 32-bit 64-bit 64-bit 32-bit 64-bit
PART II
FoundedbytwoRackspaceemployees,TheHostingCloudisbuiltuponacross-
platform,clustered-computingarchitecture.Formoreinformation,visitwww.mosso.com.
TherearethreecomponentstoMosso’soffering:
• CloudSites Advertisedas“thefastestwaytoputsitesonthecloud”;runs
WindowsorLinuxapplicationsacrosshundredsofservers.
• CloudFiles Providesunlimitedonlinestorageformedia(examplesinclude
backups,videofiles,usercontent),whichisservedoutviaLimelightNetworks’
ContentDeliveryNetwork.
• CloudServers Abletodeployfromonetohundredsofcloudserversinstantlyand
createsadvanced,high-availabilityarchitectures.
ProprietaryMethods
Inadditiontothewidelyusedstandards(likeAJAXandDjango),individualcompanies
offertheirown,proprietarymethodstoconnecttothecloud.MicrosoftandForce.comare
twoexamplesofcompaniesthathavedesignedtheirowninfrastructureforconnectingto
thecloud.
Azure
TheAzureServicesPlatformisMicrosoft’scloudsolutionthatspansfromthecloudtothe
enterprisedatacenter.Further,itdeliverscontentacrossthePC,web,andphone.
Theplatformcombinescloud-baseddevelopercapabilitieswithstorage,computational,
andnetworkinginfrastructureservices,allhostedonserversoperatingwithinMicrosoft’s
globaldatacenternetwork.Thisprovidesdeveloperswiththeabilitytodeployapplications
116 Part II: Cloud Computing Technolog y
inthecloudoron-premisesandenablesexperiencesacrossabroadrangeofbusinessand
consumerscenarios.
TheAzureServicesPlatformprovidesdeveloperswiththeabilitytocreateapplications
whiletakingadvantageoftheirexistingskills,tools,andtechnologiessuchastheMicrosoft
.NETFrameworkandVisualStudio.
Developersalsocanchoosefromabroadrangeofcommercialoropen-source
developmenttoolsandtechnologies,andaccesstheAzureServicesPlatformusingavariety
ofcommonInternetstandardsincludingHTTP,representationalstatetransfer(REST),and
AtomPublishingProtocol(AtomPub).
KeycomponentsoftheAzureServicesPlatformincludethefollowing:
• WindowsAzureforservicehostingandmanagement,low-levelscalablestorage,
computation,andnetworking
• MicrosoftSQLServicesforawiderangeofdatabaseservicesandreporting
• Microsoft.NETServices,whichareservice-basedimplementationsoffamiliar.NET
Frameworkconceptssuchasworkflowandaccesscontrol
• LiveServicesforaconsistentwayforuserstostore,share,andsynchronize
documents,photos,files,andinformationacrosstheirPCs,phones,PCapplications,
andwebsites
• MicrosoftSharePointServicesandMicrosoftDynamicsCRMServicesforbusiness
content,collaboration,andrapidsolutiondevelopmentinthecloud
Chapter 6: Accessing the Cloud 117
Asakeypartoftheircloudoffering,Microsofthasbuiltdatacenterstodeliveronline
services.MicrosofthasopenedmajordatacentersinQuincy,Washington,andSanAntonio,
Texas,withadditionalcentersscheduledtoopeninChicagoandinDublin,Ireland.
Force.com
Force.com,aPaaSfromSalesforce.com,isanotherwaytocreateanddeploybusiness
applications.Byreplacingthecomplexityofsoftwareplatformswithacomplete,scalable
service,Force.comprovidesdevelopersafastpathtoturnideasintobusinessimpact.
PART II
Force.comFeatures Force.comPaaSprovidesthebuildingblocksnecessarytobuildany
kindofbusinessapplication,andautomaticallydeploythemasaservicetosmallteamsor
entireenterprises.TheForce.complatformgivescustomerstheabilitytorunmultiple
applicationswithinthesameSalesforce.cominstance,allowingallofacompany’s
Salesforce.comapplicationstoshareacommonsecuritymodel,datamodel,anduser
interface.
ThemultitenantForce.complatformencompassesacompletefeaturesetforthecreation
ofbusinessapplicationssuchasanon-demandoperatingsystem,theabilitytocreateany
databaseondemand,aworkflowengineformanagingcollaborationbetweenusers,
118 Part II: Cloud Computing Technolog y
theApexCodeprogramminglanguageforbuildingcomplexlogic,theForce.comWeb
ServicesAPIforprogrammaticaccess,mashups,andintegrationwithotherapplications
anddata,andnowVisualforceforaframeworktobuildanyuserinterface.
Visualforce AspartoftheForce.complatform,Visualforcegivescustomerstheabilityto
designapplicationuserinterfacesforanyexperienceonanyscreen.Usingthelogicand
workflowintelligenceprovidedbyApexCode,Visualforceofferstheflexibilitytomeetthe
requirementsofapplicationsthatfeaturemanydifferenttypesofusersonavarietyof
devices.VisualforceusesHTML,AJAX,andFlexforbusinessapplications.Visualforce
enablesthecreationanddeliveryofanyuserexperience,offeringcontroloveran
application’sdesignandbehavior.
Visualforceprovidesapage-basedmodel,builtonstandardHTMLandwebpresentation
technologies,andiscomplementedwithbothacomponentlibraryforimplementingcommon
userinterfaceelementsandacontrollermodelforcreatingnewinteractionsbetweenthose
elements.Visualforcefeaturesandcapabilitiesinclude
• Pages Enablesthedesigndefinitionofanapplication’suserinterface.Thisenables
developerstocreatenewpagesusingstandardwebtechnologiesincludingHTML,
AJAX,andFlex.Pagesallowsdeveloperstocreateanyuserexperiencewith
standardwebtechnologies.
• Components Providestheabilitytocreatenewapplicationsthatautomatically
matchthelookandfeelofSalesforceapplicationsoreasilycustomizeandextend
theSalesforceuserinterfacetospecificcustomeranduserrequirements.Customers
cancreateauserexperiencebyassemblingexistinguserinterfaceelements.
• LogicControllers Enablescustomerstobuildanyuserinterfacebehavior.
CustomerscanuseVisualforcetoquicklycreateanewlookandfeelthatleverages
existingapplicationfunctionality.Thestandardcontrollergivescustomerstheability
toinheritandreuseanystandardSalesforceUIbehaviorlikenew,edit,andsave.
WebApplications
Ifyouaregoingtouseapplicationsonthecloud,therearemanytochoosefrom.Muchof
yourdecision-makingprocesswillcomedowntoyourproviderandwhattheyoffer.Inthis
sectionwe’lltalkaboutthechoicesyouhaveinexistingcloudapplications.
NOTE Inthenextsectionwe’lltalkaboutthetoolsyoucanusetobuildyourownapplicationsif
whatyouwantisn’talreadyavailable.
YourChoices
Youhavetonsofoptionswhenitcomestofindingonlineapplications.Yourprovidermay
haveastableofpremadeapplicationsthatyoucanuse.Forinstance,Googleoffersaslewof
applicationsgearedtowardproductivity.We’lltalkaboutsomeofthoseapplicationsinabit,
butwhatifyourproviderdoesn’tofferanapplicationthatyouwant?
Chapter 6: Accessing the Cloud 119
Itmaybethatsomeoneelsehasalreadycreatedtheapplicationandit’ssimplyamatterof
usingwhattheyhavecreated.Forexample,wetalkedaboutForce.comearlierinthischapter.
Force.comallowsyouandotherstocreateyourownappsandthenmakethemavailablefor
otherstouse.
Ifyoudon’tseeanapplicationthatyouwant,askyourserviceprovider—theymay
haveitofflinesomewhere—ortheycanpointyoutoit.
SampleApplications
Differentcompaniesofferdifferentthings,butforthesakeofunderstandingthemarket,
let’stakeacloserlookatcloudgiantGoogleandtheirofferings.Theyhaveaslateofapps
thataretargetedrighttowardyourenterprise.Followingthislink(http://www.google
PART II
.com/apps/intl/en/business/index.html)willtakeyoutotheirapps.
GoogleApps,launchedasafreeserviceinAugust2006,isasuiteofapplicationsthat
includes
• Gmailwebmailservices
• GoogleCalendarsharedcalendaring
• GoogleTalkinstantmessagingandVoiceOverIP
• StartPageforcreatingacustomizablehomepageonaspecificdomain
Morethan100,000smallbusinessesandhundredsofuniversitiesnowusetheservice.
“Somuchofbusinessnowreliesonpeoplebeingabletocommunicateandcollaborate
effectively,”saidGregorySimpson,CTOforGeneralElectricCompany.“GEisinterestedin
evaluatingGoogleAppsfortheeasyaccessitprovidestoasuiteofwebapplications,andthe
waytheseapplicationscanhelppeopleworktogether.Givenitsconsumerexperience,Google
hasanaturaladvantageinunderstandinghowpeopleinteracttogetherovertheweb.”
GooglealsooffersapremiumservicecalledGoogleAppsPremierEdition.GoogleApps
PremierEditionhasthefollowinguniquefeatures:
• Per-userstorageof10GBs Offersabout100timesthestorageoftheaverage
corporatemailbox,eliminatingtheneedtofrequentlydeleteemail.
• APIsforbusinessintegration APIsfordatamigration,userprovisioning,single
sign-on,andmailgatewaysenablebusinessestofurthercustomizetheservicefor
uniqueenvironments.
• Uptimeof99.9percent ServiceLevelAgreementsforhighavailabilityofGmail,
withGooglemonitoringandcreditingcustomersifservicelevelsarenotmet.
• Supportforcriticalissues24/7 Includesextendedbusinesshourstelephone
supportforadministrators.
• Advertisingoptional Advertisingisturnedoffbydefault,butbusinessescan
choosetoincludeGoogle’srelevanttarget-basedadsifdesired.
• Lowfee Simpleandaffordableannualfee(US$50peruseraccountperyear)
makesitpracticaltooffertheseapplicationstoeveryoneintheorganization.
120 Part II: Cloud Computing Technolog y
InadditiontoGmail,GoogleCalendar,GoogleTalkandStartPage,alleditionsof
GoogleAppsalsoinclude
• GoogleDocsandSpreadsheets Withthisaddition,teamscancollaborateon
documentsandspreadsheetswithouttheneedtoemaildocumentsbackandforth.
Multipleemployeescansecurelyworkonadocumentatthesametime.All
revisionsarerecordedforediting,andadministrativecontrolsalloworganizations
todefinelimitsondocumentsharing.
• GmailformobiledevicesonBlackBerry Gmailformobiledevicesprovidesthe
sameGmailexperience—suchassearch,conversationview,andsynchronization
withdesktopversion—onBlackBerryhandhelddevicesforusersofGoogleApps.
GmailformobiledevicesjoinsalistofothermobileoptionsforGoogleAppsand
BlackBerryusersthatalreadyincludesaGoogleTalkclientandavarietyofcalendar
synctools.
• Application-levelcontrol Allowsadministratorstoadaptservicestobusiness
policies,suchassharingofcalendarsordocumentsoutsideofthecompany.
ToprovidemoreoptionsandvaluetocustomersofGoogleAppsPremierEdition,
GoogleEnterpriseProfessionalpartnerslikeAvayaandPostiniaredevelopingavarietyof
solutionsbasedonGoogle’sAPIs,includingemailgateways,enhancedsecurity,Google
Calendarsynchronization,andthird-partyintegrationwithGoogleTalk,aswellasoffering
deployment,migration,andadditionalsupportservices.
Google-hostedapplicationsareavailableinmanylanguages,suchasFrench,Italian,
German,Spanish,Chinese,Japanese,andKorean.Youcanfindmoreinformationat
http://www.google.com/.
WebAPIs
YouarelikelytouseAPIswhenbuildingyourapps.ThereareanumberofdifferentAPIs
outthere,andwhichoneyouusewilldependonyour(oryourprogrammers’)skillsand
whichcompanyyouuseforcloudservices.DifferentcloudprovidersusedifferentAPIs.
WhatAreAPIs?
Anapplicationprogramminginterface(API)isasetofprogramminginstructionsand
standardsforaccessingaweb-basedprogram.SoftwarecompaniesreleasetheirAPIstothe
publicsothatothersoftwaredeveloperscandesignproductsthatarepoweredbyitsservice.
Forexample,AmazonreleaseditsownAPIsothatwebsitedeveloperscouldmore
easilyaccessinformationmaintainedattheAmazonwebsite.ByusingAmazon’sAPI,a
third-partywebsitecandirectlylinktoproductsontheAmazonsite.
APIsallowoneprogramtospeakwithanother.Theyarenotuserinterfaces.UsingAPIs,
programscanspeaktoeachotherwithouttheuserhavingtobeinvolved.Forinstance,
whenyoubuysomethingatAmazonandenteryourcreditcardinformation,Amazonuses
anAPItosendyourcreditcardinformationtoaremoteapplicationthatverifieswhether
Chapter 6: Accessing the Cloud 121
yourinformationiscorrect.Asauser,allyousawwastheplacetoenteryourcreditcard
information,butbehindthescenes,APIsweregettingthejobdone.
API
AnAPIissimilartoSoftwareasaService(SaaS),becausesoftwaredevelopersdon’t
PART II
havetostartfromscratcheverytimetheywriteaprogram.Ratherthanbuildoneprogram
thatdoeseverything(email,billingtracking,andsoforth),theapplicationcanfarmout
thosedutiestootherapplicationsthatdoitbetter.
HowAPIsWork
AnAPIis(astheacronymsays)aninterfacethatdefinesthewayinwhichtwothingswill
communicate.WithAPIs,thecallsbackandfortharemanagedbywebservices.Web
servicesareacollectionofstandardsincludingXML,theprogramminglanguagethat
allowsapplicationstocommunicateovertheInternet.XMLisageneral-purposemarkup
language.Itdescribesstructureddatainawaythatbothhumansandcomputerscanread
andwrite.
TheAPIisapieceofsoftwarecodewrittenasaseriesofXMLmessages,liketheonefor
theGoogleMapsAPIshownhere:
<scripttype="text/javascript"
src="http://www.google.com/jsapi?key=ABCDEFG"></script>
<scripttype="text/javascript">
google.load("maps","2.x");
//Callthisfunctionwhenthepagehasbeenloaded
functioninitialize(){
varmap=newgoogle.maps.Map2(document.getElementById("map"));
map.setCenter(newgoogle.maps.LatLng(37.4419,-122.1419),13);
}
google.setOnLoadCallback(initialize);
</script>
YourprogrammerscanuseAPIsbyprogrammingneworexistingapplicationsto
generatetherightXMLmessagestoutilizeremoteapplications.Forinstance,ifyouwanted
toarchiveemailsonthecloud,youcoulduseanAPItoautomaticallysendemailsfrom
yourinboxestothecloudarchive.
CompaniesthatreleasetheirAPIusuallydosoaspartofalargersoftwaredevelopment
kit(SDK)thatincludestheAPI,programmingtools,anddocumentation.
APIsandwebservicesareinvisibletoyourusersastheyaccessthecloud.Theirwhole
purposeistorunsilentlyinthebackground,doingthejobforwhichtheywerecreated.
122 Part II: Cloud Computing Technolog y
XMLisn’ttheonlystandardthatmakesAPIswork.Otherstandardsinclude
• SOAP(SimpleObjectAccessProtocol) SOAPencodesXMLmessagessothat
theycanbereceivedandunderstoodbyanyoperatingsystemoveranytypeof
networkprotocol.
• UDDI(UniversalDescription,Discovery,andIntegration) UDDIisanXML-
baseddirectorythatallowsbusinessestolistthemselves,findeachother,and
collaborateusingwebservices.
• WSDL(WebServicesDescriptionLanguage) WSDListheSOAPofUDDI.WSDL
istheXML-basedlanguagethatbusinessesusetodescribetheirservicesintheUDDI.
APICreators
TherearemanydifferentAPIsyoucanusetolinkyourorganizationwithyourcloud
applications.Whateveryouneedisprobablyalreadyoutthere—youjustneedtodoalittle
looking.Butfailingthat,youmighthavetocreateyourownAPIs.
GoogleGadgets
GoogleGadgetsareadesktopsearchapplicationthatenablesuserstosearchtheiremail,
files,webhistory,andchats.CalledGoogleDesktopSearch,thisnewapplicationmakesit
possibleforuserstofindinformationontheircomputersasfastandeasilyastheycan
searchtheWebwithGoogle.
NOTE YoucouldcreateaGoogleGadgetthatinterfaceswithyourclouddata.
TheGoogleGadgetsAPIiscomposedofthreelanguages:
• XML Thisisthelanguageyouusetowritegadgetspecifications.Agadgetisjust
anXMLfile,placedontheWebsomewherewhereGooglecanfindit.TheXMLfile
containstheinstructionsonhowtoprocessandrenderthegadget.TheXMLfilecan
containallthedata,oritcanhavereferenceURLswherethedatacanbefound.
• HTML HTMListhemarkuplanguageusedtoformatthepagesontheweb.Itis
generallyresponsibleforthestaticportionsofyourwebpages.HTLandXMLlook
similar,butHTMLisusedtoformatwebdocuments,whereasXMLisusedtodescribe
structureddata.
• JavaScript JavaScriptisthescriptinglanguageyoucanusetoadddynamicbehavior
toyourgadgets.
GoogleDesktopSearchisalightweight,free,downloadableapplicationthatbrings
Googlesearchtoinformationonyourcomputer.Theapplicationoperateslocallyonthe
user’scomputer,whereitprovidesthefollowingcapabilities:
• System-widesearch Userscansearchacrosstheiremailandawiderangeoffiles
andinformationsuchasemailinMicrosoftOutlookandOutlookExpress;filesin
MicrosoftWord,MicrosoftExcel,MicrosoftPowerPoint,andtext;websitehistory
inInternetExplorer;andinstantmessagechatsinAOLInstantMessenger.
Chapter 6: Accessing the Cloud 123
• Highsearchspeed Google.comcansearchbillionsofwebpagesinafractionofa
second.GoogleDesktopSearchisbuiltwiththesametechnology,anditcansearch
asingleharddriveinevenlesstime.
• EasyaccesstodesktopresultsviaGoogle.com GoogleDesktopSearchenables
userstosearchboththeircomputerandtheWebsimultaneously.Whenuserssearch
throughGoogle.com(eitherfromthehomepageortheGoogleToolbar),Google
DesktopSearchrunsthesamesearchinparallelontheuser’scomputer.IfGoogle
DesktopSearchfindsrelevantresults,thoseresultsareaddedtotheGoogle.com
searchresultspage.Thismeansthatusersdon’tneedtodecidebeforetheysearch
whethertosearchtheWebortheircomputer.
PART II
• Dynamicresults Unliketraditionalcomputersearchsoftwarethatupdatesoncea
day,GoogleDesktopSearchupdatescontinuouslyformostfiletypes.Whenauser
downloadsanewemailinOutlook,forexample,itcanbefoundwithinseconds
usingGoogleDesktopSearch.
GoogleDesktopSearchisavailableathttp://desktop.google.com.
GoogleDataAPIs
TheGoogleDataAPIsprovideasimplestandardprotocolforreadingandwritingdataon
theWeb.Theyencompassabroadrangeofbusinessfunctionsthatcanbeusedtolinkyour
applicationswithinandoutsideofthecloud.
Description TheseREST-styleAPIsarebasedontheAtomPublishingProtocol(AtomPub),
andusetheAtomsyndicationformattorepresentdataandHTTPtohandlecommunication.
TheGoogleDataAPIsinclude
• GoogleAppsAPIs
• GoogleBaseDataAPI
• BloggerDataAPI
• GoogleBookSearchDataAPI
• GoogleCalendarDataAPI
• GoogleCodeSearchDataAPI
• GoogleContactsDataAPI
• GoogleDocumentsListDataAPI
• GoogleFinancePortfolioDataAPI
• GoogleHealthDataAPI
• GoogleNotebookDataAPI
• PicasaWebAlbumsDataAPI
• GoogleSpreadsheetsDataAPI
• WebmasterToolsDataAPI
• YouTubeDataAPI
124 Part II: Cloud Computing Technolog y
Partnership Salesforce.compartneredwithGoogle,makingiteasierfordeveloperstocreate
applicationsforcloudcomputing.TheForce.comToolkitforGoogleDataAPIsprovidesa
setoftoolsandservicestoallowdeveloperstotakeadvantageofGoogleDataAPIs,a
commonsetofstandardAPIsforinteractingwithdatainGoogleservices,withintheir
applicationsandprojectsonForce.com.
TheAPIsarefreelyavailableathttp://developer.force.com/andhttp://code.google.com/
p/apex-google-data/.
ThealliancebetweenSalesforce.comandGooglegivesdevelopersamulticloud
computingplatformforbuildingandrunningapplications.TheForce.comPaaSand
Google’sopenAPIsandtechnologiesenablethecreationofpowerfulapplicationsdelivered
ontheWeb.
Additionally,theForce.comToolkitforGoogleDataAPIscreatesnewopportunitiesfor
developersandISVstoextendthewidelyadoptedSalesforceforGoogleApps.Thetoolkit
givesdevelopersandpartnerstheabilitytocreatebusinessapplicationsthatextend
SalesforceforGoogleAppsaswellasbuildentirelynewapplicationstohelpcustomersrun
theirbusinessinthecloud.
GoGrid
GoGrid’sAPIisawebservicethatallowsdeveloperstocontroltheirinteractionwithGoGrid’s
cloudhostinginfrastructure.TheGoGridAPIprovidestwo-waycommunicationforcontrolling
GoGrid’scontrolpanelfunctionality.TypicalusesfortheAPIinclude
• Auto-scalingnetworkservers
• ListingassignedpublicandprivateIPaddresses
• Deletingservers
• Listingbillingdetails
GoGrid’sREST-likeAPIQueryinterfaceisdesignedforindividualswhowantto
programmaticallycontroltheircloudhostinginfrastructureovertheInternet.
TheGoGridAPIrequiresyoutobeaGoGridcustomerandtohavetechnicalknowledge
andprogrammingskills.TheGoGridAPIsupportstheselanguages:
• Java
• PHP
• Python
• Ruby
Apex
TheApexWebServicesAPIisoneoftheworld’smostwidelyusedenterprisewebservices,
handlingmorethan50percentofSalesforce.com’s3.7billionservicetransactions.
TheApexWebServicesAPImakesitpossibletoaccessandmanagecomplexdata
relationships—suchasasetofinformationaboutanaccount,alltheproductstheyhave
bought,andalloftheircontacts—inasinglerequest.Thiscapability,analogoustodatabase
JOINfunctionality,enhancesboththespeedandsimplicityofintegrations,andwillbe
uniquetotheApexAPI.
Chapter 6: Accessing the Cloud 125
DevelopmentPlatform ApexisadevelopmentplatformforbuildingSoftwareasaService
(SaaS)applicationsontopofSalesforce.com’scustomerrelationshipmanagement(CRM)
functionality.ByusingApex,developerscanaccessSalesforce.com’sback-enddatabaseand
client-serverinterfacestocreateSaaSapplications.ThisAPIallowsdeveloperstouse
commonSaaScomponents,likewebwidgetsoramultitenantdatabase,withouttheneedto
developmuchoftheinfrastructuretraditionallyassociatedbehindSaaSprograms.
TheApexplatformsconsistofthreetools:
• ApexBuilder Anon-demandcomponentallowingeasydrag-and-drop
customizationwithalimitedsetoffeatures.
• ApexAPI AmethodofretrievingrawdatafromSalesforce.com’sservers.TheAPI
PART II
isusedbyprogramsthatareexternaltoSalesforce.com,likeJavaapplicationsthat
needaccesstoinformationonaclient’sSalesforce.comaccount.
• ApexCode AprogramminglanguagethatisexecutedonSalesforce.com’sservers.
TheApexCodeoffersflexibilityindevelopingbyusingtheApexAPIwhilereducing
thenumberofcallsbetweentheclientandserver.
SampleCode ThefollowingisanexampleofanApexAPI.Thecodedefinesasystemthat
preventsduplicaterecords,basedonemailaddress,frombeingenteredintothesystem.
triggerblockDuplicates_tgronLeadbulk(beforeinsert,beforeupdate){
/*
*beginbybuildingamapwhichstoresthe(unique)listofleads
*beinginserted/updated,usingemailaddressasthekey.
*/
Map<String,Lead>leadMap=newMap<String,Lead>();
for(Leadlead:System.Trigger.new){
if(lead.Email!=null){//skipnullemails
/*forinsertsOR
*updateswheretheemailaddressischanging
*checktoseeiftheemailisaduplicateofanotherin
*thisbatch,ifunique,addthisleadtotheleadMap
*/
if(System.Trigger.isInsert||
(System.Trigger.isUpdate&&
lead.Email!=
System.Trigger.oldMap.get(lead.Id).Email)){
if(leadMap.containsKey(lead.Email)){
lead.Email.addError('Anothernewleadhasthe
sameemailaddress.');
}else{
leadMap.put(lead.Email,lead);
}
}
}
}
/*Usingtheleadmap,makeasingledatabasequery,
*findalltheleadsinthedatabasethathavethesameemailaddress
126 Part II: Cloud Computing Technolog y
*asanyoftheleadsbeinginserted/updated.
*/
for(Leadlead:[selectEmailfromLeadwhereEmailIN
:leadMap.KeySet()]){
LeadnewLead=leadMap.get(lead.Email);
newLead.Email.addError('Aleadwiththisemailaddressalready
exists.');
}
}
WebBrowsers
Toconnecttothecloud,mostlikelyyouandyouruserswillutilizeawebbrowser.Which
oneshouldyouuse?Well,that’sreallyuptoyou.Browserstendtobemostlythesame,but
withsomesubtlefunctionaldifferences.Theremightbecaseswhenyoucannotuse
anythingbutMicrosoft’sInternetExplorer,butforthemostpartyoushouldbeabletouse
anybrowseryouwant.
InternetExplorerenjoysthehighestmarketshareofbrowserusage—69.77percent
(accordingtoaDecember2008studyreleasedbythewebmetricsfirmNetApplications).
YoucanattributethatdominancetothefactthatInternetExplorerisincludedwithWindows,
thedominantoperatingsystemintheworld.
Butyoudon’thavetouseInternetExplorerifyoudon’twantto.AsthechartinFigure6-1
shows,thereareotheroptionsoutthere,justnotaswidelyused.Mozilla’sFirefoxaccounts
for20.78percent,Apple’sSafarirepresents7.13percent,whileGoogleChromeaccountsfor
lessthan1percentofthemarketat.98percent.Theremainingalmost2percentofbrowsers
includeproductslikeCamino,Opera,andothers.Ofcoursethesenumbersaremovingtargets,
butthemarketshareshavebeenmoreorlessthesameoverthemonths.
Market Share
Internet Explorer
Mozilla Firefox
Safari
Google Chrome
Others
FIGURE 6-1 Microsoft Internet Explorer represented almost 70 percent of the web browser market at
the end of 2008.
Chapter 6: Accessing the Cloud 127
Inthissectionwe’lltalkaboutthetopbrowsersinthemarket:InternetExplorer,
Firefox,andSafari.Althoughitonlyaccountsforlessthan1percentofthemarket,
we’realsogoingtotalkaboutGoogleChrome,mainlybecauseithasbeendevelopedas
acloudcomputingtool.
InternetExplorer
WindowsInternetExplorer8forWindowsVista,XP,andWindows7isthelatestversionof
thepopularwebbrowser.
IE8Features
InternetExplorer8deliveredanewlookandenhancedcapabilitiesthatmadeeveryday
PART II
tasks—suchassearching,browsingmultiplesites,andprinting—simpleandfast.
ThebigchangeinIE8isitsrenderingmodes.TheprogressiveevolutionoftheWebhas
necessitatedthatbrowserssuchasInternetExplorerincludemultiplecontent-rendering
modes—bothsupportingstrictinterpretationofcertainwebstandardsandalsosupporting
behaviorsdesignedtomaintaincompatibilitywithexistingwebsites.Websitedesigners
generallyhavetheabilitytospecifywhichmodetheyaredesigningfor;intheabsenceof
specificinstructionsfromawebsite,browsersarepresettouseoneofthemodesbydefault.
InternetExplorer8hasbeendesignedtoincludethreerenderingmodes:
• OnethatreflectsMicrosoft’simplementationofcurrentwebstandards
• AsecondreflectingMicrosoft’simplementationofwebstandardsatthetimeofthe
releaseofInternetExplorer7in2006
• AthirdbasedonrenderingmethodsdatingbacktotheearlyWeb
Thenewestrenderingmodeisforward-lookingandpreferredbywebdesigners,while
theothersarepresenttoenablecompatibilitywiththemyriadsitesacrosstheWebthatare
currentlyoptimizedforpreviousversionsofInternetExplorer.
Figure6-2showsanexampleofInternetExplorer8.
WhileInternetExplorer8includesimportantend-useradvancements,itwasalso
designedwithdevelopersandITmanagersinmind.MicrosoftengineeredInternetExplorer
8forcompatibilitywithexistingwebsitesbyadheringtosomeofthemostimportant
standardsforwebsitedevelopment.
InternetExplorer8alsofeaturesimprovedmanageabilityforenterprisesthroughthe
enhancedsupportofActiveDirectoryGroupPolicy,whichenablesITmanagerstoeasily
deployandcentrallymanagethebrowseroneachofthedesktopsintheirnetwork.
Firefox
InJune2008MozillareleasedFirefox3,amajorupdatetoitspopular,free,open-sourceweb
browser.Firefox3istheculminationofthreeyearsofeffortsfromthousandsofdevelopers,
securityexperts,localizationandsupportcommunities,andtestersfromaroundtheglobe.
Availableinapproximately50languages,Firefox3istwotothreetimesfasterthanits
predecessorandoffersmorethan15,000improvements,includingtherevolutionarysmart
locationbar,malwareprotection,andextensiveunder-the-hoodworktoimprovethespeed
andperformanceofthebrowser.
128 Part II: Cloud Computing Technolog y
FIGURE 6-2 Microsoft’s Internet Explorer 8 is the most current version of the popular web browser.
“We’rereallyproudofFirefox3anditjustshowswhatacommitted,energizedglobal
communitycandowhentheyworktogether,”saidJohnLilly,CEOofMozilla.
UserExperience
TheenhancementstoFirefox3includethenewFirefox3smartlocationbar,affectionately
knownasthe“AwesomeBar.”Itlearnsaspeopleuseit,adaptingtouserpreferencesand
offeringbetter-fittingmatchesovertime.
TheFirefox3Libraryarchivesbrowsinghistory,bookmarks,andtags,wheretheycan
beeasilysearchedandorganized.One-clickbookmarkingandtaggingmakeiteasyto
remember,search,andorganizewebsites.Thenewfull-pagezoomdisplaysanypartofa
webpage,upcloseandreadable,inseconds.Figure6-3showsasampleFirefox3screen.
Chapter 6: Accessing the Cloud 129
PART II
FIGURE 6-3 Firefox 3 was released in August 2008, and runs two to three times faster than its
predecessor.
FirefoxPerformance
Firefox3isbuiltontopoftheGecko1.9platform,resultinginasafer,easier-to-use,andmore
personalproduct.Firefox3useslessmemorywhileit’srunningthanpreviousreleases,and
itsredesignedpagerenderingandlayoutenginemeansthatusersseewebpagestwotothree
timesfasterthanwithFirefox2.
Security
Firefox3raisesthebarforsecurity.Thenewmalwareandphishingprotectionhelpsprotect
fromviruses,worms,trojans,andspywaretokeeppeoplesafeontheWeb.Firefox3’sone-click
siteIDinformationallowsuserstoverifythatasiteiswhatitclaimstobe.Mozilla’sopen-source
processleveragestheexperienceofthousandsofsecurityexpertsaroundtheglobe.
Customization
Firefox3letsuserscustomizetheirbrowserwithmorethan5,000add-ons.Firefoxadd-ons
allowuserstomanagetaskslikeparticipatinginonlineauctions,uploadingdigitalphotos,
seeingtheweatherforecasts,andlisteningtomusic,allfromtheconvenienceofthebrowser.
ThenewAdd-onsManagerhelpsuserstofindandinstalladd-onsdirectlyfromthebrowser.
130 Part II: Cloud Computing Technolog y
FormoreinformationaboutMozillaFirefox3andhowitdeliversaneasier,faster,and
saferonlineexperience,visithttp://www.mozilla.com/firefox/features.
MozillaFirefox3isavailablenowforWindows,Linux,andMacOSXoperatingsystems
asafreedownloadfromhttp://www.getfirefox.com.
NOTE ThereleaseofFirefox3kickedoffDownloadDay,theMozillacommunity’sgrassroots
campaigntosetabrandnewGuinnessWorldRecordforthegreatestnumberofsoftware
downloadsin24hours.From18:16UTConJune17,2008to18:16UTConJune18,2008,
8,002,530copiesofFirefox3weredownloaded.
Safari
AppleclaimsthatSafari3.1istheworld’sfastestwebbrowserforMacandWindowsPCs,
loadingwebpages1.9timesfasterthanInternetExplorer7and1.7timesfasterthanFirefox2.
SafarialsorunsJavaScriptuptosixtimesfasterthanotherbrowsers,andisthefirst
browsertosupportthelatestinnovativewebstandardsneededtodeliverthenextgeneration
ofhighlyinteractiveWeb2.0experiences.Safari3.1isavailableasafreedownloadat
www.apple.com/safariforbothMacOSXandWindows.
SafariisshowninFigure6-4.
“Safari3.1forMacandWindowsisblazinglyfast,easytouseandfeaturesanelegant
userinterface,”saidPhilipSchiller,Apple’sseniorvicepresidentofWorldwideProduct
Marketing.“Andbestofall,Safarisupportsthelatestaudio,videoandanimationstandards
foranindustry-leadingWeb2.0experience.”
SafariPerformance
Safarifeaturesanintuitivebrowsingexperiencewithdrag-and-dropbookmarks,easy-to-
organizetabs,anintegratedFindcapabilitythatshowsthenumberofmatchesinapage,
andabuilt-inRSSreadertoquicklyscanthelatestnewsandinformation.
Safari3.1isthefirstbrowsertosupportthenewvideoandaudiotagsinHTML5and
thefirsttosupportCSSAnimations.SafarialsosupportsCSSWebFonts,givingdesigners
limitlesschoicesoffontstocreatestunningnewwebsites.
SystemRequirements
Safari3.1forMacOSXrequiresMacOSXLeopardorMacOSXTigerversion10.4.11anda
minimumof256MBofmemoryandisdesignedtorunonanyIntel-basedMacoraMac
withaPowerPCG5,G4,orG3processorandbuilt-inFireWire.
Safari3.1forWindowsrequiresWindowsXPorWindowsVista,aminimumof256MB
ofmemory,andasystemwithatleasta500MHzIntelPentiumprocessor.
Chrome
ChromeisGoogle’sforayintotheopen-sourcebrowsermarket.Intheearlydaysofthe
Internet,webpageswerefrequentlylittlemorethantext.ButtodaytheWebhasevolved
intoapowerfulplatformthatenablesuserstocollaboratewithfriendsandcolleagues
throughemailandotherwebapplications,editdocuments,watchvideos,listentomusic,
managefinances,andmuchmore.GoogleChromewasbuiltfortoday’sWebandforthe
applicationsoftomorrow.
Chapter 6: Accessing the Cloud 131
FIGURE 6-4 Safari is the number three most popular web browser and is available for both Mac and PC PART II
platforms.
“Wethinkofthebrowserasthewindowtotheweb—it’satoolforuserstointeractwith
thewebsitesandapplicationstheycareabout,andit’simportantthatwedon’tgetinthe
wayofthatexperience,”saidSundarPichai,vicepresidentofproductmanagement,Google
Inc.“JustliketheclassicGooglehomepage,GoogleChromehasasimpleuserinterfacewith
asophisticatedcoretoenablethemodernweb.”
AscreenofChrome’sopen-sourcesibling,Chromium,isshowninFigure6-5.
132 Part II: Cloud Computing Technolog y
FIGURE 6-5 Chromium is an open-source derivation of the Google Chrome web browser.
ChromeFeatures
GoogleChromewasdesignedtomakeiteasyforuserstosearchandnavigatetheWebfor
thecontentthey’relookingfor.Featuresinclude
• Acombinedsearchandaddressbarquicklytakesuserswheretheywanttogo.
• WhenusersopenanewtabinGoogleChrome,they’llseeapagethatincludes
snapshotsoftheirmost-visitedsites,recentsearches,andbookmarks,makingit
easiertonavigatetheWeb.
• Eachbrowsertaboperatesasaseparateprocess;byisolatingtabs,ifonetabcrashes
ormisbehaves,othersremainstableandresponsive,anduserscancontinueworking
withouthavingtorestartGoogleChrome.
Chapter 6: Accessing the Cloud 133
GooglealsobuiltanewJavaScriptengine,V8,whichnotonlyspeedsuptoday’sweb
applications,butenablesawholenewclassofwebapplicationsthatcouldn’texiston
today’sbrowsers.
OpenSource
“Whileweseethisasafundamentalshiftinthewaypeoplethinkaboutbrowsers,we
realizethatwecouldn’thavecreatedGoogleChromeonourown,”saidLinusUpson,
directorofengineering,GoogleInc.“GoogleChromewasbuiltuponotheropensource
projectsthataremakingsignificantcontributionstobrowsertechnologyandhavehelpedto
spurcompetitionandinnovation.”
TofurtheradvancetheopennessoftheWeb,GoogleChromeisbeingreleasedasan
PART II
open-sourceprojectunderthenameChromium.TheintentisthatGooglewillhelpmake
futurebrowsersbetterbycontributingtheunderlyingtechnologyinGoogleChrometothe
market,whilecontinuingtodevelopadditionalfeatures.
ChromeCloud
There’salotofbuzzaroundChromebeingagreattoolforcloudcomputing.Itextendsthe
cloudintoyourorganization’scomputer,andviceversa.Thisismainlybecauseofthe
poweroftheV8JavaScriptengineandbuilt-inGoogleGear.
GoogleGearsarealsoopensource,andtheyenablepowerfulwebapplicationsby
addingnewfeaturestothewebbrowser.MajorAPIcomponentstoGearsinclude
• Adatabasemodulethatcanstoredatalocally
• AWorkerPoolmodulethatprovidesparallelexecutionofJavaScriptcode
• ALocalServermodulethatcachesandservesapplicationresources(likeHTML,
JavaScript,images,andsoon)
• ADesktopmodulethatletswebapplicationsinteractmorenaturallywiththe
desktop
• AGeolocationmodulethatletswebapplicationsdetectthegeographicallocationof
theirusers
ItisbelievedthatChromewillallowdesktopandwebapplicationstomerge,putting
everythingintothecloudsothatyouwon’tevenhavetothinkaboutbothterms.Chromeis
anapplicationvirtualmachineforbothonandofflinewebapplications.
GoogleChromecanbedownloadedatwww.google.com/chrome.GoogleChromefor
MacandLinuxusersisstillintheworks.Formoreinformationontheopen-sourceproject,
Chromium,visitwww.chromium.org.
Thereareanumberofwaystoconnecttothecloud.Thewayyouopttodosowill
dependonanumberoffactorsincludingyouroryourprogrammers’skills,which
computingplatformyouuse,andwhatyourvendoroffers.
Inthenextchapterwe’lltakeacloserlookatcloudstorage,whatyoucando,andhow
youcangetstarted.
This page intentionally left blank
CHAPTER
7
Cloud Storage
C
loudstorageinvolvesexactlywhatthenamesuggests—storingyourdatawitha
cloudserviceproviderratherthanonalocalsystem.Aswithothercloudservices,
youaccessthedatastoredonthecloudviaanInternetlink.
NOTE Eventhoughdataisstoredandaccessedremotely,youcanmaintaindatabothlocallyandon
thecloudasameasureofsafetyandredundancy.We’lltalkaboutthatmorelater.
Inthischapterwe’lltalkmoreaboutthespecificsofcloudstorage,whatit’susedfor,
whenyoudon’twanttouseit,andsomesecurityissues.We’llalsohighlightsomepopular
cloudvendorsanddiscusswhattheyoffer.
Overview
Cloudstoragehasanumberofadvantagesovertraditionaldatastorage.Ifyoustoreyour
dataonacloud,youcangetatitfromanylocationthathasInternetaccess.Thismakesit
especiallyappealingtoroadwarriors.Workersdon’tneedtousethesamecomputerto
accessdatanordotheyhavetocarryaroundphysicalstoragedevices.Also,ifyour
organizationhasbranchoffices,theycanallaccessthedatafromthecloudprovider.
TheBasics
Therearehundredsofdifferentcloudstoragesystems,andsomeareveryspecificinwhatthey
do.Someareniche-orientedandstorejustemailordigitalpictures,whileothersstoreanytype
ofdata.Someprovidersaresmall,whileothersarehugeandfillanentirewarehouse.
NOTE OneofGoogle’sdatacentersinOregonisthesizeofafootballfieldandhousesthousandsof
servers.
135
136 Part II: Cloud Computing Technolog y
Atthemostrudimentarylevel,acloudstoragesystemjustneedsonedataserver
connectedtotheInternet.AsubscribercopiesfilestotheserverovertheInternet,which
thenrecordsthedata.Whenaclientwantstoretrievethedata,heorsheaccessesthedata
serverwithaweb-basedinterface,andtheservertheneithersendsthefilesbacktothe
clientorallowstheclienttoaccessandmanipulatethedataitself.
Moretypically,however,cloudstoragesystemsutilizedozensorhundredsofdata
servers.Becauseserversrequiremaintenanceorrepair,itisnecessarytostorethesaveddata
onmultiplemachines,providingredundancy.Withoutthatredundancy,cloudstorage
systemscouldn’tassureclientsthattheycouldaccesstheirinformationatanygiventime.
Mostsystemsstorethesamedataonserversusingdifferentpowersupplies.Thatway,
clientscanstillaccesstheirdataevenifapowersupplyfails.
Manyclientsusecloudstoragenotbecausethey’verunoutofroomlocally,butfor
safety.Ifsomethinghappenstotheirbuilding,thentheyhaven’tlostalltheirdata.
StorageasaService
ThetermStorageasaService(anotherSoftwareasaService,orSaaS,acronym)meansthata
third-partyproviderrentsspaceontheirstoragetoenduserswholackthebudgetorcapital
budgettopayforitontheirown.Itisalsoidealwhentechnicalpersonnelarenotavailable
orhaveinadequateknowledgetoimplementandmaintainthatstorageinfrastructure.
Storageserviceprovidersarenothingnew,butgiventhecomplexityofcurrentbackup,
replication,anddisasterrecoveryneeds,theservicehasbecomepopular,especiallyamong
smallandmedium-sizedbusinesses.
ThebiggestadvantagetoSaaSiscostsavings.Storageisrentedfromtheproviderusing
acost-per-gigabyte-storedorcost-per-data-transferredmodel.Theenduserdoesn’thaveto
Chapter 7: Cloud Storage 137
payforinfrastructure;theysimplypayforhowmuchtheytransferandsaveonthe
provider’sservers.
Internet
PART II
Clients rent storage capacity from cloud storage vendors.
Acustomerusesclientsoftwaretospecifythebackupsetandthentransfersdataacrossa
WAN.Whendatalossoccurs,thecustomercanretrievethelostdatafromtheserviceprovider.
NOTE Insomecases,theprovidercancopythedataontoDVDsandshipthemtotheclient.
Providers
Aswenotedearlier,therearehundredsofcloudstorageprovidersontheWeb,andmore
seemtobeaddedeachday.Notonlyaretheregeneral-purposestorageproviders,butthere
aresomethatareveryspecializedinwhattheystore.We’lllookmorecloselyatsomebig
playerslater,butherearesomeexamplesofspecializedcloudproviders:
• GoogleDocs(showninFigure7-1)allowsuserstouploaddocuments,spreadsheets,
andpresentationstoGoogle’sdataservers.Thosefilescanthenbeeditedusinga
Googleapplication.
• WebemailproviderslikeGmail,Hotmail,andYahoo!Mailstoreemailmessageson
theirownservers.Userscanaccesstheiremailfromcomputersandotherdevices
connectedtotheInternet.
• FlickrandPicasahostmillionsofdigitalphotographs.Userscancreatetheirown
onlinephotoalbums.
• YouTubehostsmillionsofuser-uploadedvideofiles.
• HostmonsterandGoDaddystorefilesanddataformanyclientwebsites.
• FacebookandMySpacearesocialnetworkingsitesandallowmemberstopost
picturesandothercontent.Thatcontentisstoredonthecompany’sservers.
• MediaMaxandStrongspaceofferstoragespaceforanykindofdigitaldata.
Manyoftheseservicesareprovidedforfree,butotherschargeyouperstoredgigabyte
andbyhowmuchinformationistransferredtoandfromthecloud.Asmoreandmore
providersoffertheirservices,priceshavetendedtodrop,andsomecompaniesoffera
certainamountforfree.
138 Part II: Cloud Computing Technolog y
FIGURE 7-1 Google Docs provides an online suite of office applications, allowing you to store your
documents on Google’s cloud.
Security
Tosecuredata,mostsystemsuseacombinationoftechniques:
• Encryption Acomplexalgorithmisusedtoencodeinformation.Todecodethe
encryptedfiles,auserneedstheencryptionkey.Whileit’spossibletocrack
encryptedinformation,it’sverydifficultandmosthackersdon’thaveaccesstothe
amountofcomputerprocessingpowertheywouldneedtocrackthecode.
• Authenticationprocesses Thisrequiresausertocreateanameandpassword.
• Authorizationpractices Theclientliststhepeoplewhoareauthorizedtoaccess
informationstoredonthecloudsystem.Manycorporationshavemultiplelevelsof
authorization.Forexample,afront-lineemployeemighthavelimitedaccesstodata
Chapter 7: Cloud Storage 139
storedonthecloudandtheheadoftheITdepartmentmighthavecompleteand
freeaccesstoeverything.
Internet
PART II
Encryption and authentication are two security measures
you can use to keep your data safe on a cloud storage provider.
Butevenwiththesemeasuresinplace,therearestillconcernsthatdatastoredona
remotesystemisvulnerable.Thereisalwaystheconcernthatahackerwillfindawayinto
thesecuresystemandaccessthedata.
Also,adisgruntledemployeecouldalterordestroythedatausinghisorherownaccess
credentials.
Reliability
Theotherconcernisreliability.Ifacloudstoragesystemisunreliable,itbecomesaliability.
Noonewantstosavedataonanunstablesystem,norwouldtheytrustacompanythatis
financiallyunstable.
Mostcloudstorageproviderstrytoaddressthereliabilityconcernthroughredundancy,
butthepossibilitystillexiststhatthesystemcouldcrashandleaveclientswithnowayto
accesstheirsaveddata.
Reputationisimportanttocloudstorageproviders.Ifthereisaperceptionthatthe
providerisunreliable,theywon’thavemanyclients.Andiftheyareunreliable,theywon’t
bearoundlong,astherearesomanyplayersinthemarket.
Advantages
Cloudstorageisbecominganincreasinglyattractivesolutionfororganizations.That’s
becausewithcloudstorage,dataresidesontheWeb,locatedacrossstoragesystemsrather
thanatadesignatedcorporatehostingsite.Cloudstorageprovidersbalanceserverloads
andmovedataamongvariousdatacenters,ensuringthatinformationisstoredclose—and
therebyavailablequickly—towhereitisused.
Storingdataonthecloudisadvantageous,becauseitallowsyoutoprotectyourdatain
casethere’sadisaster.Youmayhavebackupfilesofyourcriticalinformation,butifthereisa
fireorahurricanewipesoutyourorganization,havingthebackupsstoredlocallydoesn’thelp.
140 Part II: Cloud Computing Technolog y
Havingyourdatastoredoff-sitecanbethedifferencebetweenclosingyourdoorforgoodor
beingdownforafewdaysorweeks.
Internet
Whichstoragevendortogowithcanbeacomplexissue,andhowyourtechnology
interactswiththecloudcanbecomplex.Forinstance,someproductsareagent-based,and
theapplicationautomaticallytransfersinformationtothecloudviaFTP.Butothersemploy
awebfrontend,andtheuserhastoselectlocalfilesontheircomputertotransmit.
AmazonS3isthebest-knownstoragesolution,butothervendorsmightbebetterfor
largeenterprises.Forinstance,thosewhoofferservicelevelagreementsanddirectaccessto
customersupportarecriticalforabusinessmovingstoragetoaserviceprovider.
Cautions
Amixedapproachmightbethebestwaytoembracethecloud,sincecloudstorageisstill
immature.Thatis,don’tcommiteverythingtothecloud,butuseitforafew,noncritical
purposes.
LargeenterprisesmighthavedifficultywithvendorslikeGoogleorAmazon,because
theyareforcedtorewritesolutionsfortheirapplicationsandthereisalackofportability.
Avendorlike3tera,however,supportsapplicationsdevelopedinLAMP,Solaris,Java,or
Windows.NET.
Thebiggestdeal-breakerswhenitcomestocloudstorageseemtobepriceandreliability.
Thisiswhereyouhavetovetyourvendortoensureyou’regettingagooddealwithquality
service.Onemistakeonyourvendor’spartcouldmeanirretrievabledata.
Alotofcompaniestakethe“appetizer”approach,testingoneortwoservicestoseehow
welltheymeshwiththeirexistingITsystems.It’simportanttomakesuretheserviceswill
providewhatyouneedbeforeyoucommittoomuchtothecloud.
Internet
Legalissuesarealsoimportant.Forinstance,ifyouhavecopyrightedmaterial—like
musicorvideo—thatyouwanttomaintainonthecloud,suchanoptionmightnotbe
possibleforlicensingreasons.
Also,keepinmindtheaccountabilityofyourstorageprovider.Vendorsofferdifferent
assuranceswiththemaintenanceofdata.Theymayoffertheservice,butmakesureyou
knowexactlywhatyourvendorwillorwillnotdoincaseofdatalossorcompromise.
Thebestsolutionistohavemultipleredundantsystems:localandoffsitebackup;
syncandarchive.
Outages
Further,organizationshavetobecognizantoftheinherentdangerofstoringtheirdataon
PART II
theInternet.AmazonS3,forexample,dealtwithamassiveoutageinFebruary2008.The
resultwasnumerousclientapplicationsgoingoffline.Amazonreportsthattheyhave
respondedtotheproblem,addingcapacitytotheauthenticationsystemblamedforthe
problem.Theyalsonotethatnodatawaslost,becausetheystoremultiplecopiesofevery
objectinseverallocations.
Thepointremains,however,thatclientswerenotabletoaccesstheirdataastheyhad
intended,andsoyouneedtousecautionwhendecidingtopursueacloudoption.
Theft
Youshouldalsokeepinmindthatyourdatacouldbestolenorviewedbythosewhoare
notauthorizedtoseeit.Wheneveryourdataisletoutofyourowndatacenter,yourisk
troublefromasecuritypointofview.
Your
Data
Internet
Also,becausestorageprovidersputeverythingintoonepot,sotospeak,yourcompany’s
datacouldbestorednexttoacompetitor’s,andtheriskofyourcompetitionseeingyour
proprietaryinformationisreal.
Ifyoudostoreyourdataonthecloud,makesureyou’reencryptingdataandsecuring
datatransitwithtechnologieslikeSSL.
142 Part II: Cloud Computing Technolog y
IsCloudStorageforMe?
Aswithsomanyofthecloudtechnologieswe’vediscussed,figuringoutwhetheryour
organizationiscloudstorage–friendlyornotreallycomesdowntoyourorganizationand
whatyouwanttodoonthecloud.
Forinstance,ifyouaresendingdatausingSSL(andyoushould),doyoutrustyour
programmers?Thesimplemistakeofnotincluding“s”inHTTPStransferscanputyour
filesatrisk.
Youshouldalsothinkabouthowmuchlatencyyouarewillingtotolerate.Ifyouwantto
streamvideofromyourcloudstore,youmightbeoutofluckifyoufacelatencyproblems.
CloudStorageProviders
Inthissectionwe’regoingtotalkaboutsomeofthecloudprovidersoutthere.Thislistis
notmeanttobecomprehensive—there’snowayitcouldbe.Therearehundredsofthem
andnewplayerseveryday.Thisissimplyalistingofwhatsomeofthebigplayersinthe
gamehavetooffer,andyoucanuseitasastartingguidetodetermineiftheirservices
matchyourneeds.
AmazonandNirvanixarethecurrentindustrytopdogs,butmanyothersareinthe
field,includingsomewell-knownnames.Googleisreadytolaunchitsowncloudstorage
solutioncalledGDrive.EMCisreadyingastoragesolution,andIBMalreadyhasanumber
ofcloudstorageoptionscalledBlueCloud.
AmazonSimpleStorageService(S3)
Thebest-knowncloudstorageserviceisAmazon’sSimpleStorageService(S3),which
launchedin2006.AmazonS3isdesignedtomakeweb-scalecomputingeasierfor
developers.AmazonS3providesasimplewebservicesinterfacethatcanbeusedtostore
andretrieveanyamountofdata,atanytime,fromanywhereontheWeb.Itgivesany
developeraccesstothesamehighlyscalabledatastorageinfrastructurethatAmazonuses
torunitsownglobalnetworkofwebsites.Theserviceaimstomaximizebenefitsofscale
andtopassthosebenefitsontodevelopers.
AmazonS3isintentionallybuiltwithaminimalfeaturesetthatincludesthefollowing
functionality:
• Write,read,anddeleteobjectscontainingfrom1byteto5gigabytesofdataeach.
Thenumberofobjectsthatcanbestoredisunlimited.
• Eachobjectisstoredandretrievedviaauniquedeveloper-assignedkey.
• Objectscanbemadeprivateorpublic,andrightscanbeassignedtospecificusers.
• Usesstandards-basedRESTandSOAPinterfacesdesignedtoworkwithany
Internet-developmenttoolkit.
DesignRequirements
AmazonbuiltS3tofulfillthefollowingdesignrequirements:
• Scalable AmazonS3canscaleintermsofstorage,requestrate,andusersto
supportanunlimitednumberofweb-scaleapplications.
Chapter 7: Cloud Storage 143
• Reliable Storedatadurably,with99.99percentavailability.Amazonsaysitdoes
notallowanydowntime.
• Fast AmazonS3wasdesignedtobefastenoughtosupporthigh-performance
applications.Server-sidelatencymustbeinsignificantrelativetoInternetlatency.
Anyperformancebottleneckscanbefixedbysimplyaddingnodestothesystem.
• Inexpensive AmazonS3isbuiltfrominexpensivecommodityhardware
components.Asaresult,frequentnodefailureisthenormandmustnotaffectthe
overallsystem.Itmustbehardware-agnostic,sothatsavingscanbecapturedas
Amazoncontinuestodrivedowninfrastructurecosts.
• Simple Buildinghighlyscalable,reliable,fast,andinexpensivestorageisdifficult.
PART II
Doingsoinawaythatmakesiteasytouseforanyapplicationanywhereismore
difficult.AmazonS3mustdoboth.
AforcingfunctionforthedesignwasthatasingleAmazonS3distributedsystemmust
supporttheneedsofbothinternalAmazonapplicationsandexternaldevelopersofany
application.ThismeansthatitmustbefastandreliableenoughtorunAmazon.com’sweb
sites,whileflexibleenoughthatanydevelopercanuseitforanydatastorageneed.
DesignPrinciples
AmazonusedthefollowingprinciplesofdistributedsystemdesigntomeetAmazonS3
requirements:
• Decentralization Itusesfullydecentralizedtechniquestoremovescaling
bottlenecksandsinglepointsoffailure.
• Autonomy Thesystemisdesignedsuchthatindividualcomponentscanmake
decisionsbasedonlocalinformation.
• Localresponsibility Eachindividualcomponentisresponsibleforachievingits
consistency;thisisnevertheburdenofitspeers.
• Controlledconcurrency Operationsaredesignedsuchthatnoorlimited
concurrencycontrolisrequired.
• Failuretoleration Thesystemconsidersthefailureofcomponentstobeanormal
modeofoperationandcontinuesoperationwithnoorminimalinterruption.
• Controlledparallelism Abstractionsusedinthesystemareofsuchgranularity
thatparallelismcanbeusedtoimproveperformanceandrobustnessofrecoveryor
theintroductionofnewnodes.
• Small,well-understoodbuildingblocks Donottrytoprovideasingleservice
thatdoeseverythingforeveryone,butinsteadbuildsmallcomponentsthatcanbe
usedasbuildingblocksforotherservices.
• Symmetry Nodesinthesystemareidenticalintermsoffunctionality,andrequire
noorminimalnode-specificconfigurationtofunction.
• Simplicity Thesystemshouldbemadeassimpleaspossible,butnosimpler.
144 Part II: Cloud Computing Technolog y
HowS3Works
AmazonkeepsitslipsprettytightabouthowS3works,butaccordingtoAmazon,S3’s
designaimstoprovidescalability,highavailability,andlowlatencyatcommoditycosts.
S3storesarbitraryobjectsatupto5GBinsize,andeachisaccompaniedbyupto2KBof
metadata.Objectsareorganizedbybuckets.EachbucketisownedbyanAWSaccountand
thebucketsareidentifiedbyaunique,user-assignedkey.
Object
Object
Object
Bucketsandobjectsarecreated,listed,andretrievedusingeitheraREST-styleorSOAP
interface.ObjectscanalsoberetrievedusingtheHTTPGETinterfaceorviaBitTorrent.An
accesscontrollistrestrictswhocanaccessthedataineachbucket.
BucketnamesandkeysareformulatedsothattheycanbeaccessedusingHTTP.
Requestsareauthorizedusinganaccesscontrollistassociatedwitheachbucketand
object,forinstance:
http://s3.amazonaws.com/examplebucket/examplekey
http://examplebucket.s3.amazonaws.com/examplekey
TheAmazonAWSAuthenticationtoolsallowthebucketownertocreatean
authenticatedURLwithasetamountoftimethattheURLwillbevalid.Forinstance,you
couldcreatealinktoyourdataonthecloud,givethatlinktosomeoneelse,andtheycould
accessyourdataforanamountoftimeyoupredetermine,beit10minutesor10hours.
Chapter 7: Cloud Storage 145
BucketitemscanalsobeaccessedviaaBitTorrentfeed,enablingS3toactasaseedfor
theclient.BucketscanalsobesetuptosaveHTTPloginformationtoanotherbucket.This
informationcanbeusedforlaterdatamining.
“AmazonS3isbasedontheideathatqualityInternet-basedstorageshouldbetakenfor
granted,”saidAndyJassy,vicepresidentofAmazonWebServices.“Ithelpsfreedevelopers
fromworryingaboutwheretheyaregoingtostoredata,whetheritwillbesafeandsecure,
ifitwillbeavailablewhentheyneedit,thecostsassociatedwithservermaintenance,or
whethertheyhaveenoughstorageavailable.AmazonS3enablesdeveloperstofocuson
innovatingwithdata,ratherthanfiguringouthowtostoreit.”
S3letsdeveloperspayonlyforwhattheyconsume,andthereisnominimumfee.
Developerspayjust$0.15pergigabyteofstoragepermonthand$0.20pergigabyteofdata
PART II
transferred.Thismightnotseemlikealotofmoneybutstoring1TBwouldbe$1800per
yearalone,whereasaninternal1TBdrivethesedayscostsabout$100toownoutright.
Soit’sreallynotsomuchaboutthecostofstorageasitisaboutthetotalcosttoserve.
Whatareyourinternalcoststoserve1TBofdatatoyourusers?
EarlyS3Applications
ThescienceteamattheUniversityofCaliforniaBerkeleyresponsibleforNASA’s
“Stardust@Home”project(http://stardustathome.ssl.berkeley.edu/)isusingAmazonS3
tostoreanddeliverthe60millionimagesthatrepresentthedatacollectedfromtheirdust
particleaerogelexperiment.Theseimageswillbedeliveredto100,000volunteersaround
theworldwhoscantheimageslookingfordustparticlesfromcometWild2.
“Wequicklyranintochallengeswhenwestartedtheprojectusingourowninfrastructure,”
saidAndrewWestphal,projectdirectorofStardust@Home.“UsingAmazonS3hasallowed
ustoproceedwithouthavingtoworryaboutbuildingoutthemassivestorageinfrastructure
werealizedthatweneededtosuccessfullycompletetheproject.ThefactthatAmazonS3is
anInternet-connectedstorageserviceisparticularlyusefultousasweexpectthedata
examinationphaseoftheprojecttotakeonlyafewmonths.Wecanquicklyrampupandback
downagainwithoutahugeinvestment.”
Nirvanix
Nirvanixusescustom-developedsoftwareandfilesystemtechnologiesrunningonIntel
storageserversatsixlocationsonbothcoastsoftheUnitedStates.Theycontinuetogrow,
andexpecttoadddozensmoreserverlocations.
SDNFeatures
NirvanixStorageDeliveryNetwork(SDN)turnsastandard1Userverintoaninfinite-
capacitynetworkattachedstorage(NAS)fileaccessiblebypopularapplicationsand
immediatelyintegratesintoanorganization’sexistingarchiveandbackupprocesses.
“Upuntilrecently,cloudstoragehasprimarilyservedasanon-tapbackendfor
applicationdevelopers,”saidAdamCouture,principalanalystatGartner.“Today,we’re
startingtoseeenterprisesbegintoconsidercloudstorageasalow-coststoragetierfor
selectiveapplicationssuchasbackupandarchiving.”
NirvanixhasbuiltaglobalclusterofstoragenodescollectivelyreferredtoastheStorage
DeliveryNetwork(SDN),poweredbytheNirvanixInternetMediaFileSystem(IMFS).
TheSDNintelligentlystores,delivers,andprocessesstoragerequestsinthebestnetwork
location,providingthebestuserexperienceinthemarketplace.Withtheabilitytostore
146 Part II: Cloud Computing Technolog y
multiplefilecopiesinmultiplegeographicnodes,theSDNenablesunparalleleddata
availabilityfordevelopers,businesses,andenterprises.
TheNirvanixCloudNASforLinuxmountstheNirvanixStorageDeliveryNetwork
asavirtualdrivethatcanbeaccessedviaNFS,CIFS,orFTP.Afterinstallation,storage
administratorscanapplystandardfile,directory,oraccesspermissions,andusersonthe
networkcanthenaccesstheNirvanix-mappeddrivefromtheirexistingapplicationsor
storageprocesses.Additionally,storageadministratorsgetaccesstotherobustNirvanix
SDNfunctionalitysuchasautomatedpolicy-basedfilereplication,singleglobalnamespace
thatscalestopetabytes,andstorageofsecure,encrypteddataononeormoreofNirvanix’s
globallyclusteredstoragenodes.
BenefitsofCloudNAS
Thebenefitsofcloudnetworkattachedstorage(CloudNAS)include
• Costsavingsof80–90percentovermanagingtraditionalstoragesolutions
• Eliminationoflargecapitalexpenditureswhileenabling100percentstorage
utilization
• Encryptedoffsitestoragethatintegratesintoexistingarchiveandbackupprocesses
• Built-indatadisasterrecoveryandautomateddatareplicationonuptothree
geographicallydispersedstoragenodesfora100percentSLA
• Immediateavailabilitytodatainseconds,versushoursordaysonofflinetape
NirvanixCloudNASisaimedatcompaniesthatmaintainrepositoriesofarchival,
backup,orunstructureddatathatrequireslong-term,securestorage,ororganizationsthat
useautomatedprocessestotransferfilestomappeddrives.Exampleusecasesincludelong-
termarchivingofdataleveraginganestablishedbackup/archivalsolution;departments
usingacentralized,shareddatarepository;disk-to-disk-to-cloudreplacingtapeforarchival
ofdata;andsimplebackupofallcomputerswithinadepartment.
AvailabilityandPricing
CloudNASisfreetouseforcompanieswhohavea2TBorgreatercontractwithNirvanix
andoptional24/7supportisofferedat$200permonthperserver.Companieswhodon’t
haveaNirvanixaccountcantakepartin“ExperienceNirvanixNow.”Thetrialallowsyou
tohaveunlimiteduseofanyofNirvanix’stoolsincludingCloudNASandupto50GBfor
15days,riskfree.
FormoreinformationonCloudNAS,visitwww.nirvanix.com/ExperienceNirvanix.aspx.
GoogleBigtableDatastore
Incloudcomputing,it’simportanttohaveadatabasethatiscapableofhandlingnumerous
usersonanon-demandbasis.Toservethatmarket,GoogleintroduceditsBigtable.Google
startedworkingonitin2004andfinallywentpublicwithitinApril2008.
Bigtablewasdevelopedwithveryhighspeed,flexibility,andextremelyhighscalability
inmind.ABigtabledatabasecanbepetabytesinsizeandspanthousandsofdistributed
servers.
BigtableisavailabletodevelopersaspartoftheGoogleAppEngine,theircloud
computingplatform.
Chapter 7: Cloud Storage 147
HowBigtableWorks
Bigtableisacomplexofferingthatisnoteasytounderstand.Ifyouhavetroublesleeping,
theyofferaverytechnicalexplanationathttp://labs.google.com/papers/bigtable-osdi06.pdf.
Butinanutshell,here’showitworks.
NOTE DeveloperswhowanttounderstandthetechnicaldetailsofBigtableareencouragedtoread
thewhitepapersotheycangetthemostoutofit.
GoogledescribesBigtableasafastandextremelyscalableDBMS.ThisallowsBigtable
toscaleacrossthousandsofcommodityserversthatcancollectivelystorepetabytesofdata.
EachtableinBigtableisamultidimensionalsparsemap.Thatis,thetableismadeupof
PART II
rowsandcolumns,andeachcellhasatimestamp.Multipleversionsofacellcanexist,each
withadifferenttimestamp.Withthisstamping,youcanselectcertainversionsofaweb
page,ordeletecellsthatareolderthanagivendateandtime.
01:22:45
Bigtable cells
01:22:55
01:23:12
01:23:46
01:24:21
In Google Bigtable, multiple copies of a cell exist, each with a different timestamp.
Becausethetablesaresolarge,Bigtablesplitsthematrowboundariesandsavesthem
astablets.Eachtabletisabout200MB,andeachserverhouses100tablets.Giventhis,data
fromadatabaseislikelytobestoredinmanydifferentservers—maybenoteveninthe
samegeographiclocation.
Thisarchitecturealsoallowsforloadbalancing.Ifonetableisgettingalotofqueries,
itcanremoveothertabletsormovethebusytabletoanothermachinethatisnotasbusy.
Also,ifamachinefails,sincethetabletisspreadtodifferentmachines,usersmaynoteven
noticetheoutage.
Whenamachinefillsup,itcompressessometabletsusingaGoogle-proprietarytechnique.
Onaminorscale,onlyafewtabletsarecompressed.Onalargescale,entiretabletsare
compressed,freeingmoredrivespace.
148 Part II: Cloud Computing Technolog y
Bigtabletabletlocationsarestoredincells,andlookingthemupisathree-tieredsystem.
ClientspointtotheMETA0table.META0thenkeepstrackofmanytablesonMETA1that
containthelocationsofthetablets.BothMETA0andMETA1makeuseofprefetching
andcachingtominimizesystembottlenecks.
Issues
WhileBigtableisarobusttool,developershavebeencautiousaboutusingit.Becauseitisa
proprietarysystem,theygetlockedintoGoogle.ThatisalsothecasewithAmazon’sWeb
Servicesandothercloudproviders.
Ontheotherhand,GoogleAppEngineandBigtableareaffordable,costingaboutthe
sameasAmazon’sS3.
Costsareasfollows:
• $0.10–$0.12perCPUcore-hour
• $0.15–$0.18perGB-monthofstorage
• $0.11–$0.13perGBofoutgoingbandwidth
• $0.09–$0.11perGBofincomingbandwidth
MobileMe
MobileMeisApple’ssolutionthatdeliverspushemail,pushcontacts,andpushcalendars
fromtheMobileMeserviceinthecloudtonativeapplicationsoniPhone,iPodtouch,Macs,
andPCs.MobileMealsoprovidesasuiteofad-freewebapplicationsthatdeliveradesktop-
likeexperiencethroughanymodernbrowser.MobileMeapplications(www.me.com)
includeMail,Contacts,andCalendar,aswellasGalleryforviewingandsharingphotosand
iDiskforstoringandexchangingdocumentsonline.
MobileMeFeatures
WithaMobileMeemailaccount,allfolders,messages,andstatusindicatorslookidentical
whethercheckingemailoniPhone,iPodtouch,aMac,oraPC.Newemailmessagesare
pushedinstantlytoiPhoneoverthecellularnetworkorWi-Fi,removingtheneedto
manuallycheckemailandwaitfordownloads.Pushalsokeepscontactsandcalendars
continuouslyuptodatesochangesmadeononedeviceareautomaticallypusheduptothe
cloudanddowntootherdevices.
PushworkswiththenativeapplicationsoniPhoneandiPodtouch,MicrosoftOutlook
forthePC,andMacOSXapplications,Mail,AddressBook,andiCal,aswellasthe
MobileMewebapplicationsuite.
MobileMewebapplicationsprovideadesktop-likeexperiencethatallowsuserstodrag
anddrop,clickanddrag,andevenusekeyboardshortcuts.MobileMeprovidesanywhere
accesstoMail,Contacts,andCalendar,withaunifiedinterfacethatallowsuserstoswitch
betweenapplicationswithasingleclick,andGallerymakesiteasytosharephotosonthe
Webinstunningquality.Galleryuserscanupload,rearrange,rotate,andtitlephotosfrom
anybrowser;postphotosdirectlyfromaniPhone;allowvisitorstodownloadprint-quality
images;andcontributephotostoanalbum.MobileMeiDiskletsusersstoreandmanage
filesonlinewithdrag-and-dropfilingandmakesiteasytosharedocumentstoolargeto
Chapter 7: Cloud Storage 149
emailbyautomaticallysendinganemailwithalinkfordownloadingthefile.MobileMe
includes20GBofonlinestoragethatcanbeusedforemail,contacts,calendar,photos,movies,
anddocuments.
PricingandRequirements
MobileMeisasubscription-basedservicewith20GBofstorageforUS$99peryearfor
individualsandUS$149foraFamilyPack,whichincludesonemasteraccountwith20GBof
storageandfourFamilyMemberaccountswith5GBofstorageeach.Afree,60-dayMobileMe
trialatwww.apple.com/mobilemeandcurrentMacmemberswillbeautomatically
upgradedtoMobileMeaccounts.MobileMesubscriberscanpurchaseanadditional20GB
ofstorageforUS$49or40GBofstorageforUS$99annually.
PART II
UsinganiPhoneoriPodtouchwithMobileMerequiresiPhone2.0softwareandiTunes7.7
orlater.ForusewithaMac,MobileMerequiresMacOSXTiger10.4.11orthelatestversion
ofMacOSXLeopard.ForaPC,MobileMerequiresWindowsVistaorWindowsXPHomeor
Professional(SP2),andMicrosoftOutlook2003orlaterisrecommended.MobileMeisaccessible
ontheWebviaSafari3,InternetExplorer7,andFirefox2orlater.
LiveMesh
LiveMeshisMicrosoft’s“software-plus-services”platformandexperiencethatenablesPCs
andotherdevicestobeawareofeachotherthroughtheInternet,enablingindividualsand
organizationstomanage,access,andsharetheirfilesandapplicationsseamlesslyonthe
Webandacrosstheirworldofdevices.LiveMeshhasthefollowingcomponents:
• Aplatformthatdefinesandmodelsauser’sdigitalrelationshipsamongdevices,
data,applications,andpeople—madeavailabletodevelopersthroughanopendata
modelandprotocols.
• AcloudserviceprovidinganimplementationoftheplatformhostedinMicrosoft
datacenters.
• Software,aclientimplementationoftheplatformthatenableslocalapplicationsto
runofflineandinteractseamlesslywiththecloud.
• Aplatformexperiencethatexposesthekeybenefitsoftheplatformforbringing
togetherauser’sdevices,filesandapplications,andsocialgraph,withnewsfeeds
acrossallofthese.
Microsoftpromisesanopendatamodel,anddeveloperswillbeabletohelpLiveMesh
growthroughthedevelopmentofadditionalapplicationsandservices.
150 Part II: Cloud Computing Technolog y
OfsimilarimportanceareMicrosoft’splanstomakeLiveMeshcompatiblewithvarious
systems.
TheLiveMeshsoftware,calledMeshOperatingEnvironment(MOE),isavailablefor
• WindowsXP
• WindowsVista
• WindowsMobile
• MacOSX
Thesoftwareisusedtocreateandmanagethesynchronizationrelationshipsbetween
devicesanddata.LiveMeshalsoincorporatesacloudcomponent,calledLiveDesktop.
Thisisanonlinestorageservicethatallowssynchronizedfolderstobeaccessibleviaa
website.
ItalsoincludesremotedesktopsoftwarecalledLiveMeshRemoteDesktop,whichcanbe
usedtoremotelyconnectandmanageanyofthedevicesinthesynchronizationrelationship.
LiveMeshRemoteDesktopallowsyoutocontrolyourdevicesfromtheLiveMeshapplication,
aswellasfromanyotherPCconnectedtotheInternet.
LiveFramework
Fordevelopers,thereisadevelopmentcomponentconsistingofaprotocolandAPIsknown
asLiveFramework.
Chapter 7: Cloud Storage 151
NOTE LiveFrameworkwasformerlyknownasMeshFX.
LiveFrameworkisaREST-basedAPIforaccessingtheLiveMeshservicesoverHTTP.
LiveFrameworkdiffersfromMOEinthatMOEsimplyletsfoldersbeshared.TheLive
FrameworkAPIscanbeusedtoshareanydataitembetweendevicesthatrecognizethedata.
TheAPIencapsulatesthedataintoaMeshObject,whichisthesynchronizationunitof
LiveMesh.Itisthentrackedforchangesandsynchronization.
AMeshObjectconsistsofdatafeeds,whichcanberepresentedinAtom,RSS,JSON,
orXML.
TheMOEsoftwarealsocreatesMeshObjectsforeachLiveMeshfoldersotheycanbe
synchronized.
PART II
Likecloudcomputingitself,cloudstoragetakesitsfairshareofknocksforbeingused
asatrendyterm.Ifthetermisusedtoooften,itcouldwindupreferringtoanytypeof
Internet-accessiblestorage.OrganizationsshouldthinkofcloudcomputingasscalableIT
capabilitiesthataredeliveredtoexternalcustomersusingtheWeb.
StandardsareoneofthethingsthatmaketheITworldgoaround.Andwithcloud
computing,thereareanumberofstandardsthatensureseveryoneworksandplaystogether
nicely.We’lltakeacloserlookatthosestandardsinthenextchapter.
This page intentionally left blank
CHAPTER
8
Standards
S
tandardsmaketheWorldWideWebgoaround,andbyextension,theyareimportant
tocloudcomputing.Standardsarewhatmakeitpossibletoconnecttothecloudand
whatmakeitpossibletodevelopanddelivercontent.
Inthischapterwe’lllookattheprevalentstandardsthatmakecloudcomputingpossible,
andalsothesortsofstandardsthatareusedtodevelopapplicationsonthecloud.
Application
Acloudapplicationisthesoftwarearchitecturethatthecloudusestoeliminatetheneedto
installandrunontheclientcomputer.Therearemanyapplicationsthatcanrun,butthere
needstobeastandardwaytoconnectbetweentheclientandthecloud.Inthissectionwe’ll
takeacloserlookattheprotocolsthatareusedtomanageconnectionsbetweenbothparties.
Communication
Computersneedacommonwaytospeakwithoneanother.Thinkofitliketalkingonthe
telephonetosomeonewhodoesn’tspeakEnglishandyoudon’tspeaktheirlanguage.
There’snowaytoachieveacommonunderstanding.Youmaybeabletoguessawordhere
orthere,butforthemostpart,theconversationwon’twork.Computerscan’tevenguessa
commonword,sowithoutalanguageincommon,thatcommunicationwon’thappen.
HTTP
Togetawebpagefromyourcloudprovider,you’lllikelybeusingtheHypertextTransfer
Protocol(HTTP)asthecomputingmechanismtotransferdatabetweenthecloudandyour
organization.
HTTPisastatelessprotocol.Thisisbeneficialbecausehostsdonotneedtoretain
informationaboutusersbetweenrequests,butthisforceswebdeveloperstousealternative
methodsformaintainingusers’states.Forexample,whenahostneedstocustomizethe
contentofawebsiteforauser,thewebapplicationmustbewrittentotracktheuser’s
progressfrompagetopage.Themostcommonmethodforsolvingthisproblemissending
andreceivingcookies.
153
154 Part II: Cloud Computing Technolog y
HTTPisthelanguagethatthecloudandyourcomputersusetocommunicate.This
languageisn’thardtounderstand,andyou’veprobablyseenitbefore.Sayyourbrowser
wantstogetagivenwebpage.Thebrowserinitiatesitby“saying”
GET/HTTP/1.0
Host:www.velte.com
Theserverrespondswith
HTTP/1.0200OK
Content-Type:text/html
<head>
<title>ThankyouforvisitingVeltePublishing.</title>
{TherestoftheVeltePublishingwebpageappearshere}
</body>
Let’sbreakdownthisverysimpleexampleandunderstandwhateachlineistellingus.
Thefirstlineofthebrowser’srequest,GET/HTTP/1.0,tellsusthatthebrowserwantsto
seethesite’shomepageandthatitisusingversion1.0ofHTTP.Thesecondline,Host:
www.velte.com,sayswhichwebsitethebrowserwantstosee.
NOTE It’snecessarytoaddthewebsitenamebecausemanywebsitessharethesameIPaddresson
theInternetandarehostedbyasingleserver.TheHost:linewasaddedafewyearsafterHTTP
wasinitiallyreleased,toallowforthisbehavior.
Thefirstlineoftheserver’sreply,HTTP/1.0200OK,istheserverlettingthebrowser
knowthatitalsospeaksHTTP1.0andthattherequestwassuccessful.Ifthepagedidnot
exist,theresponsewouldhavebeenHTTP/1.0404NotFound.Thesecondlineinthe
server’sresponse,Content-Type:text/html,letsthatbrowserknowthatitisaboutto
receivethewebpage.Thisishowthebrowsercanunderstandwhattodowiththedatathat
it’sabouttoreceive.IfthislinewereContent-Type:image/jpg,thenthebrowserwould
knowthatitwouldbereceivingaJPGimagefile.
HTTP1.1 ThisexampleusedHTTP1.0,butcurrentbrowsersuse1.1.Therequestandresponse
wouldincludeabitmoreinformation,butthedifferencesarenotdistinctenoughtogointo.
Theexamplewejustusedisperfectlyvalidandwouldstillreturntheproperresults.
Theprimarydifferencebetweenthetwoisthatoriginally,webbrowsersmadeseparate
HTTPrequestslikethisforeachpage,eachimage,andeveryothercomponentonthepage.
UsingHTTP1.1,abrowserandservercannegotiatetoleavetheconnectionopenand
transferallthepage’scomponentswithouthangingupandopeningnewsessions.
Requests HTTPdefineseightmethodstodescribehowthedesiredactionistobeperformed
ontheserver.Whatthisserverpresents—whetherpre-existingdataordynamicallygenerated
data—dependsontheimplementationoftheserver.Table8-1liststhedifferentrequeststhat
canbemade.
HTTPisthemostcommonwayyouwillconnectyourbrowserswiththecloud.Aprotocol
thatisbrewingistheXMPP.
Chapter 8: Emerging Standards 155
Request Description
HEAD Asks for the response identical to the one that would correspond to a GET
request, but without the response body. This is good for retrieving metainformation
in the response headers, but without transporting the entire content.
GET Requests information from a server.
POST Submits data to be processed to the server. The data is included in the body of
the request. The result of the request might be the creation of the resource or
updating the existing resource.
PUT Uploads a representation of the resource.
PART II
DELETE Deletes the specified resource.
TRACE Echoes the request back to the browser so that the client can see which servers
are adding or changing in the request.
OPTIONS Returns HTTP methods that the server supports for the given URL. This can be
used to check the functionality of a web server.
CONNECT Converts the request connection to a transparent TCP/IP tunnel. It’s usually used
to facilitate SSL-encrypted communication through an unencrypted HTTP proxy.
XMPP
TheExtensibleMessagingandPresenceProtocol(XMPP)isbeingtalkedaboutasthenext
bigthingforcloudcomputing.Theproblemisthatcurrentcloudservices—includingSOAP
andotherHTTP-basedprotocols—areallone-wayinformationexchanges.Thismeansthat
cloudsdonotoperateinrealtimeandmighthavedifficultiesclearingafirewall.XMPP
allowsfortwo-waycommunicationandeliminatespolling.
HTTP requires multiple polling events to update status from the web browser.
XMPP maintains a connection between the client and the web server.
156 Part II: Cloud Computing Technolog y
XMPP(alsoknownasJabber)isaprotocolthatGoogle,Apple,AOL,IBM,and
LiveJournalhaveallsignedonwith.ButwithsomanybignamesalreadyadoptingXMPP,
whyhasn’tthischangebeenbroader,andwhyaren’tclouds,especially,usingthis?
TheProblemwithPolling Whenyouwantedtosyncservicesbetweentwoservers,themost
commonmeanswastohavetheclientpingthehostatregularintervals.Thisisknownas
polling.Thisisgenerallyhowwecheckouremail.Everysooften,wepingouremailserver
toseeifwegotanynewmessages.It’salsohowtheAPIsformostwebserviceswork.
ThewebsiteHighScalabilityreportedin2008thatTwitterwasreportinganaverageof
200to300connectionspersecond,withspikesthatroseashighas800requestspersecond.
Andatonepoint,duringtheMacworldkeynote,theservicewentdownbecauseofso
manypolls.
Somecompaniesaretryingtoaddressthepollingproblemwithexistingprotocols,butit
isdifficult.Salesforce.comtriestodothisbysendingnotificationsbacktoyourwebservice
toavoidpolling.That’sdifficultfordevelopers,andyourfirewallhastobeconfiguredto
allowthemessagesbackthrough.
NotReady XMPP’sbiggestproblemisthatit’snotHTTP.There’sathoughtthatanything
newneedstobebasedonexistingwebstandards,andwhileHTTPserveswell,it’snot
perfect,especiallyforcloudcomputing.
XMPPwasdevelopedforinstantmessagingandpresence,anditiswidelyusedinthose
circles.Itincludesthefollowingfeatures:
• XMPPallowsforeasytwo-waycommunication,eliminatingtheneedforpolling.
• ItisXML-basedandeasilyextensible,whichmakesitidealforcloudservices.
• Itisefficientandabletoscaletomillionsofconcurrentusersonasingleservice.
XMPPwillgaininprevalence,buthopefullycloudvendorswillmakethemovesooner
ratherthanlater.
Security
Securingyourcloudsessionsisespeciallyimportantassecurityisoneofthetopreasons
businessesarereluctanttojointhecloud.Securingyourcloudsessionscanbeaccomplished
viaencryptionandauthentication.Themostprevalentmeansofwebencryptioncomes
standardoneverybrowser.Authenticationisanothermatter,withseveraloptionsopentoyou.
Inthissectionwe’lltalkaboutthewidelyusedSecureSocketsLayer(SSL)for
encryption,andonemeansofauthentication,OpenID.
Chapter 8: Emerging Standards 157
SSL
Thelasttimeyouboughtsomethingfromyourfavoriteonlineretailer,youpassedalong
yourcreditcardinformation,probablyusingSecureSocketsLayer(SSL).
SSListhestandardsecuritytechnologyforestablishinganencryptedlinkbetweena
webserverandbrowser.Thisensuresthatdatapassedbetweenthebrowserandtheweb
serverstaysprivate.
TocreateanSSLconnectiononawebserverrequiresanSSLcertificate.Whenyour
cloudproviderstartsanSSLsession,theyarepromptedtocompleteanumberofquestions
abouttheidentityoftheircompanyandwebsite.Thecloudprovider’scomputersthen
generatetwocryptographickeys—apublickeyandaprivatekey.
ThepublickeydoesnotneedtobesecretandisplacedintoaCertificateSigning
PART II
Request(CSR).Thisisafilethatcontainsyourdetails.YouthensubmittheCSR.Duringthe
SSLcertificateapplicationprocess,thecertificationauthoritywillvalidateyourdetailsand
issueanSSLcertificate,containingyourdetails,allowingyoutouseSSL.Thecloud
providerwillthenmatchyourissuedSSLcertificatetoyourprivatekey.Yourwebbrowser
willbeabletoestablishanencryptedlinkbetweenyourcomputerandthecloudprovider.
SSL Connection
1. The browser checks the web site’s certificate to ensure that the site you are connecting to is
the real site and not someone else intercepting and spoofing the site.
2. The browser and web site decide on what type of encryption to use.
3. The browser and server send each other unique codes to use when encrypting information
to be sent.
4. The browser and server use the encryption to start talking.
5. The browser shows the encrypting icon, and web pages are passed as secured.
Thisisafairlystreamlinedprocess,andoperatesinthebackground.Theonlydifference
youarelikelytoseeisthatthepagetakesalittlelongertoloadbecauseofallthebehind-
the-scenescertificatepassing.
Normally,theSSLcertificatewillcontainyourcloudprovider’sdomainname,company
name,address,city,state,andcountry.Itwillalsocontaintheexpirationdateofthe
certificateanddetailsofthecertificationauthorityresponsibleforissuingthecertificate.
Whenabrowsertriestoconnectsecurelytothecloud,itwillretrievethesite’sSSL
certificateandcheckthatithasnotexpiredandthatitisbeingusedbythewebsitefor
whichitwasissued.Italsocheckstoseeifthecertificatewasissuedbyanauthoritythatthe
browsertrusts.Ifitfailsanyofthesechecks,thebrowserletstheuserknowthatthesiteis
notsecuredbySSL.
158 Part II: Cloud Computing Technolog y
OpenID
WetalkedaboutOpenIDbackinChapter2.OpenIDisanopen-sourcesolutionforthe
problemofneedingauniqueusernameandpasswordforaccesstodifferentwebsites,thus
makingyourlifesimpler.
ThisallowsyoutochoosetheOpenIDproviderthatbestmeetsyourneedandthatyou
trust.Also,OpenIDcanstaywithyounomatterwhichprovideryoumoveto.Bestofall,
OpenIDisfree.Thisisgoodforbusinesses,becauseitmeansalowercostforpasswordand
accountmanagement.
OpenIDisstillintheadoptionphaseandisbecomingmorepopularasbignameslike
AOL,Microsoft,Sun,andNovellbegintoacceptandprovideOpenIDs.OpenIDisaproduct
oftheopen-sourcecommunitytosolveproblemsthatwerenoteasilysolvablebyexisting
technology.OpenIDisalightweightwaytoauthenticateusers,usingthesametechnology
thatisusedtoidentifywebsites.AnyonecanbeanOpenIDuserorproviderforfree.
TheOpenIDFoundationwasformedtoassisttheopen-sourcemodelandactasthe
technology’ssourceofsupport.
PCIDSS
PaymentCardIndustryDataSecurityStandards(PCIDSS)requirement2.2.1isanebulous
areaformany,especiallyasitrelatestocloudcomputing.Therequirementstatesthatan
organizationcan“implementonlyoneprimaryfunctionperserver.”Butdoesthatmean
onephysicalserver?
Theshortansweris“no.”Youcanhavemultiplesystemsthatarevirtualized;youjust
havetoensurethattheyaresegmentedandisolatedfromeachother.
Virtualizationisanemergingtechnology,andtechnologychangeseverything.Inthe
past,copyrightlawwaswrittentopreventyoufrommakingcopiesofmoviesandmusic.
Atthetime,noonedreamedthattherewouldbeadaywhencopyrightedmaterialscould
besavedonacomputeroraniPod.Nowthecopyrightlawsarewritteninsuchawaythat
allthebasesarecovered,nomatterwhattechnologythrowsatthem.ExpectPCIDSSrules
tobechangedaswell.
Client
Whenyourclientsconnecttothecloud,theyneedtoruncertainsoftwareontheirmachines,
andmostoftenit’llbeawebbrowser,orasimilarlyequippedapplication.Webbrowsers
useanumberofwaystostoreanddisplaydata,likethewidelyknownHypertextMarkup
Language(HTML).Inthissectionwe’lltalkaboutthedifferentmeanstostoreanddisplay
information.
HTML
SincesomuchofcloudcomputingisbasedonconnectingviatheWorldWideWeb,it’s
importanttotalkaboutthemainstandardtocommunicatedata—HTML.
HTMLisunderconstantrevisiontoimproveitsusabilityandfunctionality.W3Cisthe
organizationthatischargedwithdesigningandmaintainingthelanguage.Whenyouclick
onalinkinawebpage,youareaccessingHTMLcodeintheformofahyperlink,which
thentakesyoutoanotherpage.
Chapter 8: Emerging Standards 159
HowHTMLWorks
HTMLisaseriesofshortcodestypedintoatextfilebytheauthororcreatedbywebpage
designsoftware.Theseshortcodesarecalledtags.ThetextisthensavedasanHTMLfile
andviewedthroughabrowser,likeInternetExplorerorMozillaFirefox.Thebrowserreads
thefileandtranslatesthetextintotheformtheauthorwantedyoutosee.
WritingHTMLcanbedoneusinganumberofmethods,witheitherasimpletexteditor
orapowerfulgraphicaleditor.
Tags
TagsarewhatseparatenormaltextfromHTMLcode.You’velikelyseenthemasthewords
between<anglebrackets>.Tagsarewhatallowthingsliketablesandimagestoappearina
PART II
webpage.Differenttagsperformdifferentfunctions.Thetagsdon’tappearwhenyouview
thepagethroughabrowser,buttheyaffecthowthebrowserbehaves.Forinstance:
<b>Thistextwillappearinbold.</b>Butthistextwon't.
Inthisexample,the<b>tagswerewrappedaroundsometext,whichwillappearbold
whenviewedthroughanordinarywebbrowser.
CascadingStyleSheetsinHTML
CascadingStyleSheets(CSS)areusedtocontrolhowpagesarepresented,andmakepages
moreaccessible.BasicspecialeffectsandinteractionareprovidedbyJavaScript,whichadds
alotofpowertobasicHTML.
DynamicHTML
DynamicHTML(DHTML)isnotanewspecificationofHTML,butratheradifferentwayof
lookingatandcontrollingthestandardHTMLcodesandcommands.Whenaregular
HTMLpageloads,itwillnotchangeuntilanotherrequestcomestotheserver.DHTML
givesyoumorecontrolovertheHTMLelements,allowingthemtochangewithout
returningtothewebserver.
TherearefourpartstoDHTML:
• DocumentObjectModel(DOM)
• Scripts
• CascadingStyleSheets(CSS)
• XHTML
DOM
TheDocumentObjectModel(DOM)iswhatallowsyoutoaccessyourwebpageandmake
changeswithDHTML.TheDOMspecifieseverypartofawebpage,andprovidesconsistent
namingconventions,allowingyoutoaccessyourwebpagesandchangetheirproperties.
Scripts
ThemostcommonscriptinglanguagesinDHTMLareJavaScriptandActiveX.Scriptsare
usedtocontroltheobjectsspecifiedintheDOM.
160 Part II: Cloud Computing Technolog y
CascadingStyleSheetsinDHTML
CSSisusedinDHTMLtocontrolthelookandfeelofthewebpage.Stylesheetslistthe
colorsandfontsoftext,thebackgroundcolorsandimages,andtheplacementofobjectson
thepage.UsingscriptingandtheDOM,youcanchangethestyleofvariouselements.
XHTML
DHTMLwebpagesareactuallywritteninXHTMLorHTML4.x.DHTMLisalsousedto
buildtheelementsfortheCSSandtheDOMtoworkon.Thereisnothinguniqueabout
XHTMLforDHTML.ButitisimportanttohavevalidXHTML,becausetherearemore
thingsworkingfromitthanjustthebrowser.
DHTMLFeatures
DHTMLhasfourmainfeatures:
• Changingthetagsandproperties
• Real-timepositioning
• Dynamicfonts
• Databinding
ChangingtheTagsandProperties OneofthemostcommonusesofDHTMLischangingthe
qualitiesofanHTMLtag,dependingonaneventoutsideofthebrowser(suchasamouse
click,atime,andsoforth).Youcanusethistopreloadinformationontoapage,butnot
displayituntiltheuserclicksaspecificlink.
Real-TimePositioning Real-timepositioningallowsobjects,images,andtexttomovearound
thewebpage.Normally,thisisusedforinteractivegames,butitisafeatureyoumay
programintoyourcloudpagesonthebasisoforganizationalneed.
DynamicFonts DynamicfontsareaNetscape-onlyfeature.Netscapedevelopedthisto
avoidtheproblemdesignershadwithnotknowingwhichfontswouldbeonareader’s
system.Fontsareencodedanddownloadedwiththepagesothatthepagealwayslooksthe
waythedesignerintended.
DataBinding DatabindingisanInternetExplorer–onlyfeature.Microsoftdevelopedthe
featuretoalloweasieraccesstodatabasesandwebsites.ItissimilartousingCGItoaccess
adatabase,butusesanActiveXcontroltofunction.
JavaScript
BasicHTMLdoesonlybasicstuff.It’swhenyouuseJavaScripttowritefunctionsthatare
embeddedintheHTMLpagesandinteractwiththeDOMthatyoustartaddingpizzazz
andspecificuser-entereddatathataddsfunctionalitytoyourwebpages.
HerearesomeexamplesoftheusesofJavaScript:
• Openingorpoppingupnewwindows,andhavingcontrolofthesizeandattributes
ofthewindow(whethertoincludemenus,toolbars,andsoon).
• Validatingwebforminputvaluestoensurethattheywillbeacceptedbefore
submittingthemtotheserver.
• Changingimagesasthecursorrollsoverthem.
Chapter 8: Emerging Standards 161
JavaScriptisascriptinglanguageusedforclient-sidewebdevelopment.JavaScriptwas
influencedbymanylanguagesandwasdesignedtolooklikeJavabutbeeasierfornon-
programmerstoworkwith.AlthoughJavaScriptisbestknownforitsuseinwebsites,itis
alsobeingusedtoenablescriptingaccesstoobjectsembeddedinotherapplications.
Inspiteofitsname,JavaScripthasverylittletodowiththeJavaprogramming
language,althoughbothusethecommonCsyntaxandJavaScriptusesmanyJavanames
andnamingconventions.ToaJavaprogrammer,JavaScriptwouldappeartobea“lite”
versionoftheJavaprogramminglanguage.Thenamecomesfromamarketingagreement
betweenSunandNetscapeinexchangeforNetscapebundlingSun’sJavaRuntimewiththe
then-dominantbrowser.
JavaScriptrunslocallyonauser’sbrowserratherthanontheserver,soitresponds
PART II
quicklytouseractions.Further,JavaScriptcodecandetectuseraction,whichHTMLcannot,
likesensingindividualkeystrokes.
ThemostcommonhostenvironmentforJavaScriptisthewebbrowser.Webbrowsers
usethepublicAPItocreatehostobjects,whichareresponsibleforreflectingtheDOMinto
JavaScript.AJavaScriptwebserverwouldhousethehostobjectsrepresentinganHTTP
requestandresponse,thenaJavaScriptprogramcouldmanipulatethedatatodynamically
generateawebpage.
ThefollowingisasampleJavaScriptprogram:
<!DOCTYPEHTMLPUBLIC"-//W3C//DTDHTML4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<html>
<head><title>simplepage</title></head>
<body>
<scripttype="text/javascript">
document.write('HelloWorld!');
</script>
<noscript>
<p>YourbrowsereitherdoesnotsupportJavaScript,oryouhave
JavaScriptturnedoff.</p>
</noscript>
</body>
</html>
Infrastructure
Infrastructureisawaytodelivervirtualizationtoyourcloudcomputingsolution.We
talkedaboutvirtualizationbefore,bothacrosstheInternet(havingyourmachinesrunning
onaremoteserveranddisplayedatyourorganization)andlocally(havingyourclients’
sessionsrunonalocalserveranddisplayedattheirdesktops).
Inthissectionwe’lltalkabouthowvirtualization—afairlynewcomputingsolution—is
beingstandardizedandhowmajorplayersareworkingandplayingtogethertomakeit
cometogether.
162 Part II: Cloud Computing Technolog y
Virtualization
Wheneversomethingnewhappensintheworldofcomputing,competitorsdukeitoutto
havetheirimplementationbethestandard.Virtualizationissomewhatdifferent,andmajor
playersworkedtogethertodevelopastandard.
Internet
VMware,AMD,BEASystems,BMCSoftware,Broadcom,Cisco,ComputerAssociates
International,Dell,Emulex,HP,IBM,Intel,Mellanox,Novell,QLogic,andRedHatall
workedtogethertoadvanceopenvirtualizationstandards.
VMwaresaysthatitwillprovideitspartnerswithaccesstoVMwareESXServersource
codeandinterfacesunderanewprogramcalledVMwareCommunitySource.This
programisdesignedtohelppartnersinfluencethedirectionofVMwareESXServerthrough
acollaborativedevelopmentmodelandsharedgovernanceprocess.
“Virtualizationisgainingwidespreadadoptionduetoitsindisputablecustomer
benefits.Itisanarearichinopportunitiesandtheecosystemwilldevelopmostfullywith
openstandards.VMwareisthustakingourindustry-leadingproducts,openinguptheAPIs
andprovidingsharedgovernanceandsourceaccesstothem,”saidDianeGreene,president
ofVMware.“Welookforwardtothisnextphaseofincreasedpartnercollaborationand
believeitisthebestpossiblewaytogivecustomerstheabilitytorealizethefullpotentialof
thex86virtualizationlayer.”
Theseinitiativesareintendedtobenefitendusersby
• Expandingvirtualizationsolutions Theavailabilityofopen-standardvirtualization
interfacesandthecollaborativenatureofVMwareCommunitySourceareintendedto
acceleratetheavailabilityofnewvirtualizationsolutions.
• Expandedinteroperabilityandsupportability Standardinterfacesforhypervisors
areexpectedtoenableinteroperabilityforcustomerswithheterogeneousvirtualized
environments.
• Acceleratedavailabilityofnewvirtualization-awaretechnologies Vendorsacross
thetechnologystackcanoptimizeexistingtechnologiesandintroducenewtechnologies
forrunninginvirtualenvironments.
OpenHypervisorStandards
Hypervisorsarethefoundationalcomponentofvirtualinfrastructureandenablecomputer
systempartitioning.Anopen-standardhypervisorframeworkcanbenefitcustomersby
enablinginnovationacrossanecosystemofinteroperablevirtualizationvendorsandsolutions.
Chapter 8: Emerging Standards 163
Asaninitialstep,VMwarecontributedanexistingframeworkofinterfaces,called
VirtualMachineHypervisorInterfaces(VMHI),basedonitsvirtualizationproductsto
facilitatethedevelopmentofthesestandardsinanindustry-neutralmanner.Consistent
adoptionofopeninterfacesisexpectedtofacilitateinteroperabilityandsupportability
acrossheterogeneousvirtualizedenvironments.
Collaborationaroundopenhypervisorstandardsisexpectedtofocusonthefollowing
areasofinteroperabilityandperformanceoptimizationforvirtualizedenvironments:
• Cross-platformframeworksthatgovernthestandardizedoperationand
managementofstand-alonevirtualmachineenvironmentsaswellashighly
dynamic,datacenter-scaledeploymentofvirtualizedsystems
PART II
• CooperativevirtualizationAPIsbetweenhypervisorsandguestoperatingsystems
• Virtualmachineformatsthatenablevirtualmachinemigrationandrecoveryacross
platforms
CommunitySource
TheCommunitySourceprogramprovidesindustrypartnerswithanopportunitytoaccess
VMwareESXServersourcecodeunderaroyalty-freelicense.Partnerscancontributeshared
codeorcreatebinarymodulestospurandextendinteroperableandintegratedvirtualization
solutions.Theideaistocombinethebestofboththetraditionalcommercialandopen-source
developmentmodels.Communitymemberscanparticipateandinfluencethegovernance
ofVMwareESXServerthroughanarchitectureboard.Thisapproachwillhelpdriveopen
collaborationwhilestillpreservingtheabilityofpartnerstobuilddifferentiated,intellectual
property–protectedsolutions.
Forcustomers,theVMwareCommunitySourceprogramisexpectedtoyieldaricher
andbroadersetofpartnersolutionsthatarewellintegratedwithVMwarevirtual
infrastructureproducts.Forpartners,thesourceaccessanddevelopmentmodelallows
themtoefficientlydelivercomplementarysolutionsordifferentiatedproductcapabilities
aroundtheVMwareESXServercodebase.
“Morethaneverstandardsarecriticaltoinnovationinenterpriseinfrastructures.Red
HatapplaudstheeffortsoftechnologypartnerslikeVMwarewhoareworkingtoestablish
open,standards-basedsolutions,”saidPaulCormier,executivevicepresidentofengineering
atRedHat.“WearepleasedtoworkwithVMware,partnersandthecommunitytooffer
customersvirtualizationasakeycomponentoftheiropensourcearchitectures.”
OVF
AstheresultofVMwareanditsindustrypartners’efforts,astandardhasalreadybeen
developedcalledtheOpenVirtualizationFormat(OVF).OVFdescribeshowvirtual
appliancescanbepackagedinavendor-neutralformattoberunonanyhypervisor.Itisa
platform-independent,extensible,andopenspecificationforthepackaginganddistribution
ofvirtualappliancescomposedofoneormorevirtualmachines.
OVFgivescustomersanddevelopersthechoicetoselectanyhypervisorbasedonprice,
preference,orfunctionality,anditpreventsvendorlock-in.Thisstandardpackagingand
distributionformatforvirtualapplianceswillbeimportantinacceleratingtheadoptionof
virtualappliances.
164 Part II: Cloud Computing Technolog y
Aspartoftheireffortstoworkwithothervendors,VMwaredevelopedastandardwith
thesefeatures:
• Optimizedfordistribution
• Enablestheportabilityanddistributionofvirtualappliances
• Supportsindustry-standardcontentverificationandintegritychecking
• Providesabasicschemeforthemanagementofsoftwarelicensing
• Asimple,automateduserexperience
• Enablesarobustanduser-friendlyapproachtostreamliningtheinstallationprocess
• Validatestheentirepackageandconfidentlydetermineswhethereachvirtual
machineshouldbeinstalled
• Verifiescompatibilitywiththelocalvirtualhardware
• Portablevirtualmachinepackaging
• Enablesplatform-specificenhancementstobecaptured
• Supportsthefullrangeofvirtualharddiskformatsusedforvirtualmachines
today,andisextensibletodealwithfutureformatsthataredeveloped
• Capturesvirtualmachinepropertiesconciselyandaccurately
• Vendorandplatformindependent
• Doesnotrelyontheuseofaspecifichostplatform,virtualizationplatform,or
guestoperatingsystem
• Extensible
• Designedtobeextendedastheindustrymovesforwardwithvirtualappliance
technology
• Localizable
• Supportsuser-visibledescriptionsinmultiplelocales
• Supportslocalizationoftheinteractiveprocessesduringinstallationofanappliance
• Allowsasinglepackagedappliancetoservemultiplemarketopportunities
ItseemslogicalthatVMwarewouldtaketheleadinthedevelopmentofthestandard,
astheyareoneofthemostdominantforcesintheworldofvirtualization.Itisalso
encouragingthattheyopenedtheirowncodetopartnerstomakethestandardatrue
industry-developedstandard.
Service
Awebservice,asdefinedbytheWorldWideWebConsortium(W3C),“isasoftwaresystem
designedtosupportinteroperablemachine-to-machineinteractionoveranetwork”that
maybeaccessedbyothercloudcomputingcomponents.WebservicesareoftenwebAPIs
thatcanbeaccessedoveranetwork,liketheInternet,andexecutedonaremotesystemthat
hoststherequestedservices.
Chapter 8: Emerging Standards 165
Inthissectionwe’lltalkaboutsomeofthepopularwebservices,likeREST,SOAP,
andJSON.
Data
Datacanbestirredandservedupwithanumberofmechanisms;twoofthemostpopular
areJSONandXML.Botharebasedonleadingindustrystandards—HTMLandJavaScript—
tohelpdeliverandpresentdata.
JSON
JSONisshortforJavaScriptObjectNotationandisalightweightcomputerdatainterchange
format.Itisusedfortransmittingstructureddataoveranetworkconnectioninaprocess
PART II
calledserialization.ItisoftenusedasanalternativetoXML.
JSONBasics JSONisbasedonasubsetofJavaScriptandisnormallyusedwiththat
language.However,JSONisconsideredtobealanguage-independentformat,andcodefor
parsingandgeneratingJSONdataisavailableforseveralprogramminglanguages.
ThismakesitagoodreplacementforXMLwhenJavaScriptisinvolvedwiththeexchange
ofdata,likeAJAX.
NOTE www.json.orgprovidesanumberoflistingJSONbindings,basedonlanguage.
InDecember2005Yahoo!beganofferingsomeofitswebservicesinJSON,andGoogle
followedsuitinDecember2006.
XMLvs.JSON JSONshouldbeusedinsteadofXMLwhenJavaScriptissendingorreceiving
data.ThereasonforthisisthatwhenyouuseXMLinJavaScript,youhavetowritescripts
oruselibrariestohandletheDOMobjectstoextractthedatayouneed.However,inJSON,
theobjectisalreadyanobject,sonoextraworkneedstobedone.
Thisreducestheamountofoverhead,CPUuse,andtheamountofcodeyouoryour
programmershavetowrite.
Example ThefollowingisasampleJSONrepresentationofanobjectdescribingaperson:
{
"firstName":"Johnny",
"lastName":"Johnson",
"address":{
"streetAddress":"123MainStreet",
"city":"Minneapolis",
"state":"MN",
"postalCode":55102
},
"phoneNumbers":[
"612555-9871",
"952555-1598"
]
}
166 Part II: Cloud Computing Technolog y
Theobjectcontainstheperson’sfirstandlastname,streetaddress,city,state,andan
arraywithtelephonenumbersinit.
XML
ExtensibleMarkupLanguage(XML)isastandard,self-describingwayofencodingtextand
datasothatcontentcanbeaccessedwithverylittlehumaninteractionandexchangedacross
awidevarietyofhardware,operatingsystems,andapplications.
XMLprovidesastandardizedwaytorepresenttextanddatainaformatthatcanbeused
acrossplatforms.Itcanalsobeusedwithawiderangeofdevelopmenttoolsandutilities.
XMLBasics XMLisverysimilartoHTML(botharebasedontheSGMLlanguage,which
hasbeenastandardsince1986),sothosewhoalreadyknowHTMLwillfinditeasytopick
upXML.Thatsaid,therearetwomajordifferencesbetweenthetwo:
• Separationofformandcontent HTMLusestagstodefinetheappearanceoftext,
whileXMLtagsdefinethestructureandthecontentofthedata.Individual
applicationswillbespecifiedbytheapplicationorassociatedstylesheet.
• XMLisextensible Tagscanbedefinedbythedeveloperforspecificapplication,
whileHTML’stagsaredefinedbyW3C.
Functionality XMLmakesdatabaseusemucheasierforyourorganization.Relational
databasesystemscannotmeetallthedemandsofelectronicbusinessbecausetheyprocess
dataindependentlyfromitscontext.Theyarealsounabletohandlerichdata,likeaudio,
video,ornesteddatastructures,whicharecommonincloudenvironments.
TraditionaldatabasesareusuallyretrofittedtodealwithXML,buttheconversion
processispronetoerrorandthere’salotofoverhead,especiallywithgreatertransaction
ratesanddocumentcomplexity.
XMLdatabasessmoothoutthisprocessbecausetheystoreXMLnativelyinstructured,
hierarchicalform.Queriescanberesolvedmuchmorequicklybecausethereisnoneedto
maptheXMLdatatreetorelationaldatabasetables.
OtherbenefitsofXMLinclude
• Self-describingdata XMLdoesnotrequirerelationalschemata,filedescription
tables,externaldatatypedefinitions,andsoforth.Also,whileHTMLonlyensures
thecorrectpresentationofthedata,XMLalsoguaranteesthatthedataisusable.
• Databaseintegration XMLdocumentscancontainanytypeofdata—fromtext
andnumberstomultimediaobjectstoactiveformatslikeJava.
• Noreprogrammingifmodificationsaremade Documentsandwebsitescanbe
changedwithXSLStyleSheets,withouthavingtoreprogramthedata.
• One-serverviewofdata XMLisexceptionallyidealforcloudcomputing,because
dataspreadacrossmultipleserverslooksasifitisstoredononeserver.
• Openandextensible XML’sstructureallowsyoutoaddotherelementsifyou
needthem.Youcaneasilyadaptyoursystemasyourbusinesschanges.
• Future-proof TheW3ChasendorsedXMLasanindustrystandard,anditis
supportedbyallleadingsoftwareproviders.It’salreadybecomeindustrystandard
infieldslikehealthcare.
Chapter 8: Emerging Standards 167
• Containsmachine-readablecontextinformation Tags,attributes,andelement
structureprovidethecontextforinterpretingthemeaningofcontent,whichopens
uppossibilitiesfordevelopment.
• Contentvs.presentation XMLtagsdescribethemeaningoftheobject,notits
presentation.Thatis,XMLdescribesthelookandfeelofadocument,andthe
applicationpresentsitasdescribed.
WebServices
Webservicesdescribehowdataistransferredfromthecloudtotheclient.We’vementioned
thecontentofthissectioninChapter7,butlet’stakealookunderthehoodandseehow
PART II
RESTandSOAPwork,andwhichwouldbebestforyourcloudneeds.
REST
Representationalstatetransfer(REST)isawayofgettinginformationcontentfromaweb
sitebyreadingadesignatedwebpagethatcontainsanXMLfilethatdescribesandincludes
thedesiredcontent.
Forinstance,RESTcouldbeusedbyyourcloudprovidertoprovideupdatedsubscription
information.Everysooften,theprovidercouldprepareawebpagethatincludescontentand
XMLstatementsthataredescribedinthecode.Subscribersonlyneedtoknowtheuniform
resourcelocator(URL)forthepagewheretheXMLfileislocated,readitwithawebbrowser,
understandthecontentusingXMLinformation,anddisplayitappropriately.
RESTwasdevelopedinaPhDdissertationbyRoyFielding,andhecallsitan
“architecturalstyle.”HesaysRESTexploitsexistingtechnologyandprotocolsofthe
WebincludingHTTPandXML.
RESTissimilarinfunctiontotheSimpleObjectAccessProtocol(SOAP),butiseasierto
use.SOAPrequireswritingorusingadataserverprogramandaclientprogram(torequest
thedata).However,SOAPoffersmorecapability.
Forinstance,ifyouweretoprovidesyndicatedcontentfromyourcloudtosubscribing
websites,thosesubscribersmightneedtouseSOAP,whichallowsgreaterprogram
interactionbetweentheclientandtheserver.
168 Part II: Cloud Computing Technolog y
RESTusesthesamepublishingapproachthatmanysitesusewithRDFSiteSummary
(RSS).RSSusestheResourceDescriptionFramework(RDF),whichisastandardwayto
describeawebsite.
Resources AnimportantcomponentinRESTistheexistenceofresources.Resourcesare
sourcesofspecificinformationandeachoneisreferencedbyaglobalidentifier,likeaURL
inHTTP.Tomanipulatetheseresources,networkcomponentscommunicateviaastandard
interface(likeHTTP)andexchangerepresentationsoftheresources(forinstance,theactual
documentsconveyingtheinformation).
Forinstance,aresource,whichisatriangle,mightbedescribedasapolygonwiththree
sidesofequallength.Itmayalsocombinethreepointsthatareconnectedinacomma-
separatedlist.
Benefits RESToffersthefollowingbenefits:
• Itgivesbetterresponsetimeandreducedserverloadduetoitssupportforthe
cachingofrepresentations.
• Serverscalabilityisimprovedbyreducingtheneedtomaintainsessionstate.
• Asinglebrowsercanaccessanyapplicationandanyresource,solessclient-side
softwareneedstobewritten.
• Aseparateresourcediscoverymechanismisnotneeded,duetotheuseof
hyperlinksinrepresentations.
• Betterlong-termcompatibilityandevolvabilitycharacteristicsexistthaninRPC.
Thisisdueto:
• Theabilityofdocuments,likeHTML,toevolvewithbothforward-and
backward-compatibility.
• Resourcescanaddsupportfornewcontenttypesastheyaredefined,without
eliminatingsupportforoldercontenttypes.
AbenefitwhenusingRESTfulapplicationsonthecloudisthatRESTallowsusersto
bookmarkspecificqueriesandallowsthosequeriestobesenttoothersviaemailorinstant
messaging.This“representation”ofapathorentrypointintoanapplicationbecomesvery
portable.
SOAP
SimpleObjectAccessProtocol(SOAP)isawayforaprogramrunninginonekindof
operatingsystem(suchasWindowsVista)tocommunicatewithaprograminthesameor
anotherkindofanoperatingsystem(suchasLinux)byusingHTTPandXMLasthetoolsto
exchangeinformation.
ProcedureCalls Often,remoteprocedurecalls(RPC)areusedbetweenobjectslikeDCOM
orCOBRA,butHTTPwasnotdesignedforthisuse.RPCisacompatibilityproblem,
becausefirewallandproxyserverswillblockthistypeoftraffic.
Becausewebprotocolsalreadyareinstalledandavailableforusebythemajoroperating
systems,HTTPandXMLprovideaneasysolutiontotheproblemofhowprogramsrunning
underdifferentoperatingsystemsinanetworkcancommunicatewitheachother.
Chapter 8: Emerging Standards 169
SOAPdescribesexactlyhowtoencodeanHTTPheaderandanXMLfilesothata
programononecomputercancallaprograminanothercomputerandpassitinformation.
Italsoexplainshowacalledprogramcanreturnaresponse.
NOTE SOAPwasdevelopedbyMicrosoft,DevelopMentor,andUserlandSoftware.
OneoftheadvantagesofSOAPisthatprogramcallsaremorelikelytogetthrough
firewallsthatnormallyscreenoutrequestsforthoseapplications.BecauseHTTPrequests
arenormallyallowedthroughfirewalls,programsusingSOAPcancommunicatewith
programsanywhere.
PART II
Sample WhenyoulookatthefollowingSOAPexample,youcanseehowitisbasedon
HTTP.Infact,thefirstlineintherequestisnearlyidenticaltoastandardHTTPrequest.
Hereistherequestfullywrittenout:
POST/InStockHTTP/1.1
Host:www.example.org
Content-Type:application/soap+xml;charset=utf-8
Content-Length:nnn
<?xmlversion="1.0"?>
<soap:Envelope
xmlns:soap="http://www.w3.org/2001/12/soap-envelope"
soap:encodingStyle="http://www.w3.org/2001/12/soap-encoding">
<soap:Bodyxmlns:m="http://www.example.org/stock">
<m:GetStockPrice>
<m:StockName>IBM</m:StockName>
</m:GetStockPrice>
</soap:Body>
</soap:Envelope>
AndlikeastandardHTTPresponse,aSOAPresponsefollowsthesimilarformat.Here
isasampleSOAPresponse:
HTTP/1.1200OK
Content-Type:application/soap+xml;charset=utf-8
Content-Length:nnn
<?xmlversion="1.0"?>
<soap:Envelope
xmlns:soap="http://www.w3.org/2001/12/soap-envelope"
soap:encodingStyle="http://www.w3.org/2001/12/soap-encoding">
<soap:Bodyxmlns:m="http://www.example.org/stock">
<m:GetStockPriceResponse>
<m:Price>34.5</m:Price>
</m:GetStockPriceResponse>
</soap:Body>
</soap:Envelope>
170 Part II: Cloud Computing Technolog y
Standardsareextremelyimportant,andsomethingthatwetakeforgrantedthesedays.
Forinstance,it’snothingforustoemailMicrosoftWorddocumentsbackandforthand
expectthemtoworkonourcomputers.Butbefore.docand.txtfileswerestandardized,it
wasn’tuncommonforfilescreatedondifferentcomputerstobeunreadable.
Inthischapterwetalkedaboutthestandardsyou’relikelytocomeacrosswhileyou’re
workingonyourcloudsolutionandhowtheywork.Inthenextchapterwe’lltakeacloser
lookatSoftwareasaService(SaaS)andhowitshapesthewaythecloudfunctions.
III PART
Cloud Computing at Work CHAPTER 9
SoftwareasaService
CHAPTER 10
SoftwareplusServices
CHAPTER 11
DevelopingApplications
CHAPTER 12
LocalCloudsandThin
Clients
CHAPTER 13
MigratingtotheCloud
CHAPTER 14
BestPracticesandtheFuture
ofCloudComputing
APPENDIX
Glossary,Vendors,and
Resources
This page intentionally left blank
CHAPTER
9
Software as a Service
S
oftwareasaService(SaaS)iswhattraditionallycomestomindwhenwethinkofcloud
computing(ifanypartofcloudcomputingcanbeconsideredtraditional).InSaaS,
anapplicationishostedbyaserviceproviderandthenaccessedviatheWorldWide
Webbyaclient.Inthischapterwe’lllookunderthehoodofSaaSandexaminetheprosand
consofit.WewillalsotalkabouthowspecificvendorsareofferingSaaS,andthenhowSaaS
existsindifferentindustries.
Overview
SaaS(SoftwareasaService)isanapplicationhostedonaremoteserverandaccessed
throughtheInternet.
AneasywaytothinkofSaaSistheweb-basedemailserviceofferedbysuchcompanies
asMicrosoft(Hotmail),Google(Gmail),andYahoo!(YahooMail).Eachmailservicemeets
thebasiccriteria:thevendor(Microsoft,Yahoo,andsoon)hostsalloftheprogramsand
173
174 Part III: Cloud Computing at Work
datainacentrallocation,providingenduserswithaccesstothedataandsoftware,whichis
accessedacrosstheWorldWideWeb.
ThisisasimpleexplanationofSaaS,butthesamearchitecturecanbeappliedtoabroad
varietyofapplications,usedeitherbybusinessesorindividualendusers.
SaaScanbedividedintotwomajorcategories:
• Lineofbusinessservices Thesearebusinesssolutionsofferedtocompaniesand
enterprises.Theyaresoldviaasubscriptionservice.Applicationscoveredunderthis
categoryincludebusinessprocesses,likesupply-chainmanagementapplications,
customerrelationsapplications,andsimilarbusiness-orientedtools.
• Customer-orientedservices Theseservicesareofferedtothegeneralpublicona
subscriptionbasis.Moreoftenthannot,however,theyareofferedforfreeand
supportedbyadvertising.Examplesinthiscategoryincludetheaforementioned
webmailservices,onlinegaming,andconsumerbanking,amongothers.
Advantages
TherearedefiniteadvantagestoyourorganizationpursuingSaaS,forexample:
• There’safastertimetovalueandimprovedproductivity,whencomparedtothelong
implementationcyclesandfailurerateofenterprisesoftware.
• Therearelowersoftwarelicensingcosts.
• SaaSofferingsfeaturethebiggestcostsavingsoverinstalledsoftwarebyeliminating
theneedforenterprisestoinstallandmaintainhardware,paylaborcosts,and
maintaintheapplications.
• SaaScanbeusedtoavoidthecustomdevelopmentcyclestogetapplicationstothe
organizationquickly.
• SaaSvendorstypicallyhaveverymeticuloussecurityaudits.
• ManySaaSvendorshavethecapabilitiestoletcustomerscomplywithSarbanes-Oxley
Section404,GenerallyAcceptedAccountingPrinciples(GAAP),FinancialAccounting
StandardsBoard(FASB),USSecuritiesandExchangeCommission(SEC),andAmerican
InstituteofCertifiedPublicAccountants(AICPA)regulations.
Chapter 9: Software as a Service 175
• SaaSvendorsallowcompaniestohavethemostcurrentversionofanapplicationas
possible.Thisallowstheorganizationtospendtheirdevelopmentdollarsonnew
innovationintheirindustry,ratherthansupportingoldversionsofapplications.
SoftwareConsiderations
Usingtheexistingsoftwareparadigm,theuserpurchasesasoftwarepackageandlicenseby
payingaone-timefee.Thesoftwarethenbecomesthepropertyoftheuserwhoboughtit.
Supportandupdatesareprovidedbythevendorunderthetermsofthelicenseagreement.
Thiscanbecostlyifyouareinstallinganewapplicationonhundredsorthousandsof
computers.
SaaS,ontheotherhand,hasnolicensing.Ratherthanbuyingtheapplication,youpay
foritthroughtheuseofasubscription,andyouonlypayforwhatyouuse.Ifyoustop
usingtheapplication,youstoppaying.
$$$
PART III
World Wide Web
Cloud Vendor
Client
You only pay for the applications when you use them.
Additionally,thesoftwareisnotinstalledontheuser’scomputer.Thinkbacktothe
Hotmailexampleearlier.YouaccessyourHotmailinboxviayourwebbrowser.
ItmaysoundasifSaaSisonlyusefulforsmalltomedium-sizedbusinesses.Notso.
In2005Salesforce.comsignedadealwithMerrill-Lynchfor25,000subscriptions.
VendorAdvantages
Theadvantagesflowbothways.Notonlydoestheenduserbenefit,butsodoesthevendor.
(Ofcourse,they’reinthebusinesstomakemoney,sothereisatleastthatbenefit.)
Andfinancialbenefitisthetopone—vendorsgetaconstantstreamofincome,often
whatismorethanthetraditionalsoftwarelicensingsetup.Additionally,throughSaaS,
vendorscanfendoffpiracyconcernsandunlicenseduseofsoftware.
Vendorsalsobenefitmoreasmoresubscriberscomeonline.Theyhaveahugeinvestment
inphysicalspace,hardware,technologystaff,andprocessdevelopment.Themorethese
resourcesareusedtocapacity,themoretheprovidercanclearasmargin.
Limitations
Whiletheprecedingpageshavepresenteda“glass-half-fullimage”ofSaaS,naturally
therearesomedownsides.Happily,alotofthesehurdlescanbeeasytoclearandare
beingovercome.
176 Part III: Cloud Computing at Work
TechnicalobstaclestoSaaShaveincludedaneffective,multitenantarchitecture.This
hasbecomelessandlessofaproblemduetovirtualization,butdesigninganapplication
toefficientlydeliverittothousandsofcustomersviatheInternetishardwork.
Anotherproblemisthatsoftwarecompaniesarebeingaskedtobecomeservice
companies,andthetwodon’tnecessarilymeshwell.Theytendtohaveacorporateculture
thatisdominatedbyengineeringinnovationandalicense-salesmindset.Thesearefine
traitstohaveifyou’rewritingprogramsandapplications,butit’snotthebestwhenyou’re
calleduponforcustomerservice.Further,abusinessmodelthatisbuiltonsellinglicensed
softwaredoesnoteasilytransformintoasubscriptionmodelverycleanly.
Notonlydoesthevendorfacechallenges,butsodoesthecustomer.Whilesome
applicationsareidealforSaaS,othersarenotgoodtouseemployinganSaaSmodel.For
example,BusinessIntelligence(BI)istoughtotranslatetoatraditionalSaaSapproach.The
dataschemesandtransactionsareusuallyverycomplex,andthecustomer’sconfiguration
requirementsvaryfromcustomertocustomer.Theapplicationrequiresintensive
processing,soitisnotattractivetothevendortoprovidetheburdenneededforthishigh-
CPUinfrastructure.Also,consideringthebandwidthcostandnetworkperformanceforthe
transferofBIdata,itgetsveryexpensiveveryfast.ButasSaaSprovidersbecomemore
sophisticatedinthecustomizationoftheirofferings,BIwillalsoflourishbecause
organizationswillnotwanttokeeptheexpertiseorhardwarearoundtosuccessfullyrun
theirownBIoperations.
DrivingForces
SomewouldarguethatSaaSispopularbecauseofthepopularityofcloudcomputing.In
fact,thereareanumberofissuesthataredrivingmorecloudvendorstoofferSaaSand
moreclientstosignon.Let’stakealookatwhySaaSisdrivenasmuchasitis.
Popularity
SaaShasbecomebigbuzzinthealreadybuzzyissueofcloudcomputing.SaaSisbecoming
trendy,thankstoanumberoffactors.Buttherearesolidreasons—otherthanhype—that
makeitsopopular.
SoftwareVendorsLoveit
Acoupleofyearsago,therewereplentyofvendorswhohadnothingnicetosayabout
SaaS.Butthependulumhasswungtheotherway,andmoreandmorevendorsareonboard
forSaaS.Now,evenbiggunslikeSAPandOraclehavejoinedtheranksofSaaSdevelopers.
Inadditiontothebignames,therearehundredsofsmallerdeveloperscrankingoutSaaS
offerings.
YoucanexpectevenmoreSaaSapplicationstobemadeavailableinthemonthsand
yearstocome.
EnterprisesLoveit
SaaScanbedeployedbothinternallyandexternally.Externaluseisespeciallyappealingto
ITprofessionals,becauseittakesworkofftheirshoulders.Theyareabletofocusmoreon
theirwork,whichonewouldhopeistogenerateacompetitiveadvantageintheir
marketplace,ratherthanonsimplymaintainingserversandrespondingwhenserversfail.
Chapter 9: Software as a Service 177
Thatsaid,ITprofessionalsmightenjoydevelopingtheirownSaaSapplicationstobe
usedinternally.Iftheyareabletooffloadtheirworktothecloud,itgivesthemthe
opportunitytofocusoncreatingtheirowncomplementaryinternalSaaStools.
Notonlythat,butmoreandmorecompaniesarebeingdrawntoSaaStoanswertheir
applicationneeds.
PlentyofSaaSPlatforms
TherearemanySaaSplatformsoutthere,andtheygroweachmonth.Forexample,Oracleis
developingitsownSaaSplatformwhileMicrosoftisworkingtomaketheirownapplications
SaaS-ready.AsSaaSbecomesmoreandmorepopular,morevendorsaregoingtobeforced
tomaketheirplatformsSaaS-friendlyforSaaS-basedapplications.
AnotherreasonSaaSplatformswillcontinuetogrowisbecauseoftheinterestinGreen
ITandtheeffortstomovetowardvirtualizedinfrastructure.Thatmeansclientsarelikelyto
movetowardSaaSplatformssotheycanreducethenumberofserverstheypowerandcool.
VirtualizationBenefits
VirtualizationmakesiteasytomovetoanSaaSsystem.Oneofthemainreasonsisthatitis
easierforindependentsoftwarevendors(ISVs)toadoptSaaSisthegrowthofvirtualization.
ThegrowingpopularityofsomeSaaSvendorsusingAmazon’sEC2cloudplatformand
PART III
theoverallpopularityofvirtualizedplatformshelpwiththedevelopmentofSaaS.
SaaSandSOA
Aservice-orientedarchitecture(SOA)isoneinwhichITsupportsthebusinessprocesses
thatcovercurrentandemergingrequirementstorunthebusinessend-to-end.Thisranges
fromelectronicdatainterchange(EDI)toonlineauctions.
Byupdatingoldertechnologies—likeInternet-enablingEDI-basedsystems—companies
canmaketheirITsystemsavailabletointernalorexternalcustomers.
SOAunifiesbusinessprocessesbystructuringlargeapplicationsasacollectionof
smallermodulesknownas“services.”SOApresentsadesignframeworkforrealizingrapid
andlow-costsystemdevelopmentandimprovingtotalsystemquality.
SaaSandSOAarequitesimilar;whattheyhaveincommonisthattheyuseaservices
model.
EconomicImpact
Asofthiswriting,we’reinthemidstofarecessionandthatposesaproblemforSaaSvendors.
However,manyindustryobserversthinkconventionalISVswillhaveatoughertimethan
SaaSvendors.
InfoWorldinits“topunderreportedstoriesof2007”blamedSaaSforpricingpressures
thatISVswouldfaceinthecomingyear.Thesubscription-basedpaymentmodelofSaaS
makesitmoreappealinginthesetoughtimes.
AccordingtoGoldmanSachs:“Theabilitytoquicklyandeasilyturnonnewapplications
withasignificantlylowerinitialcostofownershipmakesSaaSanattractiveofferingfor
small-andmid-sizedbusinesses,significantlyexpandingthemarketforsoftwareapplications.
Morebroadly,andincludingenterprises,thesebenefitsarelikelytobekeyinaslowereconomic
environmentwherepurchasersofsoftwaremaybeincreasinglyskepticalofsignificantupfront
investmentswhichweanticipatetocharacterize2008.”
178 Part III: Cloud Computing at Work
CompanyOfferings
TherearedozensofcompaniesofferingSaaS.TherearealotoffishintheSaaSpond,andin
thissectionwe’lltakeacloserlookatsomeofthebiggerfish.Theyareallcompaniesthat
you’veheardof—likeMicrosoftandIBM,forinstance—andtheyallwanttheirownsliceof
theSaaSpie.
Intuit
QuickBookshasbeenaroundforyearsasaconventionalapplicationfortrackingbusiness
accounting.WiththeadditionofQuickBooksonline,accountinghasmovedtothecloud.
QuickBooksOverview
QuickBooksOnline(www.qboe.com)givessmallbusinessownerstheabilitytoaccesstheir
financialdatawhethertheyareatwork,home,orontheroad.IntuitInc.saystheoffering
alsogivesusersahighlevelofsecuritybecausedataisstoredonfirewall-protected
serversandprotectedviaautomaticdatabackups.Thereisalsononeedtohasslewith
technology—softwareupgradesareincludedatnoextracharge.
Forcompaniesthataregrowing,QuickBooksOnlinePlusoffersadvancedfeatures
suchasautomaticbillingandtimetracking,aswellastheabilitytoshareinformationwith
employeesinmultiplelocations.QuickBooksOnlinefeaturesinclude
• Theabilitytoaccessfinancialdataanytimeandfromanywhere.QuickBooksOnline
isaccessibletousers24hoursaday,sevendaysaweek.
• Automatedonlinebanking.Downloadbankandcreditcardtransactions
automaticallyeverynight,soit’seasytokeepdatauptodate.
• Reliableautomaticdatabackup.Financialdataisautomaticallybackedupevery
dayandisstoredonIntuit’sfirewall-protectedservers,whicharemonitoredto
keepcriticalbusinessinformationsafeandsecure.QuickBooksOnlinealsosupports
128-bitSecureSocketsLayer(SSL)encryption.
• Nosoftwaretobuy,install,ormaintainandnonetworkrequired.Thesoftwareis
hostedonline,sosmallbusinessusersneverhavetoworryaboutinstallingnew
softwareorupgrades.QuickBooksOnlinerememberscustomer,product,andvendor
information,sousersdon’thavetore-enterdata.
• Easyaccountsreceivableandaccountspayable.Invoicecustomersandtrackcustomer
payments.Createaninvoicewiththeclickofabutton.Applyspecificcreditsto
invoicesorapplyasingle-customerpaymenttomultiplejobsorinvoices.Receive
billsandenterthemintoQuickBooksOnlinewiththeexpectedduedate.
• Writeandprintchecks.Enterinformationintheonscreencheckformandprintchecks.
iPhoneandBlackBerryCapabilities
Additionally,IntuitInc.offersbothiPhoneandBlackBerryintegrationwithQuickBooks
Online,theleadingweb-basedsmallbusinessaccountingsoftware.
WiththeiPhoneandBlackBerryupgrade,themorethan130,000smallbusinessesthat
subscribetoQuickBooksOnlinecanmanagetheirbusinessanywhere—withorwithouta
computer.Theseearlyversionsofweb-basedmobileapplicationsarepartofIntuit’s
Chapter 9: Software as a Service 179
ConnectedServicesstrategytohelpentrepreneursconnecttotheirdatawhenandwhere
theyneedit.
AvailableonIntuitLabs.com,theseiPhoneandBlackBerryapplicationshelpQuickBooks
Onlineusersgetanup-to-dateviewoftheirfinancesby
• Checkingcurrentbankandcreditcardbalances
• Trackingwhoowesthemmoneyandwhomtheyowe
• FindingvendorandcustomercontactinfowithaddressesviaGoogleMaps
• Runningbalancesheetandprofitandlossreports
“Agrowingnumberofsmallbusinessesarelookingtomobiletechnologytoruntheir
business,”saidRickJensen,seniorvicepresidentofIntuit’sSmallBusinessDivision.“Our
goalwiththesenewmobileservicesistogiveQuickBooksOnlineuserstheedgetheyneed
tocompeteandmanagetheirbusylivesbykeepingtabsontheirbusinessevenwhenthey
areoutoftheoffice.”
TheiPhoneandBlackBerryweb-basedapplicationsforQuickBooksOnlinearepartof
IntuitLabs.com,asitewherecustomersareencouragedtotryIntuit’searlyconceptreleases
andcontributetotheinnovationprocessbyprovidingfeedback.Thesiteincludesapplications
PART III
thataddressseveralimportantcustomerproblemsinarangeofcategoriesforconsumersand
smallbusinesses.
MoreinformationonQuickBooksOnlineontheiPhoneandBlackBerryisavailableat
www.intuitlabs.com/apps/category/mobile/.QuickBooksOnlineisavailablestartingat
$9.95permonthatwww.qboe.com.TheiPhoneandBlackBerryapplicationsarefreeto
QuickBooksOnlineusers.
Google
Google’sSaaSofferingsincludeGoogleAppsandGoogleAppsPremierEdition.The
PremierEditionincludeshostedservicesforcommunicationandcollaborationdesignedfor
businessesofallsizes.GoogleAppsPremierEditionisavailableforUS$50peruseraccount
peryear,andincludesphonesupport,additionalstorage,andanewsetofadministration
andbusinessintegrationcapabilities.
GoogleApps,launchedasafreeserviceinAugust2006,isasuiteofapplicationsthat
includesGmailwebmailservices,GoogleCalendarsharedcalendaring,GoogleTalkinstant
messagingandVoiceoverIP,andtheStartPagefeatureforcreatingacustomizablehome
pageonaspecificdomain.Morethan100,000smallbusinessesandhundredsofuniversities
usetheservice.GoogleAppsPremierEditionnowjoinsGoogleAppsStandardEdition
andGoogleAppsEducationEdition,bothofwhichwillcontinuetobeofferedforfreeto
organizations.
GooglealsooffersGoogleDocsandSpreadsheetsforalllevelsofGoogleApps.
Additionally,GoogleAppssupportsGmailformobileonBlackBerryhandhelddevices.
“Businessesarelookingforapplicationsthataresimpleandintuitiveforemployees,but
alsoofferthesecurity,reliability,andmanageabilitytheirorganizationsrequire,”saidDave
Girouard,vicepresidentandgeneralmanager,GoogleEnterprise.“WithGoogleApps,our
customerscantapintoanunprecedentedstreamoftechnologyandinnovationatafraction
ofthecostoftraditionalinstalledsolutions.”
180 Part III: Cloud Computing at Work
GoogleAppsPremierEditionhasthefollowinguniquefeatures:
• Per-userstorageof10GBs Offersabout100timesthestorageoftheaverage
corporatemailbox.
• APIsforbusinessintegration APIsfordatamigration,userprovisioning,single
sign-on,andmailgatewaysenablebusinessestofurthercustomizetheservicefor
uniqueenvironments.
• Uptimeof99.9percent ServicelevelagreementsforhighavailabilityofGmail,
withGooglemonitoringandcreditingcustomersifservicelevelsarenotmet.
• Advertisingoptional Advertisingisturnedoffbydefault,butbusinessescan
choosetoincludeGoogle’srelevanttarget-basedadsifdesired.
• Lowfee Simpleannualfeeof$50peruseraccountperyearmakesitpracticalto
offertheseapplicationstoselectusersintheorganization.
InadditiontoGmail,GoogleCalendar,GoogleTalk,andStartPage,alleditionsofGoogle
Appsnowinclude
• GoogleDocsandSpreadsheets Teamscancollaborateondocumentsand
spreadsheetswithouttheneedtoemaildocumentsbackandforth.Multiple
employeescansecurelyworkonadocumentatthesametime.Allrevisionsare
recordedforediting,andadministrativecontrolsalloworganizationstodefine
limitsondocumentsharing.
• GmailformobiledevicesonBlackBerry Gmailformobiledevicesprovidesthe
sameGmailexperience—suchassearch,conversationview,andsynchronization
withdesktopversion—onBlackBerryhandhelddevicesforusersofGoogleApps.
GmailformobiledevicesjoinsalistofothermobileoptionsforGoogleAppsand
BlackBerryusersthatalreadyincludesaGoogleTalkclientandavarietyofcalendar
synctools.
• Application-levelcontrol Allowsadministratorstoadaptservicestobusiness
policies,suchassharingofcalendarsordocumentsoutsideofthecompany.
NOTE Googlealsooffersdevelopmenttoolsforofflineviewingofonlinedocuments.Wetalkabout
GoogleGearsinmoredepthinChapter11.
Microsoft
MicrosoftoffersSaaSinanumberofforms.Onethatisparticularlyappealingtosmall
businessesisMicrosoftOfficeLiveSmallBusiness.Youcanfinditathttp://www
.smallbusiness.officelive.com.
MicrosoftOfficeLiveSmallBusinessoffersfeaturesincludingStoreManager,an
e-commercetooltohelpsmallbusinesseseasilysellproductsontheirownwebsiteandon
eBay;andE-mailMarketingbeta,tomakesendingemailnewslettersandpromotions
simpleandaffordable.
Chapter 9: Software as a Service 181
PART III
Smallbusinessesthatsignupwillreceiveasetoftoolsandfeaturesforfree,including
• Webhosting
• Richsite-designcapabilities
• Numerousproductivityapplications
• Contactmanagementsoftwareforperformingbasiccustomerrelationship
management(CRM)
• Customdomainnameregistrationwith100businessemailaccounts(custom
domainsarefreeforthefirstyear).
• ThisreleaseisalsocompatiblewiththeFirefox2.0webbrowser,makingtheservice
accessibleonbothMacsandPCs.
182 Part III: Cloud Computing at Work
Microsoft’seffortsinthisarenaareofferingtheirownwebsitetobusinesses.Theyobserve
thatdespiteconsumers’growingtendencytosearchforproductsandservicesonline,about
halfofthesmallbusinessesintheUnitedStateswithfewerthan10employeesdonothave
awebsite.
“TodayhavingaprofessionalWebsiteisasessentialtorunningasmallbusinessashaving
businesscards,”saidBarisCetinok,directorofproductmanagementandmarketingfor
MicrosoftOfficeLiveSmallBusiness.“Bymakingitsimpleandaffordabletodevelopand
maintainaWebsite,andofferinguser-friendlysalesandmarketingfeatures,OfficeLiveSmall
Businessprovidesaone-stopshoptohelpsmallbusinesseseasilytake,promoteandmanage
theirbusinessesonline.”
Cetinokalsopointsoutthatoncesmallbusinesseshaveawebsite,theydonotalways
takeadvantageofonlinemarketingtechniquestodrivetrafficandsales.“Wedesignour
featuresspecificallywiththeneedsofsmallbusinessesinmind,”Cetinoksaid.“OurStore
Managere-commercetool,ouremailmarketingfeature,andtheupdatedadManagersearch
marketingtoolareuser-friendlyandlowcost,andworktogether.”
Whileitisdesignedtobeaneasy“do-it-yourself”service,OfficeLiveSmallBusiness
alsoprovidescustomerswithaccesstodesignersanddeveloperswithhelpful“do-it-for-me”
solutions.Fromwebdesignerswhocanproducesophisticatedwebsitestodevelopers
whocreatecustomapplicationsforspecificindustryverticalsandmuchmore,third-party
partnerscanhelpOfficeLiveSmallBusinesscustomersgetthemostfromtheservice.
ThefollowingfeaturesareavailableinMicrosoftOfficeLiveSmallBusiness:
• StoreManagerisahostede-commerceservicethatenablesuserstoeasilysellproducts
ontheirownwebsiteandoneBay.
• Customdomainnameandbusinessemailisavailabletoallcustomersforfreefor
oneyear.Privatedomainnameregistrationisincludedtohelpcustomersprotect
theircontactinformationfromspammers.Businessemailnowincludes100
company-brandedaccounts,eachwith5GBofstorage.
• Webdesigncapabilities,includingtheabilitytocustomizetheentirepage,aswellas
theheader,footer,navigation,pagelayouts,andmore.
• SupportforFirefox2.0meansOfficeLiveSmallBusinesstoolsandfeaturesarenow
compatiblewithMacs.
• Asimplifiedsign-upprocessallowssmallbusinessownerstogetstartedquickly.
Usersdonothavetochooseadomainnameatsign-uporentertheircreditcard
information.
• Domainflexibilityallowsbusinessestoobtaintheirdomainnamethroughany
providerandredirectittoOfficeLiveSmallBusiness.Inaddition,customersmay
purchaseadditionaldomainnames.
• SynchronizationwithMicrosoftOfficeOutlookprovidescustomerswithaccessto
vitalbusinessinformationsuchastheirOfficeLiveSmallBusinessemail,contacts,
andcalendars,bothonlineandoffline.
• E-mailMarketingbetaenablesuserstostayconnectedtocurrentcustomersand
introducethemselvestonewonesbysendingregularemailnewsletters,promotions,
andupdates.
Chapter 9: Software as a Service 183
• ContactManageristhefoundationofcustomermarketing.Theimproveduserinterface
enablescustomerstofindandaddcontactsmoreefficiently.
• TheadManagersearchmarketingtoolisnoweasiertouseandallowsuserstoadvertise
acrossmultiplesitesandsearchengines,includingMSN,LiveSearch,Ask.com,Excite.
com,andLycos.com.
Businessapplicationsareincludedfreetoallcustomers.Twoofthemostpopular
applications—TeamWorkspaceandDocumentManager—areautomaticallyprovisioned.
Customerscanactivateanyofthemorethan20others,suchasProjectManager.
ReportsincludereportingforStoreManager,adManager,andE-mailMarketing.Home
pagegadgetsincludeadditionalgadgetssuchasaReportsgadgetthatshowsusersataglance
thenumberofuniquevisitorsandpageviewsforthecurrentweekandtheprevioustwoweeks.
IBM
BigBlue—IBM—offersitsownSaaSsolutionunderthename“BlueCloud.”BlueCloudis
aseriesofcloudcomputingofferingsthatwillallowcorporatedatacenterstooperatemore
liketheInternetbyenablingcomputingacrossadistributed,globallyaccessiblefabricof
resources,ratherthanonlocalmachinesorremoteserverfarms.
BlueCloudisbasedonopen-standardsandopen-sourcesoftwaresupportedbyIBM
PART III
software,systemstechnology,andservices.IBM’sBlueClouddevelopmentissupportedby
morethan200IBMInternet-scaleresearchersworldwideandtargetsclientswhowantto
exploretheextremescaleofcloudcomputinginfrastructures.
IBMiscollaboratingoncloudcomputinginitiativeswithselectcorporations,universities,
Internet-basedenterprises,andgovernmentagencies,includingtheVietnameseMinistryof
ScienceandTechnology.
IBM’sfirstBlueCloudofferingswereavailabletocustomersinthespringof2008,
supportingsystemswithPowerandx86processors.IBMalsoofferedaSystemz“mainframe”
cloudenvironmentin2008,takingadvantageoftheverylargenumberofvirtualmachines
supportedbySystemz.
BlueCloud—basedonIBM’sAlmadenResearchCentercloudinfrastructure—includes
XenandPowerVMvirtualizedLinuxoperatingsystemimagesandHadoopparallel
workloadscheduling.BlueCloudissupportedbyIBMTivolisoftware,whichmanages
serverstoensureoptimalperformancebasedondemand.Thisincludessoftwarethatis
capableofinstantlyprovisioningresourcesacrossmultipleservers.Tivolimonitoringchecks
thehealthoftheprovisionedserversandmakessuretheymeetservicelevelagreements.
“BlueCloudwillhelpourcustomersquicklyestablishacloudcomputingenvironment
totestandprototypeWeb2.0applicationswithintheirenterpriseenvironment,”saidRod
Adkins,seniorvicepresident,DevelopmentandManufacturingforIBMSystemsand
TechnologyGroup.“Overtime,thisapproachcouldhelpITmanagersdramaticallyreduce
thecomplexitiesandcostsofmanagingscale-outinfrastructureswhosedemandsfluctuate.”
IBMdevelopedBlueCloudtohelpclientstakeadvantageofcloudcomputing,including
theabilityofcloudapplicationstointegratewiththeirexistingITinfrastructureviaSOA-
basedwebservices.BlueCloudwillparticularlyfocusonthebreakthroughsrequiredinIT
managementsimplificationtoensuresecurity,privacy,andreliability,aswellashighutilization
andefficiency.Cloudcomputingistargetedforexistingworkloadsandemergingmassively
scalable,data-intensiveworkloads.
184 Part III: Cloud Computing at Work
OnNovember13,2007,IBMandtheVietnameseMinistryofScienceandTechnology
(MoST)announcedanopen-innovationpilotprogramthatwouldrunonacloudcomputing
infrastructure.
“TheVietnamInformationforScienceandTechnologyAdvanceInnovationPortal(VIP),
createdwithIBM,willhelpprovideVietnamesecommunitiesandresidentsadynamic,rich
contentsourceandfosterinnovationamongthecitizens,communitiesandgovernment
organizations,”saidDr.TranQuocThang,ViceMinisterofMoST.“VIPwillbebasedon
IBM’senterpriseWeb2.0InnovationFactorysolutionandmadeavailabletouniversitiesand
researchinstitutionsthroughthecloudinfrastructureatIBM’sAlmadenResearchCenter.”
TheBlueCloudconceptgrewoutofworkthatIBMdidinsupportofitsownsoftware
innovatorswithanIBMinnovationportalcalledtheTechnologyAdoptionProgram.IBM
developerscanrequestthatcomputingresourcesbeprovisionedwithsoftwaretotestand
conducttrialsontheirinnovationswithIBMemployeesthroughtheprogram.
“ByprovidingadynamicinfrastructureenvironmenttoIBMinnovatorsoverthepast
severalmonths,wegainedvaluableexperiencewithcloudcomputingtechnologies,”said
Dr.WillyChiu,vicepresidentoftheIBMHighPerformanceonDemandSolutionsteam.
“Ourcustomershaveexpressedstronginterestindeployingasimilarsolutionwhenwe
speakwiththemabouthowmuchtimewecansaveinnovatorsinobtainingthehardware
andsoftwareresourcestheyneedtobringtheirsolutionstomarket.”
Industries
Butitisn’tjustthebignameslikeAmazonandMicrosoftofferinggeneralSaaS.Different
industrieshavetheirownplayersthatofferunique,industry-specificSaaSapplications.In
thissection,wetakeacloserlookatsomeofthoseindustriesandtheplayerswithinthem.
Healthcare
Whileitseemsriskytohavehealthfilesonthecloud,twoprominentsystemsprovidethe
securityforsuchasolution.BothMicrosoft’sHealthVaultandAdvancedMDoffercloud
solutionsforthehealthcareindustry.
HealthVault
MicrosoftlauncheditsMicrosoftHealthVault,asoftwareandservicesplatformaimedat
helpingpeoplebettermanagetheirhealthinformation.Thecompanysaysitsvisionisfor
waysinwhichHealthVaultcanbringthehealthandtechnologyindustriestogetherto
createnewapplications,services,andconnecteddevicesthathelppeoplemanageand
monitortheirpersonalhealthinformation,includingweightlossanddiseasemanagement,
suchasfordiabetes.HealthVaultisshowninFigure9-1.
“Peopleareconcernedtofindthemselvesatthecenterofthehealthcareecosystem
todaybecausetheymustnavigateacomplexwebofdisconnectedinteractionsbetween
providers,hospitals,insurancecompaniesandevengovernmentagencies,”saidPeter
Neupert,corporatevicepresidentoftheHealthSolutionsGroupatMicrosoft.“Ourfocus
issimple:toempowerpeopletoleadhealthylives.ThelaunchofHealthVaultmakesit
possibleforpeopletocollecttheirprivatehealthinformationontheirtermsandfor
companiesacrossthehealthindustrytodelivercompatibletoolsandservicesbuiltonthe
HealthVaultplatform.”
Chapter 9: Software as a Service 185
PART III
FIGURE 9-1 HealthVault allows users to manage their healthcare data.
MicrosoftalsooffersHealthVaultSearch,averticalhealthsearchtooldesignedtowork
withtheplatform.IntegratedwithLiveSearchandaccessibleontheHealthVaultwebsite,
thishealth-specificsearchengineorganizesthemostrelevantonlinehealthcontent,
allowingpeopletorefinesearchesfasterandwithmoreaccuracy,andeventuallyconnect
themwithHealthVault-compatiblesolutions.
Privacy Privacyisobviouslyamajorconcern,especiallywhenhealthrecordsareatstake.
HealthVaultwascreatedincooperationwithprivacyadvocates,securityexperts,and
healthcareorganizations.HealthVaultwasdesignedandbuilttoenhanceprivacywhile
providingpeoplewiththecontroltheyexpectandrequire.
“Microsoftisthefirstmajortechnologycompanytoengagewiththebipartisan
CoalitionforPatientPrivacyinaseriousway.TheprivacyprotectionsbuiltintoHealthVault
reflecttheprivacyprinciplesoftheCoalition.HealthVaultprohibitsonwardtransferofdata
withoutexplicitinformedconsent;itscontractualobligationswithadvertisersrequire
protectionofanydatatransferredfromtheplatform;itsprivacypolicyissimpleandeasyto
understand,”saidDr.DeborahPeel,founderofthePatientPrivacyRightsFoundation.
“Thatmeansconsumersfinallyhaveatrustedplacetostoretheirpersonalhealth
informationthatwillnotbedata-mined,becausetheyalonecontrolit.Microsoft’suseof
strongprivacyprinciplesincludingtheprinciplesoftheCoalition,itsongoingrelationship
withconsumeradvocates,anditscommitmenttoindependentthird-partyauditssetanew
standardforprivacyprotectionsinhealthinformationtechnology.”
186 Part III: Cloud Computing at Work
IndustrySupport HealthVaultoffersmorethan40applicationsanddevicesfromthe
followingorganizations:
• ActiveHealthManagement
• Allscripts
• AmericanDiabetesAssociation
• AmericanHeartAssociation
• AmericanLungAssociation
• AmericanStrokeAssociation
• AperionCompanies
• CapMed,adivisionofBio-ImagingTechnologiesInc.
• Claricode
• DiabetesPreventionSource(DPS)
• Diet.com
• EclipsysCorp.
• HealthCentralNetworkInc.
• HealthMediaInc.
• HealthphoneSolutionsLtd.
• Healthways
• HealthyCirclesLLC
• HomeDiagnosticsInc.
• iMedicaCorp.
• KryptiqCorp.
• LifeScanInc.,aJohnsonandJohnsoncompany
• LiveHealthier
• MatriaHealthcareInc.
• MedemInc.
• MedHelp
• MedicalInformaticsEngineering(MIE)
• MedifastInc.
• MEDSEEK
• MedstarHealth
• MicrolifeUSAInc.
• NewYork-PresbyterianHospital
• NexCura,aThomsonHealthcareBusiness
• NextGenHealthcareInformationSystemsInc.
Chapter 9: Software as a Service 187
• NoMoreClipboard.com
• OMRONHealthcareInc.
• PeakswareLLC
• PhysiciansWellnessNetwork
• Podfitness
• Polar
• PureWellness
• SoundHealthSolutionsInc.
• StayWell,aMediMediacompany
• TexasInstrumentsInc.
• USWellnessInc.
• VitalDataTechnology
• WholeHealthManagement
• WorldDocInc.
PART III
WithanewplatformprovidedbyMicrosoftbasedoncompatibleInternetandhealthcare
technologystandards,organizationscanspenddevelopmenttimeworkingtoconnecta
rangeofapplicationsanddevices.Instead,theycandeliversolutionstoconsumersthatfocus
oncaredelivery,givingHealthVaultthepotentialtogreatlyenhancethequalityandvalueof
healthcareinformationtechnologyacrosstheecosystem.
Development DevelopersinterestedinbuildingtheirownHealthVault-basedsolutions
candownloadtheHealthVaultsoftwaredevelopmentkitathttp://msdn.microsoft.com/
healthvault.TheHealthVaultplatformisavailabletopeopleforfreeathttp://www
.healthvault.com.
AdvancedMD
AnotherpopularhealthcareSaaSisAdvancedMD.Itisamedicalbillingsoftwarecompany
providingamedicalbillingsoftwareproductforphysicianofficeandbillingoffice
management.
ThousandsofmedicalofficeusersandhealthcareprovidersuseAdvancedMD’smedical
softwareeveryday.Andaccordingtothecompany,eachyear,some98percentoftheir
activemedicalclientsrenewtheirservice.
AdvancedMD’smedicalbillingandpracticemanagementsoftwareis100percent
web-based,meaningitcanbeusedatanytime,anywhereonecangetontheInternet.In
theearlystagesofthecompany’sproductdevelopment,Microsoft,inconjunctionwith
theirinitialeffortstoenterthehealthcaremarket,aidedthecompanydevelopmenteffort
byprovidingsignificantresourcestoensurethattheverylatestweb-basedtechnologies
wereutilized.ThisearlyhelpfromMicrosoftallowedthecompanytoprovideafull-
featured,efficientsolutionatalowtotalcostofownership.AdvancedMDcontinuestoday
asaMicrosoftcorporatepartnerandHealthcareusergroupmember.
AdvancedMDMedicalBillingSoftware,Inc.isaprivatelyheldcompanywithheadquarters
locatedinSaltLakeCity,Utah.
188 Part III: Cloud Computing at Work
Collaboration—WebEx
Therearedozensofdifferentcollaborationapplicationsonthemarket,andabignamein
cloudcollaborationisWebEx.WebExwasacquiredbyCiscoSystemsin2007.TheWebEx
collaborationsuiteconsistsoffiveapplications,eachdesignedforspecificcollaborative
businessprocesses.Thesuiteconsistsoffivecomponents:
• WebExMeetingCenter
• WebExEventCenter
• WebExSalesCenter
• WebExTrainingCenter
• WebExSupportCenter
NOTE Youcandownloadafreetrialatwww.webex.com/go/Fall2007Release.
Theplatformprovidesnetwork-basedrecording(NBR)capabilitiesforwebconferencing,
allowinghoststorecordsessionsandcreatevaluablelibrariesofarchivedmeetings,events,
seminars,andsupportsessions.WebExdiffersfromtraditionaldesktop-basedrecordingby
offeringnetwork-basedrecording,optimizedtoallowon-demandstreaminganddownloading
ofarchivedsessions.
AdministratorscanconfigureWebExNBRtoautomaticallycaptureallmeetingcontent,
includingchat,presentations,andaudioandvideodata.WebExNBRcanbeeasilycustomized
toarchivefilesonacompany’swrite-onceread-many(WORM)–compliantstoragenetwork.
Contentisrecordedinahighlysecureformat,optimizedforscalablestorage,andcustomers
cancustomizethesolution’sadministrativesettingstomeettheirspecificretentionpolices.
“JustasTiVorevolutionizedhomeentertainmentandmaderecordingandsharingyour
favoriteshowseasyforconsumers,WebExNBRwillmakerecordingandsharing
informationeasierforbusinessusers,”saidGaryGriffiths,presidentofproductsand
operations,WebEx.“WebExFall2007extendsourreachbeyondtheactualmeetingwith
newfeaturesforcollaborationbefore,afterandoutsidethemeeting.”
Withmorethan100usabilityfeaturesacrossthesuite,WebExFall2007streamlines
meetingattendance.Automaticformcompletionandattendeeprofileswithpreferred
telephonenumbersmakejoiningmeetingsfaster.Inaddition,asynchronouscollaboration
capabilitiesimproveattendeeparticipationbetweenmeetings,whetheritisthrougha
customizedsalesportalintheWebExSalesCenteroranenhancedpost-eventsurveyfor
WebExEventCenter.
Construction—CMiC
CMiCoffersitsconstructionsoftwaresolutionsforthearchitectural,engineering,and
constructionindustry.CMiC’soffering—CMiCEmerging—providesgeneralcontractors
whohaverevenuesunder$250millionwithSaaSapplicationsspecificallydesignedtohelp
achievegrowth,improveproductivity,andenhanceefficiency.
“Emergingcompaniesinthepasthavereliedoneitherbasicspreadsheetanddatabase
applications,orpointsolutionsthatdon’tprovidetheefficienciesthatanintegratedsoftware
solutioncan,”saidBassemHamdy,vicepresident,Solutions,CMiC.
Chapter 9: Software as a Service 189
“OperatingasaSaaS,CMiCEmergingallowscontractorswhodon’thavethetechnical
resourcestousethesamerobustfinancialandprojectmanagementcapabilitiesenjoyedby
someofthebiggestandbestAECcompaniesinNorthAmerica.”
CMiCEmergingisdividedintothreesectionstobettersuitcompaniesatdifferentstages
ofdevelopment.Thefirstlevel,GettingStarted,isintendedforsmallercontractors,and
includesfinancialandprojectmanagementapplications,humanresources,anddocument
management.Thenextlevel,OnTheGrow,addsmoreapplications,includingCMiCCRM.
ThethirdstageisEmergingandincludesCMiCCollaborationandCMiCImagingand
Workflow.
“Themainfocusforgrowingcontractorsiscompletingprojects,”saidHamdy,“not
runningandmaintainingsoftware.CMiCEmerginggivescontractorsthetoolstocompete
withlargercontractorswithouthavingtodedicatelargeamountsofITresources.Being
scalable,CMiCEmergingisthelastsoftwaresolutionacontractorwilleverneed.Withall
missioncriticalinformationinonedatabase,CMiCEmergingisthesolutionforcontractors
lookingforbreakthroughimprovementsinproductivityandgrowth.”
Retail—Epicor
EpicorSoftwareCorporationoffersitsRetailSaaSsolutionforretailers.
TheSaaSapplicationgivessmallandmediumspecialtyanddepartmentstoreretailers
PART III
adeliverymethodthatreducescapitalinvestmentandimplementationrequirements.
Epicor’sintegratedRetailSaaSsolutionisapay-as-you-gomodelthatconsistsof
merchandising,allocation,replenishment,businessintelligence,POS,salesaudit,andCRM.
EpicorSaaSisdeployedonIBM’sSurePOS700serieshardware.SaaSservicesincludehosting
ofallapplicationsonsecureredundantservers;theprocurementandmanagementofwide
areanetworks;helpdesksupport;systemmaintenance,includingdatasecurityandbackups;
disasterrecovery;andongoingupdatesandupgradestothelatestEpicorsoftwarereleases.
In2008,researchgroupGartnernotedthat,“In2009,SaaSdeliverymodelswillseea
25percentincreaseinadoptionbyretailers.”Thesamereportnotes,accordingtoaGartner
surveyofmorethan110retailersconductedinthird-quarter2008:“Twenty-twopercentof
retailersstatedthattheyhadimplementedorwereintheprocessofimplementingaSaaS
application.”
IBMPartnership
AnexampleoftheirsmartintegratedtechnologyisIBM’sRemoteManagementAgent
(RMA)which,togetherwithEpicorRetailPOSsoftware,providesretailerswiththeability
toremotelymonitor,configure,andtrackhardware,software,andapplicationsinonestore
ormultiplestorelocations,fromacentralpoint,aswellasperformassettracking,and
diagnosticandproblemdeterminationdowntothedevicelevel.RMAdeliversbusiness
benefitstoretailerswithproactivesupportandmonitoringofin-storehardwareand
infrastructurethatwillensuregreatersystemuptimeandenableamoreenhancedcustomer
shoppingexperience.
“OurRetailSaaSofferingisatrueend-to-endretailsolution,”saidDavidHenning,
executivevicepresidentandgeneralmanagerforEpicorRetail.“Wearetheleading
providerthatoffersacompleteintegratedretailsolutionwithafullrangeofsupport
servicesthatleveragesourextensivein-houseexpertisefromdevelopmenttodeployment
throughtraining.OurSaaSsolutionenablesretailerstoleverageatrustedandproven
solution,deliveringeverythingaretailerneeds.”
190 Part III: Cloud Computing at Work
Clients
Inbusinesssince1963,ThePaperStoreisafamily-ownedandoperatedSpecialtyGiftStore
chainof23storesinNewEngland.ThecompanycontractedfortheEpicorRetailSaaSsolution
toprovideanupdatedtechnologyframeworktosupportitsgrowingretailoperations.
“Weconductedanextensivesearchforacomprehensiveintegratedretailsolution,”said
TimWalsh,directorofIT,ThePaperStore.“WewereveryexcitedtofindthattheEpicorRetail
SaaSsolutionofferedusthesamestrongfunctionalitythatTier1retailershadaccessto,but
withoutalltheheavyoverheadfromadeployment,managementandcostperspective.”
EpicorRetailsolutionsareusedbyhundredsofretailers.TheirsolutionsleverageMicrosoft
.NETtechnologytoimprovebusinessoperationsandmeettheevolvingmerchandiseand
serviceexpectationsoftoday’scross-channelshoppers.
Banking—OpenChannel
OpenChannel’sSaaSofferingsprovideoptionsforimplementingonlinebankingandbill
paymentfunctionalityacrossmultiplechannels,includingmobiledevices.Utilizingweb
services,financialinstitutionscancustomizepresentationstomeettheneedsoftheir
customersanddifferentiateonlinecapabilities.FullyhostedbyCheckFreeorusedaspart
ofhybridmodelintegratedintoexistingenvironments,thissolutionsupportsvalue-based
routing/paymentpreferenceandcrosssell/upsellservices.
CheckFree’sOpenChannelprovidesarangeofoptionsforimplementingonlinebanking
andbillpaymentfunctionalityacrossmultiplechannels.Utilizingindustry-standardweb
services,financialinstitutionscancustomizethepresentationofonlinebankingandbill
paymentfunctionalitytomeettheuniqueneedsoftheircustomersanddifferentiatetheir
onlinecapabilities.
USAA,aFortune200diversifiedfinancialservicescompany,leveragedCheckFree’s
OpenChannelstrategyandtheCheckFreeBuildersuiteofopenwebservicescomponents
tocustomizeitsonlinebankingandbillpaymentuserexperienceandstreamlinenavigation
tobetterserveits6millionmembers.
“USAA’sglobalmembershipreliesextensivelyonusaa.com,soweplaceapremiumon
makingourservicesasaccessibleandeasytouseaspossiblethroughtheonlinechannel,”
saidJeffDennes,executivedirector,USAA.“CheckFreeOpenChannelgivesusthecontrol
andflexibilityweneedtoenhancetheuserexperience,improveintegrationacrossthesite,
anddeliverafullrangeofonlineandmobilebankingfunctionalitytoourmembers.”
CheckFree’sdeploymentoptionsenablefinancialinstitutionstointegrateonlinebanking,
electronicbilling,andpayment,andselectedvalue-addedservicesintoanend-to-end
solutionthatcaneitherbefullyhostedbyCheckFreeorusedasindividualcomponentsas
partofahybridmodelthattheycanintegrateintotheirexistingenvironments.
Leveragingthesamewebservicesthatpushelectronicbankingandbillpayment
functionalitytoafinancialinstitution’sonlinechannel,CheckFreecanalsoenableaccess
totheseservicesacrossmultiplechannels,includingmobiledevices,ATMs,kiosk,teller
stations,andcontactcenters.
“Theonlinechannelisagrowingpriorityforfinancialinstitutionsastheyseektooptimize
customerloyalty,retentionandprofitability,”saidAlexHart,executivevicepresidentandgeneral
manager,CheckFreeElectronicBankingServices.“CheckFreeOpenChannelbringstogetherthe
industry’sbestonlinebankingandbillpaymentcapabilitieswithanextremelyflexibleapproach
tointegrating,implementingandmanagingworldclassfinancialmanagementsolutionsacross
adiverserangeofdevices,channelsandplatforms.”
Chapter 9: Software as a Service 191
“Asonlinefinancialservicesevolves,theintegrationandmanagementofnew,compelling
servicesintothelegacyenvironmentthreatenstobringmorecomplexity,preventingbanks
frommaximizingthereturnoninvestmentthroughanoptimalcustomerexperience,”said
JamesVanDyke,presidentandfounderofJavelinStrategyandResearch.“Asaresult,open
andflexiblesystemapproachesforintegratingdiverseelectronicfinancialcontentand
servicesbecomesmoreimportantforhelpingfinancialinstitutionskeepupwiththerapid
paceofnewtechnologyservices,suchasmoreinteractivebillsandstatements,andonline
moneymanagementcapabilities,convergingcontentfromlinesofbusinessandmuchmore.”
FinancialinstitutionscanusetheOpenChannelstrategytotakeadvantageofnew
capabilities,suchas
• Electronicbillpaymentintegration Industry-standardwebservicescanenable
financialinstitutionstoquicklyimplementawiderangeofonlinebankingand
electronicbillpaymentfunctionalitythroughauserinterfacethattheycontrolwhile
leveragingtheirexistingtechnologies.
• Value-basedrouting/paymentpreference TheOpenChannelstrategyenables
financialinstitutionstodeliverpremiumcontent,suchasdata-fedelectronicbills,
andadditionalcapabilitiessuchasexpeditedpaymentsandcard-basedpayments.
Inaddition,CheckFreeplanstoexpandtheprocessingwindowtoapproximately
PART III
10P.M.Easterntimetoenableevenmorepaymentstobeprocessedbythenext
businessday.
• Security TheOpenChannelstrategyisdesignedtoenableCheckFreeFraudNet,
afrauddetectionandcasemanagementsystem,tobedeliveredaspartofaservice-
basedmodel.Utilizingwebservices,afinancialinstitutioncanleveragethepower
andintelligenceofCheckFree’sbillpaymentnetworkbysendingpaymentsto
CheckFreeforscoring.Thosepaymentsthatfailtomeetthefinancialinstitution’s
riskthresholdcouldthenbeproactivelystoppedbeforetheyareprocessed.
• Cross-sellandupsellservices OpenChannelenablesfinancialinstitutionsto
leveragetherichdataintheirCheckFreepaymentwarehouseaswellasdatafrom
othersourcestoanalyzeconsumerbehaviorfortheirspecificcustomersegments,
andtoplanandexecutetargetedmarketingcampaignsaimedatimprovingonline
bankingandbillpaymentadoptionandusage.
• Mobilebankingandpayments Throughwebservices,CheckFreeenablesbanks
andcreditunionstooffercustomerstheconvenienceofbankingandpayingbills
usingtheirmobiledevices.OpenChannelprovidestheflexibilitytosupportawide
rangeoftechnologies,includingmicro-browserwirelessapplicationprotocol(WAP),
shortmessageservice(SMS)textmessaging,anddevice-residentapplications.Some
financialinstitutionswillchooseoneofthesetechnologies,whileothersmayusea
combinationofapproachestosupportdifferentonlinebankingandbillpayment
functionality,suchaspayingbills,checkingaccountbalancesorpaymenthistories,
transferringfunds,orreceivingalerts.
SaaScomesinallshapesandformsandisusedbyabroadvarietyofindustries.Ifyou
arelookingforaspecificapplication,chancesaregoodthatitisoutthere.Ifnot,youcanbe
patientandwaitforittobedeveloped,oryoucanrollyoursleevesupandmakeityourself
usingPlatformasaService(PaaS).We’lltalkmoreaboutPaaSinthenextchapter.
This page intentionally left blank
10
CHAPTER
Software plus Services
U
ptothispointwehavetalkedaboutorganizationalITdesigninabsoluteterms—
eitheryoustoreyourapplicationsanddatalocally,oryouemployacloudsolution.
Wedidn’ttalkaboutanymiddleground.Itcertainlywouldbenicetohavethe
flexibilitytomixandmatch,tousethebestofbothworldsinawaythatbettersuitsyour
requirements.Thegoodnewsisthatyoucanhaveityourway.
TheanswerisSoftwareplusServices.Inthisarchitecture,youmaintainsomesoftware
on-site,whichaccessesdatastoredonthecloud.Thisisespeciallygoodforremoteworkers,
roadwarriors,telecommuters,andanyoneelsewhoneedstobeawayfromthecorporate
datacenter.
NOTE MicrosoftseemstousethephrasingSoftware+Servicesinconsistently,astheyalsousethe
morecommonSoftwareplusServices.We’regoingtogowiththemoreprevalentSoftwareplus
Services,justsowedon’tsoundasifSteveBallmerownsus,thoughwe’dsavetypingbyjust
goingtothe+key.
Inthischapterwe’lltalkabouttheupsanddownsofSoftwareplusServices,andwe’ll
spendsomeextratimelookingatMicrosoft’ssolution,whichemploysanin-depthuseof
SoftwareplusServices.
193
194 Part III: Cloud Computing at Work
Overview
Inanutshell,SoftwareplusServicestakesthenotionofSoftwareasaService(SaaS)to
complementpackagedsoftware.Herearesomeofthewaysinwhichitcanhelpyour
organization:
• Userexperience Browsers
havelimitationsastojust
howrichtheuserexperience Internet
canbe.Combiningclient
softwarethatprovidesthe
featuresyouwantwiththe On-site
abilityoftheInternetto software
Additional services offered
deliverthoseexperiences Your organization with by cloud vendor
givesyouthebestofboth locally hosted software
worlds.
With Software plus Services,
• Workingoffline Not locally hosted software is supplemented
havingtoalwaysworkonline by cloud offerings.
givesyoutheflexibilitytodo
yourwork,butwithoutthelimitationsofthesystembeingunusable.Byconnecting
occasionallyandsynchingdata,yougetagoodsolutionforroadwarriorsand
telecommuterswhodon’thavethesamebandwidthorcan’talwaysbeconnected.
• Privacyworries Nomatterhowyouusethecloud,privacyisamajorconcern.
WithSoftwareplusServices,youcankeepthemostsensitivedatahousedon-site,
whilelesssensitivedatacanbemovedtothecloud.
• Marketing SoftwareplusServicesgivesvendorsachancetokeeptheirnamesin
frontofclients.Sinceit’ssoeasytomovefromvendortovendor,providingapart-
software/part-Internetsolutionmakesiteasiertosellyourproducttoaclient.
• Power Moreefficiencyisrealizedbyrunningsoftwarelocallyandsynchingtothe
cloudasneeded.
• Flexibility Vendorscanoffersoftwareindifferentsizesandshapes—whetheron-
siteorhosted.Thisgivescustomersanopportunitytohavetheright-sizedsolution.
Aswithanything,therearegoodreasonstouseSoftwareplusServices,butalsodownsides.
Let’stalkaboutthoseissues.
Pros
InEarl’scompany,softwareisinstalledonthedatacenterserversandontheclientPCs.Earl
andhisstaffspendahealthyportionoftheirtimemaintainingequipmentandinstalling
patchesandupdates.Butforalltheheadacheofmanagingtheirowndatacenterandclients,
thesoftwareisalwaysavailable(unlessapieceofequipmenthappenstogodown)and
undertheircontrol.Thisisatoughmodelfortelecommutersorworkerswholeavethe
officeandworkremotely.Theycancertainlydialinviaavirtualprivatenetwork,butthat
addsanotherelementofhassleforEarlandhisITstaff.
Joy’scompanymakesextensiveuseofthecloud.Theymaintainalltheirapplications
anddataonthecloud.Thisisgreatforthem,becauseiteasestheheadachesofmanaginga
datacenter,andtheyreallyonlypayforwhattheyuse.Thisisalsoagoodmodelfor
Chapter 10: Software plus Services 195
workerswhohavetoworkremotely—theyjustneedaccesstoanInternetconnectionand
theycandotheirwork.But,unfortunately,iftheirlinktothecloudisoutorifvendor
equipmentgoesdown,thenJoy’sworkerscan’tgettheirworkdone.
SoftwareplusServicesisthehappymiddlegroundbetweenthetwoarchitecturesthat
Darnellandhisorganizationuse.Whiledataismaintainedonthecloud,softwareisstill
maintainedattheclient’slocation.Thesoftwareissmallerandsleekerthanafull-scale
deployment,butiftheconnectiontothecloudisdownorthecloudvendorhasproblems,
thenDarnellisn’ttotallyoutofluck.SoftwareplusServicesperiodicallychecksthecloud
andupdateslocalsoftwarewithcurrentinformation,alsosendingchangedinformation
backtothecloud.Iftheconnectiondoesgodown,thesoftwarewillhavethemostrecently
updatedinformationandworkcanstillcontinue.
Cons
SowhatarethedownsidesofSoftwareplusServices?Themainoneiscost.Ifyoudon’tuse
asmuchoftheservicesportionofthemodel,thenyouwon’tpayasmuch.However,ifyou
areusingitheavily,itmightmakemorefinancialsensetohousetheserverslocally.For
instance,ifyououtsourceyouremailtoacloudvendor,youcouldbepayingquitealot,
whereasyouwouldpayafractionifyoujustboughtaserverandinstalleditlocally.
SecondisQualityofService(QoS).This,ofcourse,dependsonyourcloudvendorand
PART III
issomethingyoushouldaddressinaservicelevelagreementbeforecommitting,butyour
abilitytoaccessdatamightbeatriskiftherearesomanyclientsusingyourvendor’s
equipment.Unlessyourvendorisespeciallyresponsible,youruntheriskofslowresponse
timesandpossiblyevenfailure.
Thelastdownsideisabigmentalhurdleforalotofpeople:simplefear.Ifyouhave
yourdatastoredonacloudsomewhere,isitreallysafe?Isitreallysecure?Social
networkingsiteFacebookcameunderfireinearly2009whentheyissuedatermsofservice
adjustmentsaying,inessence,“Weownwhateveryouputuphere.”Sitemembersgot
understandablyannoyed,foughtback,andFacebookbackeddown.
“AspeoplesharemoreinformationonserviceslikeFacebook,anewrelationshipis
createdbetweenInternetcompaniesandthepeopletheyserve,”founderMarkZuckerberg
saidinastatement.“Thepastweekremindedusthatusersfeelarealsenseofownership
overFacebookitself,notjusttheinformationtheyshare.”
WhileFacebookflinched,othervendorsmightnotbesoamenable—orasopen.
Itunderscoresthenotionthatoncedataleavesyourcompany’sdatacenter,itisopento
others’eyes.
Vendors
Alittlelaterinthischapterwe’lldrilldownintosomevendor-specificsolutions,butlet’s
takea20,000-footaerialviewofsomeoftheSoftwareplusServicesofferingsthatprevalent
companieshave.
• Microsoft MicrosoftoffersDynamicsCRM,MicrosoftOutlook,WindowsAzure,
andAzureServicesPlatform.WindowsAzureisacollectionofcloud-basedservices,
includingLiveFramework,.NETServices,SQLServices,CRMServices,SharePoint
Services,andWindowsAzureFoundationServicesforcompute,storage,and
management.
• Adobe AdobeIntegratedRuntime(AIR)bringsFlash,ActionScript,andMXML/Flex
tothePC.UsingAIR,vendorscanbuilddesktopapplicationsthataccessthecloud.
196 Part III: Cloud Computing at Work
• Salesforce.com Salesforce.com’sAppExchangeisasetofAPIsthatvendorscan
usetocreatedesktopapplicationstoaccesssalesforcedataandrunonthedesktop
ofanenduser.
• Apple Appleoffersanumberofcloud-enabledfeaturesforitsiPhone/iPodtouch.
NotonlydoesitcomewithanintegratedSafariwebbrowser,buttheyalsooffera
softwaredeveloper’skit(SDK)thatallowssoftwaretobecreatedfortheiPhone/
iPodtouch.Vendorscanbuildtheirownapplications,andon-the-gouserscan
accesscloudofferingswiththoseapplications.
• Google Google’smobileplatformiscalled“Android”andhelpsvendorsbuild
softwareformobilephones.GooglealsooffersitsGoogleAppsandtheGoogle
Chromebrowser,whichalsoinstallsGoogleGearssoftwareonthedesktop.This
allowsofflineandonlinesolutions.
• WeatherBug AnAPIfromapi.weatherbug.com(anexampleofitsuseisshownon
aniPodtouchinFigure10-1)isasetofAPIsthatvendorscanusetocreateapplications
thatutilizecurrentweatherdata.
• DiCentral’sDiIntegratorEDISolution DiIntegratorisanapplicationenabling
userstoperformsupplychainfunctionsrelatedtoelectronicdatainterchange(EDI)
andorderfulfillment.TradingpartnersareconnectedwithinDiCentral’s
infrastructure.
FIGURE 10-1 WeatherBug takes weather information stored on the Internet and displays it, depending
on how the API is created.
Chapter 10: Software plus Services 197
MobileDeviceIntegration
AkeycomponentofSoftwareplusServicesistheabilitytoworkinthecloudfromamobile
device.Butwhatdoyouneedtoputonthecloud?Itreallydependsonyourorganization.
Thereareanumberoffreeapplicationsthatyoucanuseonthecloud.Take,forinstance,
Google’sfreeapps.YoucanstartadocumentatyourPCandthenshareitwithothersor
continueworkingonitonyourmobiledevice.Thesamedocumentisshown(inFigure10-2)
onadesktopcomputer,and(inFigure10-3)onamobiledevice.
Thisisasimplisticexample,butitshowshowyoucanusethecloudtoyouradvantage,
especiallywithmobileusers.
NOTE Thisisthegrayareaincloudcomputing.Youcouldconsidertheaforementionedexampleas
bothSaaSandSoftwareplusServices.WeuseitasanexampleofSoftwareplusServicesbecause
youneedawebbrowsertouseit,butbythesametoken,youneedabrowsertouseSaaS.Aswe
said:grayarea.
Yourneedsmightbemoreproprietary,however.RatherthanusingMicrosoftLiveor
GoogleDocstocollaborateondocuments,maybeyourcompanyneedsaspecialapplication
inservicevehicles.Insuchcases,yousimplyneedtoturntoaservicelikeForce.comand
PART III
seeifanyonehasalreadycreatedtheapplicationyouneed.Ifnot,assignyourprogrammers
totheproblem.GoogleAndroidisonewaytokeepyourprogrammersbusy.
FIGURE 10-2 It’s easy enough to create a document with Google’s Docs.
198 Part III: Cloud Computing at Work
FIGURE 10-3 You can edit your documents on a mobile device, if you so choose.
GoogleAndroid
Abroadallianceofleadingtechnologyandwirelesscompaniesjoinedforcestodevelop
Android,anopenandcomprehensiveplatformformobiledevices.GoogleInc.,T-Mobile,
HTC,Qualcomm,Motorola,andotherscollaboratedonthedevelopmentofAndroid
throughtheOpenHandsetAlliance,amultinationalallianceoftechnologyandmobile
industryleaders.
Thisalliancesharesacommongoaloffosteringinnovationonmobiledevicesand
givingconsumersachancetoexperienceperformanceimprovementsoverexistingmobile
platforms.Byprovidingdeveloperswithanewlevelofopennessthatenablesthemtowork
morecollaboratively,Androidacceleratesthepaceatwhichnewmobileservicesaremade
availabletoconsumers.
Chapter 10: Software plus Services 199
PART III
200 Part III: Cloud Computing at Work
Withnearly3billionusersworldwide,themobilephonehasbecomethemostpersonal
andubiquitouscommunicationsdevice.However,thelackofacollaborativeefforthas
madeitachallengefordevelopers,wirelessoperators,andhandsetmanufacturersto
respondasquicklyaspossibletotheever-changingneedsofsavvymobileconsumers.
ThroughAndroid,developers,wirelessoperators,andhandsetmanufacturerswillbebetter
positionedtobringtomarketinnovativenewproductsfasterandatamuchlowercost.The
endresultisamobileplatformenablingwirelessoperatorsandmanufacturerstogivetheir
customersbetter,morepersonal,andmoreflexiblemobileexperiences.
Thirty-fourcompanieshaveformedtheOpenHandsetAlliance,whichaimstodevelop
technologiesthatwillsignificantlylowerthecostofdevelopinganddistributingmobile
devicesandservices.TheAndroidplatformisthefirststepinthisdirection—afully
integratedmobile“softwarestack”thatconsistsofanoperatingsystem,middleware,and
user-friendlyinterfaceandapplications.
TheAndroidplatformisavailableunderoneofthemostprogressive,developer-
friendlyopen-sourcelicenses,whichgivesmobileoperatorsanddevicemanufacturers
significantfreedomandflexibilitytodesignproducts.
Androidholdsthepromiseofbenefitsforconsumers,developers,andmanufacturersof
mobileservicesanddevices.Handsetmanufacturersandwirelessoperatorswillbefreeto
customizeAndroidinordertobringtomarketinnovativenewproductsfasterandata
muchlowercost.Developerswillhaveaccesstohandsetcapabilitiesandtoolsthatwill
enablethemtobuildcompellinganduser-friendlyservices,bringingtheInternetdeveloper
modeltothemobilespace.Andconsumersworldwidewillhaveaccesstolessexpensive
mobiledevicesthatfeaturemorecompellingservices,richInternetapplications,andeasier-
to-useinterfaces—ultimatelycreatingasuperiormobileexperience.
AnOpenSolution
“Thispartnershiphelpsunleashthepotentialofmobiletechnologyforbillionsofusers
aroundtheworld.Afreshapproachtofosteringinnovationinthemobileindustrywillhelp
shapeanewcomputingenvironmentthatwillchangethewaypeopleaccessandshare
informationinthefuture,”saidGooglechairmanandCEOEricSchmidt.
“AsafoundingmemberoftheOpenHandsetAlliance,T-Mobileiscommittedto
innovationandfosteringanopenplatformforwirelessservicestomeettherapidlyevolving
andemergingneedsofwirelesscustomers,”saidRenéObermann,CEO,DeutscheTelekom,
parentcompanyofT-Mobile.“GooglehasbeenanestablishedpartnerforT-Mobile’s
groundbreakingapproachtobringthemobileopenInternettothemassmarket.Weseethe
AndroidplatformasanexcitingopportunitytolaunchrobustwirelessInternetandWeb2.0
servicesforT-MobilecustomersintheUSandEuropein2008.”
“TheconvergenceofthewirelessandInternetindustriesiscreatingnewpartnerships,
evolvingbusinessmodelsanddrivinginnovation,”saidDr.PaulE.Jacobs,CEOof
Qualcomm.“WeareextremelypleasedtobeparticipatingintheOpenHandsetAlliance,
whosemissionistohelpbuildtheleadingopen-sourceapplicationplatformfor3G
networks.Theproliferationofopen-standards-basedhandsetswillprovideanexcitingnew
opportunitytocreatecompellingservicesanddevices.Asaresult,wearecommitting
researchanddevelopmentresourcestoenabletheAndroidplatformandtocreatethebest
always-connectedconsumerexperienceonourchipsets.”
Chapter 10: Software plus Services 201
“Motorolahaslongbeenanadvocateofopensoftwareformobileplatforms.We’re
excitedtocontinuethissupportbyjoiningGoogleandothersintheannouncementofthe
OpenHandsetAllianceandAndroidplatform.MotorolaplanstoleveragetheAndroid
platformtoenableseamless,connectedservicesandrichconsumerexperiencesinfuture
Motorolaproducts,”saidEdZander,chairmanandCEOofMotorola,Inc.
OpenHandsetAllianceFoundingMembers
MembersoftheOpenHandsetAllianceinclude
• Aplix(www.aplixcorp.com)
• AscenderCorporation(www.ascendercorp.com)
• Audience(www.audience.com)
• Broadcom(www.broadcom.com)
• ChinaMobile(www.chinamobile.com)
• eBay(www.ebay.com)
• Esmertec(www.esmertec.com)
• Google(www.google.com)
PART III
• HTC(www.htc.com)
• Intel(www.intel.com)
• KDDI(www.kddi.com)
• LivingImage(www.livingimage.jp)
• LG(www.lge.com)
• Marvell(www.marvell.com)
• Motorola(www.motorola.com)
• NMSCommunications(www.nmscommunications.com)
• Noser(www.noser.com)
• NTTDoCoMoInc.(www.nttdocomo.com)
• Nuance(www.nuance.com)
• Nvidia(www.nvidia.com)
• PacketVideo(www.packetvideo.com)
• Qualcomm(www.qualcomm.com)
• Samsung(www.samsung.com)
• SiRF(www.sirf.com)
• SkyPop(www.skypop.com)
• SONiVOX(www.sonivoxrocks.com)
• SprintNextel(www.sprint.com)
• Synaptics(www.synaptics.com)
202 Part III: Cloud Computing at Work
• TAT-TheAstonishingTribe(www.tat.se)
• TelecomItalia(www.telecomitalia.com)
• Telefónica(www.telefonica.es)
• TexasInstruments(www.ti.com)
• T-Mobile(www.t-mobile.com)
• WindRiver(www.windriver.com)
FormoreinformationabouttheOpenHandsetAlliance,visitthewebsiteat
www.openhandsetalliance.com.
Providers
ButwhileSoftwareplusServicesisagoodmatchformobileusers,telecommuters,and
othersonthego,thereisstillvaluefordeskboundusers.Applicationscanbedevelopedby
yourorganizationoryourvendor,dependingonwhatyourvendoroffersorwhatyouneed.
Let’slookatsomedevelopmentsolutionsyoumightconsiderwhencreatingyourown
SoftwareplusServicesdeployments.
AdobeAIR
AdobeSystemsoffersitsAdobeIntegratedRuntime(AIR),formerlycode-namedApollo.
AdobeAIRisacross-operating-systemapplicationruntimethatallowsdeveloperstouse
HTML/CSS,AJAX,AdobeFlash,andAdobeFlextoextendrichInternetapplications(RIAs)
tothedesktop.NewfeaturesinAdobeAIRincludeanembeddedlocaldatabase,PDFsupport,
enhancedcapabilitiesforJavaScriptdevelopers,anddeeperintegrationwithAdobeFlex.
AdobeAIRandtheAdobeAIRSoftwareDeveloper’sKit(SDK)canbedownloadedforfree
fromwww.adobe.com/go/air.
RIA
AdobeAIR,alongwithAdobeFlex,arecornerstonesofAdobe’sRIAplatform,which
enablesdevelopersanddesignerstocreateanddeliverrich,dynamic,brandedcontentand
applicationsacrossallmajoroperatingsystems.KeyelementsofAdobeAIRareopen
source,includingtheWebKitHTMLengine,theActionScriptVirtualMachine(Tamarin
project),andSQLitelocaldatabasefunctionality.Additionally,AdobealsooffersAdobeFlex
asopensource.Byembracingopen-sourcetechnologiesandofferingprereleaseversionsof
software,Adobeenablesdevelopersworldwidetoparticipateinthegrowthofthe
industry’smostadvancedplatformforbuildingcross-operating-systemRIAs.
“AdobeAIRrepresentsanewmedium,asthebestoftheWebandthebestofthe
desktopcometogether,”saidKevinLynch,seniorvicepresidentandchiefsoftware
architectatAdobe.“AdobeAIRexpandstheuniverseofpossibilitiesforWebdevelopers
whocannowdeliveranewgenerationofapplicationsthatworkacrossoperatingsystems
andbothinsideandoutsidethebrowser,bridgingthegapbetweentheWebandthe
personalcomputer.”
Chapter 10: Software plus Services 203
AdobeAIRallowsdeveloperstoincorporatePDFbyleveragingAdobeReader8.1
functionality.UserswillbeabletoviewandinteractwithPDFdocumentswithinAdobe
AIRapplicationssimilarlytohowtheyinteractwithaPDFinthebrowsertoday.New
capabilitiessuchassupportfortransparentHTMLwindows,drag-and-dropsupport,and
completeaccesstoAdobeAIRandFlashAPIsallowAJAXdeveloperstocreateengaging
desktopapplications.DevelopersbuildingAdobeAIRapplicationscanusetheAJAX
frameworksoftheirchoice,andthelatestversionofWebKitincorporatedintoAdobeAIR
providesmorecomponentsthanwerepreviouslyavailableinApollo.
Tools
Theembedded,cross-platform,open-sourceSQLitelocaldatabasewasoneofthemost
requestedfeaturesfromtheApollorelease.Itrequiresnoextrasetupwhileprovidinglarge
datacapacityandfulltextsearch,enablingwebdeveloperswhotraditionallyrelyona
databaseforstoragetoeasilybuilddesktopapplicationswithoutchangingexisting
techniques.Additionally,atoolisnowavailableonAdobeLabsforDreamweaverCS3that
enablesDreamweaverprojectstobedeliveredasAdobeAIRapplications.
“AjaxdevelopershavehelpeddefineWeb2.0bymakingWebapplicationsmore
interactiveandusable,”saidBenGalbraith,co-founderofAjaxian.“AdobeAIRallowsAjax
developerstousetheirskillstotakeWeb2.0tothedesktop—withoutrequiringthemto
PART III
learnawholenewsetofskills.ByexposingrichdesktopandFlashfunctionalitytoAjax
developersasanothersetofJavaScriptAPIs,AdobeAIRopensupawholenewworldof
possibilities.”
“Salesforce.comisexcitedaboutthepromiseAdobeAIRshowsforourdeveloper
community,”saidParkerHarris,cofounderandEVP,Technology,Salesforce.com.
“Developerswhobuildon-demandbusinessapplicationswiththeSalesforcePlatformcan
alreadyuseAdobeFlextoaddrichuserinterfacestotheirsolutions,andnowwithAdobe
AIRtheycanbefurtherextendedwiththepersistentdesktopfunctionalityandinteractivity
AIRenables,makingon-demandbusinessapplicationsmorecompellingthanever.”
AppleiPhoneSDK
ForitspopulariPhoneandiPodtouchdevices,AppleoffersitsiPhoneSoftwareDevelopment
Kit(SDK)aswellasenterprisefeaturessuchassupportforMicrosoftExchangeActiveSyncto
providesecure,over-the-airpushemail,contacts,andcalendarsaswellasremotewipe,and
theadditionofCiscoIPsecVPNforencryptedaccesstoprivatecorporatenetworks.
“We’reexcitedaboutcreatingavibrantthird-partydevelopercommunitywith
potentiallythousandsofnativeapplicationsforiPhoneandiPodtouch,”saidSteveJobs,
Apple’sCEO.“iPhone’senterprisefeaturescombinedwithitsrevolutionaryMulti-Touch
userinterfaceandadvancedsoftwarearchitectureprovidethebestuserexperienceandthe
mostadvancedsoftwareplatformeverforamobiledevice.”
TheiPhoneSDKprovidesdeveloperswitharichsetofapplicationprogramming
interfaces(APIs)andtoolstocreateapplicationsforiPhoneandiPodtouch.Currently,
anyonecandownloadthebetaiPhoneSDKforfreeandruntheiPhoneSimulatorontheir
Mac.ApplealsointroduceditsnewiPhoneDeveloperProgram,givingdevelopers
204 Part III: Cloud Computing at Work
everythingtheyneedtocreatenativeapplications,andthenewAppStore,awayfor
developerstowirelesslydelivertheirapplicationstoiPhoneandiPodtouchusers.
WiththeiPhoneSDK,third-partydevelopersareabletobuildnativeapplicationsfor
theiPhonewitharichsetofAPIs,includingprogramminginterfacesforCoreOS,Core
Services,Media,andCocoaTouchtechnologies.TheiPhoneSDKallowsdevelopersto
createapplicationsthatleveragetheiPhone’smultitouchuserinterface,animation
technology,largestorage,built-inthree-axisaccelerometer,andgeographicallocation
technologytodeliverinnovativemobileapplications.
Leverage
ApplehaslicensedExchangeActiveSyncfromMicrosoftandisbuildingitrightintothe
iPhone,sothatiPhonewillconnectout-of-the-boxtoMicrosoftExchangeServers2003and
2007forsecureover-the-airpushemail,contacts,calendars,andglobaladdresslists.Built-in
ExchangeActiveSyncsupportalsoenablessecurityfeaturessuchasremotewipe,password
policies,andauto-discovery.
TheiPhonesoftwaresupportsCiscoIPsecVPNtoensurethehighestlevelofIP-based
encryptionavailablefortransmissionofsensitivecorporatedata,aswellastheabilityto
authenticateusingdigitalcertificatesorpassword-based,multifactorauthentication.The
additionofWPA2Enterprisewith802.1xauthenticationenablesenterprisecustomersto
deployiPhoneandiPodtouchwiththelateststandardsforprotectionofWi-Finetworks.
TheiPhonesoftwareprovidesaconfigurationutilitythatallowsITadministratorsto
easilyandquicklysetupmanyiPhones,includingpasswordpolicies,VPNsetting,installing
certificates,emailserversettings,andmore.Oncetheconfigurationisdefined,itcanbeeasily
andsecurelydeliveredviaweblinkoremailtotheuser.Toinstall,alltheuserhastodois
Chapter 10: Software plus Services 205
authenticatewithauserIDorpassword,downloadtheconfiguration,andclickInstall.Once
thesoftwarehasbeeninstalled,theuserwillhaveaccesstoalltheircorporateITservices.
AppStore
TheiPhonesoftwarecontainstheAppStore,an
applicationthatletsusersbrowse,search,
purchase,andwirelesslydownloadthird-party
applicationsdirectlyontotheiriPhoneoriPod
touch.TheAppStoreenablesdevelopersto
reacheveryiPhoneandiPodtouchuser.
Developerssetthepricefortheirapplications—
includingfree—andretain70percentofallsales
revenues.Userscandownloadfreeapplications
atnochargetoeithertheuserordeveloper,or
purchasepricedapplicationswithjustoneclick.
Enterprisecustomerscancreateasecure,private
pageontheAppStoreaccessibleonlybytheir
employees.
Applehandlesallcreditcard,webhosting,
PART III
infrastructure,andDRMcostsassociatedwith
offeringapplicationsontheAppStore.Third-
partyiPhoneandiPodtouchapplicationsmust
beapprovedbyAppleandwillbeavailable
exclusivelythroughtheAppStore.
TheiPhoneSDKprovidesawaytocreateinnovativeapplicationsfortheiPhoneand
iPodtouch.InadditiontotherichsetofiPhoneOSAPIs,theiPhoneSDKalsoprovides
advancedtoolsforcreatingnativeiPhoneandiPodtouchapplicationsincluding:Xcodefor
sourcecodeediting,projectmanagement,andgraphicaldebugging;InterfaceBuilderwith
drag-and-dropinterfacecreationandlivepreview;Instrumentstomonitorandoptimize
iPhoneapplicationperformanceinrealtime;andtheiPhoneSimulatortorunanddebug
applications.
Apple’siPhoneDeveloperProgramofferstheabilitytogetcodeontoiPhonesfor
testing.TheStandardProgramcostsUS$99peryearandgivesmembersaniPhoneSDKand
developmenttools;accesstoprereleaseiPhonesoftware;technicalsupport;theabilitytoget
codeontoiPhonesfortesting;anddistributionofapplicationsviathenewAppStore.The
EnterpriseProgramcostsUS$299peryear.
InadditiontotheseiPhonenetworkandsecurityfeatures,theiPhonesoftwareprovides
severalnewMailfeaturessuchastheabilitytoviewPowerPointattachments,inadditionto
WordandExcel,aswellastheabilitytomassdeleteandmoveemailmessages.
MicrosoftOnline
MicrosofthitthegasespeciallyhardwithitsownSoftwareplusServicesofferings,
integratingsomeofitsmostpopularandprevalentofferings,likeExchange.Notonly
doesMicrosoft’sSoftwareplusServicesofferingallowafunctionalwaytoserveyour
organization,butitalsoprovidesameanstofunctiononthecloudinawaythatyouare
probablyalreadyusedtowithyourin-housecomputers.
206 Part III: Cloud Computing at Work
HybridModel
WithMicrosoftserviceslikeExchangeOnline,SharePointOnline,andCRM4.0,organizations
bigandsmallhavemorechoicesinhowtheyaccessandmanageenterprise-classsoftware—
fromentirelyweb-based,toentirelyon-premisesolutions,andanywhereinbetween.Having
avarietyofsolutionstochoosefromgivescustomersthemobilityandflexibilitytheyneed
tomeetconstantlyevolvingbusinessneeds.Tomeetthisdemand,Microsoftismovingtoward
ahybridstrategyofSoftwareplusServices,thegoalofwhichistoempowercustomersand
partnerswithricherapplications,morechoices,andgreateropportunitythroughacombination
ofon-premisesoftware,partner-hostedsoftware,andMicrosoft-hostedsoftware.
Aspartofthisstrategy,MicrosoftexpandeditsMicrosoftOnlineServices—whichincludes
ExchangeOnlineandSharePointOnline—toorganizationsofallsizes.Withserviceslike
MicrosoftOnlineServicesandMicrosoftDynamicsCRM4.0,organizationswillhavethe
flexibilityrequiredtoaddresstheirbusinessneeds.
Partnership
Theshifttowarddeliverymodelsthatcombineon-premisesoftwarewithhostedservicesis
partofacontinuumthatwillgrowovertime,withafocusonhowhybridsolutionscan
empowercustomerswithricherapplicationsandmorechoices,andprovidepartnersofall
sizeswithgreaterbusinessopportunities.Tohelppartnersunderstandhowtheycanbenefit
fromMicrosoft’sSoftwareplusServicesstrategy,Microsoftcreatedapartneropportunity
frameworkthatmapsthethreemaindeliverymodels—on-premise,partner-hosted,and
Microsoft-hosted.Thisframeworkhelpspartnerstodefine,understand,andcapitalizeonthe
fullrangeofbusinessopportunitiesthatareenabledbyaSoftwareplusServicesstrategy.
“Incontrasttoanonline-onlyservicesapproach,Microsoftsupportstheentirespectrum
ofsoftwaredelivery.Thisisauniquecompetitiveadvantagethatallowsustocreatenew
customeropportunitiesforabroadrangeofpartners,”saidAllisonL.Watson,corporatevice
president,MicrosoftWorldwidePartnerGroup.“Weareworkingcloselywithpartnersofall
types—whetherit’ssystemsintegrators,hosters,webdesigners,advertisersandpublishers,
systembuilders,retailers,independentsoftwarevendorsandfinallyvalue-addedresellers
anddistributors—todriveclearguidelinesforengagement,rangingfromservicedelivery
andmonetizationtothepartner’sbusinessmodelandmarketplacevelocity.”
ExchangeOnlineandSharePointOnline
ExchangeOnlineandSharePointOnlinearetwoexamplesofhowpartnerscanextendtheir
reach,growtheirrevenues,andincreasethenumbertosalesinaMicrosoft-hostedscenario.In
September2007,MicrosoftinitiallyannouncedtheworldwideavailabilityofMicrosoftOnline
Services—whichincludesExchangeOnline,SharePointOnline,OfficeCommunications
Online,andOfficeLiveMeeting—toorganizationswithmorethan5,000users.
Theextensionoftheseservicestosmallandmid-sizedbusinessesisappealingto
partnersinthemanagedservicesspacebecausetheyseeitasanopportunitytodeliver
additionalservicesandcustomervalueontopofMicrosoft-hostedExchangeOnlineor
SharePointOnline.MicrosoftOnlineServicesopensthedoorforpartnerstodeliverreliable
businessservicessuchasdesktopandmobileemail,calendaringandcontacts,instant
messaging,audioandvideoconferencing,andsharedworkspaces—allofwhichwillhelp
increasetheirrevenuestreamandgrowtheirbusinesses.
CeryxInc.,amessagingsolutionandHostedExchangeproviderwithlocationsin
Toronto,Canada,andNewYork,seesthisannouncementasanotherexampleofhow
Microsoftiscollaboratingwithpartnerstocreatemorebusinessopportunities.
Chapter 10: Software plus Services 207
“OurexperienceworkingwithMicrosofthasdemonstratedthatthepartnerchannelis
veryimportanttothem,”saysGusHarsfai,CEOandpresidentofCeryxInc.An18-year
veteranofthehostedservicesspace,CeryxisexcitedtoleverageMicrosoft’sinnovationand
brandtoreachnewcustomersanddelivergreatervalue.
MicrosoftpartnerscanleverageMicrosoft-hostedsolutionstospeedthedeploymentof
ExchangeandOfficeSharePointincustomerorganizations,freeingthemtofocuson
migration,customization,integration,andotherservices.
ForEvolvePartnersInc.,aleadingproviderofinformationtechnologysolutionsand
servicesbasedinAnaheim,California,thefocusoftheirbusinessisdeliveringmanaged
servicestocustomers,sotheannouncementofMicrosoftOnlineServicestiescloselytotheir
ownservicesstrategy.Supportingbothon-premiseandhostedsolutions,EvolvePartners
understandstheefficienciesandaddedvaluethathostedsolutionscanprovide.“Nineout
oftentimeswespendonetotwoweeksjustpreppingacustomer’sexistingsoftwareto
supportatraditionalon-premisesolution,”saidTimAcker,EvolvePartnerspresidentand
COO.“Withhostedservices,we’reabletogetupandrunningimmediately,andthatshows
valuetothecustomer.”
EvolvePartnersalsoseestheflexibilitythatMicrosoftOnlineServicesprovidesas
havinghelpedthemgenerateadd-onrevenuebyreachingnewcustomersorexpandtheir
existingcustomerbase.“We’veseencustomerswantanoffsite,rent-as-you-gotypeoption,”
PART III
sharedAcker.“Soweseethisactuallyacceleratinganumberofopportunitiesinour
pipeline.”
BecauseMicrosoftmanagesthedeploymentandmaintenanceofExchangeOnlineand
SharePointOnline,partnerscanleveragethattimeandcostsavingstohavedeeper
conversationswithcustomersabouttheirbusinessneedsandfilltheroleoftrustedadvisor.
Forthisveryreason,CourtesyComputers,amanagednetworkservicesproviderinFort
Lauderdale,Florida,outsourcesitshostingbusinesssoitcanfocusonthevariousneedsof
itscustomers,andleveragetheseconversationswithcustomersasanopportunitytodeliver
greatervalueandgeneratemorerevenue.
“Hostedsolutionsprovideanaffordablewayforsmallbusinessestogetupandrunning
andareagreatfootinthedoorforpartnerstosupportthem,”saidTimWoodcock,
presidentandCEOofCourtesyComputers.“Thepotentialforadd-onservices,additional
training,andahighlevelofsupportprovidesuswithgreatbusinessopportunitieswhether
itisrightnowordowntheroad.”
MicrosoftOnlineServiceshelpspartnerstodelivergreatervaluetocustomersandgrow
theirownbusinessesprofitably.
“WiththereleaseofExchangeOnlineandSharePointOnline,Microsoftwillbecloserto
thehostingcommunitythanit’severbeen,”saysCeryx’sHarsfai.“Weseethisasan
opportunitytocontinuedeliveringtailoredsolutions,buttoabroadermarketsegment,
fasterandatalowercost.”
MicrosoftDynamicsCRM4.0
MicrosoftOnlineServicesisn’ttheonlyopportunityforpartnersintheSoftwareplus
Servicesspace.MicrosoftDynamicsCRM4.0,releasedinDecemberof2007,alsoprovidesa
keyaspectofMicrosoft’sSoftwareplusServicesstrategy.Theuniqueadvantagesofthenew
MicrosoftDynamicsCRM4.0,whichcanbedeliveredon-premiseoron-demandasahosted
solution,makeMicrosoftDynamicsCRManoptionforsolutionproviderswhowantto
rapidlyofferasolutionthatmeetscustomerneedsandmaximizestheirpotentialtogrow
theirownbusinessthroughadditionalservices.
208 Part III: Cloud Computing at Work
PartnerssuchasAxonom,aproviderofverticalmodulesforhigh-tech,multichannel
manufacturersanddistributorsforMicrosoftCRMbasedinMinneapolis,Minnesota,clearly
seebusinessopportunitiesthroughaSoftwareplusServicesmodel.
“Customersarelookingforchoice,”saidMikeBelongie,vicepresidentofsalesfor
Axonom.“Theywantflexibilityinhowtheirsoftwareisdelivered.Beingabletoprovide
ourCRMsolutionson-premiseorthroughahostedmodelhelpsustodelivergreatervalue
tocustomers,andthat’sultimatelyhelpingustogrowourbusiness.”
Flexibility
Microsoft’sSoftwareplusServicesstrategyincludesthebestofon-premisesoftware
combinedwiththebestofhostedservices,bridgingthiscontinuumtoallowforarangeof
superioroptionsincustomerchoiceandbusinessopportunitiesforpartners.Thisblended
approachisdesignedtodeliverthebestofbothworlds,withthegoalofempowering
customersandpartnerswithricherapplications,morechoices,andgreateropportunity.
Microsoftpartnersplayacriticalroleindeliveringthatvaluetocustomers.
Partnership
AspartofitsSoftwareplusServicesstrategy,Microsofthaspartneredwithanumberof
otherorganizationstodelivertheirproductsandservices.In2008theMicrosoftWorldwide
PartnerConferencestartedwiththeannouncementofanewpricingandpartnermodelfor
MicrosoftOnlineServices,akeycomponentofitsSoftwareplusServicesinitiative.
Additionalannouncementsfocusedonitsoverallinvestmentindeliveringinnovationand
creatingpartneropportunities.
“PartnershavealwaysbeenatthecoreofMicrosoft’sbusinessmodel,andthatwill
neverchange,”saidAllisonL.Watson,corporatevicepresidentoftheWorldwidePartner
GroupatMicrosoft.“WeareexcitedtoannouncenewbusinessmodelsforourOnline
offerings,whichwilldriveopportunityandprofitabilityforourpartners,whiledelivering
incrediblevalueandchoiceforcustomers.”
BusinessModel
Duringtheopeningkeynoteaddress,StephenElop,presidentoftheMicrosoftBusiness
Division,announcedthepricingandpartnermodelfortwonewsuitesofsubscription
servicesaspartoftheMicrosoftOnlineServicesfamily,whichdeliverssoftwareasa
subscriptionservicemanagedfromaMicrosoftdatacenterandsoldbypartners.With
MicrosoftOnlineServices,customershavetheoptiontoaccessmessaging,collaborations
andcommunicationssoftwareovertheInternet.Theseserviceswillbesoldasasuiteoras
stand-aloneproductswithpricesstartingaslowasUS$3permonth.
“Ourvisionisthateverythingyoucandowithouronsiteservers,youwillbeabletodo
withouronlineservices,”Elopsaid.“Forpartners,it’saboutthedifferentiatedvaluethey
candeliverontopofourservices,aswellasprovidingthemwithanongoingrevenue
stream.Thereisincrediblepartneropportunityateverylevel—integration,migration,
customization,consultingservicesandmanagedservices.MicrosoftOnlineServices
providesstabilityandanopportunitytocreatelong-termcustomerrelationships.”
Underthebusinessmodel,partnerssellingthetwosuiteswillreceive12percentofthe
first-yearcontractvaluewitharecurringrevenuestreamof6percentofthesubscriptionfee
everyyearforthelifeofthecustomercontract.
Chapter 10: Software plus Services 209
Tohelppartnersgettheguidancefordiscovery,enrollment,andactivationofthetwo
suites,aprogramcalledQuickstartforMicrosoftOnlineServiceswasannounced.Any
partnercantakeadvantageofthenewbusinessmodel,andhostingpartnersthatalready
participateinmodelslikethiswillhaveexpandedopportunitiestoofferchoiceand
flexibilitytotheircustomersforonlineservicesofalltypes.
NOTE YoucanfindmoreinformationaboutQuickstartathttp://www.quickstartonlineservices.com.
Resources
BuildingonthesuccessofitsEarlyAccessprograminvolving200partners,andthegeneral
availabilityofMicrosoftDynamicsCRMOnline,Microsoftoffersaprogramexpansionand
readinesstool:
• TheMicrosoftPartnerProgramwillprovidediscountstoqualifiedpartnersinthe
U.S.andCanadaforuseofMicrosoftDynamicsCRMOnlineintheirown
organizations.ThediscountedpriceisUS$19peruserpermonth.
• TheMicrosoftDynamicsCRMISVSaaSReadinesstoolextendsMicrosoft’sInnovate
Onprogram,helpingISVsevolvetheiron-premisesolutionsintoon-demandservices.
PART III
Opportunities
InadditiontosignificantnewSoftwareplusServicestosupportcustomerandpartner
choiceandflexibility,Microsoftalsooffersaspectrumofnewpartneropportunities:across
thefast-growingunifiedcommunicationsplatform;therangeofopportunitiesforMicrosoft
Windowsandsmallbusinesses;anewMobileReadinessprogramtohelppartnerstake
advantageoftheburgeoningmobilityspace;andnewlicensingandfinancingprogramsto
helppartnersimprovetheircustomers’purchasingexperiencewithmoreflexible,
predictable,andmanageableoptions.
UnifiedCommunications
Microsofthasalsoseenbroadadoptionofitsunifiedcommunicationsplatformandproducts,
includingMicrosoftOfficeCommunicationsServer2007,MicrosoftOfficeCommunicator2007,
andMicrosoftExchangeServer2007.MicrosoftOfficeCommunicationsServeralonehas
experiencedtriple-digitbusinessgrowthoverthepastcoupleofyears,islicensedto35percent
ofFortune500companies,andpartnersarerecognizingtheopportunity:
• Morethan150partnershaveachievedtheVoicespecialization.
• Morethan2,500partnercompanieshaveachievedtheUnifiedCommunications
Solutionscompetency.
• Morethan90companieshavejoinedtheNotesTransitionPartnerProgramtoassist
businessesthataremigratingtotheMicrosoftplatform.
AspartofMicrosoft’sunifiedcommunicationsapproach,MicrosoftsubsidiaryTellme
NetworksInc.launchedanewpartnerstrategyforenterprisecontactcenterpartnersthat
allowsTellmetoscaleitsbusinessandbringimprovedspeech-enabledsolutionsto
enterprisecustomers.Asafirststep,TellmeandSpeechCycleInc.announcedanalliance
whereSpeechCyclewilluseTellme’splatformforon-demandspeechapplications.
Additionalinformationcanbefoundathttp://www.tellme.com/business.
210 Part III: Cloud Computing at Work
MobilityOpportunities
Microsoft’sSMBcustomershavereportedthatamongnetworkdevices,smartphoneswill
constitutetheirlargestgrowthareainthenextfiveyears.Tohelpresellerpartnersprepare
forthis,Microsoft’sMobileCommunicationsBusinessoffersitsMobileReadinessProgram,
whichwilladdressresellerswithfourcomponents:
• TheGetMobileReadyinitiativeoffersMicrosoftconsultingtosmallandmidsize
resellers.
• TheTryandBuyinitiativedeploysMicrosoftmobilitysolutionswithinresellersto
createSMBmobilityexpertsaroundtheglobeandhelppartnersshowcasethe
technologyinaction.
• TheMicrosoftPartnerProgramMobilityCompetencyisafull-scaleresourcetotrain
andcertifyresellersthatarereadytotakethenextstepinmobility.
• MicrosoftdistributorsworldwideoffersolutionstohelpresellersprovidetheirSMB
customerswithaready-madepackageofmobilityofferingsatacompetitiveprice.
ActiveDirectory
StartingwithWindows2000,Microsoftaddedakeycomponenttoitsflagshipoperating
system—ActiveDirectory.ActiveDirectoryisaMicrosoftdirectoryservice,anditisusedto
provision,store,andmanageusers,groups,passwords,andcontacts,amongotherobjects.
Further,itisthebasisfortheglobaladdresslist(GAL)thatOutlookclientsuse.
Itiskeynotonlyinyourorganization’sMicrosoftnetwork,butitisalsonecessaryto
useitaspartofanExchangeOnlinedeployment.InordertouseitwithExchangeOnline,
therearetwoscenarios:
• TheorganizationhasnocorporateActiveDirectory,andallusers,mailboxes,
distributiongroups,andsoonaremanagedthroughaweb-basedmanagementconsole.
• TheorganizationdoeshaveacorporateActiveDirectoryandhasintegratedthe
corporateandExchangedirectoriesusingsynchronizationtools.
ToconfigureActiveDirectorywithExchangeOnline,youwanttousetheMicrosoft
OnlineServicesDirectorySynchronizationTool.YoushouldalsoconfigureActiveDirectory
UserattributesifyouwanttouseUserLoginUserPrincipalNames(UPNs)forthesakeof
consistencywiththeon-siteActiveDirectoryenvironment.
Forinstance,anon-siteActiveDirectoryusingthedomainnameofcompuglobalmegaware
.comhasuserswithaloginofuser@compuglobalmegaware.ThereisnoExchangemessaging
environmentwithinthisActiveDirectory,butuserobjectshavetheirMAILattributeconfigured,
sotheyaresettohaveemail.Inanon-ExchangeADenvironment,DirSyncmustbeusedto
createnewMicrosoftOnlineUsers.
Tomakeareplicaofyouron-siteActiveDirectoryenvironmentwiththeMicrosoft
Onlineenvironment,followthesesteps:
1. CreateaMicrosoftOnlineServiceDomainname.Usethesamenameasyouron-site
company(likecompuglobalmegaware.com).
2. VerifytheMicrosoftOnlineServiceDomainname.Thisprovesthatyouhave
ownershipandallowsaMicrosoftOnlineServicesadministratortocreatenewusers
forthisdomain.ItalsoprovidesameanstoaddSMTPaddressesforexistingusers.
Chapter 10: Software plus Services 211
3. Setthisdomainnameasdefault.Asnewusersarecreated,theiraccountsandemail
addresswillusethisdomain.
4. Modifytheon-siteActiveDirectoryUserobject’sMAILattributewithanemail
addressthatwaspreviouslycreatedandverified(forinstance,
user@compuglobalmegaware.com)
5. RuntheMicrosoftOnlineServicesDirectorySynchronizationTool.Thisreplicates
allmailandmailbox-enabledusersandgroupsintotheMicrosoftOnlineCompany.
InthischapterwetookalookatSoftwareplusServices,andnotedthewaysyoucan
developyourownsoftwaretoworkwithcloudofferings.However,webarelyscratched
thesurface.Inthenextchapterwe’lltakeacloserlookathowyoucandevelopyourown
applicationsandsomeofthedifferentoptionsfordoingso.
PART III
This page intentionally left blank
CHAPTER
11
Developing Applications
C
hancesaregoodthattheapplicationyouneedtoworkonthecloudhasalreadybeen
created;it’sjustamatteroffindingandsubscribingtoit.Butifyoucan’tfindthe
applicationyou’relookingfor,youcanmakeyourown,andyouwouldn’tbealone
inyourendeavor.A2009surveyfromEvansDatashowsthat40percentofsurveyed
developersworkingonopen-sourceprojectsplantodelivertheirapplicationsasweb
servicesofferingsusingcloudproviders.
Inthischapterwe’lltalkaboutsomeofthedifferentcloudofferingsoutthere.Varying
levelsofintricacyandfunctionalityareavailable.Forinstance,youcanwriteanappand
hostitontheGoogleAppEngineinafewminutes(we’llshowyouhowlaterinthis
chapter),whileothercloudsaremorecomplex,butoffermorefeatures.Somecloudscater
tospecificneeds,likeIntuit’sQuickBase,whichallowsyoutodevelopfinancial-basedcloud
apps.Let’sstartbylookingatsomedifferentdevelopmentplatformsandtalkabouttheir
strengthsandweaknesses.
Google
Ifyouwanttogetanapponthecloud,theGoogleAppEngineistheperfecttooltouseto
makethisdreambecomereality.Inessence,youwriteabitofcodeinPython,tweaksome
HTMLcode,andthenyou’vegotyourappbuilt,anditonlytakesafewminutes.
NOTE Ittakesafewminutesforasimple,basicapp.It’lltakelongerifyouhavesomethingmore
complexinmind.Yourmileagemayvary.
Bestofall,youdon’thavetoworryaboutbuyingservers,loadbalancers,orDNS
tables—Googlehandlesalltheheavyliftingforyou.Thereareanumberofpointsthatneed
tobeconsideredwhenwritinganappforthecloud.
HavingknowledgeofPythoncertainlyhelps,butitisn’tadeal-breaker,becausePython
isalotlikeotherscriptinglanguages.Aseasonedprogrammershouldbeabletopickitup
withsomeease,andtherearecertainlyplentyofresources—eitherpaper-and-gluebooksor
websites—thatcanhelp.
Javaisveryprevalentonthecloud.Itisaveryrobustscriptingtoolandonethat
programmersknowwell.Butitscomplexityisprobablyhurtingitmorethanhelping.
213
214 Part III: Cloud Computing at Work
Onaverage,hostingforJavaapplicationsbeginsaroundUS$10permonth,whilePython
servicesstartataroundUS$2permonth.
OtherPythonadvantagesincludetheopen-sourcenatureofPythonandthefactthatthe
language’screator—GuidovanRossum—worksatGoogle.Googlewasabletotweakthe
languageslightlysothatdangerousoperationsarenotallowed,likewritingtothefile
system.Thispreventsrobustuploadingservicesandspawnsubthreads.Yourapphastobe
prettyefficient,becauseAppEnginewillkillanythreadthattakestoolongtorun.
NOTE Googlebuiltthisinbydesign,giventhefactthatnewprogrammersarelikelytoscrewup
andmakeanappthatfallsintoanendlessloop.ItalsomeansthatAppEngineisbetterforthe
frontendsofdatabasesthatdon’thavetodoalotofindependentthinkingorcomputation.
AppEngineisakintoadatastore.Itwon’tdothecomplexthingsthatOraclewillallow.
ThedatabaseisintegratedwellwithPython,butonlyallowsbasicsearchandstore
functionsthatyouwouldneedtotuckawayusers’information.Dataobjectsaresetupin
Python,andthenyouusethesavemethodandallthedatadisappearsintothecloudwhere
instancesoftheappcanfindit.
PythonlooksalotlikeSQL,butwithadifferentsyntax.Thatmeansthatyoucan’tuse
anyofthemillionsofalreadyscriptedSQLtoolstogeneratereportsorproducegraphs.Also,
AppEnginedoesn’tstorejoins,whichwillbreaksomeofthecodewrittenfortraditional
databases.
GoogleAppEngineisn’tperfect.Thedocumentationmentionswebservicesand
AsynchronousJavaScriptandXML(AJAX),butthereisn’tmuchsupportforthem.
Payment
Googleischargingwhenapplicationsexceedcertainlimits.Forinstance,Googlesaysthat
youcanonlyget“200millionmegacyclesofCPUperday.”Thiscanbealittlefrightening,
becauseGooglecanskewthenumberinoddwaysthatarebeyondyourcontrol.Further,
youcouldseeresourcesbeingusedupasthedatabasestoresinformationonmorethanone
server.Thatmeansthatifoneserverstartsaskingforinformation,interservertrafficcan
sloweverythingdown,andiftwousersaretryingtogetatthesamedataatthesametime,
accesscanbecomeslowandexpensive.Ontheplusside,AppEnginewillbringupnew
serverswhendemandrises.
Aswithothercloudofferings,youareatGoogle’smercy.Lookingatthetermsand
conditions,youcanseethatGooglehasthepowertodowhatevertheywantwithyourcreation.
Lock-incanbeaproblem,butatleastitissomewhatoffsetbytheopen-sourcenatureofthe
scriptinglanguage.SincePythonisopensource,youcantakeyourtoysandleaveifyouwant.
AppEngineisbestforsimpleapplicationsthatplanonstayingsimple.Thecloudcan
scaletheapplicationasneeded,butifyouhavedreamsofmakingyourapplicationbig,
Googlemightnotbethebestoption.
Also,sincethecloudissomewhatnewterritory,Googlesaysitreservestherightto
“pre-screen,review,flag,filter,modify,refuseorremoveanyorallContentfromtheService.”
It’sstillearlytotell,butgiventhatamountofcontrol,ifthereisacopyrightinfraction,will
Googleworkwiththedeveloper,orjustwipethedeveloper’saccountfromtheirservers?
Thereareplentyofcompetitorsinthecloud.Amazonhasitsowncloud,butittakes
adifferentapproach,givingtheuseranemptyLinuxshell.Thatoffersmoreflexibility,
Chapter 11: Developing Applications 215
butthehandholdingisn’tthereasitisonGoogle.Itmighttakelongertoplaceanapplication
onAmazon’sElasticComputeCloud,butitoffersricherAPIs,includingwebservicesfor
RESTandSOAPqueries.
Force.comandGoogle
Salesforce.comstruckupastrategicalliancewithGooglewiththeavailabilityofForce.com
forGoogleAppEngine.Force.comforGoogleAppEngineisasetoftoolsandservicesto
enabledevelopersuccesswithapplicationdevelopmentinthecloud.Theofferingbrings
togetherForce.comandGoogleAppEngine,enablingthecreationofentirelynewweband
businessapplications.Force.comforGoogleAppEnginebuildsontherelationshipbetween
Salesforce.comandGoogle,spanningphilanthropy,businessapplications,socialnetworks,
andcloudcomputing.
“Wehaveanopenvisionforcloudcomputing,”saidMarcBenioff,chairmanandCEO,
Salesforce.com.“Developersnowcantakeadvantageoftheeasytouseandrapidlyscalable
cloudcomputinginfrastructuresfromGoogleandSalesforce.comtobuildanddeliver
powerfulbusinessapplications.”
“AtGoogle,asatSalesforce.com,wearecommittedtoenablingdevelopersuccesswith
cloudcomputing,”saidTomStocky,directorofproductmanagementatGoogle.“Bringing
togetherGoogleAppEngineandForce.comwillfosterthecreationofnewWebapplications
PART III
andfurtherdemonstratethepoweroftheWebasaplatform.”
Force.comforGoogleAppEngineprovidesasetoftoolsandservicesmeanttofoster
thecreationofnewkindsofwebandbusinessapplicationsbuiltanddeliveredentirelyin
thecloud.Insteadofmanagingandmaintainingtheirownclient/serverinfrastructure,
developerscanusecloudcomputinginfrastructurefromGoogleandSalesforce.comto
build,run,anddelivernewapplicationsontheWeb.WebapplicationsdevelopedonApp
Engineareeasytobuild,easytomaintain,andeasytoscaleastrafficanddatastorage
needsgrow.AppEngineoffersadevelopercommunityandlibrariestopowerconsumer-
orientedinteractivewebapplications.
Similarly,Force.comprovidesdevelopersacompleteenvironmenttoquicklybuild
businessapplicationsthatrunonSalesforce.com’strustedglobalinfrastructure.Now,
consumer-orientedwebapplicationsbuiltonAppEnginecanleverageenterprisedata
storedinForce.com.
Forendusersoftheseapplications,theintegrationofForce.comandGoogleApp
Enginemeansthatapplicationscanbepoweredbybothsystems.
UsingForce.comforGoogleAppEngine,developerscanbuildapplicationsthatspan
bothSalesforce.comandGoogle’scloudcomputingplatforms,andtakeadvantageofthe
sumoftheirfeaturesasdesired.Force.comforGoogleAppEngineprovides:
• AmeanstoleveragePythoninascalablecloudenvironmentandinteractdirectly
withdatabase,workflow,andlogiccapabilitiesinForce.com.
• Force.comforGoogleAppEngineenablesthecreationofPythonlibrariesthat,
whenplacedonGoogleAppEngine,allowAppEngineappstoreadandwriteto
Force.comusingtheForce.comAPI.
• AppEnginedevelopersgetaccesstoForce.comservicesandcapabilitiesincluding
mobile,analytics,securityandsharingmodels,userauthentication,multilanguage
andcurrencysupport,andmore.
216 Part III: Cloud Computing at Work
“Intimeslikethese,companiesareaskingforwaystheycantakeadvantageofthelow-
costandlow-riskbenefitsofcloudcomputingfortheirenterpriseapplicationdevelopment
projects,”saidNarinderSingh,CMO,Appirio,aleadingSalesforce.comandGoogle
Enterprisepartner.“Force.comforGoogleAppEnginebringstogethertheleadersincloud
computingtohelpaddressthoseneedsandallowscorporateITtoeasilyscaleupordown
tomeetchangingbusinessconditions.”
Thecompanieshavebeenworkingtogethertoadvancephilanthropiccausesaswellas
thebenefitsofcloudcomputingfordevelopersandcustomers.Beginningin2003withjoint
workaroundthecreationofGoogle.org,thealliancehasbeenextendedtoworktogetheron
mashups,SalesforceforGoogleAdWords,GroupEditionfeaturingGoogleAdWords,
OpenSocial,SalesforceforGoogleApps,Force.comforGoogleDataAPIs,andnowForce
.comforGoogleAppEngine.
Morethan5,000Salesforce.comcustomersareusingGoogleApps,andmorethan10,000
areusingSalesforceforGoogleAdWords.Andfiveofthetoptenmostpopularapplications
ontheForce.comAppExchangemarketplacecomefromGoogle-relatedpartners.
Force.comforGoogleAppEnginehelpsdeveloperscreatenewwebandbusiness
applicationsthatleveragethecapabilitiesofAppEngine,atthesametimeallowingaccess
toForce.comdataandAPIsfromdirectlywithinAppEngineprojectsandapplications.
Force.comforAppEngineincludes
• Gettingstartedguide
• Pythonlibrarydocumentation
• ExamplesshowingPythoncodeaccessingForce.com
• Testingharnessfortheprovidedlibrary
• WikiFAQpageondeveloper.force.comwithbestpracticesandlatesttipsandtricks
GoogleGears
AnotherdevelopmenttoolthatGoogleoffersisGoogleGears,anopen-sourcetechnology
forcreatingofflinewebapplications.Thisbrowserextensionwasmadeavailableinitsearly
stagessothatthedevelopmentcommunitycouldtestitscapabilitiesandlimitationsand
helpGoogleimproveuponit.Google’slong-termhopeisthatGoogleGearscanhelpthe
industryasawholemovetowardasinglestandardforofflinecapabilitiesthatall
developerscanuse.
Chapter 11: Developing Applications 217
PART III
GoogleGearsaddressesamajoruserconcern:availabilityofdataandapplications
whenthere’snoInternetconnectionavailable,orwhenaconnectionissloworunreliable.
AsapplicationdevelopersandusersalikewanttodomoreontheWeb—whetherit’semail
orCRMorphotoediting—enhancementsthatmakethebrowserenvironmentitselfmore
powerfulareincreasinglyimportant.
“WithGoogleGearswe’retacklingakeylimitationofthebrowserinordertomakeita
strongerplatformfordeployingalltypesofapplicationsandenablingabetteruser
experienceinthecloud,”saidEricSchmidt,CEOofGoogle.“Webelievestronglyinthe
powerofthecommunitytostretchthisnewtechnologytothelimitsofwhat’spossibleand
ultimatelyemergewithanopenstandardthatbenefitseveryone.”
GoogleoffersGoogleGearsasafree,fullyopen-sourcetechnologyinordertohelp
everywebapplication,notjustGoogleapplications.Asanexampleofwhatispossible,the
GoogleReaderfeedreader(http://reader.google.com)isavailablewithGears-enabled
offlinecapabilities.
218 Part III: Cloud Computing at Work
FIGURE 11-1 In this Google Gears application, some searched phrases are maintained on the local
machine.
Googleintendstoworkcloselywithallmembersofthewebcommunitytoconverge
uponastandardsodevelopershaveoneconsistentAPIforofflinefunctionality.
“We’reveryexcitedtobecollaboratingwithGoogletomovetheindustryforwardtoa
standardcross-platform,cross-browserlocalstoragecapability,”saidKevinLynch,senior
vicepresidentandchiefsoftwarearchitectatAdobe.“TheGearsAPIwillalsobeavailable
inApollo,whichenableswebapplicationstorunonthedesktop,providingdevelopers
withconsistentofflineandlocaldatabasesolutions.”
“Thisannouncementisasignificantstepforwardforwebapplications,”saidBrendan
Eich,CTOatMozillaCorporation.“We’repleasedtoseeGoogleworkingwithopensource
andopenstandardsbodiesonofflinewebapplications.”
“OperaandGooglesharethecommongoalofmakingWebapplicationsricherandmore
robust,”saidHåkonWiumLie,CTO,OperaSoftware.“Developershavelongdesiredthe
functionalityandflexibilityGoogleGearscanofferbrowsers.BecauseOperahasalways
prioritizedgivingouruserswhattheywant,we’reexcitedtoworkwithGoogletoextend
thereachandpowerofWebapplications.”
GoogleGearsbuildsontheWeb’sexistingprogrammingmodelbyintroducingnew
JavaScriptAPIsforsophisticateddatastorage,applicationcaching,andmultithreading
features.WiththeseAPIs,developerscanbringofflinecapabilitiestoeventheirmost
complexwebapplications.GoogleGearsworkswithallmajorbrowsersonallmajor
platforms:Windows,Mac,andLinux.AsampleofGoogleGearsinuseisshownin
Figure11-1.
GoogleGearsisavailableathttp://gears.google.com.
Microsoft
Microsoft’sAzureServicesPlatformisatoolprovidedfordeveloperswhowanttowrite
applicationsthataregoingtorunpartiallyorentirelyinaremotedatacenter.
Chapter 11: Developing Applications 219
TheAzureServicesPlatform(Azure)isanInternet-scalecloudservicesplatformhosted
inMicrosoftdatacenters,whichprovidesanoperatingsystemandasetofdeveloper
servicesthatcanbeusedindividuallyortogether.Azurecanbeusedtobuildnew
applicationstorunfromthecloudortoenhanceexistingapplicationswithcloud-based
capabilities,anditformsthefoundationofallMicrosoft’scloudofferings.Itsopen
architecturegivesdevelopersthechoicetobuildwebapplications,applicationsrunningon
connecteddevices,PCs,servers,orhybridsolutionsofferingthebestofonlineandon-
premises.SomeoftheapplicationsavailableontheAzurecloudareshowninFigure11-2.
Azureallowsdeveloperstoquicklycreateapplicationsrunninginthecloudbyusing
theirexistingskillswiththeMicrosoftVisualStudiodevelopmentenvironmentandthe
Microsoft.NETFramework.Inadditiontomanagingcodelanguagessupportedby.NET,
Microsoftplansmoresupportforadditionalprogramminglanguagesanddevelopment
environments.
PART III
FIGURE 11-2 Microsoft’s Azure offers a number of applications that you can use right away.
220 Part III: Cloud Computing at Work
Infrastructuremanagementisautomatedwithaplatformthatisdesignedforhigh
availabilityanddynamicscalingtomatchusageneedswiththeoptionofapay-as-you-go
pricingmodel.Azureprovidesanopen,standards-based,andinteroperableenvironment
withsupportformultipleInternetprotocols,includingHTTP,REST,SOAP,andXML.
Microsoftalsoofferscloudapplicationsreadyforconsumptionbycustomerssuchas
WindowsLive,MicrosoftDynamics,andotherMicrosoftOnlineServicesforbusinesssuch
asMicrosoftExchangeOnlineandSharePointOnline.TheAzureServicesPlatformlets
developersprovidetheirownuniquecustomerofferingsbyofferingthefoundational
componentsofcompute,storage,andbuildingblockservicestoauthorandcompose
applicationsinthecloud.
AzureutilizesseveralotherMicrosoftservicesaspartofitsplatform,knownastheLive
Meshplatform.
LiveServices
LiveServicesisasetofbuildingblockswithintheAzureServicesPlatformthatisusedto
handleuserdataandapplicationresources.LiveServicesprovidesdeveloperswithaway
tobuildsocialapplicationsandexperiencesacrossarangeofdigitaldevicesthatcan
connectwithoneofthelargestaudiencesontheWeb.
Chapter 11: Developing Applications 221
MicrosoftSQLServices
MicrosoftSQLServicesenhancesthecapabilitiesofMicrosoftSQLServerintothecloudasa
web-based,distributedrelationaldatabase.Itprovideswebservicesthatenablerelational
queries,search,anddatasynchronizationwithmobileusers,remoteoffices,andbusiness
partners.Itcanstoreandretrievestructured,semistructured,andunstructureddata.
Microsoft.NETServices
Microsoft.NETServicesisatoolfordevelopinglooselycoupledcloud-basedapplications.
.NETServicesincludesaccesscontroltohelpsecureapplications,aservicebusfor
communicatingacrossapplicationsandservices,andhostedworkflowexecution.These
hostedservicesallowthecreationofapplicationsthatspanfromon-premisesenvironments
tothecloud.
MicrosoftSharePointServicesandDynamicsCRMServices
MicrosoftSharePointServicesandDynamicsCRMServicesareusedtoallowdevelopersto
collaborateandbuildstrongcustomerrelationships.UsingtoolslikeVisualStudio,
developerscanbuildapplicationsthatutilizeSharePointandCRMcapabilities.
PART III
Design
Azureisdesignedinseverallayers,withdifferentthingsgoingonunderthehood.
LayerZero
LayerZeroisMicrosoft’sGlobalFoundationalService.GFSisakintothehardware
abstractionlayer(HAL)inWindows.Itisthemostbasiclevelofthesoftwarethatinterfaces
directlywiththeservers.
LayerOne
LayerOneisthebaseAzureoperatingsystem.Itusedtobecode-named“RedDog,”and
wasdesignedbyateamofoperatingsystemexpertsatMicrosoft.RedDogisthetechnology
thatnetworksandmanagestheWindowsServer2008machinesthatformtheMicrosoft-
hostedcloud.
RedDogismadeupoffourpillars:
• Storage(afilesystem)
• Thefabriccontroller,whichisamanagementsystemfordeployingand
provisioning
• Virtualizedcomputation/VM
• Developmentenvironment,whichallowsdeveloperstoemulateRedDogontheir
desktops
222 Part III: Cloud Computing at Work
RedDogisdesignedbyMicrosoftsuchthatitonlyhastobedeployedonasingle
machine,andthenmultipleinstancesofitcanbeduplicatedtotherestofthemachinesin
thecloud.
LayerTwo
LayerTwoprovidesthebuildingblocksthatrunonAzure.Theseservicesarethe
aforementionedLiveMeshplatform.Developersbuildontopoftheselower-levelservices
whenbuildingcloudapps.
SharePointServicesandCRMServicesarenotthesameasSharePointOnlineandCRM
Online.Theyarejusttheplatformbasicsthatdonotincludeuserinterfaceelements.
LayerThree
AtLayerThreeexisttheAzure-hostedapplications.Someoftheapplicationsdevelopedby
MicrosoftincludeSharePointOnline,ExchangeOnline,DynamicsCRM,andOnline.Third
partieswillcreateotherapplications.
IntuitQuickBase
CullenCoates,amanagementconsultantfromLarkspur,California–basedCrystalBay
Solutions,isnotasoftwareengineer.Butthatdidn’tkeephimfromcreatinganentiresuite
ofon-demandsoftwareapplicationstoassistnonprofitorganizations—everythingfrom
donormanagementtocollaborativetoolsforworkgroups—withoutwritingasingleline
ofcode.
Coatesisjustoneofagrowinggroupofvalue-addedresellers,orVARs,thatareshifting
theirbusinessmodelsawayfromresellingandinstallingpackagedsolutionstotake
advantageoftheimplementationspeedandcost-effectivenessofdeliveringSaaS.
Tosupportthisnewgenerationofconsultants,IntuitInc.’sQuickBaselauncheditsnew
QuickBaseBusinessConsultantProgram.Theprogramallowsmemberstousetheir
expertisetocreateuniquebusinessapplicationstailoredspecificallytotheindustriesthey
serve—withouttechnicalexpertiseorcoding.Thishelpsmembersexpandtheirreachinto
industriesformerlyservedonlybyITexperts.UsingQuickBase,programmemberswillbe
abletoeasilybuildnewon-demandbusinessapplicationsfromscratchorcustomizeoneof
200availabletemplatesandresellthemtotheirclients.
Chapter 11: Developing Applications 223
PART III
“SaaSimplementationsdonotrequirehighlytechnicalpeople,althoughtheymay
requireconsultantswithdataintegrationskills.Instead,seasonedbusinessprocess
managementconsultantswillbecomethefocusforsuccessfulprojectdelivery,”accordingto
ForresterResearchInc.’sOct.29,2008report,“SaaSEconomicsWillChangeISVs’SIAnd
VARChannels.”
“Asaresult,thetechnicalintegrationandcustomizationservicesrevenuesshiftto
processtransformationprojects—andintothecoffersofsystemintegratorsandVARsthat
havetheseconsultingskills,”thereportadds.
BeforejoiningtheQuickBaseprogram,Coates’firmwaslimitedtorecommendingoff-
the-shelfapplicationsthatcostmorethan$100,000orcustom-developedsolutionsbuilton
otherplatforms.
“Today,IcandeliveraQuickBaseapplicationcustomizedspecificallyforacustomer’s
businessprocessinaquarterofthetime,athalfthecostandtwicethemargin,”saidCoates.
“Plus,sinceit’sasoftware-as-a-serviceapplication,thecostsarelowerformycustomers
andtheycanbeupandrunninginweeks,ratherthanmonths.”
Tohelpmemberssucceed,theprogramprovidestraining,partnerrelationship
management,andlead-generationtoolstohelpthemlocatepotentialcustomersand
maximizethepowerofQuickBase.QuickBaseBusinessConsultantsalsoreceiveafree
versionofQuickBooksOnlinetohelpthembettermanageandgrowtheirownbusinesses.
224 Part III: Cloud Computing at Work
“Untilnow,businesseshadtochooseeitheratailormadesolutionthatfittheirprocess,
oraSaaSsolutionthatwasfast,lowriskandprovidedanytime,anywhereaccess.Now,
creatingatailoredsolutionforbusinessonaSaaSplatformisnotonlypossible,it’seasy,”
saidBillLucchini,vicepresidentandgeneralmanagerofQuickBase.“Makingsoftwarefit
thebusinessneedswasformerlytheexclusiveterritoryofITandengineers.Withthe
QuickBaseBusinessConsultantProgram,thevalueshiftstotheentrepreneursandindustry
expertswhocannowsolverealbusinessproblemswithoutbeingatechnicalexpert.
Entrepreneursandforward-thinkingVARswillseehugebenefitsfromthisshift.”
FormoreinformationontheQuickBaseBusinessConsultantProgramandtoapplyto
theprogram,visit:http://quickbase.intuit.com/links/partners.asp.
CastIronCloud
CastIronSystemsintroduceditsdevelopmentplatform,theCastIronCloud.CastIron
offersthechoiceofacompletelycloud-basedintegrationserviceoranon-premise
integrationapplianceasanorganization’sapplicationecosystemevolves.Anyorganization,
regardlessofsizeorresources,canconnectSaaSsolutionswithotheron-demandandon-
premiseapplications,immediatelyboostingproductivity.
“ProductiveSaaSdeploymentsdon’toperateinavacuum,”saidKenComée,CEOand
presidentofCastIronSystems.“CompaniesmustbeabletoefficientlyintegrateSaaS
solutionswithotherenterprisesystemstoeffectivelyorchestratecross-functionalbusiness
processes.BydeliveringourintegrationsolutionintheCastIronCloud,orviaouron-
premiseappliances,wecanprovideorganizationswithaseamlessandsecuretransition
betweenon-demandandon-premiseenvironments.”
AsSaaSusageexpandsfromdepartmentalsilosintotheextendedenterprise,
integrationofdataandapplicationsisevenmorecriticaltoproductivityandsuccess.Cast
IronanditspartnerscandeliverthemostwidelyusedsolutionforconnectingSaaSand
enterpriseapplicationsthroughthesimplicityandspeedofIntegrationasaService(IaaS).
TheCastIronCloudleveragesthecompany’sdeliveryofcompletedintegrationprojects
quicklyandalsoeliminatestheneedforcustomerstoinvestinintegrationinfrastructureor
deepmiddlewareexpertise.
Chapter 11: Developing Applications 225
PART III
“OurcustomershavebeenverysuccessfulusingCastIrontobringForce.comand
SalesforceCRMintotheirITenvironments,”saidArielKelman,seniordirectorofplatform
productmarketingatSalesforce.com.“WithCastIronintegrationsolutionsavailableonthe
Force.comAppExchange,smallbusinessesandlargeenterprisesaliketellusthatCastIron
givesthemgreattimetovaluefortheirintegrationprojects.”
“GiventhegrowingnumberofverticalsolutionsbuiltonNS-BOSforNetSuite,aswell
astheincreasingsophisticationofourcustomerbase,wewantedtoprovideourcustomers
andpartnersoptionsonhowtoconnecttospecificverticalandlegacysystems,”saidMini
Peiris,NetSuite’svicepresidentofproductmarketing.“Withbuilt-inconnectivityto
NetSuitesolutionsandtheflexibilitytodeliverintegrationinthecloudorusingan
appliance,CastIronacceleratesadoptionofourERP,ecommerce,andCRMsuite.”
AnalystfirmsSaugatuckTechnologyandGartnerexplaintheimportanceofthis
announcementforbothSaaSusersandproviders.
AnalystMichaelWestofSaugatuckTechnologysummarizes:“Totakeadvantageof
SaaSatanenterpriselevel,usersmusthaveaccesstobroad,deep,andsophisticated
integrationcapabilities.Requirementsforintegrationcouldstifleeffectiveandefficient
enterprise-widedeploymentofSaaSunlessSaaSproviderscommittodeliveringmoreand
betterenterprise-readyintegrationsolutions.”
226 Part III: Cloud Computing at Work
AccordingtoGartner,“Ananalysisofacross-sectionofsuccessfulSaaSvendorsreveals
thatbusiness-to-business(B2B)flexibility—ratherthananyoneB2Bstandardorapproach—
lowersbarrierstoSaaSintegrationandhelpsdriveSaaSadoption.ThediversityofSaaS
integrationsolutionsfromSaaSvendorsisgoodbecauseitgivescustomersmoreoptionsto
solvetheirdiverseintegrationrequirements.”
ByofferingitsSaaSintegrationsolutioninthecloudandon-premise,CastIronis
anticipatingthesediverseend-to-endapplicationintegrationneeds,includingdata
cleansingandmigration,andapplicationintegrationbyofferingintelligentconnections,
datatransformations,processworkflow,monitoringandmanagement,plusguaranteed
deliveryofalldata.
CastIronistransformingtheintegrationexperienceusingtheCastIronCloud.The
companyisintroducingacloud-basedlibraryofpreconfiguredTemplateIntegration
Processes(TIPs)forthemostcommonSaaSbusinessprocesses.CastIronhascreatedthese
templatesbasedonitsexperiencewiththousandsofcustomerintegrations.Forexample,if
customersneedtointegratetwoSaaSapplications,theysimplysearchCastIron’scloud-
basedlibraryofTIPs,choosetheTIPthatmatchestheirscenario,anddeployittotheCast
IronCloud.Inminutes,theirSaaSintegrationprojectgoesliveratherthantakingweeksor
evenmonthstodevelopusingcustomcode.Inaddition,SaaSintegrationscanbemonitored
fromanywhereatanytimeusingtheCastIronCloud.
ForcompaniesthatwanttocustomizeTIPsbasedontheirspecificrequirements,Cast
Ironisprovidingaself-guidedwizardsimilartothesimplewizard-basedexperiencein
popularproductslikeIntuitTurboTax.Usersanswerafewquestionsbasedonthespecific
situation,andtheintegrationprocessisautomaticallycustomizedtoexpediteSaaS
integrationandadoption.
BungeeConnect
BungeeLabsoffersitsBungeeConnectwebapplicationdevelopmentandhostingplatform.
DevelopersuseBungeeConnecttobuilddesktop-likewebapplicationsthatleverage
multiplewebservicesanddatabases,andthendeploythemonBungee’smultitenantgrid
infrastructure.
BungeeConnectprovidesdevelopment,testing,deployment,andhostinginasingle,
on-demandplatform.Thecompanyclaimsthatusingtheirsolution,significanttimeand
costareeliminatedacrosstheentireapplicationlifecycle—reducingtime-to-marketbyas
muchas80percent.
BungeeConnectincludesthefollowingfeatures:
• Asingle,on-demandenvironmentfordeveloping,testing,deploying,andhosting
• Interactiondeliveredentirelyviabrowserwithnodownloadorplug-infor
developersorendusers
• Deliveryofhighlyinteractiveuserexperiencewithoutcompromisingaccessibility
andsecurity
• Automatedintegrationofwebservices(SOAP/REST)anddatabases(MySQL/
PostgreSQL)
• Built-inteamcollaborationandtesting
Chapter 11: Developing Applications 227
• Built-inscalability,reliability,andsecurity
• Deepinstrumentationofend-userapplicationutilizationforanalytics
• Utilitypricingmodelbasedonend-userapplicationuse
DevelopersandITmanagerscanleverageacompletelyonlineplatformtobuildand
deliverpowerful,AJAX-enabled,multipledata-sourcewebapplications.Applicationsmay
beembeddedwithinotherwebapplicationsandpages,SoftwareasaService(SaaS)solutions,
ordeliveredasstand-alonewebdestinations.
PART III
“Cloudcomputing,internal-externalmashupsandonlinebusinessservicesare
hasteningtheneedfornewbusinessmodelsthatcansupportentireapplicationlifecycles,”
saidDanaGardner,principalanalystofInterarborSolutions.“It’snotenoughtodevelopas
aservice,ortodeployasaservice—thefullercost-benefitpaybackcomesfromthe
applicationlifecycleasaservice.Allthebetterthatcoststosupporttheapplicationsfrom
inceptiontosunsetarecommensuratewithuseanddemand.EnterpriseITinnovatorsand
228 Part III: Cloud Computing at Work
efficiency-mindedindependentdevelopersalikeshouldviewtheBungeeConnectmodelas
theplatformandmashupapproachofthefuture.”
Development,teamcollaboration,andtestdeploymenthostingonBungeeConnectarefree
ofcharge.Developerspayonlywhentheirapplicationsareactuallyusedbyendusers.Oncea
Bungee-poweredapplicationisdeployedontheBungeeGridinfrastructure,end-user
utilizationoftheapplicationisdeeplyinstrumentedtoprovidedeveloperswithdetailedinsight
intoapplicationperformanceandusagepatterns,andtocomputetheapplication’sutilitybill.
Dependingontheusageprofileofanapplication,businessescanexpecttopaybetween
US$2toUS$5peruserpermonthforaheavilyusedbusinessproductivityapplication,or
fractionsofacentpere-commercetransaction.AllBungee-poweredapplicationsarehosted
forfreeduringtheBungeeConnectPublicBeta.
FormoreinformationaboutBungeeConnect,visithttp://www.bungeeconnect.com.
Development
Aswehavenoted,therearemanydifferentplacesyoucanturntodevelopyourown
applications.Wedon’thavethespacetocovereachandeverydevelopmentplatform,so
we’llwalkyouthroughthedevelopmentstepswiththreedifferent,popularplatforms:the
GoogleAppEngine,Salesforce.com,andMicrosoftAzure.
GoogleAppEngine
GoogleusesPython,sowe’llusethatscriptinthisdemonstration.Again,thisisnotmeant
tobeacomprehensiveexplanationofPython.Indeed,entirebookshavebeenwrittenabout
Python,butwe’reonlygoingtouseonePythoncommand.Wearen’tgoingtomake
anythingparticularlyrobust(orusefulforthatmatter),butit’lldemonstratethebasicsso
yougetanideaofhowappsaredeveloped.
Environment
Togetstarted,youmustfirstdownloadtheGoogleAppEnginedevelopmentkit,locatedat
http://code.google.com/appengine/downloads.html.TheSDKisavailableforWindows,
MacOSX,andLinuxenvironmentsthatalsohavePython2.5.
TheSDKincludesawebserverapplicationthatsimulatestheAppEngineenvironment.
Italsoincludesalocalversionofdatastore,GoogleAccounts,andtheabilitytogetURLs
andsendemailfromyourcomputerusingtheAppEngineAPIs.
NOTE YouwillneedPython2.5installedonyourcomputer.MacOSXLeopardusersalready
havePython2.5installed.YoucandownloadPythonfromthePythonwebsiteat
http://www.python.org/.
DownloadandinstalltheAppEngineSDK.Forthisdemonstration,youwillusetwo
commandsfromtheSDK:
• dev_appserver.py Thedevelopmentwebserver
• appcfg.py UsedtouploadyourapptoAppEngine
IfyouareusingtheZiparchiveversionoftheSDK,thosecommandsarelocatedinthe
google_appenginedirectory.
Chapter 11: Developing Applications 229
TheApp
AppEngineapplicationscommunicatewiththewebserverusingtheCGIstandard.When
theserverreceivesarequestforyourapplication,itrunstheappwiththerequestdatain
environmentvariablesandontheinputstream.Whenitresponds,theappwritesthe
responsetotheoutputstreamandincludesHTTPcontent.
Here’sJohnny! Theappwearegoingtomakedisplaysalittlegreeting.Togetstarted,make
adirectorynamedheresjohnny.Allthefilesforthisappwillbestoredinthisdirectory.
Insidethatdirectory,createafilenamedheresjohnny.pytoincludethiscode:
print'Content-Type:text/plain'
print''
print'Here'sJohnny!'
PART III
What’sgoingonhereisthatthePythonscriptrespondstotherequestwithanHTTP
headerthatdescribescontent(HTTP),ablankline,andthemessage,“Here’sJohnny!”
ConfigurationFile Next,youneedtohaveaconfigurationfilecalledapp.yaml.Whatthis
doesistodescribe—amongotherthings—whichhandlerscriptsaretobeusedforwhich
URLs.
Createafileinthedirectorycalledapp.yamlandwriteittoreadasfollows:
application:heresjohnny
version:1
runtime:python
api_version:1
handlers:
-url:/.*
script:heresjohnny.py
230 Part III: Cloud Computing at Work
Here’swhatthecodeisdoing,linebyline:
• Theapplicationidentifierisheresjohnny.Whentheapplicationisregisteredwith
AppEngine,youselectauniqueidentifier,sothiswillchange.Itcanbenamed
whateveryouwantatthisstage.
• Sincethisisthefirstversionofthiscode,thisisnumber1.Usethisfieldtokeep
trackofdifferentversionsofyourapp’scode.
• ThiscoderunsinthePythonruntimeenvironment,version1.
• EveryrequesttoaURLwhosepathmatchestheregularexpression/.*willbe
handledbytheheresjohnny.pyscript.
ScriptTesting BecausethehandlerscriptandconfigurationfilearemappingeveryURLto
thehandler,theapplicationisdone.That’sit.Nowyoucantesttheappwiththewebserver
includedwiththeAppEngineSDK.
Startthewebserverwiththefollowingcommand(includingthepathtothe
heresjohnnydirectory):
google_appengine/dev_appserver.pyheresjohnny/
Nowthatthewebserverisrunning,itislisteningforrequestsonport8080.Checkto
makesureitisusingthatportbyenteringthisURLinawebbrowser:
http://localhost:8080/
Youcanleavethewebserverrunning,evenifyoumakechangestotheapp.Theweb
serverknowstowatchforchangesinyoursourcefilesandreloadthemifneedbe.
Testitout.Makeachangetoyourheresjohnny.pyfileandthenreloadthepageby
enteringhttp://localhost:8080.
UploadingtheApp
AftercreatingandmanagingyourappandregisteringitonGoogle,thenextstepisto
uploadtheapplicationusingacommand-linetoolincludedintheSDKcalledappcfg.py.
Registration Afteryou’vecreatedyourappusingtheAdministrationConsole(foundat
http://appengine.google.com/),thenextstepistoregistertheapplicationIDforyour
application.ThisisshowninFigure11-3.
Chapter 11: Developing Applications 231
PART III
FIGURE 11-3 Use the Administration Console to register your apps on Google App Engine.
AsyoucanseeinFigure11-3,thenamewewanted—“Here’sJohnny!”—hasalready
beentaken.We’llgiveitamoreconvolutedname.Aftertryingseveralnames(allofwhich
weretaken),wejustthrewinsomerandomlettersandnumbers.Whatthisdoesisregister
theappwithGoogle.TheappwillstillbecalledHere’sJohnny.Therecanbeamillionapps
namedHere’sJohnny,buttheyallneeddifferentregistrationcodes.Oncetheregistrationis
successful,youseeascreenliketheoneinFigure11-4thatletsyoustartmanagingyourapp
ontheGoogleCloud.
Oncetheregistrationiscompleted,youaccesstheapplicationbygoingto
http://application-id.appspot.com.Inourcase,itwouldbehttp://pos7412.appspot.com.
Next,youhavetogobackintoyourapp.yamlfileandchangethevalueofthe
application:setting.Inourcase,itisbeingchangedfromheresjohnnytopos7412.
Thistellsthesystemwhattheappisregisteredas.
SendItIn TouploadyourfinishedapplicationtoGoogleAppEngine,runthefollowing
command:
appcfg.pyupdateheresjohnny/
232 Part III: Cloud Computing at Work
FIGURE 11-4 Once you’ve registered the app, Google lets you know that it’s got a home.
EnteryourGoogleusernameandpasswordattheprompts.Nowyoucanseeyour
applicationonAppEngineandallyouneedtodoisopenupawebbrowserandenter
http://application-id.appspot.com.
Obviously,thisisaverysimple,verybasicexample.Youcandomuchmorewiththe
GoogleAppEngineSDK.Youcanfindoutmoreinformationondevelopmentfrom
whatevervendoryougetanSDKfor.
Salesforce.com
Salesforcehastwowaystocreateanapplication—usingpoint-and-clickmethodsorbyusing
thecommandline.Inthissection,we’llexaminetheGUImethodofapplicationdeveloping
anapplication.Inthisexample,we’lldevelopanapplicationthattracksyourlunchexpenses.
CreateanAccount
ThefirststepistocreateyourSalesforceaccount.Thisisafairlystraightforwardaffairand
it’ssomethingyou’veprobablyalreadydoneondozensofwebsites.Youneedtogoto
http://developer.force.com/join.Simplyfollowthesteps(you’llneedtoanswername,
password,username,andsoforth)andyou’llbesetup.
Afterafewminutesyou’llgetanemailfromSalesforcewithalinktoactivatethe
account.OnceyoulogintoyourDeveloperEditionorganization,thenlogintohttps://
login.salesforce.com.
CreateanObject
Thenextstepistocreateanobjectthatwillholdthedata—ourlunchexpenses.Salesforce
applicationsalreadycontainalotofprebuiltobjects—calledstandardobjects—forthedatayour
applicationsneed.However,youcanbuildcustomapplications.Thosearecalledcustomobjects.
Chapter 11: Developing Applications 233
Tocreatetheobject,logintoyourSalesforceaccountathttps:/login.salesforce.comand
enteryourusernameandpassword.Next,createthecustomobjectbyfollowingthesesteps:
1. SelectSetupintheupper-rightcornerofthepage.
2. ClickCreateObjectsinthesidebarmenutoshowtheCustomObjectspage.
PART III
Fillinthecustomobjectdefinition.ThisisshowninFigure11-5:
3. UnderLabel,enterLunch.
4. UnderPluralLabel,enterLunch.
5. UndertheObjectName,enterLunch.
6. UndertheDescription,enterAnobjectthatholdslunchexpenseinformation.
7. SelecttheAllowActivitiescheckbox.
8. SelecttheAllowReportscheckbox.
9. Leavealltheothervaluesattheirdefaultlevels.
10. ClickSavetofinishthecustomobjectcreation.
234 Part III: Cloud Computing at Work
Fields
Afterthecustomobjectismadetoholdyourlunchexpenses,thenextstepistoaddfields
thatcapturethedateofyourbusinesslunch,howmuchyouspent,andthepersonyou
entertained.
Date First,createtheDatefield(showninFigure11-6).
1. ScrolldowntotheCustomFields&Relationshipsrelatedlist.
2. SelectNewtostarttheNewCustomFieldWizard.
3. UnderDataType,selectDateandclickNext.
Chapter 11: Developing Applications 235
PART III
FIGURE 11-6 A key piece of data to be tracked by this app is the date.
4. Enterthefollowingdata(showninFigure11-7):
• UnderFieldLabel,enterDate.
• UnderFieldName,enterDate.
• UndertheDescription,enterDateoflunch.
• ChecktheRequiredcheckbox.
• FortheDefaultValue,enterToday().
5. ClickNext,acceptthedefaults,andclickNextagain.
6. ClickSave&NewtocreatetheDatefieldandtorestartthewizardforthenextfield.
236 Part III: Cloud Computing at Work
FIGURE 11-7 When filled, the values in the Date field should look like this.
Cost ThenextfieldtogenerateistheCostfield.Thisiswherethecostofyourbusiness
lunchisstored.Thewizardwasautomaticallyrestartedintheprevioussection.
FortheDataType,selectNumber(showninFigure11-8).
Fillinthefieldsasfollows(showninFigure11-9):
1. UnderFieldLabel,enterCost.
2. FortheLength,enter4.
3. UnderDecimalPlaces,enter2.
4. FortheFieldName,enterCost.
5. FortheDescription,enterCostoflunch.
6. ChecktheRequiredcheckbox.
7. ClickNext,acceptthedefaults,andclickSave&Newtocreatethenextfield.
Chapter 11: Developing Applications 237
PART III
FIGURE 11-8 The next field to define is the Cost field.
Contact ThenextfieldistheContactfield.Thisisthepersonwithwhomyouhadyour
businesslunch.Again,ifyouclickedSave&Newintheprevioussection,thefieldwizard
restarts.
FortheDataType,selectLookupRelationship(showninFigure11-10)andclickNext.
TheLookupRelationshipdatatypeallowsyoutolinktwodataobjects.Inthisexample,
we’llconnecttheCostobjectandtheContactobject.
IntheRelatedTodrop-downlist,selectContactandclickNext.
238 Part III: Cloud Computing at Work
FIGURE 11-9 When filled, information in your Cost field will look like this.
Fillinthefielddetailsasfollows(showninFigure11-11):
1. UnderFieldLabel,enterContact.
2. UnderFieldName,enterContact.
3. UnderDescription,enterPersonIhadlunchwith.
4. Leavetheremainingdefaultsastheyare,andthenclickNext.
5. AcceptthedefaultsagainandclickNext.
6. ClickNexttwomoretimes.
7. ClickSavetofinishupthefieldcreationprocess.
Chapter 11: Developing Applications 239
PART III
FIGURE 11-10 Selecting the Lookup Relationship data type allows you to link data for two objects.
CreateaTab
ToshowyourapplicationontheSalesforcewebsite,youneedtocreateatabtobeaddedto
theexistingtabs.Whenusersclickthistab,they’llbeabletotracktheirlunchexpenses.
1. Onthestartuppage,clickCreateTabs(thiswasthesamescreenwhereyoucreated
theobject).
2. ClickNewintheCustomObjectstablisttolaunchtheNewCustomTabwizard.
3. FromtheObjectdrop-downlist,selectLunch.
4. FortheTabStyle,clickthelookupiconandselecttheapple,showninFigure11-12
(itwasouronlyfoodoption).
240 Part III: Cloud Computing at Work
FIGURE 11-11 The Contacts field should be configured to look like this.
5. AccepttheremainingdefaultsandclickNext.
6. ClickNextandthenSavetofinishcreatingthetab.
7. Oncethetabhasbeencreated,itisaddedtoyoursetoftabs.
MaketheApp
Atthispoint,wehavecreatedthreefieldsandatab.Theseareallpulledtogethertocreate
ourapp.Youmaketheappbyfollowingthesesteps:
1. GotoSetupCreateApps.
2. ClickNewtolaunchtheNewCustomAppWizard.
Enterthefollowingdetails(showninFigure11-13):
1. UnderAppLabel,enterLunchTracker.
2. UndertheAppName,enterLunch_Tracker.
Chapter 11: Developing Applications 241
PART III
FIGURE 11-12 Start creating your app by defining a custom object.
3. UndertheDescription,enterThisapplicationtracksyourlunchexpenses.
4. ClickNext.
5. Acceptthedefaultsandthedefaultlogofortheapp,andthenclickNext.
6. IntheAvailableTabsbox,locatetheLunchtabandclickAddtoaddittothe
selectedtabs.
7. LeavetheDefaultLandingtabsettotheHometabandclickNext.
8. SelecttheVisiblecheckboxtomaketheappavailabletoallusers.
9. ClickSavetocreatetheLunchTrackerapp.
10. Repeatthesteps1–9,butthistimeselecttheContactstab.ThisisshowninFigure11-14.
11. Aftertheappiscreated,itisshownontheForce.comappmenuintheupperright.
242 Part III: Cloud Computing at Work
FIGURE 11-13 Configure your app to have settings like this one.
TestItOut
Nowthatyourapphasbeencreated,let’stakeitforaspin.
1. SelecttheLunchTrackerapplicationfromtheForce.comappmenuattheupper
rightofthescreen.
2. ClickontheLunchTrackertabandclickNewtocreateanewlunchexpenseentry.
3. Entersometestdata(ourexampleisshowninFigure11-15).
4. FortheContactfield,clickthelookupicon,clickNewtocreateanewcontact
namedBruceDickinson,andthenclickSave.
5. ClickSavetosaveyourrecordandtoreturntothedetailpageforthenewrecord.
Andthereyouhaveit.YouwereabletomakeyourveryownapponSalesforcequickly
andeasily,andyoudidn’tneedtouseanycoding—itwasallpointandclick.
Chapter 11: Developing Applications 243
PART III
FIGURE 11-14 Choose Contacts and Lunch to be included in tabs.
MicrosoftWindowsAzure
Microsoft’sAzureplatformisalittledifferenttodevelopappsfor.ItissimilartoGoogle
AppEngineinthatyouhavetodownloadanSDK,butitsfeaturesarealittlemorerich.
YoudevelopapplicationswithinVisualStudio,whichyouthenpublishtotheWindows
cloud.
TheAzureServicesPlatformisdesignedtohelpyouquicklyandeasilycreate,deploy,
manage,anddistributewebservicesandapplicationsontheInternet.
WindowsAzureisanoperatingsystemforthecloudthatservesasthedevelopment,
run-time,andcontrolenvironmentfortheAzureServicesPlatform.WindowsAzure
providesdeveloperswithon-demandcomputeandstoragetohost,scale,andmanageweb
applicationsontheInternetthroughMicrosoftdatacenters.
244 Part III: Cloud Computing at Work
SDK
TogetstarteddevelopingapplicationsforAzure,youmustfirstdownloadtheSDK.
TheJanuary2009releaseislocatedathttp://www.microsoft.com/downloads/details
.aspx?FamilyID=80e3eabf-0507-4560-aeb6-d31e9a70a0a6&displaylang=en.
Chapter 11: Developing Applications 245
PART III
NOTE TherehavebeenseveraldifferentreleasesoftheSDK.ChecktheMicrosoftwebsiteforthe
mostcurrentversion.
UnliketheGoogleAppEngine,whichhasbeenwrittenforWindows,Linux,andMac
OSX,AzureonlyoperatesonthelatestWindowsmachines.Takealookatthesystem
requirementstoseeifyourmachineiscapableofrunningtheSDK.
Supportedoperatingsystemsinclude
• WindowsServer2008Enterprise
• WindowsServer2008Standard
• WindowsVistaBusiness
• WindowsVistaBusiness64-bitedition
• WindowsVistaHomePremium
• WindowsVistaHomePremium64-bitedition
• WindowsVistaUltimate
• WindowsVistaUltimate64-bitedition
246 Part III: Cloud Computing at Work
NOTE Ifyouhavea64-bitmachine,youneedtousethe64-bitversionoftheSDK.The32-bit
versionwillnotwork.
Othersoftwarerequirementsinclude
• WindowsVistaSP1(wheninstallingonWindowsVista)
• .NETFramework3.5SP1
• IIS7.0(withASP.NETandWCFHTTPActivation)
• MicrosoftSQLServerExpress2005orMicrosoftSQLServerExpress2008
• WindowsPowerShell(optional)
MicrosoftalsorecommendsthatyouhavetheWindowsAzureToolsforMicrosoft
VisualStudioinstalled.
OnceyouinstalltheAzureSDK,itwilladdnewtemplates:
• BlankCloudService
• WebCloudService
• WebandWorkerCloudService
• WorkerCloudService
WindowsAzureSDKincludestwodevelopmentutilities.Thishelpsusdevelopour
WindowsAzureapplicationinourlocalmachine:
• TheDevelopmentFabric ThistoolhelpsustorunandtestWindowsAzure
applicationlocallybeforedeployingintoCloud.
• TheDevelopmentStorage ThissimulatestheBlob,Queue,andTableStorage
servicesavailableinthecloud.
EnablingIIS7.0onWindowsServer2008
YouwillneedtoenableIIS7.0withWCFHTTPActivationonWindowsServer2008.Todo
this,followthesesteps:
1. ClicktheStartbuttonandthenpointtoAllPrograms.
2. PointtoAdministrativeToolsandthenclickServerManager.
3. InServerManagerunderFeaturesSummary,clickAddFeatures.
4. Intheresultingdialogbox,under.NETFramework3.0,click.NETFramework3.0.
5. UnderWCFActivation,clickHTTPActivation.
6. ClickNexttostartHTTPActivation.
7. InServerManager,underRolesSummary,verifythatWebServer(IIS)isonthelist
ofavailableroles.Ifitisnotonthelist,clickAddRolestoinstallInternet
InformationServices.
8. InServerManager,underRolesSummary,clickWebServer(IIS).
9. Intheresultingwindow,clickAddRoleServices.
Chapter 11: Developing Applications 247
10. Inthenextwindow,expandWebServer,expandCommonHTTPFeatures,andthen
clickStaticContent.
11. IntheAddRoleServicesdialogbox,expandWebServer,expandApplication
Development,andthenclickASP.NET.
12. ClickNexttoenableStaticContentandASP.NET.
EnablingIIS7.0onWindowsVista
ToenableIIS7.0withASP.NETandWCFHTTPActivationonWindowsVista,followthese
steps:
1. ClicktheStartbutton,clickSettings,clickControlPanel,clickPrograms,andthen
clickProgramsandFeatures.
2. ClickTurnWindowsFeaturesOnorOff.
3. UnderMicrosoft.NETFramework3.0,clickWindowsCommunicationFoundation
HTTPActivation.
4. UnderInternetInformationServices,expandWorldWideWebServices.
5. UnderApplicationDevelopmentFeatures,clickASP.NET.
PART III
6. UnderCommonHTTPFeatures,clickStaticContent.
7. Installtheselectedfeatures.
InstalltheWindowsAzureSDK
IfyouhaveanoldversionoftheWindowsAzureSDKonyourmachine,youmustremove
itbeforeinstallingthenewversion.Right-clicktheMicrosoftWindowsInstallerfile,and
thenclickUninstalltoremovethepreviousversionoftheSDK.
Next,installtheSDKonyourcomputerbyrunningtheWindowsInstallerfile.By
default,theSDKisinstalledintotheC:\ProgramFiles\WindowsAzureSDK\directory.
248 Part III: Cloud Computing at Work
TesttheSDK
TheSDKcomeswithanumberofsamplesthatyoumayfinduseful.Here,we’regoingto
usethemtotestoutthenewinstallation.
NavigatetotheaforementionedSDKdirectoryandunzipthefiletoadirectorywhere
youhavewriteaccess.
NOTE YoumightnothavewriteaccesstothedirectoriesundertheProgramFilesdirectory,soit’s
advisedtochooseadifferentparentdirectoryforthesampleapplications.
TotesttheSDKinstallation,followthesesteps:
1. OpentheWindowsAzureSDKcommandpromptbyclickingtheStartbutton,
clickingProgramFiles,andthenclickingWindowAzureSDK(January2009CTP).
2. Navigatetothesampledirectory,andthenruntheRunDevStore.cmdutilityto
buildthesamples,createlocaltablesrequiredbythesamples,andlaunch
developmentstorage.RunningdevelopmentstoragestartsthelocalBlob,Queue,
andTableservices.
3. NavigatetotheHelloWorldapplicationdirectory,andthenrunrunme.cmd.
4. Thedevelopmentfabriciconwillappearinthesystemtrayafteramoment.
Runningthesampleautomaticallylaunchesyourwebbrowserandpointstothe
service’sdefaultwebpage.
ThewebinterfacefortheHelloWorldsamplewillbedisplayedinthebrowserwindow.
NOTE Ifyoudon’tseeanything,refreshthewindow.
CreatingtheApp
CreatingcloudappswithWindowsAzureisaccomplishedthroughMicrosoftVisualStudio
2008.Tostartmakingyourapps,followthesesteps:
1. RunVisualStudio2008asanadministrator.ClicktheStartbuttonandthenpointto
allprograms.
2. PointtoMicrosoftVisualStudio2008,right-clickMicrosoftVisualStudio2008,and
clickRunasAdministrator.
3. WhentheUserAccountControlboxappears,clickContinue.
4. FromtheFilemenu,clickNew,andthenclickProject.
5. Intheresultingdialogbox,selectCloudServicesfromtheVisualC#projecttype.
6. IntheTemplateslist,clickWebCloudService.Thiscreatesawebrole.
7. Enterthenamesforyourprojectandsolution,andmakesurethattheCreate
DirectoryforSolutionboxischecked.
Chapter 11: Developing Applications 249
8. IntheSolutionExplorer,you’llseethatthesolutionstructurewascreated.You'llsee
twoprojects,aCloudComputeprojectandanASP.NETproject.TheASP.NET
projectwillcontainyourcode.TheCloudComputeprojectcontainsareferenceto
theASP.NETproject,aswellastheservicedefinitionfile(.csdef)andservice
configurationfile(.cscfg).
9. ChangetheDefault.aspxpagetodisplaysomecustomtextforthisexample.
RunningtheAppLocally
Next,testtheapplicationlocallybeforepublishingittotheAzurecloud.Youcandothatby
followingthesesteps:
1. PressF5.Thisstartstheserviceinthedevelopmentfabric.
2. Expandthetreeontheleftpaneltoseetheservicedeployments.
3. ExpandtheHelloFabricnodetoseethewebroleandworkerrolethatarerunning
withintheservice.
4. Expandthenodeforthewebroleorworkerroletoviewtherunninginstancesof
therole.
PART III
5. Clickonanumberednodetoseethemessagesbeingwrittentothelogforthisrole
instance.
6. ClicktheServiceDetailsnode.Thisshowsyoutherolesandportsthatwere
requestedandissued.
NOTE Ifthisisthefirsttimeyou’veruntheapp,theServicesDetailswillshowaserviceURLof
http://*:80andanIPaddressof127.0.0.1:80.Ifport80isnotavailable,itwillpickthenext
availableport.
7. SwitchbacktoVisualStudio,andpressSHIFT+F5tostopdebugging.
Troubleshooting
TroubleshootingonthecloudisadifferentanimalthaninatraditionalITenvironment.
Conventionaltroubleshootingtoolsandprocessesweredevelopedaroundthehub-and-
spokeconcept,withremoteapplicationsbeingthespokestothecentralizeddatacenter
beingthehub.Butapplicationsdeliveredfromanoff-siteprovider’sdatacenterdefy
traditionalmonitoringandrequireadifferentwaytotroubleshoot.
Atyourorganization,youhavelocalvisibilityandcontrolofapplications.Thatcontrol
ismuchmorelimitedwithSaaSapplications.Inparticular,itisdifficulttodistinguishSaaS
trafficfromotherInternetusagegoinginandcomingoutofremotelocations.
ITstaffdonothavethelocalabilitytodeterminewhethertheserviceisrunningorifthe
clienthasconnectivitytothehostedapplication.Deeppacketinspection(DPI)candeliver
thisgranularity,butthistechnologyisexpensivetodeploythroughouttheenterprise.
250 Part III: Cloud Computing at Work
NOTE AccordingtoForresterResearch,40percentofcompaniesconsiderSaaSapplication
performanceakeyconcern.
Anotherissueisthatwhenusersfaceperformanceproblemsorhaveotherissues,they
arenotgoingtocontacttheSaaSprovider.They’regoingtocalltheITsupportdesk.And
beforeyourITdepartmentrelaystheproblemtotheSaaSprovider,theymustfirstpursue
theproblemontheirendtoruleoutlocalproblems.Forinstance,therecouldbealegitimate
issuewithAmazon,forwhichyouneedtoinvoketheservicelevelagreement(SLA).Onthe
otherhand,theproblemcouldsimplybetheresultofcontentionfortheInternet.
TheproblemcouldbeexacerbatedbySaaSuserswithintheenterpriseworkingfrom
differentremotesites,usingdifferenttypesofaccessandcompetingforresources.Thiscan
quicklyeatupbandwidth.
Also,theusercouldbeonawirelessLANcompetingforsharedbandwidthwithother
applicationsthathavefluctuatingusageneeds,areexperiencingslowdowns,orhaveissues
withsignalinterference.
TotroubleshootSaaSproblems,youmustbeabletounderstandtheperspectiveofthe
applicationandtheenduser,andtoseeallthevariationsinsideandoutsidethe
infrastructure.Thatvisibilityisnotavailablewithtraditionalmanagementtoolsand
technology,butnewtoolsareavailable.
Byusingthistrackinginformation,profilesarecreatedforallapplicationsandforthe
networkedapplicationexperiencesofeachenduserthatallowITtodetectunusual
behaviorandfigureouttherootcauseoftheperformanceproblems.Thisway,ITcan
discoverhiddencausesofSaaSperformanceproblemsbyfiguringoutwhichapplications
aregeneratinghighbandwidthonthelinkorbyfindingapplicationsthatarecausing
congestion.WhenITstaffhasthisinformation,theycanquicklyshutdownproblematic
usersandalertSaaSprovidersaboutproblemsattheirdatacenter.
ApplicationManagement
Onceyou’vegotyourapplicationonthecloud,youneedtobeabletomanageit.Whilethe
applicationisn’tinyourdatacenter,therearestillwaysyoucanmanageit.Alotwilldepend
onthetermsofserviceyouhavewithyourcloudprovider.Theymaynotallowforyouto
managetheapplicationsatall.That’salittlemoredraconianthanitshouldbe,butalways
checkyourtermsofservicesoyouknowwhatyoucanandcannotmanage.
Whenyoudodecidetomanageyourcloudapplication,youcanuseaproductlike
Kaavo’s(www.kaavo.com)cloudapplicationmanagementsoftware:Infrastructureand
MiddlewareonDemand(IMOD).
IMODisthefirstsolutionwithanapplication-focusedapproachtoITinfrastructure
managementthroughpublicandprivateclouds.Companiestraditionallymanagetheir
serversindividually,whichiscomplexandcostlyandimpedesbusinessgrowthacrossan
enterprise.Bytappingthecapabilitiesofcloudcomputing,however,IMODenablesusersto
manageinfrastructureasaunifiedsystemandprovidesthefollowingbenefits:
• Applicationandservice–centricn-tierconfiguration IMODautomaticallybrings
onlineoneormultiserversystemsforrunningapplications.
• Businesscontinuity Aninterfacetoscheduleautomaticdatabackupsensures
businesscontinuity.
Chapter 11: Developing Applications 251
• Securityandaccesscontrol IMODprovidesapoint-and-clickinterfacetosecure
datainthecloudsthroughtheNationalSecurityAssociation’srecommendedAES
256-bitdataencryption.Itallowsuserstoeasilyandsecurelyconnecttoservers,
transferdatatoandfrominternaldatacenters,andconfigurecustomfirewallrules
oncloudservers.
• Effectivemonitoringandalerts Userscanmonitorresourcesusedbytheir
applicationsandsetupalertstoproactivelymanageapplicationservicelevels.
“Movinginfrastructuretothecloudisgainingmomentum.Kaavowillenable
organizationstoeffectivelyreapthebenefitsofcloudcomputingandtomaximizefewer
resources.Thisisparticularlycriticalgivencurrenteconomicconditionsandthegrowing
needforcompaniestoreducetheircarbonfootprint,”saidJamalMazhar,founderandCEO
ofKaavo.“Throughpatent-pendingtechnology,wearepleasedtolaunchIMODand
providesimplicity,flexibility,andsecurityforusers.Thisinturn,allowsthemtofocuson
innovationandcorebusinessactivitiesnecessaryforbusinessgrowth.”
IMODisavailableforafree30-daytrialathttps://imod.kaavo.com.
Developingyourownappsisdefinitelydoable,andthereisnolackofplacesthat
wouldwelcomeyoutohostyourappsontheirclouds.Thedifferencescomedowntothe
featurestheyofferandhowmuchtheycharge,butifthereisaspecificfunctionyouwant
PART III
done,justpointyourprogrammerstothecloudandgetthemstarted.
Inthenextchapter,we’llchangegearsslightlyandtalkabouttheclientmachinesyou
canusetoconnectyourworkerstothecloud—beitaninternalorexternalcloud.
This page intentionally left blank
CHAPTER
12
Local Clouds and Thin Clients
T
hecloudcomputingmodeldoesn’talwaysmeanyourclientshavetotraversethe
Internettogetatcontent.Alocalcloud—alsoknownaspresentationvirtualization—
skipstheserviceprovidercomponent,andallowsyoutomanageallthecontent
yourselfinyourowndatacenter.
Mostorganizationswillnotjumptothecloudallatonce.Mostcaseswillstartasahybrid
model,movingsomebusinessapplicationstothecloudwhileretainingamajority“in-house.”
Onewaytobecomefamiliarwithcloudcomputingconceptsandbenefitswithoutthe
outsourcingcommitmentistobringthecloudascloseaspossiblebybuildingyourown
cloudforyourbusiness.Withalocalcloud,youkeepyourserverin-houseandclientsconnect
toit.Doesn’tsoundtoomuchdifferentthanwhatyouhavealready,right?Well,youstartto
offercomputingresourcestoyourusersasautility.Youprovideflexible,low-costbusiness
applicationsinsteadof“yetanotherserver.”Youmightalsochangethedeliveryofthese
applicationsbyusingpresentationvirtualization.Thatis,theyareclientsthatdon’tusehard
drives,DVD-ROMdrives,oranyotherperipherals.Rather,theycommunicatewiththeserver
anditistheserverperformingalltheprocessingandstorage,onlytopassthedatabacktobe
displayedonthethinclient.
Switch
253
254 Part III: Cloud Computing at Work
Inthischapter,we’lltakealookatvirtualizationanditsbenefits.We’llalsolookatthe
leadingtechnologiesdrivingvirtualizationandtalkaboutacompanythatdecidedtomove
fromtheconventionalhub-and-spokeconfigurationtoavirtualizedenvironment.
VirtualizationinYourOrganization
Thereareprosandconstogoingvirtual.Inthissection,we’lltakeacloserlookatthebenefits
andlimitationsofavirtualizedsolution.We’llalsoexaminetheissuessurroundingmaking
avirtualizationmove.
Whenwetalkaboutpresentationvirtualization,wehavetodefineacoupleofextraterms.
Therearealotofcompetingproductsoutthatdosortofthesamething,buttheydoitin
differentways.Let’stakealookatwhatsomedifferenttermsmean:
• Servervirtualization Thisisamethodofpartitioningaphysicalservercomputer
intomultipleserverssothateachhastheappearanceandcapabilitiesofrunningon
itsowndedicatedmachine.AnexampleofthisisVMwareorHyper-V(whichwe’ll
talkaboutlaterinthischapter).
• Applicationvirtualization Thisisamethodthatdescribessoftwaretechnologies
thatseparatethemfromtheunderlyingoperatingsystemonwhichtheyare
executed.Afullyvirtualizedapplicationisnotinstalledinthetraditionalsense,
althoughitstillexecutesasthoughitwere.Theapplicationistrickedatruntimeto
believethatitisdirectlyinterfacingwiththeoriginalOSandtheresourcesit
manages.
• Presentationvirtualization Thismethodisolatesprocessingfromthegraphics
andI/O,whichmakesitpossibletorunanapplicationinonelocation(theserver)
butbecontrolledinanother(thethinclient).Inthismethod,avirtualsessionis
createdandtheapplicationsprojecttheirinterfacesontothethinclients.Itcaneither
runasingleapplicationorpresentanentiredesktop.
WhyVirtualize?
VirtualizationcanhelpcompaniesmaximizethevalueofITinvestments,decreasingthe
serverhardwarefootprint,energyconsumption,andcostandcomplexityofmanagingIT
systemswhileincreasingtheflexibilityoftheoverallenvironment.
Cost
Dependingonyoursolution,youcanhaveacost-freedatacenter.Youdohavetoshellout
themoneyforthephysicalserveritself,butthereareoptionsforfreevirtualizationsoftware
andfreeoperatingsystems.
Microsoft’sVirtualServerandVMwareServerarefreetodownloadandinstall.Ifyou
usealicensedoperatingsystem,ofcoursethatwillcostmoney.Forinstance,ifyouwanted
fiveinstancesofWindowsServeronthatphysicalserver,thenyou’regoingtohavetopay
forthelicenses.Thatsaid,ifyouweretouseafreeversionofLinuxforthehostand
operatingsystem,thenallyou’vehadtopayforisthephysicalserver.
Naturally,thereisanelementof“yougetwhatyoupayfor.”There’sareasonmost
organizationshavepaidtoinstallanOSontheirsystems.WhenyouinstallafreeOS,
Chapter 12: Local Clouds and Thin Clients 255
thereisoftenahighertotalcostofoperation,becauseitcanbemorelaborintensiveto
managetheOSandapplypatches.
Switch
NOTE Ifyourepurposeanexistingserver,thenthewholeendeavorisfree.
PART III
Administration
Havingallyourserversinoneplacereducesyouradministrativeburden.Accordingto
VMware,youcanreduceyouradministrativeburdenfrom1:10to1:30.Whatthismeans
isthatyoucansavetimeinyourdailyserveradministrationoraddmoreserversbyhavinga
virtualizedenvironment.Thefollowingfactorseaseyouradministrativeburdens:
• Acentralizedconsoleallowsquickeraccesstoservers.
• CDsandDVDscanbequicklymountedusingISOfiles.
• Newserverscanbequicklydeployed.
• Newvirtualserverscanbedeployedmoreinexpensivelythanphysicalservers.
• RAMcanbequicklyallocatedfordiskdrives.
• Virtualserverscanbemovedfromoneservertoanother.
FastDeployment
Becauseeveryvirtualguestserverisjustafileonadisk,it’seasytocopy(orclone)asystem
tocreateanewone.Tocopyanexistingserver,justcopytheentiredirectoryofthecurrent
virtualserver.
Switch
Administrator
Virtual servers
256 Part III: Cloud Computing at Work
Thiscanbeusedintheeventthephysicalserverfails,orifyouwanttotestoutanew
applicationtoensurethatitwillworkandplaywellwiththeothertoolsonyournetwork.
Virtualizationsoftwareallowsyoutomakeclonesofyourworkenvironmentforthese
endeavors.Also,noteveryoneinyourorganizationisgoingtobedoingthesametasks.As
such,youmaywantdifferentworkenvironmentsfordifferentusers.Virtualizationallows
youtodothis.
ReducedInfrastructureCosts
Wealreadytalkedabouthowyoucancutcostsbyusingfreeserversandclients,likeLinux,
aswellasfreedistributionsofWindowsVirtualServer,Hyper-V,orVMware.Butthereare
alsoreducedcostsacrossyourorganization.Ifyoureducethenumberofphysicalservers
youuse,thenyousavemoneyonhardware,cooling,andelectricity.Youalsoreducethe
numberofnetworkports,consolevideoports,mouseports,andrackspace.
Someofthesavingsyourealizeinclude
• Increasedhardwareutilizationbyasmuchas70percent
• Decreasedhardwareandsoftwarecapitalcostsbyasmuchas40percent
• Decreasedoperatingcostsbyasmuchas70percent
HowtoVirtualize
Aswithsettingupanetworksecuritysolutionorfiguringoutthebestwirelessnetworking
solution,thebestwaytoimplementavirtualizationsolutionistostartbymakingsureyou
fullyunderstandtheissuessurroundingvirtualization.
Assessment
Thefirststepistoconductanenvironmentalassessmentofyourorganizationtodetermine
eachdepartment’sserverprocessingneeds.Deploycustomconfiguredresourceand
environmentauditingagentstopolltheserverstoidentifythecurrenttotalsof
• CPU
• Memory
• Adapters
• Fileandsystemcapacity
• Totalusedandunallocateddiskspace
Alongwiththisassessment,youshouldalsoidentifypeaksin
• CPU
• Memory
• Adapterusage
• Read
• Write
• Waitcycles
Discoveralsodatathathasnotbeenaccessedoverextendedperiodsoftime.
Chapter 12: Local Clouds and Thin Clients 257
Analyze
Takeagoodhardlookatyourcurrentserverenvironment.Identifyandconsolidate
processing-compatibleapplicationstoasingleserver,oryoucanvirtualizeyourexisting
multiserverdatacentertoshareprocessingcapabilitiesfromacommonpool.
Identifyyourmission-criticalservers.Thosemightbegoodcandidatestobeleftinplace
inaone-to-onerelationship.ThosearetheserversthathouseSAP,PeopleSoft,andSiebel.But
thenconsolidatethenon-heavy-hittingapplications(likefileandprint,Exchange,andsoon)
andvirtualizetheremainingserverstoconstructacommonpoolofhardwareresources.
SAP Exchange
PART III
Siebel Mail
Then,configuretheaforementionedconsolidatedserverssothattheirCPU,memory,
andadapterscanbesharedwiththeheavy-hittingserverswhenneeded.Mostservers
todayhoveraround10to15percentutilization.Whenyouaredonewithvirtualization,
theaverageCPUutilizationisabout80percent.
Now houses
four virtualized servers.
258 Part III: Cloud Computing at Work
VirtualizingyourserversenablesthemtoidentifytheirownCPU,memory,andadapter
requirements.Theywillbeabletoseekoutresourcesonneighboringserverswhenmore
capacityisneeded,andthensurrenderthoseresourceswhenthedemandhaslessened.
Concerns
Sure,we’veclappedvirtualization’sbackanddescribedhowitcanbehelpful,butthereare
timeswhenitisnotideal.Forinstance,graphics-intensiveapplicationsarenotwellsuited
fortoday’svirtualenvironment.Videocardscannothandletherequirementsofahigh-
performancegraphicsadapter.Gaming,CAD,andsoftwarerequiringthree-dimensional
graphicsarenotidealforavirtualizedenvironment.
Databasesandbusinessintelligencesoftwarearealsopoormatchesforvirtualization,
simplybecausetheyrequirealotmorememoryandprocessorpowerthancurrentvirtualized
serverscanprovide.Databasescanbesuccessful,ifsmallenough,buttheywillscalepoorly.
Further,serverapplicationsthatrequireaccesstohardwarelikePCIcardsandUSB
devicesaredifficulttovirtualize.Alsoservervirtualizationdoesn’ttypicallyplaywellwith
proprietaryhardware,soapplicationsthatneedtheuseofmorethantheEthernetjackare
nottypicallygoingtowork.
NOTE Theseareissuesnow,butexpectvirtualizationsoftwarecompaniestofigureitoutinthe
nearfuture.
Security
Whenitcomestosecurity,thesamerisksthatexistforaphysicalserverexistforavirtualized
server.Thereisamisconceptionthatvirtualserversaresomehowimmunetotheseproblems
orthatthehostserveractsassortofabodyguard,butthat’snotthecase.Virtualmachines
needtohavethesamenetworkingconcernsdealtwithandthesamevirusconcerns
addressedasaphysicalmachine.Youalsoneedtoprotectagainstspywareandmalware.
Whenconfiguringyourservers,letyourhostserverdojustitsjob—don’taddanyextra
applicationsthatitdoesn’tneed.Itwillbesaferandperformitsdutiesbetterwhenitjust
hasonethingtodo.
Infact,securityisextraimportantonavirtualizedserver,becauseavirtualizedhostcan
potentiallyleadtothefailureofothervirtualizedmachinesonthesamephysicalserver.
It’sidealtoseparatethevirtualizationhostandvirtualizedmachinesandbeextra
cautiouswhensettingupperimetersecuritytofurtherprotecthostservers.It’salsoidealto
havestrong,highlyguardedpasswordsandrunwiththesmallestnumberofprivileges.
ServerSolutions
Therearetwo(major)componentsofavirtualizedenvironment—clientsandservers.While
thissoundsnodifferentthanthetraditionalserver/clientmodel,itissubstantiallydifferent
inavirtualizedenvironment.
First,theserverisdifferent.Ratherthanhousingsharedfilesandperformingspecific
tasks,inavirtualizedenvironmenttheserverdoeseverything.Wanttoworkonthethird-
quarterfinancialreports?You’llaccessandworkonthespreadsheetontheserver.Wantto
useacalculatortofigureoutsomebasicmathproblem?It,too,runsontheserver.Theclient
issimplyusedtodisplaytheresults.
Chapter 12: Local Clouds and Thin Clients 259
Inthissection,we’lltakeacloselookatacoupleofthemoreprevalentserver
virtualizationproducts:MicrosoftServer2008Hyper-V,VMware,andVMwareESX.
MicrosoftHyper-V
MicrosoftServer2008Hyper-V(Hyper-V)isahypervisor-basedvirtualizationtechnology
thatisafeatureofselectversionsofWindowsServer2008.Microsoft’sstrategyand
investmentsinvirtualization—whichspanfromthedesktoptothedatacenter—helpIT
professionalsanddevelopersimplementMicrosoft’sDynamicITinitiative,wherebythey
canbuildsystemswiththeflexibilityandintelligencetoautomaticallyadjusttochanging
businessconditionsbyaligningcomputingresourceswithstrategicobjectives.
PART III
Hyper-Vofferscustomersascalableandhigh-performancevirtualizationplatformthat
plugsintocustomers’existingITinfrastructuresandenablesthemtoconsolidatesomeof
themostdemandingworkloads.Inaddition,theMicrosoftSystemCenterproductfamily
givescustomersasinglesetofintegratedtoolstomanagephysicalandvirtualresources,
helpingcustomerscreateamoreagileanddynamicdatacenter.
“CustomerswhobuyWindowsServer2008arenotonlygettingthescalabilitybenefits,
thehighperformanceandreliability,andallthegreatthingsthatWindowsServerisknown
for;asoftodaytheycanbenefitfromintegratedvirtualizationwithHyper-V,”saidBillHilf,
generalmanagerofWindowsServerMarketingandPlatformStrategyatMicrosoft.
CaseStudy
TakeMinnesota-basedLandO’Lakes,forexample.TheysufferedfromacommonITchallenge
resultingfromtremendousgrowththroughmergersandacquisitions.Theagricultural
cooperative’sdatacenterwaspackedwithacompilationofagingserversrunningatan
averageutilizationrateofjust3percent,puttingaconsiderablestrainonITresources.
260 Part III: Cloud Computing at Work
ITproscallthecondition“serversprawl,”andLandO’Lakeshadabadcaseofit.
“Wefacedacombinationofunderutilizedandaginghardware,applicationsrunningon
outdatedoperatingsystems,andrisingdatacenterpowerandcoolingcosts,”saidJason
Nord,thecompany’sserveradministrator.
Tocountertheproblem,LandO’Lakesdidwhatanincreasingnumberofsimilarly
challengedcompaniesaredoing:Itturnedtoavirtualizationsolution.Specifically,it
becameanearlyadopterofMicrosoftvirtualizationtechnologies,includingWindows
Server2008Hyper-V.
Thecompany’sITteaminitiallyrolledoutaMicrosoftVirtualServer2005R2initstest
anddevelopmentenvironment,inwhichfourphysicalserverseachhosted10to13virtual
machines,witheachvirtualmachinerunningoneapplication.During2008,theteam
migratedthisenvironmenttoHyper-Vandmovedanadditional10to15newapplications
directlyintovirtualmachinesintheproductionenvironment,thussavingthecostof
hardwareservers.
“OurMicrosoftvirtualizationsolutionisakeypartofabusinessstrategywehaveat
LandO’LakescalledBestCostInitiative,”saidTonyTaylor,thecompany’sdirectorofIT
services.“It’snotjustaboutcuttingcosts,butaboutlookingwhereourmoneyisbeing
spentandfindingwaystoleverageourinvestmentsacrossthecompany.Virtualization
holdsalotofpromiseinhelpingusmaximizethevalueofourITinvestments.”
IntegratedSystems
ToaccompanyMicrosoftvirtualizationtechnologiessuchasHyper-V,theSystemCenter
familyofsolutionsdeliversmanagementtoolstoconfigure,operate,deploy,andbackup
physicalandvirtualserversfromthedatacentertothedesktop—allfromasinglepaneof
glass.Withpropermanagementtoolsandprocesses,customerscancontrolthepowerof
virtualizationandbecomeagile,whilestillmaintainingcontrol.Thiscanhelppreventsuch
issuesas“virtualserversprawl”—oneofthechallengesthatcanbeintroducedbythe
increaseduseofservervirtualization.
Ironically,thisvirtualequivalentofphysicalserversprawlstemsfromtheeasewith
whichvirtualmachinescanbecreated.SomeITteamshaveallowedmultiplegroupswithin
theorganizationtocreatetheirownvirtualmachines,onlytolosetrackofthemlater.This
kindofuncontrolledusagecanleadtolegalandsecurityconcerns.
“Totrulyseethefullbenefitsofvirtualization,itiscriticaltohavetherightprocesses
andtoolsinplace,”Hilfsaid.“That’swhymanagementtoolsaresoimportant—theyarethe
gluethatholdsitalltogetherandhelpsdelivertherealbenefitsofvirtualization.”
TheabilitytocentralizeservermanagementwasakeyfactorinTheSCOOTERStore’s
questtofindtherightvirtualizationsolution.TheNewBraunfels,Texas–basedcompanyis
aleadingproviderofpowermobilitydevicessuchaspowerchairstohelppeoplewith
mobilitychallengesleadfull,self-sufficientlives.
Tomanagetherecentrapidgrowthandstayincompliancewithever-changing
governmentmandatesfordocumentation,reporting,consumersafety,andpatientprivacy,
thecompanymustmaintainagileandflexibleITsystems.
Tothatend,TheSCOOTERStorevirtualizeditsserverenvironmentandcentralized
servermanagementusingVirtualServer2005R2andSystemCenterVirtualMachine
Manager2007.Aspartofitsoverallvirtualizationstrategy,thecompanyisevaluating
Hyper-Vtoincreasetheperformanceofitsexistingenvironment.
Chapter 12: Local Clouds and Thin Clients 261
“Hyper-Visveryexcitingforusbecauseitisintegratedanddesignedintotheoperating
system,”saidBarrettBlake,TheSCOOTERStore’sinfrastructurearchitect.“IexpectHyper-V
tobeeveneasiertouse,faster,andmoreefficient.”
ScalabilityandOtherBenefits
ScalabilityandcostwereprimeconsiderationsforRayPawlikowskiashesoughta
virtualizationsolutionforhisgrowingcompany,HotSchedules.TheAustin,Texas–based
companyspecializesinonlinelaborscheduling,offeringemployeesofclientssuchasThe
CheesecakeFactory,OutbackSteakhouse,andP.F.Chang’saccesstotheirworkschedules
ontheweb,textmessaging,email,andtheabilitytopickupandreleaseshifts,amongother
benefits.
Withnearlyaquarter-millionusersand4millionloginspermonth,the10-year-old
businesshasdoubledinsizeeachyearforthepastcoupleyearsandshowsnosignof
slowingdown.LikeLandO’Lakes’ITteam,PawlikowskisignedupfortheMicrosoftRapid
DeploymentProgram(RDP)totestWindowsServer2008Hyper-V.“Byvirtualizing
everything,wehavebeenabletoincreaseourserverutilizationbyafactorof10,providing
dramaticopportunitiesinconsolidationandpowersavings,”hesaid.
Hyper-V’sscalabilityderivesfromitssupportformultipleprocessorsandcoresatthe
hostlevelandimprovedmemorylimitsatthehostandguestlevelwithinvirtualmachines.
PART III
Thisenablescustomerstoscaletheirvirtualizationenvironmenttosupportalargenumber
ofvirtualmachineswithinagivenhostandtotakeadvantageofquickmigrationforhigh
availabilityacrossmultiplehosts.
HotSchedulesisrunning40physicalservers,andPawlikowskiwantstoreducethat
numberby50to75percent.TheITorganizationisalsorunning14virtualmachineswith
applicationsrunningfasteronthevirtualserversthantheydidonthephysicalserversused
previously.Thisisacriticalbenefitthatkeepsthecompany’sweb-basedapplication
responsive.
Customersarenottheonlyonesbenefitingfromtheincreasingdemandforvirtualization.
MicrosoftstoragepartnerQLogicpublishedabenchmarkforI/Othroughputforstorage
devicesgoingthroughWindowsServer2008Hyper-V.At180,000I/Ospersecondona
systemrunningHyper-V,virtualmachineconnectionsarejust10percentshyofnative
performance.ThisbenchmarkdemonstratesHyper-V’sabilitytobringtheadvantagesof
virtualizationtothemostdemandingdatacenter.
Meanwhile,MicrosoftitselfhasbeenusingHyper-Vinproductionenvironments,
includingheavy-trafficwebpropertiessuchasMSDN,TechNet,andMicrosoft.com.MSDN
hasmorethan3millionaveragepageviewsperday,TechNetaveragesmorethan1million
perday,andMicrosoft.comaveragesmorethan38millionperday.
Familiarity
MicrosofttoutsthefamiliarityoftheWindowsplatformasoneofthebenefitsofHyper-V.
Forexample,HotSchedules’Pawlikowskilookedatanumberofothervirtualization
technologies,buthiscompanyhasstrongtieswithDell,whichmadeacompellingcasefor
Microsoft’searly-adopterprogram.
“NotonlyisHyper-Vfaster,it’salsofastertogetuptospeedwith,”Pawlikowskisaid.
“It’sintegratedwithourexistingplatformandwiththefamiliarrolesinWindowsServer
2008,soourknowledgebasedidn’thavetochangetoomuchandIdidn’thavetoretoolour
ITstafftomoveforwardwithvirtualization.”
262 Part III: Cloud Computing at Work
Microsoft’sHilfsaysthat’saparticularlycompellingreasonforcustomerstochoose
Hyper-V.“It’sbeendesignedasaWindowsfeature,whichourcustomersknow,sothosewith
WindowsServercertificationwillbefamiliarwithit;thepeoplewhohaveallthein-house
skillsonWindowsServerwillknowhowtouseit.”
Tohelpbothcustomersandpartnersassesswhethertheirexistingserversaregood
candidatesforvirtualizationusingHyper-V,MicrosofthasreleasedtheMicrosoftAssessment
andPlanning(MAP)Toolkit3.1Betatohelpacceleratevirtualizationplanningand
deployment.ThefinalreleaseofMAP3.1isexpectedinJulyandwillbeavailableforfreeat
http://www.microsoft.com/MAP.MAPbelongstoafamilyofMicrosoftVirtualization
SolutionAcceleratorsincludingInfrastructurePlanningandDesignguidesandtheOffline
VirtualMachineServicingTool.
Inaddition,morethan130independentsoftwarevendors(ISVs)havecertifiedatotalof
150applicationsonWindowsServer2008.Thisdesignationidentifiesapplicationsthathave
beenindependentlytestedtoexploitHyper-Vcapabilitiesandmeetmission-critical
expectationsinavirtualizedenvironment.
Microsoftisworkingwithitspartnerstomeetcustomers’needsforinteroperable
solutions.ThealliancewithCitrixSystemsintheareasofvirtualdesktopinfrastructure
(VDI)andvirtualmachineportabilitybetweentheXenHypervisorandHyper-Vprovides
customerswithbroaderdeploymentscenarios.Additionally,theextensivecollaboration
withNovellenablescustomerstotakeadvantageofvirtualizationinmixedMicrosoftand
SuSELinuxenvironments.
Alongthesamelines,originalequipmentmanufacturer(OEM)vendorssuchasDell,
Fujitsu-SiemensCorp.,FujitsuLtd.,HP,IBM,NEC,SunMicrosystems,andUnisysare
qualifiedtoshipandcreatesystemswithHyper-V.Inall,250systemsfromserverand
Chapter 12: Local Clouds and Thin Clients 263
white-boxvendorsarealreadylogo-qualifiedforWindowsServer2008andHyper-V.More
informationcanbefoundathttp://www.windowsservercatalog.com.
GetYourOwnCopy
YoucandownloadyourowncopyofWindowsServer2008Hyper-Vtotryitout.
“Therehavealreadybeenover1millionevaluationsofHyper-V,andITorganizations
everywherecanmoveitfromthelabtoproductiontofullyexperiencethebenefitsthat
Hyper-VinWindowsServer2008canbring,”Hilfsaid.Headdedthatcustomerscanalso
useSystemCenterVirtualMachineManager2008,tohelpthembestconfigureanddeploy
theirhypervisor-basedenvironments.
NewcustomersandpartnerscandownloadHyper-Vathttp://www.microsoft.com/
Hyper-V.CustomerswhohavedeployedWindowsServer2008canreceiveHyper-Vfrom
WindowsUpdate.
VMware
VMwareoffersitsVMwareServer,afreeentry-levelhostedvirtualizationproductforLinux
andWindowsservers.Theproductisavailablefordownloadatwww.vmware.com/
products/server/.
“VirtualizationandVMwarehavebecomemainstreaminthepastyear,andmany
PART III
customershavedeployedthousandsofVMwareserverenvironmentsacrosstheir
enterprises.WithVMwareServer,weareensuringthateverycompanyinterestedin,
consideringorevaluatingservervirtualizationforthefirsttimehasaccesstotheindustry-
leadingvirtualizationtechnology,”saidDianeGreene,VMwarepresident.“VMwareServer
makesiteasyandcompellingforcompaniesnewtovirtualizationtotakethefirststep
towardenterprise-widevirtualinfrastructure.”
Features
VMwareServer,thesuccessortoVMwareGSXServer,enablesuserstoquicklyprovision
newservercapacitybypartitioningaphysicalserverintomultiplevirtualmachines,
bringingthepowerfulbenefitsofvirtualizationtoeveryserver.
VMwareServerisfeature-packedwiththefollowingmarket-leadingcapabilities:
• Supportforanystandardx86hardware
• SupportforawidevarietyofLinuxandWindowshostoperatingsystems,including
64-bitoperatingsystems
• SupportforawidevarietyofLinux,NetWare,Solarisx86,andWindowsguest
operatingsystems,including64-bitoperatingsystems
• SupportforVirtualSMP,enablingasinglevirtualmachinetospanmultiplephysical
processors
• Quickandeasy,wizard-driveninstallationsimilartoanydesktopsoftware
• Quickandeasyvirtualmachinecreationwithavirtualmachinewizard
• Virtualmachinemonitoringandmanagementwithanintuitive,user-friendly
remoteconsole
264 Part III: Cloud Computing at Work
VMwareServersupports64-bitvirtualmachinesandIntelVirtualizationTechnology,a
setofIntelhardwareplatformenhancementsspecificallydesignedtoenhancevirtualization
solutions.
“CentralTransporthassavedhundredsofthousandsofdollarswithVMwarevirtual
infrastructure,”saidCraigLiess,serveradministratorforCentralTransport.“Introducinga
newservervirtualizationproductincludingVirtualSMPandsupportfor64-bitoperating
systemsandIntelVirtualizationTechnologyisanaturalprogressionforVMware,furthering
thecompany’sleadershipinthemarket.OfferingVMwareServerforfreewillbringVMware’s
provenvirtualizationtechnologytoawideraudience,allowingcompaniestoachievethe
benefitsofvirtualization,suchascostreductionsandflexibleserverprovisioning.”
VMwareServerisagoodstartingpointforusersseekingtofamiliarizethemselveswith
theconceptofvirtualizationbeforeprogressingtotheenterprise-classsuiteofVMware
virtualinfrastructureproductsthatincludesESXServerwithVirtualSMPandVirtualCenter
withVMotiontechnologyforlarge-scaleproductionserverconsolidation,business
continuity,andenterprise-hosteddesktopsolutions.
NOTE We’lltalkaboutVMwarevirtualinfrastructurenext.
Thesuiteisusedbymorethan20,000companiesworldwidetodaywithmorethan
90percentrunningVMwarevirtualinfrastructureinproductionserverenvironments
and25percentchoosingtostandardizetheirindustry-standardsystemsonVMware.
TeamingUpwithIntel
IntelandVMwarearelaunchingaglobalmarketingcampaigntoeducateusersonthevalue
ofvirtualizationonIntelplatformsandtodrivebroaderadoptionofvirtualization.
“VMwareServeronIntel-basedsystemswillallowcustomersfrombigITtoSMBto
experimentwithvirtualization,understanditsbenefitsandrealizethevalueofIntel
technologiessuchasMultiCoreandIntelVirtualizationTechnology,”saidDianeBryant,
vicepresidentandgeneralmanager,IntelServerPlatformsGroup.
VMware’sleadingOEMhardwarepartnerswelcometheintroductionofVMwareServer.
“Virtualizationisakeyenablingtechnologyforourcustomersastheyusescaleout
architecturesfordatacenterdeployments,”saidPaulGottsegen,vicepresident,Dell
productgroup.“VMwareServerisagreatopportunityforourcustomerbasetoeasily
evaluatehowthebenefitsofvirtualizationcanhelpimprovetheirserverutilizationrates.”
“IBMxSeriesdeliversinnovativevirtualizationsolutionsbyleveragingourstrong
partnershipwithVMwareandourindustryleadingX3ArchitectureandBladeCenter
platforms,”saidLeoSuarez,vicepresidentandBusinessLineExecutive,xSeriesatIBM.
“ThenewVMwareServerofferingwillenablemorexSeriesandBladeCentercustomersto
experiencethebenefitsofvirtualizationandseethevaluethatvirtualizationcanbringto
theirenvironment.”
VMwareServerisavailablefordownloadatwww.vmware.com/products/server/.
VMwareInfrastructure
VMwareisthebiggestnameinvirtualization,andtheyofferVMwareInfrastructure,
whichincludesthelatestversionofVMwareESXServer3.5andVirtualCenter2.5.VMware
InfrastructurewillallowVMwarecustomerstostreamlinethemanagementofITenvironments
Chapter 12: Local Clouds and Thin Clients 265
Application Application
ESX Server
Hardware
FIGURE 12-1 VMware ESX Server allows different virtual servers to use their portion of system
resources as if they were their own.
PART III
throughgreaterlevelsofautomation,increaseoverallinfrastructureavailability,andboost
performanceformission-criticalworkloads.Thenewreleasewillalsoincludeupdated
packagingandpricing,includingnewofferingsspecificallytargetedatmidsizeandsmaller
ITenvironments.
AsFigure12-1shows,eachvirtualizedserverperceivesthesystemresourcesasunique
tothem,andnotsharedwithothers.
“Thisreleasebuildsuponnearlyadecadeofcontinuousinnovation,”saidRaghu
Raghuram,vicepresidentofproductsandsolutionsatVMware.“Wecontinuetodrive
improvementsacrosstheVMwareInfrastructuresuite.Thenewfeatures,suchasthefirst
solutiontomovevirtualmachinedisksacrossdatastores,providecompellingvalueto
customersofallsizes,whethertheyaresmallbusinessesorlargeenterprises.”
VMwareInfrastructureisVMware’sthird-generation,production-readyvirtualization
suite.AccordingtoastudyofVMwarecustomers,90percentofcompaniessurveyeduse
VMwareInfrastructureinproductionenvironments.Withmorethan120industryand
technologyawards,VMwareprovidesamuch-anticipatedcompletesolutionthatmeets
customerdemandforanext-generationfirmwarehypervisor,enhancedvirtualinfrastructure
capabilities,andadvancedmanagementandautomationsolutions.
“Customersarecontinuallylookingformorewaystotakeadvantageoftheirvirtualized
infrastructureandtomaximizetheROIthesoftwarecandelivertotheirorganization,”
saidJohnHumphreys,programvicepresidentatIDC.“WiththeannouncementofVMware
ESXServer3.5andVMwareVirtualCenter2.5,VMwareisraisingthebarbynotonly
enhancingexistingfeaturesbuttakingvirtualizationtothenextlevelwithnewcapabilities
forincreasedmobilityandserviceavailability.Thesenewfeaturescanenablenewusecases
whichinturnwillhelptodrivenewcustomeradoptionofvirtualizationwithintheindustry.”
ThenewfeaturesinVMwareInfrastructurearetargetedatabroadrangeofcustomers
andITenvironments—frommidsizeandsmallbusinessestobranchofficesandcorporate
datacenterswithinglobal100corporations—andextendthevalueofallthreelayersofthe
virtualizationsuite.
266 Part III: Cloud Computing at Work
“Thenewreleasewillmakeourdatacenterevenmoremanageableandmoreflexible,”
saidKimWisniewski,systemsengineeratCurtinUniversityofTechnology.“Forexample,
VMwareGuidedConsolidationwilllowertrainingcostsforengineersnewtoVMwareESX
Serverandmakeiteasiertoextendvirtualizationthroughouttheorganization.Also,
VMwareStorageVMotionwillhelpusmanageourvirtualinfrastructurestoragelifecycles
moreeffectivelybygivingustheabilitytotransparentlymoveworkloadsawayfrom
storageneedingdowntimeformaintenance,ordynamicallyrebalancestorageworkloads
withoutaffectingourvirtualmachinesandtheservicestheysupport.”
“TheVMwareUpdateManageraddressesaprocesseachvirtualinfrastructure
administratordreadsfacing:trackingpatchlevels,andapplyingcurrentsecuritypatches
andbugfixesacrosstheirenvironment,”saidFazilHabibulla,vicepresidentandsystems
engineeratNatixis.“VMwareUpdateManagerallowsforthisthroughanautomated
updateandremediationprocesswithintheentirevirtualinfrastructureenvironment—not
onlyeasierforadministration,butalsoforensuringthatallVMwareESXServerhostsand
guestoperatingsystemsaresecure.Thisfunctionalityworksonallhosts,templates,and
virtualmachines,eventhosepoweredofforinasuspendedstate.Fromariskcontrol
perspective,theabilitytoseamlesslyautomatepatchmanagementandsecurityremediation
fromacentralizedconsoleisahugevalue-addforus.”
Features
Virtualizationplatformenhancementshelpdelivernewlevelsofperformance,scalability,
andcompatibilityforrunningthemostdemandingworkloadsinvirtualmachines:
• ExpandedstorageandnetworkingchoicessuchassupportforSATAlocalstorage
and10GigEthernetaswellasenablementofInfinibanddevicesexpandstorageand
networkingchoicesforvirtualinfrastructure.
• SupportforTCPSegmentOffloadandJumboframesreducestheCPUoverhead
associatedwithprocessingnetworkI/O.
• Supportforhardware-nestedpagetablessuchasin-processorassistsformemory
virtualization.
• SupportforparavirtualizedLinuxguestoperatingsystemsenableshigherlevelsof
performancethroughvirtualization-awareoperatingsystems.
• Supportforvirtualmachineswith64GBofRAMandphysicalmachineswithupto
128GBofmemory.
Virtualinfrastructurecapabilitieshelpdeliverincreasedinfrastructureavailabilityand
resilience:
• VMwareStorageVMotionenableslivemigrationofvirtualmachinedisksfrom
onedatastoragesystemtoanotherwithnodisruptionordowntime.VMware
VMotionhasbecomeanindispensabletoolformanyinfrastructureadministrators
todynamicallybalancetheirserverworkloadsandeliminateplanneddowntime
forservermaintenance.StorageVMotionextendsVMotiontostorageresourcesof
avirtualmachine,namelyvirtualdisks.UsingStorageVMotion,administratorscan
dynamicallybalancethestorageworkloadandaddressperformancebottlenecksby
migratingvirtualmachinediskstothebestavailablestorageresource.Administrators
Chapter 12: Local Clouds and Thin Clients 267
canminimizeservicedisruptionpreviouslyincurredforupgradingstoragearrays
andfreestorageadministratorstoimproveandmanagethestorageinfrastructure
withouthavingtocoordinateextensivelywithapplicationandserverowners.
• VMwareUpdateManagerautomatespatchandupdatemanagementforVMware
ESXServerhostsandvirtualmachines.UpdateManageraddressesoneofthemost
significantpainpointsforeveryITdepartment:trackingpatchlevelsandmanually
applyingthelatestsecurity/bugfixes.Patchingofofflinevirtualmachinesenforces
higherlevelsofpatchstandardscompliancethanphysicalenvironments.Integration
withVMwareDistributedResourceScheduler(DRS)enableszero-downtime
VMwareESXServerhostpatchingcapabilities.
• VMwareDistributedPowerManagementisanexperimentalfeaturethatreduces
powerconsumptioninthedatacenterthroughintelligentworkloadbalancing.
WorkinginconjunctionwithVMwareDRS,DistributedPowerManagementis
designedtoautomaticallypoweroffserversnotcurrentlyneededinordertomeet
servicelevels,andautomaticallypoweronserversasdemandforcompute
resourcesincreases.
• VMwareGuidedConsolidation,afeatureofVMwareVirtualCenter,enables
companiestogetstartedwithserverconsolidationinastep-by-steptutorialfashion.
PART III
Awizarddiscoversphysicalservers,identifiesconsolidationcandidates,converts
themtovirtualmachines,andleveragingintelligently,placesthemontothebest
VMwareESXServerorVMwareServerhosts.GuidedConsolidationhelpstomake
theconsolidationprocessquickandeasyforuserswithlittleknowledgeof
virtualization.
Products
VMwareInfrastructureisavailableforpurchaseinthefollowingeditions:
• VMwareESXServer3i,providingsingle-serverpartitioning,isdeliveredembedded
asfirmwareinserversystemsorasastand-alonepurchaseforharddrive
installation.Ifpurchasedstand-aloneforharddriveinstallation,ESXServer3ilist
priceisUS$495pertwoprocessors.
• VMwareInfrastructure3Foundation(previouslycalled“Starter”)includesVMware
ESXServer,VMwareESXServer3i,VMwareConsolidatedBackup,andthenew
VMwareUpdateManager.UnlikethepreviousVMwareInfrastructure3Starter,
VMwareInfrastructure3Foundationhasnorestrictionsonsharedstorage
connectivity,memoryutilization,ornumberofCPUsofthephysicalserver.
VMwareInfrastructureFoundationlistpriceisUS$995pertwoprocessors.
• VMwareInfrastructure3Standardisdesignedtobringhigherlevelsofresiliencyto
ITenvironmentsatgreatervalue.InadditiontothecapabilitiesofVMware
Infrastructure3Foundation,VMwareInfrastructure3StandardincludesVMware
HA,whichprovidesautomatedrestartofvirtualmachinesaffectedbyhardware
failure.VMwareInfrastructure3StandardlistpriceisUS$2995pertwoprocessors.
• VMwareInfrastructure3Enterprisecontainstheentirearrayofvirtualinfrastructure
capabilitiesforresourcemanagement,workloadmobility,andhighavailability.
InadditiontothecapabilitiesinVMwareInfrastructure3Standard,italsoincludes
268 Part III: Cloud Computing at Work
VMwareVMotion,VMwareStorageVMotion,andVMwareDRSwithDistributed
PowerManagement(DPM).VMwareInfrastructure3EnterpriselistpriceisUS$5750
pertwoprocessors.
• VMwareVMotion,StorageVMotion,andDRSwithDPMareavailableforstand-
alonepurchasewithVMwareInfrastructure3FoundationandStandard.
ThinClients
Desktopandmobilethinclientsaresolid-statedevicesthatconnectoveranetworktoa
centralizedserverwhereallprocessingandstoragetakesplace,providingreduced
maintenancecostsandminimalapplicationupdates,aswellashigherlevelsofsecurityand
energyefficiency.Infact,thinclientscanbeupto80percentmorepower-efficientthan
traditionaldesktopPCswithsimilarcapabilities.
Sun
Sun’sthinclientsolutioniscalledSunRay,anditisanextremelypopularproduct.
ContributingtothedemandforitisfurthermarketdemandforSunVirtualDesktop
Infrastructure(VDI)Software2.0,whichshipsonapproximately25percentofSunRay
unitssincebeingintroducedinMarch2008.Further,SunRaymachinesareabletodisplay
Solaris,Windows,orLinuxdesktopsonthesamedevice.
SunRayvirtualdisplayclients,SunRaySoftware,andSunVDISoftware2.0arekey
componentsofSun’sdesktopvirtualizationoffering,whichareasetofdesktoptechnologies
andsolutionswithinSun’svimvirtualizationportfolio.
NOTE MoreinformationontheSunRayfamilyofvirtualdisplayclientscanbefoundatwww.sun
.com/sunray.
“Asanearlyinnovatorinthethinclientmarketwithnearlyadecadeofexperience,
we’repleasedtoseethegrowthSunRayclientshaveexperiencedduringthepastyearand
areencouragedbythegrowingappealofdesktopvirtualizationtechnologiesindustry-
wide.Organizationshavetrulybeguntorealizethebenefitsthatthinclientsandvirtual
desktopsolutionsoffer—withrespecttocostsavings,easeofmanagement,ecoadvantages,
andmore—totheirbusiness,”saidBobGianni,seniorengineeringdirectorofdesktop
systems,Sun.“Sunisinvestingheavilyindesktopvirtualizationtechnologiesandbelieves
stronglyinthemarket’spotentialforfurthergrowth.”
Sunoffersacomprehensivedesktop-to-datacentervirtualizationproductportfolioand
setofvirtualizationserviceofferingstohelpcustomersdeploynewservicesfaster,
maximizetheutilizationofsystemresources,andmoreeasilymonitorandmanage
virtualizedenvironments.Sun’svirtualizationproductshelptoprovideunifiedsoftware
managementtoolsandvirtualizationcapabilitiesacrossoperatingsystems,servers,storage,
desktops,andprocessors.
NOTE Formoreinformationvisitwww.sun.com/xvm.
SunhasseenanumberofuniqueandcompellingnewdeploymentsofSunRay
technologybycustomersaroundtheworld.Forexample,ColoradoStateUniversity(CSU)
Chapter 12: Local Clouds and Thin Clients 269
isaleadingresearchuniversity,dedicatedtoenergyconservationbyimplementing
programsthathelpreduceCO2emissionsandpromotetheuseofsolartechnologyand
recycling.ThroughitsAcademicVillage,ColoradoStateUniversityusesSunRayvirtual
displayclientsinaninnovativewaytoenhancelearningandcreateaneco-friendlyIT
infrastructure.
“SunRaysolutionsfitinnicelywithwhatwe’vedonetobuildthegreenAcademic
Village.NotonlydoSunRayclientstakeuphalfthespaceofaPC,butwe’vealsoseenthat
theyconsumelessthan10%ofatypicalPC’spower.Sunisdedicatedtoprovidingeco-
friendlysolutionsandthatreallymatterstoCSU,”saidMarkRitschard,directorof
EngineeringNetworkService,CollegeofEngineeringatColoradoStateUniversity.
TheU.S.Navy’sIntegratedWarfareSystemsLab(IWSL)ispartoftheNavalSurface
WarfareCenter(NSWC).TheNSWCprovidestherighttechnology,capabilities,and
specializedresearchtosupportallaspectsofsurfacewarfare.TheIWSLchosetheSunRay
virtualdisplayclientsolutionrunningonSunFireV490serverstoprovideaccesstoabroad
rangeofITsystemsfromasingledevice.
HewlettPackard
HewlettPackard(HP)iscertainlyawell-knowntechnologycompany,andtheirproducts
extendintotheworldofthinclients.Infact,HPistheleadingmanufacturerofthinclients.
PART III
Inthissectionwe’llexaminetheirthinclientsindepth.
Offerings
Inlate2008,HPintroducedthreethinclientproducts,includingthecompany’sfirstmobile
offering,thataddressbusinessneedsforamoresimple,secure,andeasilymanaged
computinginfrastructure.
AccordingtoresearchersIDC,HP(includingrecentlyacquiredNeoware)ledthe
industryinthinclientunitshipmentswithmorethan34percentmarketshareworldwidein
thethirdquarterof2007.
ThreemonthsafterclosingitsacquisitionofNeoware,HPaddedtotheindustry’sbroad
portfolioofthinclientswithtwoflexibledesk-basedmodelsaswellasthefirstHP-branded
mobilethinclient—allofwhichcombinenotebookandthinclientexpertisefrombothHP
andNeoware.
ThinclientsareattheheartofHP’sremoteclientportfolioofdesktopvirtualization
solutions,whichalsoincludethebladePC-basedHPConsolidatedClientInfrastructure
platform,HPVirtualDesktopInfrastructure(VDI),bladeworkstations,remotedeployment,
andmanagementsoftwareandservices.
“Customershaveacknowledgedourcommitmenttoprovidingthemosttrustedand
reliablebusinesscomputingsolutionsbymakingHPtheworldwideleaderinthethinclient
market,”saidKlausBesier,vicepresident,ThinClientSolutions,PersonalSystemsGroup,
HP.“HPrecognizesthinclientsplayanintegralroleindrivingnext-generationbusiness
computingplatforms,andwewillcontinueinnovatingacrossourremotecomputing
solutionsportfoliotohelpcustomersachievetheirbusinessgoals.”
6720tMobileThinClient 6720tMobileThinClientisidealforon-the-goprofessionalssuch
asinsuranceclaimprocessors,remotestaff,warehouseandinventorymanagers,andoffice
administrators.
ItisbasedonMicrosoftWindowsXPe(embedded)andfeaturesa15.4-inchdisplay;
solid-statedesignwithnoharddrive,fan,orothermovingparts;enhancedsecuritywithno
270 Part III: Cloud Computing at Work
dataresidingonthenotebook;Wi-FiCertifiedWLANalongwithsupportfor3Gbroadband
wirelessviaPCmemorycardslot;andsolid-stateflashmoduleforgreaterdurability,faster
dataaccess,andquieterandcooleroperation.
The6720talsohelpsincreasesecuritybyaccessingsoftwareapplicationshostedona
server,virtualPC,orbladePCcomputingplatformoverasecurevirtualprivatenetwork
Internetconnection.Datafilesandsoftwareapplicationsalsoaresavedremotelyonasecure
servertohelpreducetheriskofdataloss,viruses,andproducttheft.
Clientmanagementissimplified,asITadministratorsareabletoremotelyinstall,manage,
update,andexecuteapplicationsoftwaresimultaneouslyacrossanentirefleetofclientsthat
arepushedtothemobilethinclientsassoonastheyareconnectedtothenetwork.
“Together,HPandVMwaredeliveracomprehensiveportfolioofsolutionsthatleverage
VMware’sindustry-leadingvirtualizationsolutionsforsimplifyingandreducingcostsin
thedatacenter,”saidBrianByun,vicepresident,globalpartnersandsolutions,VMware.
“HP’slatestthinclientofferingsprovideacompellingadditiontothejointHPandVMware
VDIsolutionsforourcustomerswholooktosecuretheirenvironments,reducecomputing-
relatedenergyandmanagementcosts,andimproveproductivity.”
HPCompaqt5730andt5735DesktopClients HPalsooffersitsHPCompaqt5730andt5735
ThinClients.TheHPCompaqt5730isbasedonMicrosoftWindowsXPe,andselectmodels
includeintegratedWLAN.BasedonDebianLinux,theHPCompaqt5735supportsa
varietyofopen-sourceapplications.
Bothsolutionsincludeacombinationofdesktop-likefeatures,high-endgraphics,the
HPSecureUSBCompartment,andHPQuickReleasesupportforbusinessenvironments
requiringacombinationofsimplicity,flexibility,power,andenhancedsecurity.
“Intoday’sworld,thedemandforreliableinfrastructurebecomesmoreprevalentand
increasinglyimportanttoensuresolutionsofferthebestuserexperience,”saidGordonPayne,
seniorvicepresidentandgeneralmanager,DeliverySystemsDivision,CitrixSystemsInc.
“OurstrongrelationshipwithHPanditsextensiveclientproductportfolioenableseamless
interoperabilitywithCitrixapplicationdeliveryinfrastructure.ThesenewHPdevicescanbe
usedasdesktopapplianceswithCitrix’sdesktopvirtualizationsolution,CitrixXenDesktop,
providingunmatchedperformancerequiredforthemostdemandingbusinessenvironments.”
Inadditiontocentralizeddatastorageforprotectionofbusinessinformationanddata
integrity,thetwothinclientsprovidecontrolleduseraccessandsupporttwo-factoruser
authentication.
EveryHPthinclientalsoincludesafulllicenseofAltirisDeploymentSolutionanda
freedownloadofHPClientAutomationSoftwaretoprovidecustomerswiththeirchoiceof
anenterprise-levelmanagementsolutionforlargedeployments.
Forcustomerswhoneedaneasy-to-usedeploymenttoolwithbasiccapabilities,
exclusiveHPThinStateToolsareincludedwitheveryHPthinclient.Withthistool,the
t5730,forexample,caneasilydeployimagestootherthinclientsinthenetworkwithno
needtobuy,install,orlearnanyexternaldeploymentsolution.
TheHPCompaq6720tMobileThinClientisavailableatastartingU.S.listpriceof
US$725,whiletheHPCompaqt5730andt5735ThinClientsareavailableatastartingU.S.
listpriceofUS$499andUS$450,respectively.
NOTE Thosenumberswereaccurateatthetimeofwriting,andlikelytheywillbecomeless
expensiveand/orbereplacedbyotherHPofferings.
Chapter 12: Local Clouds and Thin Clients 271
MoreinformationaboutHP’scurrentthinclientofferingsisavailableatwww.hp.com/
go/thinclient.
HPandVMware
HPmadeanotherefforttoensuretheycontinuetheirthinclientstrides.Inearly2009,HP
announcedthatitsentirelineofthinclientsiscertifiedforVMwareView,makingthe
productseveneasierforcustomerstodeployinVMwareenvironments.
Thecertification,whichcoverstheMicrosoftWindowsCE,WindowsXPEmbedded,
andLinuxoperatingsystems,includesrigoroustestingandqualityassurancewithVMware
Viewforenhancedreliabilityandeaseofdeployment.
HPisamongthefirstintheindustrytooffercustomersLinuxthinclientscertifiedfor
VMwareViewManager,anenterprisedesktopmanagementserverthatenablesIT
administratorstoquicklyprovisionandtightlycontroluseraccess.Additionally,HPis
currentlytheonlyvendortoreceiveViewManagercertificationforWindowsCE.
HPoffersanextensivelineupofWindowsandLinux-basedthinclientsthatareideally
suitedforVMwareViewdeploymentsanddeliverarangeofperformanceandfeaturesto
supportawidevarietyofuserneeds—frombasicdataentrytoadvanced3-Dimagingand
remotecollaboration.TheHPt5135andt5145ThinClientswithsimpleHPThinConnect
operatingsystemareHP’sfirstLinux-basedthinclientstobecertifiedforViewManager.
PART III
Dell
Anotherwell-knownplayerintheworldofclientdevelopmentisDell,andthey,too,offer
athinclient(theirfirst).Buttheyarealsotoutingenvironmentalresponsibilitywithanew
lineofPCs.TheirmostrecentadditionsarealineofOptiPlexcommercialdesktops,Flexible
ComputingSolutions,andserviceofferingsdesignedtoreducecoststhroughoutthe
desktoplifecycle.
NOTE Moreinformationisavailableatwww.dell.com/seriousbusiness.
“Astheworld’sleadingsupplierofdesktops,Dellunderstandstheimportanceof
simplifyingcustomers’ITenvironmentsandsavingthemmoneyineverystepofthe
desktoplifecycle,”saidDarrelWard,director,DellProductGroup.“AccordingtoGartner,a
lockedandwell-managedsystemcanbe42percentlessexpensivetomaintainthanan
unmanagedone.Withtoday’sproductannouncement,weareintroducingend-to-end
solutionsthataremoremanageableandsecure,whilealsogivingcustomerstheflexibility
todeploysolutionsoutsideoftraditionalcomputingmodels.”
TheOptiPlexsystemsfeaturenewtechnologiesinserviceability,manageability,security,
andpowerconsumptiontohelpsimplifyday-to-dayoperationswhilereducingoperating
expenses.TheOptiPlexportfolioisdesignedtoreducecostsinfourkeyareas:
• Management Remotesystemmaintenance;designedforeasyserviceability;Dell
ProSupportofferings.
• Security Automateddatasecuritywithfulldiskencryptionandsolidstatedrives
foraddeddataprotectiononselectsystems;improvedchassisintrusionprevention;
DellControlPointsecuritymanagement,smartcardauthentication;remote
patchingandisolation.
272 Part III: Cloud Computing at Work
• Stability Factory-built,preconfigured,anddeliveredtocustomerspecifications;
upto36-monthproductlifecycle;globalstandardplatformsavailableonselect
systems.
• EnvironmentalResponsibility Energy-efficientdesign;post-consumerrecycled
plasticsonselectsystems;recyclablepackaging;leadingpower-supplyefficiencyon
selectsystems.
Intotal,thecompanyintroducedfournewplatformsinearly2009—includingthe
flagshipOptiPlex960.Italsodeliversthemostenvironmentallyresponsiblefeaturesofany
commercialdesktopfromanymajorvendor.
OptiPlex960 TheOptiPlex960offersthesefeatures:
• Upto43percentlesspowerconsumptiontoreduceenergycostsoverprevious
generationofOptiPlexdesktops
• Upto89percentrecyclablepackaging
• Atleast10percentpost-consumerrecycledplasticonsmallformfactor
• Anaverageof28percentfasterservicetimethanacomparablesystemfromHPand
43percentfasterthanaLenovo
• OptionalQuietKittechnologyreducesnoisebyasmuchas60percent
• Availableinthreechassisstyles(mini-tower,desktop,andsmallformfactor),the
OptiPlex960startsatUS$863.
OptiPlex760 TheOptiPlex760offersmainstreamsecurity,productivity,andenergy-efficient
featureswithimprovedmanagementcapabilities.Itrequiresanaverageof22percentless
timetoservicethanacomparablesystemfromHPandanaverageof38percentlesstime
thanaLenovo.TheOptiPlex760startsatUS$593.
OptiPlex360 TheOptiPlex360enablestheperformanceneededtohelpcustomersbuild
theirbusinessanddriveessentialofficeproductivity.TheOptiPlex360startsatUS$476.
OptiPlexFX160 TheOptiPlexFX160isDell’sfirstthinclientandsupportsembeddedor
streamedoperatingsystemsforvirtualdesktopimplementations.TheFX160startsat
US$399.
FlexibleComputingSolutions
DellisexpandingitsFlexibleComputingSolutions(FCS)toincludeglobalavailabilityof
On-DemandDesktopStreamingandthecompany’snewVirtualRemoteDesktopoffering
availableintheUnitedStates.Dell’srangeofFlexibleComputingSolutionsarenetwork-
basedandusevirtualizationcomputingarchitecturestogivecustomersunprecedented
choiceandflexibility,whileenablingITtoretainfullcontrolofdataandapplication
managementwithoutsacrificingend-userperformanceorproductivity.DetailsofDell’s
FCSsolutionsinclude:
• On-DemandDesktopStreaming Processinghappensonthedesktopwheredata
ishostedonapartitionedserverinthedatacenterwithprocessinghappeningona
localclientforanuncompromisedend-userexperience.
Chapter 12: Local Clouds and Thin Clients 273
• VirtualRemoteDesktop Datacenterprocessingandhostedvirtualclientdesktops
accessedfromavarietyofdevicesandlocations.
• DedicatedRemoteWorkstation PC-over-IPsolutionthatconnectstoaDell
PrecisionR5400rack-mountworkstationinadatacenterforhigh-performanceusers
inharshorhighlysecureenvironments.
FCSofferingsfeatureengineer-testedandoptimizedhardware—includingdesktops,
server,storage,andnetworking,inadditiontosoftwareandsupportforthecomplete
solution.DellServiceswillhelpcustomersassess,design,plan,anddeploytheFCS
solutionsthatmeettheirspecificneeds.
RemoteManagementandPersonalizationServices
Dell’sRemoteManagementandPersonalizationservicesinclude:
• ImageDirect Allowscustomerstosecurelycreate,load,andmanagecustom
imagesontotheDelldesktopsystemstheypurchase;itisfullyintegratedintoDell’s
productionsystemssoimagesareappliedduringthemanufacturingprocess.
• ApplicationPackaging AllowsITdepartmentstoefficientlymanage,deploy,
install,anduninstallapplications;cansignificantlyreduceportfoliomanagement
PART III
andapplicationsupportcosts.
• DesktopManager Automatesassetmanagement,softwaredistributionand
upgrades,patches,andantivirusandmalwareupdates.
• SoftwareInventoryandUsage Automatesapplicationsmonitoringand
inventoriesandtrackingsoftwareusage.
• Back-upandRestore Automatesdesktopdatabackuptoasecure,off-site
datacenterusingsingleinstancinganddatacompression.
• EmailManagementServices Automatesemailbackupandarchivingtohelp
preventdowntime,atafractionofthecostoftypicalon-premisesolutions.
• CrisisManagementandAlerting Utilizesautomationtoprovidecontinuous
communication,reachingthousandsofemployeesinminutesandkeepingthem
updatedduringacrisisordisaster.
• DellAssetRecoveryandRecyclingServices Recyclesystems;recoverresidual
valueforcustomers;disposeofolderassetsinanenvironmentallyresponsible
manner.
CaseStudy:McNeilusSteel
Differentcompanieschosevirtualizationfordifferentreasons.Forasteeldistributorin
DodgeCenter,Minnesota,McNeilusSteel,themainreasonfora2006changewasreliability.
Benefits
“Wedidnotwantanydowntime,”observedITManagerDarrenBoeck.“Thelongestwe
wantedtobedownforwasthreeminutes.”
274 Part III: Cloud Computing at Work
Beforedecidingonvirtualization,McNeilusconsideredeight-wayservers.Theproblem
withthatsolutionwasthateveryserverhadjustonebackup.Byusingbladeservers,ifthe
systemfails,itisinstantlyswitchedovertoanewblade.Workersdon’tnoticethatanything
haschanged,andBoeckgetsamessagetonotifyhimofthefailure.Allhehastodoisswap
overanewblade.Thisisahugebenefitoverthepastwhereitcouldsometimestakean
entiredayofsystemdowntimetorepairafailednetwork.
Additionally,ifhewantstospinoffaserverforaspecificresource,VMwarewilltell
himhowmanyresourcesitwillrequire.
“It’samazingbecauseyoualwaysbuyanewserverandyouwindupoverbuying,”
saidBoeck.“Youneveruseallthoseresources.”
Reliabilitywastheirkeyissue,butMcNeilusfacedotherproblemsthatvirtualization
helpedwith.Thefirstwasserversprawl.Thecompanyhadmaxedoutthetotalnumberof
serversitcouldhouse.
Boecknotesthatwhenbuyingbladeservers,makesuretogetenoughRAM.The
processingpowerisnotusuallyanissue.
“You’llrunoutofRAMbeforeyourunoutofprocessor,”observedBoeck.
Anotherbenefitisinadministration.Nowthateverythingiscentralized,itcanbemanaged
fromonelocation,ratherthanscatteredaroundtheorganizationoratremotesites.
Thereweresomebenefitsthatthecompanydidn’trealizeitwouldencounter.Moving
tovirtualizationallowedthecompanytoimplementitsownGreenITinitiativesandreap
therewards.Thecompanyspendslessmoneyonelectricityandcooling,andtheyareamore
sociallyresponsiblecorporatecitizen.
“Wewereluckytogetthatbenefit,”saidBoeck.
MakingtheSell
Changingovertoavirtualizeddatacenterisnotinexpensive.ForBoeck,itwasnecessaryto
sellthecompany’sCFOonthechange.
Luckily,thecompanywasmovingtoanewheadquartersandBoeckandhisteamhad
thebenefitofbeingabletodesignthenewdatacenterthattheythoughtmostappropriate.
WhenhepresentedtheideatotheCFO,hesignedoffonit.
“Ijustsaid,‘ThisishowIthinkweshoulddoit,’”saidBoeck,alongwithgivingtheCFO
somegoodreasonswhy.
Equipment
Intermsofhardware,McNeilusswitchedfromHewlettPackardserverstoanIBM4700
FiberSANwithExpansionBay,IBMBladeCenterChassiswithHS20andHS21IBMBlade
Server,andCiscoC9020FiberSwitches.
WhiletheylikedtheHewlettPackardmachines,therewasmoreofacomfortlevelin
usingIBM’sequipmentbecausetheyhavebeenintheblademarketlongerthanHewlett
PackardorDell.
“We’vealwaysbeenanHPshop.Welovedthem,”observedBoeck.“ButIBMhasbeen
inthegamelonger.”
Also,thereisanIBMheadquartersinnearbyRochester,Minnesota.Ifthereareproblems,
someonecangettothemfast.
“Theycanhavesomeoneinourlobbyin30minutes,”saidBoeck.
Chapter 12: Local Clouds and Thin Clients 275
Thecompanyplanstodevelopamirrorimagingofthissetuptooneoftheirremote
facilitiesandusethesecondsitedisasterrecovery/highavailabilityviaSAN-to-SAN
synchronizationacrossaWANlink.TheyarealsoconsideringincludingFatPipeandCisco’s
WAAS/RiverBedproducts.TheyarealsoconsideringputtingtheirSystemIontoaPower
6bladeinthesametimeframe.
McNeilusdidn’thavetospendmuchmoneyonnewclients—theyrepurposedthefat
clientsthatwerealreadyinplace.Theoldfatclientsjustneedtobeabletodisplaythefunctions
operatingontheserver.
Onthesoftwareside,theyareusingVMwareESXServers,whichincludehighavailability
andVMotionoptions.
Atthetime,VMwarewasMcNeilus’onlyoption.VMwarehadaprovenrecord.Microsoft
wasstilldevelopingitssolutionandiftheyhadwaited,Boeckfearedadoptingthebrandnew
Microsoftsolutionhadthepotentialtobringproblems,sinceitwouldbesonewanduntested.
Intheend,BoeckhasnothingbutpraiseforVMware.
“VMwarewasn’tcheap,butitisefficient,”saidBoeck.
MakingtheMove
Whenitcametimetoimplementthemove,BoecksaidthattheyusedaVMwaretoolcalled
P2V(Physical-to-Virtual)thatallowedthemtocopytheirserverimagesontotheblades.
PART III
Thenitwasanissueofphysicallyschleppingclientcomputerstothenewbuilding.
“It’samazingthatusersdon’twanttopickuptheirowncomputers,”saidBoeck.
“Theythinkthey’llbreakthem.”
TheystartedmovingthesystemsjustafterThanksgivingin2005andweremovedin
bythefirstoftheyear.
DoingNewThings
Inadditiontothebenefitsalreadymentioned,McNeilushasbeenabletochangetheway
thecompanyworks—forthebetter.Whentheywanttotestanewapplication,it’s
simplyamatterofspinningupanidenticalvirtualserver,installingtheapplication
there,andtestingit.Ifthereareproblems,theydon’tdeploytheapplicationtothemain
image.
“Wedidn’thavethemoneytobuildatestenvironment,butwiththevirtualserver,
wehaveit,”saidBoeck.
Also,itwasnotuncommonforthemtobesurprisedbyamandatedapplication.However,
sincetheydidn’tknowtheapplicationwascoming,itwouldtakeweeksextratofindthecorrect
server,orderit,andinstalltheapplication.Nowit’sjustamatteroftestingitonacopyofthe
workenvironment.
PatchmanagementhasalsobeensimplifiedwithVMware’ssnapshotfeature.Now,when
anewpatchisissued,Boeckcantestthepatchtoensureitworks.Ifitdoesworkproperly,
hecansimplyapprovethechangeanditwillbeappliedtotheworkenvironment.
Alocalcloudishelpfulforanumberofreasons,nottheleastofwhichincludereliability
andcentralizedmanagement.Beingabletoputyourclientsonavirtualcloudalsohassome
greatbenefitsfortheenvironment.Whetherornotvirtualizationisrightforyourorganization
isacase-by-caseissue,butifyouthinkitmightbeagoodmoveforyourorganization,think
aboutitbeforebudgettime.
Ifyouareconsideringamovetothecloud,therearesomeconsiderationstokeepinmind,
nottheleastofwhichismigration,whichwewilltalkaboutinthenextchapter.
This page intentionally left blank
CHAPTER
13
Migrating to the Cloud
M
ovingtothecloudisalotlikeeatinganelephant.Wheredoyoustart?Itissuch
abiganduniquethingthatyoumightnotevenknowwheretotakethefirstbite.
Butthefactofthematteristhatyoujustneedtostudyyourorganization,think
aboutwhatcan(andshould)bemovedtothecloud,andthenjustdigin.
Obviouslyyoudon’twanttodoitallatonce.Besides,networkadministratorsneed
somethingtodo,andifyoutakeawayeverythinglocally,there’sonlysomuchcomputer
solitairetheycanplay.
Inthischapterwe’lllookatmigrationtoolsandstrategiesforpeopleatdifferent
levels—startingwithindividualsandsmallgroups,thenmovingtomid-sized
organizations,andthenfinallytoconsiderationsforenterprise-sizedgroups.
CloudServicesforIndividuals
Themostbasic—andtheeasiest—waytomovetothecloudisatanindividualorsmall
businesslevel.Thereareagrowingnumberofpopularapplicationsoutthere,andthey
tendtobefreeorofferedataverylowcost.Let’stakealookatsomeservicesthatyoumay
ormaynothaveheardof,andtalkabouthowtheycanhelpyou.
AvailableServices
Chancesareyouhaveoneoftheseservicesalready.Take,forinstance,Gmail.It’safree,
onlinewebmailapplication.Andprobablythereasonyousignedupforitisthereason
manyofusdo—it’sconvenienttobeabletocheckyouremailfromanycomputer.Andat
anindividuallevel,that’sprobablythemostappealingpartofwebapplications.Youcan
checkyouremailfromwork;workonadocumentduringaboringfamilyget-together;
orsynchronizefilesamongyourlaptop,computer,andsmartphoneusingcloud-based
services.
277
278 Part III: Cloud Computing at Work
Let’stakealookatsomeofthemostpopularcloudapplicationsoutthere.
• AppleMobileMe(http://www.me.com/) Thisservicesynchronizesemails,
photos,andcontactsamongmultipledevices.Yourcomputer,laptop,andmobile
devicescanremaininsyncaslongastheyhaveaccesstoApple’scloudservers.
• GoogleDocs(http://docs.google.com/) Providinganintuitiveinterface,Google
Docsprovidesapplicationsthatyounormallyassociatewiththedesktop—aword
processor,spreadsheet,andpresentationdesigner.Documentscanbesavedtothe
cloudorlocally.Multipleuserscancollaborateonthesamedocumentfromdifferent
computerswithchangestakingeffectinstantly.
Chapter 13: Migrating to the Cloud 279
• AdobeAcrobat(http://www.acrobat.com/) KnownforitsfreePDFreader
(amongothertools),Adobeprovidesitsownonlinewordprocessorandcloud
storagespaceforyourdocuments.Italsoincludescollaborationtoolsandanonline
PDFconverter.
• Jooce(http://www.jooce.com/) JooceisaFlash-baseddesktopenvironment,
mostlyforusersofInternetcafés.Draggingafileontothedesktopuploadsittothe
cloud,givingyouaccesstoyourfilesfromanyInternet-connectedcomputer.
• Evernote(http://www.evernote.com/) Evernoteallowsyoutosavephotos,
screenshots,orfilestotheirserversinthecloud.Iftheimagescontaintext,theyare
scannedandindexedtocreateavirtualdatabase.Variousclientsoftwarepackages
allowPCs,Macs,iPhones,andotherendpointstosynchronizeEvernotedatawith
thecloud.
PART III
• MicrosoftLiveSearch(http://www.live.com/) Microsoft’smobilephonesearch
engineusesheavycloudprocessingtobringdetailedsearchestohandhelddevices.
• Twitterfone(http://www.twitterfone.com/) Twitterfoneusesspeechrecognition
inthecloudtotranscribevoicemessagesinto“tweets”ontheTwittersocial
network.
280 Part III: Cloud Computing at Work
• Blist/Socrata(http://www.socratablist.com/) Blist,nowcalledSocrata,isa
databasewithaneye-catchinginterface,how-tovideos,andadrag-and-drop
design.Afterit’sbeencreated,thedatabasecanbesharedwithotherusersof
thesite.
• Picnik(http://www.picnik.com/) Thisserviceprovidesphotoeditinginthe
cloud.Youuploadpicturesfromyourlocalmachineorimportthemfromanother
site—likeFlickrorFacebook.Thesitehaspowerfulphotoeditingtoolsanditisalso
possibletoaddtext,shapes,oraframetoyourphotos.
• AdobePhotoshopExpress(http://www.photoshop.com/express) Thisisanother
editorbythecreatorsofthepowerfulPhotoshopapplication.Youcanstoreyour
photosonthecloudandeditthemwiththesametoolsthatyouwouldusewitha
desktopversionofPhotoshop.Onceyourphotoeditingisdone,youcanaddyour
photostothesite’sgallery.
Chapter 13: Migrating to the Cloud 281
• G.ho.st(http://g.ho.st/) StandingforGlobalHostedOperatingSystem,G.ho.stis
aFlash-basedvirtualoperatingsystem.Thesitehasthefeelofacomputerdesktop
andoffersupto5GBoffreestorage(youcanearnmorestoragespacebyreferring
otherstothesite)and3GBforemail,web,andofficeapplications(theyuseone
namedZoho).
PART III
SkytapSolution
Skytapoffersavirtuallabinthecloud.Andtohelpyoumoveyoureffortsfromyourlocal
environment,theyofferanAPItohelpmountasolidmigration.Let’stakealook,first,at
whattheVirtualLabis,andthenwe’lllookunderthehoodoftheirAPIandtalkaboutwhat
itdoes.
SkytapVirtualLab
Cloud-basedvirtualizationsolutioncompanySkytap(formerlyknownasillumita)offers
SkytapVirtualLab,avirtuallabautomationsolutionavailableasanon-demandservice
overtheWeb.
“Skytapprovidescustomerswithcloud-basedservicesthatenablethemtocapitalizeon
thewaveofvirtualizationtechnologysweepingtheindustry,”saidScottRoza,CEOof
Skytap.“Cloudcomputingisgainingtractionbecauseagrowingpercentageofcompanies
aredemandingsolutionsthatdelivervaluequickly,scalewithbusinessneed,anddon’t
havetheriskofanin-houseimplementation.SkytapVirtualLab,whichcombinescloud-
basedvirtualizedinfrastructurewithanindustryleadinglabautomationapplication,
282 Part III: Cloud Computing at Work
hastremendouspotentialtoimprovethetimelydeliveryofqualityapplicationstothe
businesswhileincreasinglabefficiencyandloweringcost.”
SkytapVirtualLabisavirtuallabsolutionavailableasaserviceovertheWeb.Itenables
applicationdevelopmentandtestteamstoprovisionlabinfrastructureondemand
(includingservers,software,networking,andstorage)andutilizeapowerfulvirtuallab
managementapplicationtoautomatethesetup,testing,andtear-downofcomplex,
multitieredenvironments.Italsogivesdistributedteamsthecapabilitytocollaborateand
rapidlyresolvesoftwaredefectsusingavirtuallabandvirtualprojectenvironment.
“Virtualizationispoisedtobecomethedefiningtechnologyofthe21stcentury,”said
TheresaLanowitz,founderofanalystfirmvoke.“Themarketopportunityofvirtualized
solutionsisenormous,asarethebenefitsvirtualizationdeliverstoanorganization.Skytap’s
introductionofvirtuallabautomationasaSaaS[SoftwareasaService]offeringprovidesa
flexibleentrypointtotheexcitingworldofvirtualization.”
Skytap’scustomersincludeIndependentSoftwareVendors(ISVs),SystemsIntegrators
(SIs),andtestoutsourcingfirms,mid-sizecompanies,anddepartmentswithinglobal
enterprisesthatwantthebenefitsthatSkytap’svirtuallabserviceprovides.
“We’vebeenusingSkytap’sserviceforseveralmonthsandhavebeenimpressedwith
itscapabilitiesandthesignificantproductivitygainsourteamhasexperiencedfrom
Skytap’svirtuallabtechnology,”saidEricBlankenburg,CTOofResolute.“TheSkytap
solutionenablesustoquicklyscaleupourlabinfrastructuretomeetourtightdevelopment
deadlinesandprovidesourglobalapplicationdevelopmentteamwiththetoolsand
platformtheyneedtotestandshipourproductsontime.”
“Asacompanythatdeliversbothsoftwareproductsandconsultingservicestoclients,
weareconstantlyfacingsituationswhereweneeddynamiclabenvironmentsthatwecan
spinupquickly,”saidClayRoach,presidentofJ9Technologies,anotherearlycustomerof
theSkytapsolution.“SkytapVirtualLabhasgivenusthecapabilitytorapidlybringlab
resourcesonlineregardlessofwhethertheteamisworkingon-siteoroff-site.Thishasgiven
usasignificantcompetitiveadvantageandanabilitytoexpandourbusinesswithnew
customersolutionsandservices.”
CustomersusingSkytapareabletoaccessthefollowing:
• Virtualinfrastructureon-demand Virtuallyunlimitedhardware,software,and
storageavailablefromanylocationandanybrowser.SkytapVirtualLabscalesup
anddownwithsoftwareprojectdemandsandrequiresnoupfrontinvestment.
• Automatedsetupandtear-downofenvironments Aweb-basedvirtuallab
automationapplicationthateliminatesmanualsetupandtear-downtasksand
enablestherapidprovisioningandreplicationofmultimachineproduction
environmentsfordevelopmentandtesting.
• SkytapLibrary Aprepopulatedsoftwarelibrarythatincludesmajoroperating
systems,databases,andapplicationsinmultiplelanguagesthatdramatically
reducesmediainstallationtasksandenablesconstructionoflabenvironmentsby
dragginganddroppingpreconfiguredvirtualmachines.
• Collaborationinavirtualenvironment Thecapabilitytoinstantlycollaborateon
softwareissuesanddefectsinavirtualizedenvironment.Entiremultimachinelab
environmentscanbesuspendedandsharedwithdistributed,globalteammembers
toenablereproductionanddiagnosisofsoftwarebugsandissues.
Chapter 13: Migrating to the Cloud 283
SkytapMigrationAPI
TheSkytapAPIenablescustomerstoblendSkytap’scloud-basedVirtualLabplatformwith
theirexistingon-siteITinfrastructure.Ratherthanusingcloudresourcesinasilo,Skytap’s
WebServicesAPIandone-clickVPNfunctionalityallowsorganizationstocreatea“hybrid”IT
modelwherebycloudresourcescanbeusedasanextensionofexistingon-siteITenvironments.
“Acommonmisconceptionpeoplehaveaboutcloudcomputingisthatithastobeanall
ornothingdecision,”saidTheresaLanowitz,founderofanalystfirmvoke.“Skytap’sAPI
andadvancednetworkingfeaturesallowcompaniestoprogressivelyadoptcloudresources
withoutcompletelyabandoningthebusinessprocessesandapplicationsthey’vealready
establishedintheironsiteenvironment.”
Unlikemostcloudcomputing
offeringswhereapplicationsmustbe
specificallyrewrittenforthecloud,
Skytapallowscompaniestoruntheir
existingapplications,virtualmachines, Skytap Cloud
andsystemsunchangedonindustry-
standardplatforms.Skytapcloud
infrastructuresupportstheleading
hypervisors,includingVMwareand
PART III
CitrixXen,andsupportisplannedfor
MicrosoftHyper-V,andoperating The Skytap solution involves accessing their cloud
systems,suchasMicrosoftWindows, and running lab services at your own site.
Linux,andSolaris.
Usingahybridcloudcomputingmodel,organizationshaveawaytorealizethebenefits
ofcloudeconomics.Migratinghigh-cost,dynamicenvironments,suchasapplication
developmentandQA,ITopstesting,traininganddemoenvironments,providesalow-risk
adoptionpathtocloudcomputing.ItalsodeliversahighROIasdynamicenvironments
fluctuatedramaticallyandareoftenthemostexpensivetoadminister.Inahybridmodel,
companiescanmaintainproductionapplicationson-sitewhileconductingalltheirtesting
inthecloud.Thisenableson-demandscalingoftestenvironmentsasneededandeliminates
thecostofunderutilizedhardware.Thisapproachalsoallowsorganizationstobenefitfrom
themanagementandautomationcapabilitiesofafullyautomatedvirtuallabsolution,
leadingtohugeproductivityincreases.
TheAPIandadvancednetworkingfeaturesthatarenowinSkytapVirtualLabinclude
• AREST-basedWebServiceinterfacethatenablescloudresourcestobecontrolled
programmatically
• Public/staticIPaddressestoprovideseamlessaccesstoSkytapenvironments
• One-clickVPNforeasyconnectionbacktotheonsiteITenvironments
• AutomateduploadofexistingvirtualmachinesandsoftwaretoruninSkytap
VirtualLab
SkytapVirtualLabprovidesvirtualizedinfrastructure,includinghardware,storage,
andnetworkingresourcesthatcanbeaccessedondemand.WhenSkytap’sVirtualLab
managementapplicationiscombinedwiththeSkytapLibrary,aprepopulatedvirtual
machinelibrarythatincludesmajoroperatingsystems,databases,andotherapplication
software,customersgetaccesstoacompletevirtuallabsolutionondemand.
284 Part III: Cloud Computing at Work
“Asaprovideroftheindustry’sleadingcloudapplicationplatform,ourconsulting
organizationworkswithenterprisestodeliverapplicationsonlarge-scaleprivateclouds,”
saidMarkSundt,vicepresidentofprofessionalservices,Appistry.“TheSkytapenvironment
allowsustohelpourcustomersgetcloudapplicationstomarketmorequicklybyadopting
a‘hybrid’modelfordevelopmentandlargescaletesting.Theabilitytoautomaticallyscale
uplabinfrastructureusingtheSkytapAPIcomplementsourclients’on-siteinfrastructure
andgivesustremendousbusinessflexibility.”
FormoreinformationonthisreleaseofSkytapVirtualLabvisitwww.skytap.com.
CloudServicesAimedattheMid-Market
Atamid-marketlevel,it’slikelythattherearethingsyouwanttokeeplocally,butother
applicationsandstoragethatyouwanttodoonthecloud.Thisiswhereyoucantrysome
thingsoutandmakesurethey’rerightforyourorganization.
NOTE Atthislevelyoumightalsoconsiderapolicyforyourworkersaboutwhattheycanorcannot
keepontheirownprivatecloudsolutions.Forinstance,Shellyinaccountingmightwanttodo
someworkathome,soshestoresthespreadsheetonGoogleDocs.However,sinceshe’sdoing
workwithsensitivedata,youmightnotwantitonthecloud.It’sbesttolaydownsomerules
rightupfrontsothatnothingbadhappenstothatsensitivedataandShelly’schancesfor
continuedemployment.
Force.com
TheForce.comMigrationToolismoreofaroll-up-your-sleeves-because-you’re-going-to-
get-your-hands-dirtything,comparedtobeingabletopointandclickyourwaythrougha
GUI.TheForce.comMigrationToolisanAntlibrarythatletsyoumigratemetadata(code
andsettings)fromyourorganizationtoForce.com’scloud.
TheForce.complatformholdsyourapplicationasmetadataontheplatform,andyou
canaccessthismetadata.ThatishowtheForce.comIDEworks—itusesthemetadatatoget
yourcode,yourpackages,yourtriggers,andeditthemlocally.EachtimeyoueditanApex
page,itsendsthecodebacktotheForce.comserverswhereitiscompiled.
TheForce.comMigrationToolisaJava/Ant-basedcommand-lineutilityformoving
metadatabetweenalocaldirectoryandForce.com.TheForce.comMigrationToolis
especiallyusefulinthesescenarios:
• Developmentprojects Whenyouneedtopopulateatestenvironmentwithlarge
amountsofsetupchanges.Ifyouweretomakethesechangesusingawebinterface,
itwouldtakealargeamountoftime.
• Multistagereleaseprocesses Mostdevelopmentprocessesruniniterativecycles
ofbuilding,testing,andstagingbeforetheyarereleasedtoaproduction
environment.Scriptedretrievalanddeploymentofyourcomponentsmakesthis
processeasierandcleaner.
• Repetitivedeploymentusingthesameparameters Youcanretrieveallyour
organization’smetadata,makechangesasneeded,anddeploythatmetadata.Ifyou
needtodoitagain,youjusthavetocallthesamedeploymenttarget.
Chapter 13: Migrating to the Cloud 285
InAction
Let’slookatanexamplescripttoseehowtouseApextomigratedata.
Therearesomeprerequisites.YoushouldensureyouhavethelatestversionofJava
JDK.Youcangetitathttp://java.sun.com/javase/downloads/index.jsp.Youneedatleast
version6.1.
YoualsoneedAntversion1.6orgreateronthedeploymentmachine.Itcanbefoundat
http://ant.apache.org/.
Next,setuptheenvironmentvariables(likeANT_HOME,JAVA_HOME,andPATH)as
instructedintheAntInstallationGuide(thiscanbedownloadedathttp://ant.apache.org/
manual/install.html).
Ensurethateverythingisinstalledcorrectlybyopeningacommandpromptandentering
ant–version
Youroutputshouldlooklikethis:
ApacheAntversion1.7.0compiledonDecember13,2006
Yougetstartedbyfollowingthesebasicsteps:
PART III
1. Onyourdeploymentmachine,logintoyourSalesforce.comaccount.
2. FollowSetup|Develop|Tools,andthenclickForce.comMigrationTool.
3. Unzipthedownloadedfile.TheZipfilecontainsthefollowing:
• AReadme.htmlfilethatexplainshowtousethetools
• AJarfilecontainingtheAnttask:ant-salesforce.jar
• Asamplefoldercontaining
• Acodepkg\classesfolderthatcontainsSampleDeployClass.clsand
SampleFailingTestClass.cls
• Acodepkg\triggersfolderthatcontainsSampleAccountTrigger.trigger
• Amypkg\objectsfolderthatcontainsthecustomobjectsusedinthe
examples
• AremovecodepkgfolderthatcontainsXMLfilesforremovingtheexamples
fromyourorganization
• Asamplebuild.propertiesfilethatyoumustedit,specifyingyourcredentials,
inordertorunthesampleAnttasksinbuild.xml
• Asamplebuild.xmlfilethatexercisesthedeployandretrieveAPIcalls
4. Copytheant-salesforce.jarfilefromtheunzippedfileintotheantlibdirectory.
TheantlibdirectoryisfoundintherootfolderofyourAntinstallation.
5. Openthesamplesubdirectoryintheunzippedfile.
286 Part III: Cloud Computing at Work
6. Editthebuild.propertiesfile:
a. EnteryourSalesforceproductionorganizationusernameandpasswordforthe
sf.userandsf.passwordfields,respectively.
NOTE TheusernameyouuseshouldhavethepermissiontoeditApex.
b. Ifyouaredeployingtoasandboxorganization,changethesf.serverurlfieldto
https://test.salesforce.com.
7. Openacommandwindowinthesampledirectory.
8. Enterthefollowing:
antdeployCode.
ThisrunsthedeployAPIcall,usingthesampleclassandAccounttriggerprovided
withtheForce.comMigrationTool.
TheantdeployCodecallstheAnttargetnameddeployinthebuild.xmlfile.
<!--Showsdeployingcode&runningtestsforpackage'codepkg'-->
<targetname="deployCode">
<!--Uploadthecontentsofthe"codepkg"package,
runningthetestsforjust1class-->
<sf:deployusername="${sf.username}"
password="${sf.password}"serverurl="${sf.serverurl}"
deployroot="codepkg">
<runTest>SampleDeployClass</runTest>
</sf:deploy>
</target>
9. Removethetestclassandtriggeraddedaspartoftheexecutionofant
deployCode.Todothis,enterthefollowinginthecommandwindow:
antundeployCode.
antundeployCodecallstheAnttargetnamedundeployCodeinthebuild.xmlfile.
<targetname="undeployCode">
<sf:deployusername="${sf.username}"
password="${sf.password}"serverurl=
"${sf.serverurl}"deployroot="removecodepkg"/>
</target>
Force.comApps
Asyouconsidermigratingyourorganizationtothecloud—andifForce.comisappealingto
you—thefollowingaresomeofthemostpopularapplicationsonForce.com.Mostofthese
applicationsarefreeofcharge,butothersrequireasubscription.Andremember,thisisjust
asamplingoftheapplicationsonForce.com.Therearehundredsmoreforyouruse.
Chapter 13: Migrating to the Cloud 287
Thefollowingaresomeofthe(currently)mostpopularappsonForce.com:
• AppirioCalendarSyncforSalesforce.comandGoogleApps AppirioCalendar
SyncforSalesforce.comandGoogleAppsisasimpletooltosyncyourSalesforce.com
calendarwithyourGoogleCalendar.WithAppirioCalendarSync,itiseasyto
automaticallykeepyourSalesforceCalendarinsyncwithyourGoogleCalendar.
Youcansharecustomer-relatedeventsacrosscompanyboundariesthroughan
easy-to-useonlinecalendar.Anditiseasytoassociateeveryeventinyourcalendar
withtherightaccount,opportunity,lead,case,oranyothercustomobject.
• GmailtoSalesforce.combrowserbuttonforFirefox Browserbuttonscaneasily
beaddedtoyourbrowser’stoolbar.WhenusingGmail,simplyclicktheGmailto
Salesforce.combrowserbuttontosendtheemailandautomaticallycopyitasan
activityonrelatedleadandcontactrecordsinsideSalesforce.com.
• Leadandopportunitymanagementdashboards Installlead-trackingand
opportunitymanagementdashboardsinstantlywithinyourSalesforce.comaccount.
ThesedashboardsonlyusestandardfieldsandobjectsfromwithinSalesforce.com;
therefore,thereisnoconfigurationtobedone,justasimpledownload.
• AppirioCRMDashboardsforSalesforce.com&GoogleApps AppirioCRM
PART III
DashboardsforSalesforce.com&GoogleAppsallowsyoutoputSalesforcedata
intographsandtablesonyourGoogleStartPage,GoogleDocument,orGoogleSite.
• SalesActivityDashboard ThisDashboardisimportanttosalesprofessionals
whowanttohavevisibilityofthetypesofActivitytheirsalesteamsareengagingin
onOpportunities.Thisisparticularlyhelpfulinteamsellingenvironmentswhere,
togetherwithaccountexecutives,theOpportunitymayhaveActivitiesfromsales
consulting,engineering,andprofessionalservicesteams.
• VerticalResponseforAppExchange VerticalResponseforAppExchangeprovides
self-serviceemailanddirectmailsolutions.Createcustommailinglistsofanysize,
designprofessionalsalesandmarketingcampaigns,andtrackpost-launchstatistics.
• AppirioSearchforSalesforce.com&GoogleApps AppirioSearchforSalesforce
.com&GoogleAppsallowsyoutofindandaddGoogleDocstoanySalesforce
objectasyouwork—withoutswitchingscreensorcopyingURLs.Anextensionto
“Salesforce.comforGoogleApps.”
• Salesforce.comforGoogleAdWords Salesforce.comforGoogleAdWordsallows
onlinemarketerstotracktheeffectivenessofGoogleadvertisingcampaignsand
websitelead-generationactivity.
• AstadiaReportCollaborationforGoogleSpreadsheets AstadiaReport
CollaborationforGoogleSpreadsheetsallowsaSalesforcesubscribertoexportany
reportableinformationinSalesforcetoGoogleSpreadsheetsforfurtheranalysisand
sharethereportwithbothSalesforceandnon-Salesforceusers.
• CongaMerge Createcontent-richoutputfromWord/ExceltemplatesorPDFforms.
Customquotes,proposals,accountplans,andmorefromanycustomobjectand
relatedlists—aslittleasoneclicktoprint,attachment,oremail.
288 Part III: Cloud Computing at Work
Enterprise-ClassCloudOfferings
Movingtothecloudgetsmorecomplexasyourorganizationgrowsinsize.Enterprise-class
organizationsshouldfollowthesamesortsofguidelinesasthemid-marketgroup—thatis,
tryoutnewthings,figureoutwhattomove,andthenmoveovertime—buttheirscopeis
entirelydifferent.Forinstance,partofyourmigrationmightincludemovingabranch
office’sapplicationtothecloud.Inthissection,we’lltalkabouthowenterprise-class
organizationscanmakeamigration.
MSExchange
AcornerstoneofmostenterprisesistheMicrosoftExchangeserviceforemail.Microsoft
nowoffersExchangeOnlineandMicrosoftSharePointOnlineforbusinessesofallsizes.
Thesesubscriptionservicesofferbusinessesanewwaytopurchase,deploy,andmanage
theindustry-leadingemailandcalendaringsolution,andtheindustry-leadingsolutionfor
portalsandcollaboration.
AndsinceExchangeissoprevalent,itisaneasytooltomigratetothecloud,especially
giventhatthecloudofferingisanonlineversionofthetraditionalserverandclient
application.
“CustomersareembracingMicrosoft’ssoftwareandservicesstrategyenmassebecause
ofthechoiceandflexibilityitgivesthem,”saidStephenElop,presidentoftheMicrosoft
BusinessDivision.“Today,webringbusiness-classcommunicationsandcollaboration
technologiestothecloud,andwearecommittedtodeliveringmorecapabilitiesinthe
monthsahead.Noonehasdonewhatwearedoingatthisscale,andI’mcertainthatour
customerswillcontinuetotakeonthesesolutionsasourofferingsgrow.”
Theservicecanbetriedathttp://www.microsoft.com/online.AspartoftheMicrosoft
OnlineServicesproductfamily,ExchangeOnlineandSharePointOnlineareavailable
separatelyorasasuitetogetherwithOfficeLiveMeetingforconferencingandMicrosoft
ExchangeHostedServicesandMicrosoftOfficeCommunicationsOnlineforinstant
messagingandpresence.
Agrowingnumberofcompanies,fromsmallbusinessestolargeenterprises,are
adoptingMicrosoftOnlineServices.In2008,Microsoftsoldmorethanahalfmillionseats
forMicrosoftOnlineServices,includingExchangeOnline,SharePointOnline,andOffice
CommunicationsOnline.NewcustomersincludePitneyBowesInc.;CGHealthcare
SolutionsLLC,anaffiliateofCowan,Gunteski&Co.,P.A.;CleanPowerResearchLLC;
CorefinoInc.;andFairIsaacCorp.
Tohelpbusinessesplan,deploy,andoperatetheservices,MicrosoftreleasedMicrosoft
SolutionAcceleratorsforMicrosoftOnlineServices.Theseincludeautomatedtoolsand
guidance,suchastheMicrosoftAssessmentandPlanningToolkit,theInfrastructure
PlanningandDesignGuide,andtheMicrosoftOperationsFrameworkCompanionGuide.
MoreinformationaboutMicrosoftSolutionAcceleratorsforMicrosoftOnlineServicesis
onlineathttp://technet.microsoft.com/en-us/solutionaccelerators/dd277934.aspx.
“WithMicrosoftOnlineServices,EddieBauerwasabletoimproveassociate
productivityinacost-effectivemanner—andthattranslatestoahighreturnonourIT
investment,”saidRichMozack,CIOatEddieBauerInc.“Theonlineaspectofthesolution
enabledustotransitionfromouroldenvironmenttotheMicrosofttoolsveryquicklyand
smoothly.OnaFriday,1,400ofEddieBauer’sassociateswenthomeasLotusNotesusers,
andonMondaytheycametoworkasOutlookuserswithMicrosoftOnlineServices.”
Chapter 13: Migrating to the Cloud 289
BetweenJuly2008andNovember2008,morethan1,500companieshaveenrolledinthe
MicrosoftPartnerProgramforMicrosoftOnlineServices,with100morejoiningeveryweek.
Thesecompaniesarerealizingawiderangeofrevenueopportunitythatspansreselling,
migration,customization,consulting,training,supportandapplicationdevelopment,and
integrationservices.
PART III
ManypartnersaredeliveringcustomizedcapabilitiesforMicrosoftOnlineServices.To
increaseawarenessofthesesolutions,MicrosoftalsointroducesthePartnerSolutions
ShowcaseProgramforMicrosoftOnlineServices,andaPartnerSolutionsShowcase
ProgramAwardthatisgiventotwopartnersannually.Thisawardisdesignedtorecognize
outstandingapplicationandintegrationworkonthepartofpartners.Microsoftpresented
thefirstPartnerSolutionsShowcaseProgramAwardtoThoughtBridge,whichhasbuilta
humanresourcesapplicationontopofSharePointOnline.Partnerscanlearnmoreabout
theshowcaseandawardathttp://www.microsoft.com/online/partner/solutions-
showcase.mspx.
“ThoughtBridgerecognizedanimmediateopportunityforbuildingunique,vertical
capabilitiesontopofMicrosoftSharePointOnline,andweseetremendousopportunityto
growourbusinessaroundthismodel,”saidTimTisdale,CTOandcofounderof
ThoughtBridge.“Already,we’reseeingstrongcustomerdemandformigration,
customizationandintegrationservices.MicrosoftOnlineServicesgiveustheagilityto
addressthisdemandwithfewerresources.Wethinkthisopportunitywillbringusthebulk
ofourrevenuemovingforward.”
Microsoftalsohasotheronlineservicesinthepipeline.InadditiontoOffice
CommunicationsOnline,MicrosoftisplanningtoofferaMicrosoftOnlineServices
290 Part III: Cloud Computing at Work
solutionthatwillprovideITmanagementandsecuritycapabilitiesforbusinesses,
enablingITmanagerstosecureandmanagedesktopsusingaweb-basedsubscription
service.Theseonlineserviceswillbebasedoncomponentsfromexistingsystems
management,identity,andsecurityofferings,andwillcomplementMicrosoft’son-
premisesolutions,ascustomersbegintoadoptcloud-basedcomputingtoaddress
specificneeds.
It’snotlikelythatyouaregoingtoputallyouremailonthecloudatthesametime.But
youcantakeadvantageoftheservicetophaseinafewusersorsatellitebranchesatatime
beforemovingeveryoneover.
VMotion
ThemaintoolformigrationsinVMware’sarsenalisVMotion.VMwaresaysthatVMotion
leveragesthecompletevirtualizationofservers,storage,andnetworkingtomoveanentire
runningvirtualmachineinstantaneouslyfromoneservertoanother.Theentirestateofa
virtualmachineisencapsulatedbyasetoffilesstoredonsharedstorage,andVMware’s
vStorageVMFSclusterfilesystemallowsboththesourceandthetargetVMwareESX
servertoaccessthesevirtualmachinefilesconcurrently.Theactivememoryandprecise
executionstateofavirtualmachinecanthenberapidlytransmittedoverahigh-speed
network.SincethenetworkisalsovirtualizedbyVMwareESX,thevirtualmachineretains
itsnetworkidentityandconnections,ensuringaseamlessmigrationprocess.
Features
VMotionoffersthesecapabilities:
• Performmigrationswithnodowntime,undetectablebyyourusers.
• Optimizevirtualmachinesinresourcepools.
• Performhardwaremaintenancewithoutdowntimeanddisruptingoperations.
• Movevirtualmachinesfrompoorlyperformingorfailingphysicalserversontonew
machines.
• MultipleconcurrentmigrationscanoptimizeavirtualITenvironment.
• Amigrationwizardcanprovidereal-timeavailabilityinformationtoidentifythe
optimalplacementofavirtualmachine.
• Migrateanyvirtualmachinerunninganyoperatingsystemacrosshardware
supportedbyVMwareESX,includingFibreChannelSAN,NAS,andiSCSISAN.
• Prioritizelivemigrationstoensurethatmission-criticalvirtualmachinesmaintain
accesstotheresourcestheyneed.
• Schedulemigrationstohappenatpredefinedtimes,andwithoutanadministrator’s
presence.
• Maintainanaudittrailwithadetailedrecordofmigrations.
VMwareVMotionisincludedintheVMwareInfrastructureEnterpriseedition.VMware
VMotionandVMwareStorageVMotionareavailableasanadd-onproducttoVMware
InfrastructureFoundationandStandardeditions.
Chapter 13: Migrating to the Cloud 291
VMwarevCenterConverter
VMwareoffersitsvCenterConvertertomigratephysicalserverstovirtualservers.The
applicationcanberunonanumberofdifferenttypesofhardwareandsupportsmost
versionsofMicrosoftWindowsoperatingsystems.
Withthisenterprise-classmigrationtool,youcan
• Quicklyconvertlocalandremotephysicalmachinesintovirtualmachineswithno
downtime.
• Simultaneouslyconvertmultipleserverswithacentralizedmanagementconsole
andconversionwizard.
• Convertothervirtualmachineformats(likeMicrosoftVirtualPCandMicrosoft
VirtualServer)orbackupimagesofphysicalmachinestoVMwarevirtual
machines.
• RestoreVMwareConsolidatedBackup(VCB)imagesontorunningvirtualmachines.
• Cloneandbackupphysicalmachinestovirtualmachines,aspartofadisaster
recoveryplan.
Amongitsfeatures,VMwareConverterincludestheseattributes:
PART III
• Theabilitytoperformsimultaneousconversions,enablinglarge-scalevirtualization
projects.
• QuiescingandsnapshottingoftheguestOSonthesourcemachinebefore
migrating.Thisensuresthedataismigratedreliably.
• Hotcloningallowsfornon-disruptiveconversions.
• Sector-basedcopyingtoenhancecloningandconversionspeed.
• Useofacentralizedmanagementconsolethatallowsuserstoqueueupandmonitor
multiplesimultaneousremotelocations,aswellaslocalconversions.
• Wizardsminimizethenumberofstepsinaconversion.
• Theabilitytoclonebothlocalandremoteserversallowsconversionsinremote
locations.
VMwarevCenterConvertercanimportvirtualmachinescreatedin
• Workstation5.xandWorkstation4.x
• VMwarePlayer1.x
• VMwareESX3.x
• ESXServer2.5.x(ifthevirtualmachineismanagedbyVirtualCenter2.x)
• GSXServer3.x
• VMwareServer1.x
• VirtualCenter2.x
• MicrosoftVirtualPCversion7andlater
• AnyversionofMicrosoftVirtualServer
292 Part III: Cloud Computing at Work
TherearetwoversionsofVMwareConverter:
• VMwarevCenterConverterStarter Afreedownload(locatedathttp://www
.vmware.com/download/converter/),usedforsingleconversions.
• VMwarevCenterConverterEnterprise Anenterprise-classproductformanaging
andautomatinglarge-scaleconversions.
Hyper-VLiveMigration
MicrosoftServer2008Hyper-Vmakesmigrationaverycleanaffair,althoughitisusedfor
movingvirtualserversaroundtodifferentmachines.Thatsaid,itisextremelysimpleto
use.Itisamatterofpointingandclickingonamanagementconsole.
MigrationisaccomplishedthroughLiveMigration,atoolpartofWindowsServer2008
R2.Livemigrationutilizestheintegratedhypervisortechnologyandhigh-availability
featuresoftheserveroperatingsystemsothatcustomerscanmoverunningapplications
betweenserverstoaccommodatechanging,dynamiccomputingneedsacrossadatacenter.
Inadditiontootherfeatures,thenextversionofMicrosoftHyper-VServerwillhavelive
migrationcapabilities.
MicrosoftispushingitsnewvirtualizationproductsincludingSystemCenterVirtual
MachineManager2008,MicrosoftApplicationVirtualization4.5,andMicrosoftHyper-V
Server2008,whichisano-costdownload.
“Nowisthetimeforcustomerstogetvirtual,”saidBobKelly,corporatevicepresident
ofinfrastructureservermarketingwithinMicrosoft’sServerandToolsBusiness.“With
desktopanddatacentervirtualizationofferingsavailablefromMicrosoftanditspartners,
customersareadoptingMicrosoftsolutionsbecausetheyhavebettervalueandwillmakeIT
operationsmoredynamic.Atalowercostthanotherdatacentervirtualizationsolutions,
Microsoftsoftwaremeetscustomers’needsfromthedesktoptothedatacenterinan
integratedofferingontheplatformtheyknow.”
Web-basedhumanresource,payroll,andemploymentverificationservicesprovider
TALXisnowintheprocessofdevelopinganew,advanceddatacentertoserviceits9,000
clients.ByusingWindowsServer2008Hyper-Vtoenhancevirtualizationperformanceand
hostmorevirtualmachinesperphysicalserver,TALXwillbeabletofurtherconsolidateits
serverenvironment,reducehardwarecosts,saveonpowerandcoolingcosts,andconserve
datacenterspace.TALXexpectstosaveanother$1,000insoftwarelicensingcostspereach
physicalserveritcanreplacewithavirtualmachine.Thecompanyalsoexpectstosave
approximately50percentinannualpowerandcoolingcostsbyconsolidatingitsserver
environmentwithWindowsServer2008Hyper-V.
“Intheemployerandverifiermarketplace,alotofourcompetitiveadvantageisrelated
totimetomarket.Ifwecanshavedaysorweeksoffourcycle,that’sabigplus,”saidBryan
Garcia,vicepresidentoftechnologyatTALX.“WithHyper-VandVirtualMachine
Manager,we’regoingtomaketheinfrastructurealotmoreflexibleandagile.Weexpectto
saveatleast$5,000peryearperinstalledvirtualhostmachine,directlyoutofinfrastructure
costsforenergy,hardwareacquisition,andhardwaremaintenance.”
Microsoft’svirtualproductsinclude
• MicrosoftHyper-VServer2008,ahypervisor-basedservervirtualizationproduct,
thatisavailableatnocostviatheWeb.MicrosoftHyper-VServer2008providesan
optimizedvirtualizationsolutionthatallowscustomerstoconsolidateWindowsor
Chapter 13: Migrating to the Cloud 293
Linuxworkloadsontoasinglephysicalserver.Hyper-VServer2008allows
customerstoleveragetheirexistingpatching,provisioning,managementand
supporttools,processesandskills.
• SystemCenterVirtualMachineManager2008enablescustomerstoconfigureand
deploynewvirtualmachinesandcentrallymanagetheirvirtualizedinfrastructure,
whetherrunningonWindowsServer2008Hyper-V,MicrosoftVirtualServer2005
R2,MicrosoftHyper-VServer2008,orVMwareVirtualInfrastructure3.System
CenterVirtualMachineManagerispartoftheSystemCentersuiteofproducts,
whichprovidescentralized,enterprise-classmanagementofphysicalandvirtual
resourcesacrossdesktopsanddatacenters.
• MicrosoftApplicationVirtualization4.5givesdesktopusersaboostinfully
harnessingthepowerofWindowsVistabystreamingresource-heavyapplications
tothedesktop.Thishelpseliminatepotentialsoftwareconflictsdrivingdesktop
stabilityandperformance,whilesimultaneouslyenablingITmanagerstocentrally
controlkeyapplicationsandtheiruse.ApplicationVirtualization4.5isincludedas
partofMicrosoftDesktopOptimizationPack2008R2.
Migration
PART III
Theprecedingsectionsofthischapterdiscussedspecificsizesoforganizations.Butthereare
somegeneralconsiderationsforanyorganizationthatyoushouldkeepinmindwhen
consideringamove.Let’stalkabouttheminmoredetail.
WhichApplicationsDoYouNeed?
Decidingwhatyoushouldmigratetothecloudreallycomesdowntofiguringoutwhat
youwantoutofthecloud.Thatis,areyoulookingtostoredataonsomeoneelse’sservers?
Ifthat’sthecase,it’ssimplyamatterof
decidingwhichdatayouwanttosend
(andpayfor)andwhatdatadoesn’t
needtobesent.
IfyouareusingthecloudforSaaS
orPaaS,youhavetolookatwhich
applicationsaremostappropriatefor
maintenanceonthecloud.Itwill
obviouslydifferfromorganizationto
organization,butyoulikelywon’tmove
yourkeymission-criticaltaskstothe
cloud.Forinstance,acompanythat
developssoftwareforhealthcare
providersisgoingtohavedifferent
needsthanafinancialadvisor,for
instance.Butevenwithinthesame Different companies will need to send
different applications to the cloud.
industry,differentorganizationswillget Even companies in the same industry
differentthingsoutofthecloud. will perform different work on the cloud.
294 Part III: Cloud Computing at Work
Butwhenyoudodecidetomovetothecloud,makesuretheapplicationsyouaregoing
tousedon’tconsumetoomanynetworkresources.Thisissomethingtofigureoutbefore
you’vecommittedandstartedmigratingdata.
OneregionalbankdecidedtogoforwardwithaSalesforce.comsolution,butevenafter
theysuccessfullypilotedtheprogram,theyhadnotplannedforthebandwidththatit
wouldneed.Notonlydiditaffectthespeedoftheirclouduse,butitalsosloweddown
employees’Internetaccess.
Also,iftheapplicationyouwanttouseontheclouddemandshighperformanceand
lowlatency,makesurethattheprovideryou’veelectedtogowithcandeliveronyour
needs.CompanieslikeAmazonhavebuilttheircontentdeliverynetworkwithdatacenters
atpointsallaroundtheworld.Youwon’thavetotryandaccessyourserversinLosAngeles
ifyouareinWashington,D.C.
NOTE We’renotpushingAmazonhere.Justbesuretoaskyourvendorswhatthey’redoingto
reducelatency.
SendingYourExistingDatatotheCloud
Thereareallsortsofdatathatyoucansendtothecloud.Youcanstorespecificfiles,youcan
runapplicationsonline—younameit.Butlet’stakealookatSymantec’ssolutionandwhat
oneoftheircustomersgetsoutofsendingtheirdatatotheSymanteccloud.
SymantecOnlineBackupisusedtoprotectbusinessrecordswhilereducingthetime
andmoneyspentmanagingbackups.WithSymantec’sSoftware-as-a-Service(SaaS)online
backupapplication,smallandmid-sizedbusinessescanensuretheirdataisprotected
againstcatastrophiclosswhileremainingeasilyrecoverable.
SymantecOnlineBackupprovidesbusinesseswithbackupandrecoveryforPCsand
serversovertheInternet.BusinessesusingSymantecOnlineBackupeliminatetheneedto
purchaseandmanageon-sitehardwareandreceiveincreasedprotectionfromtheftand
disasters.Dataisautomaticallystoredoff-siteinmultiplegeographicallydistributed
datacentersandcanberestoredtoanylocationusingasupportedwebbrowser.Theservice
ishostedinthecloudbySymantec,eliminatingtheneedforbusinessestodevoteresources
tomanagingpatchesandupgrades.Thecustomersubscriptionincludes24/7support,
deliveredbyateamofSaaSspecialistsatnoextracost.
CameronConsultation,basedoutsideBoston,providesintensivetherapeutic
interventiontochildrenwithautismandotherspecialneeds.Cameronrecentlylivedthe
nightmareofdiscoveringthat20years’worthofitsintellectualpropertyandclientrecords
werelostaftertwoharddrivesfailedandthesupposedautomaticnightlybackupshadnot
beenperformedformorethanayear.Thecompanyspentsixweeksandthousandsofdollars
torecoversome—butnotall—ofitslostrecords,andhassinceturnedtoSymantecOnline
Backuptocreatedependablebackupswhilereducingthetimeandcostspentdoingso.
“KnowingthatSymantecisstoringmydatainmorethanonelocationmakesme
confidentitwillbethereifIeverneedit,”saidSusanSheaCameron,clinicaldirectorand
partner,CameronConsultation.“TheplanI’musingisnotmuchmoreexpensivethan
buyinganexternalharddrivethathasonlya30-daywarrantyandbackupsoftware.
SymantecOnlineBackupgivesmemuchmorepeaceofmind.Thesystemsendsmean
emailtoconfirmthatabackupwassuccessful,andwhenIgetthealertIfeelrelievedthat
thereisonelessthingformetoworryabout.”
Chapter 13: Migrating to the Cloud 295
Anindependentstudyfindsthatsmallandmediumbusinesses(SMB)ratebackupas
theirsecond-highestcomputingpriority,afterdefenseagainstvirusesandothermalware,
andaheadofissuessuchasreducingcostsanddeployingnewcomputers.However,the
surveysponsoredbySymantecandconductedbyRubiconConsultingfoundthat50percent
ofsmallandmid-sizedbusinesseshavestillexperienceddatalossandmorethanhalfdo
notstorebackupdataoff-site.
“Thereareanumberofonlinebackupapplicationsinthemarketnow,andmoving
sensitivebusinessrecordsonlinecreatessecurityconcernsanorganizationmustbeawareof
beforepartneringwithaprovider,”saidDarrenNiller,groupproductmanager,Symantec.
“Failuretoprovideadequatelevelsofsecurityenablesattackerstoreadandevenchange
thedatabeingbackeduporrestoredwhenit’stransmittedovertheInternet.Asamarket
leaderinsecurity,disasterrecoveryanddataprotection,we’vefocusedintensivelyonmaking
sureouronlinebackupserviceishighlyreliableandsecure.”
UsetheWaveApproach
Thebestwaytomigrateyourdatatothecloudisbyfollowingthesamestepsyouwould
whenrollingoutanewoperatingsystemtoyourorganization.Usethewaveapproachand
releaseyourdatainwaves.Atfirst,
you’retestingthewaters.You’re
PART III
findingoutifthesolutionwas
whatyouexpected.You’refinding
outifyourvendoristherightone
toworkwith.
Startwithsmalldatathatisof
lowimportance.Then,asyouadd
moredata,sendmoreimportant
stuff.Now,ifyoustartwiththe
dataofleastimportance,youaren’t
goingtoseetheperformancethat
youwillwhenmoreimportant
datamovestothecloud.Thatjust
Use the wave approach to migrate to the cloud.
makessense,becausethelow- Test the waters with less important data before
prioritydataisn’taccessedallthat moving on to more important data.
muchtotestthecloud.But,starting
smallgivesyouaplacetostart.
Whenyouuseaphased-inapproach,itgivesyouachancetoseehowthedatafitson
thecloud.Ratherthanthroweverythingoveratonce,yougetachancetoseehowthings
aregoing.Ifitturnsoutthingsaren’tgoingwell,youcantakecorrectiveactiontofixit,or
justpulltheplugandwalkaway.
Aswesaidattheoutset,movingtothecloudislikeeatinganelephant.It’sadaunting
taskandyoujustdon’tknowwheretobegin.Butwithalittleplanningandeffort,starting
smallwillpolishoffyourcloudeffortsinamethodicalmanner.Nowthatwe’vecovered
migration,thenextandfinalchapterwillcoverbestpracticesandthefutureofcloud
computing.
This page intentionally left blank
CHAPTER
14
Best Practices and the Future
of Cloud Computing
S
onowyou’vemovedtothecloud,andyouwanttoensureacontinuedgood
experience.Thereareamyriadofthingsyoushouldaddresswhenseekingtooptimize
yourcloudefforts,rangingfromthetechnicalsidetothehumanside.Inthisfinal
chapter,we’lllookatoptimizingyourcloudexperienceandtalkaboutwhatthingsyoucan
adjustandwhattoolsyoucanusetotweakthem.
AnalyzeYourService
Onceyou’veselectedacloudvendor,youshouldperformsometestsandmakesureyou’re
stillgettingwhatyouarepayingfor.Inthissection,we’lltalkaboutsometipsand
techniquesforcheckinguponyourvendortomakesureeverythingisstilluptopar.
Notonlywillwebetalkingaboutcheckingstatistics,butwe’llalsotalkaboutsome
toolsthatwillhelpyougatherthosestatistics.
EstablishingaBaselineandMetrics
There’ssomeresearchyoushoulddobeforesigningonwithavendor,andthatyoushould
regularlyperformoncesubscribed.Thereareanumberofvariablesthatyoushoulduseas
abaseline,andthencheckbackwithfrequently.Herearesomevariablestocheck:
• Connectionspeed Thespeedatwhichyouconnecttothevendor’scloud.
• Datastoredeletetime Howlongittakestodeletethedatastore.
• Datastorereadtime Howlongittakestoreaddata.
• Deploymentlatency Theamountoflatencybetweenwhenanapplicationis
postedandreadytouse.
• Lagtime Howslowthesystemis.
297
298 Part III: Cloud Computing at Work
1 2 3 4 5 1 2 3 4 5
Thefirststat—connectionspeed—hasnothingtodowithyourcloudvendor.It’syour
ISP’sissue.Whatyouarelookingforisconsistency.Youdon’twanttoseehugespikesin
performanceovertime.Agraphofyourconnectionspeedshouldlookliketheoneonthe
leftofFigure14-1,nottheoneontheright.
Thereisnoshortageoftoolsyoucanusetocheckyourspeed.Siteslikewww
.myconnection.comofferaspeed-testingtoolthatyoucanusetomakesureyou’regetting
consistentspeedsfromyourISP.AnexampleofthetoolisshowninFigure14-2.
Tools
Themarkethasn’tbeensaturatedwithperformancemonitoringtoolsforcloudcomputing
yet.Thereareonlyacouple,butlookforthemarkettobroadeninthemonthsandyearsto
come.Hereisarundownofsometoolsyoucanusetocheckyourcloudperformance.
HypericHQ
HypericIncoffersitsHypericHQ4.0,thelatestversionofitssystemsmonitoringand
managementapplication.ThereleaseaddressestheneedsofbusinessesembracingAmazon
cloudservicestocreatescalableITdeploymentstrategies.HypericHQenablesthemodern
enterprisestomonitortheirAmazonWebServicessecurelyalongsideinternalinfrastructure.
Itisalsothefirstenterprise-classmonitoringandmanagementsoftwareofferedfordeployment
andpaymentdirectlythroughAmazonWebServices.
“Cloudcomputingandvirtualizationtechnologiesaremakingiteasier,cheaperand
fastertodeliverscalablewebapplications.However,thishasmadethejobofmanagingthese
webapplicationssignificantlyharder.Administratorswhoareusedtomanaginganywhere
from15to50serversinasingledatacentercannowberesponsiblefor500ormoreservers
sprawledacrosstheirdatacenterandbeyondthefirewall,”explainedJavierSoltero,CEO,
Hyperic.“WithHypericHQ4.0,we’vedeliveredthetoolweboperationsteamsneedto
maintainservicelevelsintheseenvironmentsofmassivescaleandcomplexity,allowing
themtoembracevirtualizationandcloudcomputingwithconfidence.”
HypericHQispoisedtogrowascloudcomputingcontinuesitsdevelopment.IDC
seniorvicepresidentandchiefanalyst,FrankGenssaidthat“arecentIDCsurveyofIT
Chapter 14: Best Practices and the Future of Cloud Computing 299
PART III
FIGURE 14-2 MyConnection.com allows you to monitor your connection speeds.
executives,CIOs,andtheirlineofbusiness(LOB)colleaguesshowsthatcloudservicesare
‘crossingthechasm’andenteringaperiodofwidespreadadoption.”Further,theanalyst
firmpredictsthatspendingoncloudserviceswillreach$42billioninthenextfiveyears,
andwillcapture25percentofITspendinggrowthin2012.
Tomeetthesegrowthexpectations,adoptersofcloudservicesneedadditionaltoolsand
updateddeploymentstrategiestosucceed.Accordingtothesurveyrespondents,top
concernsforadoptionincludeperformancelevelassurances,supportingtheneedfornew
monitoringandmanagementtoolstohelpensurethesuccessofthesedeployments.
Datacentershaveafixedcapacityforhandlingapplicationtrafficatanygiventime,and
theydistributeresourcestomatchaveragepeakcapacity.BusinessesdeployinginAmazon’s
cloudnowhaveaccesstoanunlimitednumberofresources,andpayonlyfortheservices
theyneedatanygiventime.Toremaincost-effective,operationsteamsneedtofrequently
tunewebandapplicationservercapacitytomatchfluctuationsindemand.
300 Part III: Cloud Computing at Work
HypericHQ4.0wasdesignedtoaddressnext-generationmonitoringandmanagement
tohelpenterprisesadoptcloudcomputingstrategies,bybetterequippingoperationsteams
toperformrepetitivemanagementtasksmoreefficiently.Traditionally,installinganew
serveranddeployingitintoproductionwasalengthyprocessthattookplaceoverdaysor
weeks.Now,withcloudproviderslikeAmazonofferingtheabilitytorapidlydeploy
serversinminutesandpaybythehour,companiesneedawaytoensureconsistent
monitoringoversightoftheirweboperationsthatisjustasfastandflexible.
Performance HypericHQcurrentlymanagesover3,500VMwareandXenServer
virtualizationdeployments.Alsoreferredtoas“privateclouds,”theseenvironmentsconsist
ofbothphysicalandvirtualservers,andtypicallysupporthighratesofchangeasvirtual
serversareeasilyadded,subtracted,ormovedtoimproveserverutilizationandmaintain
servicelevels.
HypericHQ4.0startsbystreamliningtheprocessofaddingnewsoftwareresources
intomanagement.Afterauto-discoveryregistersthenewresourcesintoinventory,anew
processofservercloningallowsallconfigurationprofilesforlogdatacollection,security,
andservicescheckstobeimmediatelyapplied.Coupledwithglobalalerttemplatesfor
resourcetypes,theentiresystemofmonitoringandrulesforwarningofperformance
problemscanbeincorporatedinunderaminute.
Further,thereleasealsoaddressesadditionalareasofconcernforvirtualizedandcloud-
baseddeploymentincludingsecurity,applicationmanagement,andcapacityplanning.Anew
servercommunicationprotocolallowsagentsmonitoringexternalresourcestoalwaysinitiate
communicationwiththeHQServerinordertomeetsecurityprotocolsandoperateacross
firewalls.HQusesunidirectionalcommunication,buttheagentstillmaintainsafullrangeof
capabilitiesincludingtheabilitytoupdateandrundiagnosticsremotely,andissuecorrective
controlactionssuchasaservicerestartorrunninggarbagecollectiontofreememory.
Additionally,acapacityplanningfunctionautomaticallyanalyzeshistoricalperformance
andprojectsthefutureresourcetrendsofanygivenmanagementmetric.Thisfunction
allowsuserstoquicklyassessandpredictfuturetrends,andproactivelymanagecapacity
needstoanticipatedemandorconservecosts.
HypericHQforEC2 Alsopartofthe4.0releaseHypericHQEnterprise4.0isavailableasa
fullyconfiguredsystemonAmazonWebServices.AnAmazonMachineImage(AMI)
preconfiguredforAmazon’sElasticBlockStorage(EBS)isavailable.Thedistributionwillbe
availabledirectlyonAmazon’sDevPayserviceforaninitiationfeeandamonthlycharge
basedontheamountofmanagementdatabeingcollectedtotheHQServer.Thisisa
familiararrangementtobusinesseslookingtoembracethecloud;therewillbenocontract
termanduserswillsimplypayforhowmuchvaluetheyarederivingfromtheHypericHQ
Enterpriseapplication.
HypericHQ4.0isavailableatwww.hyperic.com.HypericHQforEC2isavailable
throughAmazon.
CloudStatus
Hypericalsooffersafreecloudmonitoringtool,CloudStatus.Theirmostrecentadditionto
thetooliscontinuousmonitoringofGoogle.GoogleAppEngineisthesecondsignificant
cloudservicetobemonitoredbyCloudStatus,whichlaunchedinJune2008withsupport
forAmazonWebServices.
Chapter 14: Best Practices and the Future of Cloud Computing 301
NOTE Supportforadditionalcloudprovidersisplannedinthenearfuture.
Hyperic’sfreeCloudStatusservicedeliversreal-time,independentinsightintothehealth
andperformanceoftheAppEngine,givingusersagreaterlevelofconfidenceinthereliability,
availability,andscalabilityofwebapplicationsrunningonGoogle’sinfrastructure.CloudStatus
isshowninFigure14-3.
PART III
FIGURE 14-3 CloudStatus shows the internal performance of vendors like Amazon and Google.
302 Part III: Cloud Computing at Work
“Monitoringhelpsmaintainthehealthandperformanceofanyapplication,including
thosepoweredbyAppEngine,”saidPaulMcDonald,anAppEngineproductmanagerat
Google.“WeareexcitedtoworkwithHyperictoprovideadditionaltransparencytoour
service’sreal-timeperformance.”
TheadditionofAppEnginemonitoringisdesignedtoprovidecustomerswiththe
abilitytoobtainup-to-the-secondperspectivesonperformanceandnetworkconnectivity
frombothinsideandoutsidetheAppEngineplatform.Theinitialreleasewillallowfor
continuousmonitoringofthehealthandperformanceofmajorAppEngineinfrastructure,
includingtheDataStore,Memcache,andglobalnetworkconnectivity.CloudStatususes
AppEngine–specificmanagementplug-instocollectmeasurementsthatprovide
administratorsanddeveloperswithunprecedentedinsightintothehealthoftheApp
Engineplatform.
Aspartofthisdevelopment,Hypericalsooffersthefirstcloud-specificmanagement
plug-inforitsflagshipproduct,HypericHQ.Thenewplug-inextendsthefullmonitoring
andmanagementcapabilitiesofHypericHQtoAppEngineusers,enablingthemto
examinetheperformanceoftheirowncustomapplicationsrunninginthecloud.Thisplug-
inisfreefordownloadonHyperForge.
Toensurereliabilityandmorecompletelyunderstandandtrustcloudservicestability,
customersneedtransparencyintorealperformanceandavailability.Afree,third-party
hostedservice,CloudStatusprovidesacomprehensivemeasureofserviceavailability,
latency,andthroughputforcloud-basedinfrastructureandapplicationservices.Itallows
userstoobtaindetailed,service-specificmetricsonanyofthemonitoredofferings,
providingtheperspectiveneededtodeterminethecauseofanyperformancechanges
withintheircloud-basedapplications.
“Cloudcomputingischangingthewaybusinessesconsumeanddeliverapplications.
InternetleaderslikeGoogleallowthesebusinessestoeliminatetheneedtomaintaintheir
owninfrastructurewhilealsogainingaffordableaccesstounlimitedscalability,”saidJavier
Soltero,HypericCEO.“We’rethrilledtobeworkingwithvendorslikeGoogletodefinethe
nextgenerationofmonitoringandmanagementtoolsneededtoassureperformanceand
reliabilityforapplicationsrunninginthecloud—andintheprocesshelpcloudcomputing
realizeitsfullpotential.”
CollabNetCUBiT2.0
CollabNet’sCUBiT2.0strivestoeliminatethetime-intensiveprocessofconfiguringservers
forbuildandtestbymanagingthoseconfigurationsas“profiles”acrosstheapplicationlife
cycle.Applyingthecloudcomputingmodeltodistributeddevelopment,CollabNetCUBiT
2.0enablesteamstoaccesson-demandserversfromprivatecorporatedatacentersorpublic
clouds,tosignificantlyreducedevelopmentcyclesandhardwareexpenses.
Chapter 14: Best Practices and the Future of Cloud Computing 303
PART III
Developersspendagreatdealoftimeconfiguringserversandaligningthesoftware
stacksthroughouttheapplicationlifecycle—anarduoustaskforserver-intensive
methodologiessuchasagile,scrum,andcontinuousintegration.CUBiTeasesthesepain
pointsbyenablingcode,build,andtestteamstoacceleratedevelopmentcycles,eliminate
buildandtesterrors,andgainflexibilityinutilizingmachines.Itprovidesasecurewayto
reusebuildandtestprofiles,reducingthelikelihoodofconfigurationerrorsthatcandelay
softwareprojectsbymonths.Inaddition,CUBiT’sself-servicedynamicprovisioning
capabilitiesautomatelabor-intensiveserverprovisioningandconfigurationthatcantake
weeks.Afinancialservicescustomerhasdecreasedtheirtimetobuildby400percent—from
monthstodays.
CUBiT2.0allowsteamstogroupandmanagetheircomputingresourcesasclouds.It
enablesdevelopmentteamstoaccessaglobalpoolofon-demandbuildandtestservices.
Teamsmanagetheirownlibraryofsoftwareprofilesandquicklycanapplyaconfiguration
ontoamachine,andcontroltheversioncontrolprofilethroughoutdevelopment,build,
andQA.
304 Part III: Cloud Computing at Work
CloudsinCUBiTaregroupsofserverpoolsfromacorporatedatacenterorfrompublic
cloudslikeAmazonEC2.AmazonEC2isthepubliccloudinitiallysupportedbyCUBiT2.0
andcanbeused,forexample,toextendresourcestemporarilyandataverylowcost.
OthernewfeaturesinCUBiT2.0includesupportforLDAP/ActiveDirectory,and
advancedaccountingandchargebackcapabilitiestiedtorole-basedaccesscontrolfor
allocatingcostsperserverandprofiletype.
“CollabNetCUBiTreducesFord’stestingcyclesbyupto50percent.BecauseCUBiT
virtualizesourtestenvironmentandmanagesever-changingconfigurations,ourrelease
cycleshavegonefromfour–sixweekstooneweek,”saidMarcFecker,directorof
technologyatFordDirect.com,ajointventurebetweenFordMotorCompanyandFord
Dealers.“CUBiTiscriticalbecauseitenablesourinternalandexternalQAteamworldwide
tosecurelymanageandtrackstandardizedsetsofbuildandtestservices.Wenotonlyhave
completetraceabilityoftheconfigurationchangesbeingmade,anyonehastheabilityto
grabserversforrunningtestson-demand,astheyneedthem,whichsavesusonhardware
costsaswell.”
“AtCollabNet,we’rededicatedtoeasingthecriticalpainpointsofsoftwaredevelopment
byhelpingteamstobemoreproductiveandresponsive,”saidTonydelaLama,CollabNet
vicepresidentofworldwidemarketingandcorporatestrategy.“Teamsarefacedwith
increasinglycomplexsoftwaredevelopmentcyclesthatrequiremoreflexiblesolutions.
CUBiT2.0isspecificallydesignedtomeettheseneedsbybringingbuildandtestoperations
tothecloudforfast,easy,self-serviceaccess.”
CollabNetCUBiT2.0isavailableasamanagedserviceorasanon-sitelicense,starting
atUS$1,000pernode.Afreetrialisavailableathttp://www.collab.net/trycubit.
Cassatt
CassattCorporationoffersseveralproductstohelpinternalcloudcomputing—anITapproach
thatdeliversthebenefitsofcloudcomputingusingtheresourcesthatorganizationsalready
haveinsidetheirdatacenters.
“Cloudcomputingoffersgreatpromisebyhavingthirdpartiesdeliverthecomputing
resourcesneededtorunapplicationsasanon-demandservice,withalotoftheIT
infrastructureinvisibletotheuser,”saidBillColeman,chairmanandCEOofCassatt
Corp.“However,atthispointmostITprofessionalsarenotcomfortableoutsourcingthe
mission-criticalpartsoftheirsensitiveinternalapplicationstoanexternalcloudprovider.
Theyareconcernedaboutavailability,vendorlock-in,nothavingthecontroltheyneed,
andhavingtorebuildtheseapplicationsfromscratchwithproprietarytoolsrunningon
provider-specificplatforms.”
Toaddresstheseproblems,theCassattofferingshelpcustomersimplementcloud-style
computingenvironmentsusingtheirexistingsystems,insidethefirewallsoftheir
datacenterswithouthavingtomodifytheircurrenthardwareorsoftware.Theresulting
“internalcloud”canprovidethesameoperationalefficiency,faulttolerance,andenergy
savingspromisedbyexternalclouds,butwithouttheworriesoversecurity,compliance,
lackofcontrol,ortheneedordelayrequiredtochangeorreplacetheircurrentapplications.
Benefits TheCassattsoftwareandservicesprovideorganizationswithinitialstepstoward
realizingthebenefitsofcloudcomputing.TheCassattActiveProfilingServicegives
companiesaheadstartonestablishinginternalcloudsbytacklingamajorproblemfacing
Chapter 14: Best Practices and the Future of Cloud Computing 305
corporateIT—alackofinformationandunderstandingabouttheassets,interrelationships,
anddynamic,real-timeusagepatternswithindatacenters.
ThroughthecontrolcapabilitiesofCassattActiveResponse5.2,Cassattcanhelp
customersimproveenergyefficiency,applicationavailability,andenablethebestuseof
computingresources—acrossthediversehardware,software,andvirtualization
technologiesalreadyrunninginadatacenter.
“CassattgivesorganizationstheabilitytoruntheirdatacenterslikeAmazonorGoogle,
butusingtheITinfrastructuretheyalreadyhavein-house,”saidColeman.“Wethink
internalcloudcomputingisthekeytodatacenterefficiency.And,becauseofthat,internal
cloudscan’tbelimitedtoonlyonetypeofvirtualizationoroperatingsystem.WithCassatt,
customerscancontrolandoptimizethemanytypesofhardware,operatingsystems,
virtualization,andnetworkresourcesthattheyalreadyhave—andtheycanstarttoday.”
TheCassattActiveProfilingServicegathersinformationaboutserversandtheir
configurations,serverusagepatterns,utilization,energyconsumption,server
interdependencies,andotherkeydetails.Then,Cassattexpertsanalyzethedatato
helpcompaniesmakethebestdecisionsonwaystoimprovedatacenterefficiencyand
operations—includingrecommendationssuchasfinding“orphan”orunusedservers,
identifyingcandidateserversforvirtualizationandconsolidation,suggestingpolicies
tosaveondatacenterenergycosts,andmappingoutthestepstomovetowardan
PART III
internalcloud-styleITinfrastructurethatcouldprovideutility-stylecomputing.
Use Examplerecommendationscouldincludeusingactivepowermanagementtechnology
tocurbenergywastefromidleservers;automatingfailovertoprovideimprovedapplication
availability,regardlessofplatform;implementingdynamicresourcerepurposingto
makebetteruseofeveryserverwhilepreservingavailabilityandservicelevels;orcoupling
policy-basedmanagementwithresourcerepurposing,allowingdatacenterinfrastructureto
respondquicklytochangesinbusinessdemand.
Cassattalsooffersbroadenedoperatingsystem,virtualization,andnetworkingsupport
forCassattActiveResponse5.2.ThislatestrevisionextendsCassatt’sexisting,broad
operatingsystem,virtualization,andnetworkingsupporttoincludetheIBMAIXoperating
systemandForce10networkswitches,withforthcomingsupportforParallelsVirtuozzo
ContainersOS-levelservervirtualizationsolutions.
ActiveResponse CassattActiveResponseenablesdatacentermanagerstousepoliciestocontrol
andoptimizethemultiplediversecomponentsoftheirITinfrastructure.CassattActiveResponse
canmonitorandautomaticallyprovisionordecommissionphysicalandvirtualserver,software,
andnetworkresourcesasappropriatetomeettheapplicationdemand.
ThismeansthatwithCassattActiveResponsecustomerscanbreakdownthestaticsilos
ofhardwareandsoftwarethatsitmostlyidleindatacenterstoday,overprovisionedin
anticipationofthelargestexpectedspikesindemand.Instead,customerscanpooltheir
hardwareandsoftwareintoacloudofcomputingresourcessharedacrossapplications,
anduseonlytheamountofcomputingcapacityneededatanyonetime.Thisapproach
freesuppreviouslyunusablecomputecapacity,increasescontrol,andcanreducetraditional
IToperationscostsfordatacentersbyasmuchas50percent,fundamentallyalteringthe
calculationsforwhatcouldorshouldbeoutsourced.
“Asorganizationsbecomeawareofthepotentialcostbenefitsandflexibilityassociated
withcloudcomputing,theyaregoingtolookforwaystogetthesesamebenefitsintheir
306 Part III: Cloud Computing at Work
internaldatacenters,”saidAlGillen,programvicepresident,systemsoftwareatIDC.
“Cassattrecognizedthebenefitofbuildingamanagementsystemthatcoulddeliver
servicesusingacloud-likeparadigmlongbeforetheterm‘cloud’wasineverydayuse.
Cassattcontinuestoexpanditssupportforthehardware,software,virtualization,and
networkingresourcesthatcustomersuseintheirdatacenterstoday.”
“WearepleasedthatthecombinationofIBMAIXsystems,withthelatestversionof
CassattActiveResponse,willresultinfurtherenergyefficiencyinthedatacenter,”saidJay
Kruemcke,AIXofferingmanager,IBMSystemsandTechnologyGroup.“Throughthe
applicationofutilitycomputingprinciplesincludingresourcerepurposingandpower
management,theAIXplatformcanbeoneofthemostpower-efficientcomputeplatforms
onthemarkettoday.”
“WithCassatt’snewlyaddedsupportofForce10Networksdatacenterswitching
solutions,customerscanautomaticallyoptimizetheconfigurationofnetwork
infrastructure,guaranteeingthequalityofserviceandbandwidthrequiredbyapplications,
basedonpoliciestheyset,todelivercloud-styleoptimizationandagility,”saidSteve
Garrison,vicepresidentofmarketing,Force10Networks.“Customerscansaveonspace,
power,cooling,andcabling,whileusingouragile,robustswitchinfrastructuretoprovide
thebestnetworkconfigurationtosupporttheirbusinessneedsatanygiventime.”
CassattActiveResponse5.2provides
• PlatformsupportforLinux,SunSolaris,MicrosoftWindows,andIBMAIX.
• SupportforvirtualizationfromVMware,Citrix(Xen),withParallelsVirtuozzo
Containerscominginthefirstquarterof2009.MicrosoftHyper-Vwillbesupported
ascustomerdemandwarrants.
• NetworkingsupportforequipmentfromCisco,Dell,ExtremeNetworks,Nortel
Networks,F5,andForce10Networks.
CassattActiveResponse5.2isavailableinaStandardEdition,PremiumEdition,
andDataCenterEdition.CassattActiveResponse,StandardEdition,startsatUS$200
permanagedmachine.CassattActiveResponse,PremiumEdition,startsatUS$1,250per
managedmachine.CassattActiveResponse,DataCenterEdition,startsatUS$2,500per
managedmachine.
TheCassattActiveProfilingServiceispricedbaseduponthenumberofserverstobe
profiled,thenumberofdaysofprofiling,plusthecostofprofessionalservicespersonnel.
Theminimumstartingpointisprofiling150serversfor30days,plusoneconsultant,which
startsatUS$40,500.
BestPractices
Whenyouplantomovetoacloudsolution,therearegoodwaystogoaboutmakingthe
changetoensureanoptimalexperiencewhilepayinglessthanacolossalprice.Itstartswith
youranalysisandselectionofavendor,andcontinueswithyourday-to-dayusageofthat
service.
Chapter 14: Best Practices and the Future of Cloud Computing 307
FindingtheRightVendor
We’vebeentoutingthecost-effectivenessofcloudcomputinginsomeway,shape,orform
innearlyeverychapterofthisbook.Andit’strue—it’slesscostlytogowithacloudmodel
thantobuy.However,thatdoesn’tmeanit’scheap.Withpricesashighas$300peruserper
month,it’simportanttobeabletomeasureyouroptions.Youhavetoweighsuchissuesas:
• DoestheprovidersupportmethewayIneedsupport?
• Aretheyeasytoworkwith?
• Willtheychargemeacripplingamountofmoney?
• Whatistheirsupportlike?
• Whatistheirtrackrecordforuptime?
• Cantheygivemesomereferences?
Therearealotofissuestoweigh.Let’stakeacloserlookatsomeissues.
ReadtheFinePrint
Makesureyoudon’tjustsignacontractwithoutunderstandingit.Checkthefineprintto
seeifthereisauserlimitcaponyoursoftware.Sometimevendorswillallowalownumber
PART III
ofusers.Then,asyourbusinessgrows,yougethitwithawfulpenaltycharges—evenif
yoursoftwareneedshaven’tchanged.
Smallbusinessesareespeciallyatriskhere.Theyareoftenluredtothecloudwiththe
promiseofbeingabletouseenterprise-classsoftware.Theysignonfortheleastexpensive
package,andthenoncetheyhireafewmoreemployees,themonthlybillgoesthroughthe
roof.Itisnotuncommontoseethepricejumpfiveorsixtimesthestartingcost.
Performance
Akeythingtoconsiderisassessingthematurityofthecloudserviceandwhatis
acceptable—toyou—fromaservicedeliverystandpoint.Sinceyouandyourorganization
willbeaffectedbyanyoutages,it’simportanttogetaservicelevelagreement(SLA)
inplace,butalsotocheckonpastperformance.Thatis,whatistheirpercentuptime
guarantee.Forexample,Amazonhasa99.5percentuptimeguarantee—lessthanfour
andahalfhoursofdowntimeperyear.
SpreadYourServices
Youmayfindavendorwhoisaperfectmatchforwhatyouwanttodo,andyoucan’twait
togetstarted.Butitisagoodideatokeepyoureyesonwhatothervendorsareoffering.To
betrulyredundantanddowntime-proof,youshouldn’thaveyourservicesonjustone
cloud.YoucouldhaveoneserveronAmazonandanotheronAzure,forinstance.
Data
Makesureyourvendor(s)providecustomizabledataviewsandreporting.Thisallowsyou
togettothedatayouneedquickly.Also,makesureyoucangetyourdatabackfromthe
vendor.Manyvendorsmakeitdifficulttoexportdatafromthesystembyonlyallowingit
tobeextractedinaproprietaryformat.Makesureyoucanexportinacommonformat,like
comma-separated-value(CSV).
308 Part III: Cloud Computing at Work
Itisnotuncommonduringfree,trialperiodsfordatatobekeptinaproprietaryformat.
However,onceyousignthedottedline,youwanttobeabletotakeyourtoysandleaveif
youwish.Theissueisnotalwaysbroughtup,andonceyouarehipdeepintoavendor’s
services,itisn’tthetimetofindoutwhetheryourdataisexportableornot.
DataFlow
Automatingyourprocessescomesfromworkflowrulesthatcontrolwhereandhowdata
flowsthroughyourorganization.Datasecurityrules,boundtotheworkflow,notonly
automatewherethedatagoes,butalsowhogetstolookatit.Besuretogetadefinitive
priceonhowmuchitwillcosttocreatecustomizedworkflowrulesandreal-timealerts,as
wellaswhateffortisrequiredtocustomizeuserprofilesandrolehierarchiestosecureyour
data.
Phased-invs.Flash-cutApproaches
ITadministratorstendtobecontrolfreaks,andthethoughtofgivingcontroloftheir
systemstosomeoneelseisdifficult.Oneofthementalhurdlestoovercomeisbeingwilling
togiveupphysicalcontrolofsomeofyoursystems.Andwhileyoudon’tneedtoput
everythingonthecloud(norshouldyou),useaphased-inapproach,ratherthanmoving
everything,allatonce.
Thebestwayistodoitorganically.Ifaserverisfailingornotperforminguptopar,can
itsdutiesbeoffloadedtoacloudvendor?Youwon’thavetobuyanewserver,anditmakes
themovetothecloudlessfrightening.
Chapter 14: Best Practices and the Future of Cloud Computing 309
BeCreativeinYourApproach
Justbecauseacloudisnormallyusedoneway,doesn’tmeanyoucan’tthinkoutsidethe
box.Forexample,S3isnormallyconsideredawaytostoreserverdata,butthere’snothing
sayingyoucan’tuseitforgeneralbackuppurposes.
Also,ifyourorganizationhasbusytimesduringtheyear,youcanusethecloudto
supplementyourneed.Forexample,ifyougetreallybusyduringChristmas,usingcloud
computingmeansnothavingtobuyserverstosimplydealwithdemand.Haveprebuilt
imageinstancesthatyoucanusewheneveryouwanttoaddcapacity.
HowCloudComputingMightEvolve
Cloudcomputingtakesitsknocksfromopponentswhoseeitasanoverusedphrasewith
norealmeaning.Ontheothersideofthecoin,thereareplentyofprofessionalswhoseethe
cloudasnotonlyausefulthing,butalsoanevolvingbeast.WeareonthevergeofCloud2.0.
Ascloudcomputingchanges,somustyourrelationshipwithit.Inthissectionwe’ll
lookintoourcrystalballsandseewhereitmightgo.We’llalsolookattheopinionsof
researcherswhogetpaidlotsofmoneytomaketherightpredictions.
PART III
ResearcherPredictions
Researcherslovetotelluswhat’sgoingtohappennextwithcloudcomputing.Arethey
right?Wedon’tknow,butit’sworthsharingtheirviews.Gartnerhasbeenespecially
diligentinfiguringoutwhat’sgoingtohappenwithcloudcomputing.Salesforce.com—
whilenotresearchers—hasgivenitsownpredictionofthefuture,andit’sinteresting
becausethey’renotlookingathardwareandsoftware;they’relookingathowcustomers
willbeaffectedbythecloud.
Gartner
Gartnerseescloudcomputingasanevolutionofbusinessthatisnolessinfluentialthan
e-business.Gartnermaintainsthattheveryconfusionandcontradictionthatsurroundsthe
term“cloudcomputing”signifiesitspotentialtochangethestatusquointheITmarket.
Gartnerdefinescloudcomputingasastyleofcomputingwheremassivelyscalable
IT-relatedcapabilitiesareprovided“asaservice”usingInternettechnologiestomultiple
externalcustomers.
“Duringthepast15years,acontinuingtrendtowardITindustrializationhasgrownin
popularityasITservicesdeliveredviahardware,softwareandpeoplearebecomingrepeatable
andusablebyawiderangeofcustomersandserviceproviders,”saidDarylPlummer,
managingvicepresidentandGartnerFellow.“Thisisdue,inparttothecommoditizationand
standardizationoftechnologies,inparttovirtualizationandtheriseofservice-orientedsoftware
architectures,andmostimportantly,tothedramaticgrowthinpopularityoftheInternet.”
Plummersaidthattakentogether,thesethreemajortrendsconstitutethebasisofa
discontinuitythatwillcreateanewopportunitytoshapetherelationshipbetweenthose
whouseITservicesandthosewhosellthem.EssentiallyitwillmeanthatusersofIT-related
serviceswillbeabletofocusonwhattheserviceprovidesthemratherthanhowthe
servicesareimplementedorhosted.Gartnermaintainsthatalthoughnamesforthistypeof
operationhavecomeintovogueatdifferenttimes—utilitycomputing,SoftwareasaService
(SaaS),andapplicationserviceproviders—nonehasgarneredwidespreadacceptanceasthe
centralthemeforhowIT-relatedservicescanbedeliveredglobally.
310 Part III: Cloud Computing at Work
ThetypesofITservicesthatcanbeprovidedthroughacloudarewide-reaching.
Computefacilitiesprovidecomputationalservicessothatuserscanusecentralprocessing
unit(CPU)cycleswithoutbuyingcomputers.Storageservicesprovideawaytostoredata
anddocumentswithouthavingtocontinuallygrowfarmsofstoragenetworksandservers.
SaaScompaniesofferCRMservicesthroughtheirmultitenantsharedfacilitiessoclientscan
managetheircustomerswithoutbuyingsoftware.Theserepresentonlythebeginningof
optionsfordeliveringallkindsofcomplexcapabilitiestobothbusinessesandindividuals.
“Thefocushasmovedupfromtheinfrastructureimplementationsandontotheservices
thatallowforaccesstothecapabilitiesprovided,”saidDavidMitchellSmith,vicepresident
andGartnerFellow.“Althoughmanycompanieswillarguehowthecloudservicesare
implemented,theultimatemeasureofsuccesswillbehowtheservicesareconsumedand
whetherthatleadstonewbusinessopportunities.”
GartnerpredictsthattheimpactofcloudcomputingonITvendorswillbehuge.Established
vendorshaveagreatpresenceintraditionalsoftwaremarkets,andasnewWeb2.0andcloud
businessmodelsevolveandexpandoutsideofconsumermarkets,agreatdealcouldchange.
“Thevendorsareatverydifferentlevelsofmaturity,”saidDavidCearley,vicepresident
andGartnerFellow.“Theconsumer-focusedvendorsarethemostmatureindelivering
whatGartnercallsa‘cloud/Webplatform’fromtechnologyandcommunityperspectives,
butthebusiness-focusedvendorshaverichbusinessservicesand,attimes,areveryadept
atsellingbusinessservices.”
Brandingisapowerfulandrevenue-generatingassetforpotentialvendors.Gartner
analystscitedWal-Martasanexampleofacompanythathastwobrands—onewith
consumersforitslowpricesandoneinthebusinessworldforitssupplychainexpertise,
itscorecompetency,whichitcapitalizesontosupportitsconsumer-facingbrand.
“Companiesinvestbillionsofdollarsinbuildinguptheircorecompetencies,muchof
whichgoesintoIT,”Smithsaid.“Ifcompaniescouldleasetheircorecompetenciestoother
companiesthentheywouldcapitalizeonbothbrands,drivingrevenuebothinthe
consumer-facingmarketandthebusinessservicemarketinthewaythatAmazonhasdone
withtechnology.”
Gartnermaintainsthatcloudcomputingisverymuchanevolvingconceptthatwilltake
manyyearstofullymature.Italsounderlinesthefactthatthecloud-computingmodelis
notsimplythenextgenerationoftheInternet.
“WhenorganizationscrossthethresholdbetweentheInternetasacommunications
channelandthedeliberatedeliveryofserviceovertheInternet,thenwetrulystarttohead
foraneconomybasedonconsumptionofeverythingfromstoragetocomputationtovideo
tofinancedeductionmanagement,”saidPlummer.
ThreeStages
Gartneralsoobservesthatwhilethecloudcomputingmarketisinaperiodofexcitement,
growth,andhighpotential,itwillstillrequireseveralyearsandmanychangesinthe
marketbeforecloudcomputing—orservice-enabledapplicationplatforms(SEAPs)—isa
mainstreamITeffort.
Gartnersaidthattechnologicallyaggressiveapplicationdevelopmentorganizations
shouldlooktocloudcomputingfortacticalprojectsthrough2011,duringwhichtimethe
marketwillbegintomatureandbedominatedbyaselectgroupofvendors.Followingthis
period,Gartnerpredictsthatthemarketwillseeasurgeofnewvendorsandsubsequent
consolidationascloudcomputingbecomesappealingtomoremainstreamapplication
Chapter 14: Best Practices and the Future of Cloud Computing 311
developmentorganizations.By2015,cloudcomputingwillhavebeencommoditizedand
willbethepreferredsolutionformanyapplicationdevelopmentprojects.
“SEAPsarethefoundationonwhichsoftware-as-a-servicesolutionsarebuilt,”saidMark
Driver,researchvicepresidentatGartner.“AsSEAPtechnologiesmatureduringthenext
severalyears,Gartnerforeseesthreedistinct,butslightlyoverlapping,phasesofevolution.
Thefirstphase,through2011,willbethatofthepioneersandtrailblazers;thesecond,
runningfrom2010through2013,willbeallaboutmarketconsolidation;whilethethird
phase,from2012through2015,willseemainstreamcriticalmassandcommoditization.”
Phase1:2007to2011—PioneersandTrailblazers Thiswilllargelybeamarketdevelopment
phase.Through2011,giventhenaturalimmaturityofSEAPsolutions,compoundedbytheir
proprietarynature,GartneradvisesmostSEAPadopterstofocusonopportunisticsolutions—
quick-hit,tacticalopportunitieswheretimetomarketanddeveloperproductivityoutweigh
long-termtechnicalviability.Althoughsomerareexceptionswillexist,mainstreamIT
developersshouldfocusprimarilyonSEAPinvestmentswherereturnoninvestmentcan
beacquiredwithin18to24months.
Asaresultofafocusontechnicalmeritoverinvestmentprotection,technology
providerswiththestrongestmarket“vision”willgarnerthemostsuccessamongearly
adopters.Buildingonthistrend,manyearlySEAPvendorswillfocusonrapid-application-
PART III
development-orientedtoolsanddeploymentfeatures,makingtheirsolutionsparticularly
attractiveamongend-usercomputingeffortsandsocial-computingprojects.
Phase2:2010to2013—MarketConsolidation Gartnerpredictsthatby2012,theSEAP
marketwillbecomeovercrowdedwithabroadrangeofsolutionsfromlargeandsmall
vendors,andcompetitivepressurewilldrivemanyweakerplayersfromthemarket,
resultinginacquisitionactivity.Duringthisconsolidationphase,SEAPinfrastructurewill
becomeincreasinglyattractivetoabroaderrangeofpotentialadopters,resultinginamore
mainstreamandconservativeuserbase.Consequently,the“abilitytoexecute”willbecome
equallyasimportantastechnicalinnovationandmarketvisionamongmostmainstream
adopters.Return-on-investmenttimeframeswillbeextendedfromtacticalshort-term
opportunitiestolonger,strategictimeframesofthreetofiveyears.
By2013,GartnerexpectsSEAPtechnologytobethepreferred,butnottheexclusive,
choiceforthemajorityofopportunisticandarchitecturallysimpleapplicationdevelopment
effortsamongGlobal2000enterprises,andasaresult,somewillseektoexpandtheir
relianceonSEAPplatformstoincludelonger-termstrategic(systematic)investments.
Phase3:2012to2015andBeyond—MainstreamCriticalMassandCommoditization In2013,a
smallnumberoflargeSEAPproviderswilldominatethemarket,providingdefacto
standards.Thesevendorswillprimarilyleverageproprietarytechnologiesdeveloped
duringthepreviousfiveyears,buttheywillalsowidelysupportintracloudapplication
programminginterfacestoestablishaSEAPtechnology“fabric,”linkingcloud-based
solutionsacrossvendorplatforms.
Marketexpansionintoincreasinglyconservativeuserbaseswillfurthershiftmarket
emphasisfrominnovationtostability,cost,andinvestmentprotection.Competition
betweenproprietarylock-inandopen-SEAPtechnologieswillincreaseand,by2014,
concernoverlock-inwillleadtocritical-masssupportforoneormoreopen-sourceSEAP
softwarestacks.Theseopen-SEAPstackswillbegintocompetewithproprietarysolutions
andslowlygrowingportionsoftheSEAPmarketbeyondthe2015timeframe.
312 Part III: Cloud Computing at Work
Salesforce.comandCustomerService
Cloudevolutionwillnotjusttakeplaceinatechnicalrealm.Alsoaffectinghowcloud
serviceswillchangeishowcustomersinteractwiththecloud.Salesforce.comisaddressing
customerserviceneedswithitsServiceCloudprogram.
BuiltontheForce.complatform,theServiceCloudtransformscustomerservicethrough
thepowerofcloudcomputing,andbringstogetherindustry-leadingcloudcomputing
platformslikeGoogle,Facebook,andAmazon.comtocaptureeveryconversationand
leverageeverycommunityexpertinthecloud.
Bycapturingtheseconversations,theServiceCloudempowerscompaniestodeliverthe
expertiseofthecommunitytocustomers,agents,andpartnersregardlessoflocationor
device—ensuringthatthequalityofcustomerserviceisconsistentacrosseverychannel.
TheServiceCloudrepresentsthefutureofcustomerservice,wheremorethantwo-thirdsof
allserviceconversationswilltakeplaceinthecloud.
“TheServiceCloudisthefirstcustomerservicesolutionthatempowerscompaniesto
joinandmanageallserviceconversationshappeninginthecloud,”saidMarcBenioff,
chairmanandCEOofSalesforce.com.“Thishasbeenmadepossiblethroughtheemergence
ofnativecloudcomputingplatformslikeForce.comthatarebuilttoharnessthepowerof
othercloudslikeFacebook,Google,andAmazon.com.”
AccordingtoGartneranalystMichaelMaoz,vicepresidentandresearchfellow,
Gartner,Inc.,“Thenewgenerationofconsumerstrustscontentcreatedbypeers.This
consumerexpectationthattheycancreateanswersandcontentaspartofacommunitywill
leadbusinessesandotherorganizationstoadoptsimilartechniquestosucceed.Ultimately,
organizationswillhavetochangetheirsingularemphasisontoolsforagents,toabroader
strategythatalsosupportstheroleofcommunityexperts.”
“Increasingly,peopleconnectwithorganizationsandproductsthroughthetrusted
friendsandcommunitiesofexpertsthatarepartoftheironlinesocialnetwork,”saidElliot
Schrage,vicepresident,communications,publicpolicyandplatformmarketing,Facebook.
“Organizationsneedapowerfulwaytobecomepartoftheconversationsabouttheir
products,andwebelieveForce.comforFacebookandFacebookPagesenablecompaniesto
engagewithcustomersonamorepersonallevel.”
Traditionally,contactcentertechnologieshavebeenremovedfromtheexpertsand
knowledgefoundinthecloud.Yetalready50percentofallserviceconversationsaretaking
placeinthecloud.TheServiceCloudunitesthesetwodisconnected,yetimportant,worlds
toestablishthenewmodelforcustomerservice.Capturingandfunnelinginformationfrom
insidetheenterpriseandinthecloudintotheknowledgebaseisattheheartoftheService
Cloud.TheServiceCloudismadeupofsixmaincomponentsaroundtheknowledgebase
togather,distill,anddisseminatetheexpertknowledgefoundinthecloudtocustomers,
agents,andpartners:
• Community Developinganonlinecustomercommunityisanintegralpartofthe
ServiceCloud.TheServiceCloudrepresentsafundamentalshiftinhowcompanies
approachtheironlinepresence—it’snotjustaplacetopostinformation,buta
communitywherecustomerscaninteractwitheachotherandhaveconversations
withthecompanyatlarge.Companiescaneasilysetupandmaintainaninteractive
cloudcommunityfortheircustomersbyleveragingnewSalesforce.comtechnologies
suchasSalesforceCRMIdeasandForce.comSitesasbuildingblocks.
Chapter 14: Best Practices and the Future of Cloud Computing 313
• Social TheForce.complatformenablestheServiceCloudtoconnecttoleading
socialnetworkingsitessuchasFacebook,communityforums,blogs,andmore.
Throughtheseconnections,companieswillbeabletofunnelthisinformation
directlyintotheirknowledgebase.TheServiceCloudensuresthatthecompany’s
knowledgebasehasthemostup-to-datesupportinformationsourcedfrom
communityexperts.
• Search Moretimesthannot,customersbeginwithaGooglesearchtofind
answerstotheirquestions.BycreatinganactiveonlinecommunitywiththeService
Cloud,companiescanensurethattheirsiteisoneofthetopresultsreturnedina
customer’ssearch.ItisthroughthepowerofForce.comSitesthattheexpert
knowledgeofthecommunityismadeavailableinsearchengineresults.
• Partners UsingtheServiceCloud,companiescannowsharealloftheinformation
intheknowledgebasequicklyandeasilywiththeirpartners.Cloudcomputing’s
uniquemodelhasenabledSalesforce.comtoeasilyandsecurelyconnectseparate
SalesforceCRMdeployments,allowingcompaniestosharecases,contacts,and
companyinformation,withouttheneedforcomplexintegrationsoftware.
• Phone,email,andchat TheServiceCloudwillgiveagentsaccesstoknowledgein
thecloud,regardlessiftheyusephones,email,orchattoservicecustomers.By
PART III
providingthecontactcenterwiththesameknowledgefoundinthecommunity,the
ServiceCloudensuresthatthequalityandcostofserviceacrosseverychannelis
strengthenedbytheexpertiseofthecommunity.
• Force.com TheServiceCloudutilizesthelatestForce.comcapabilities,including
Force.comSites,Force.comforFacebook,andmoretouniquelyjointogether
knowledgeandconversationsregardlessofwheretheytakeplaceonline.TheService
Cloudalsotapsintothepowerofmorethan100customerserviceextensionson
theForce.comAppExchangeforareaslikechat,fieldservice,andCTI.Additionally,
customersusingtheServiceCloudgainallthebenefitsoftheprovensecurity,reliability,
andscalabilityofSalesforce.com’strustedglobalinfrastructure.
RespondingtoChange
Keepuponapps.Youhavetheonesthatyouwant,andtheywereservingyourorganization
well,butit’sworthittoseewhatothersaredeveloping.Forinstance,ifyougotoForce.com,
youcansearchthroughappsthatothershaveshared.Youmayfindonethatdoesthejob
betterthantheoneyou’reusingnow,oryoumaydiscoveranapplicationthatdoesthejob
inadifferentway.
Onadeeperlevel,analyzetheapplicationstoseeifthereissomefundamental,
philosophicalchangetounderstandhowappsarerevolutionizingyourindustry.
Keepuponvendors—notjustyourcurrentones,butnewplayers.Theremaybeanew
vendorwhoisabettermatchforyou,butunlessyoukeepyoureartotheground,you
won’tknowaboutthem.Also,readwhatothersaresayingabouttheirvendors.Ifyou’re
hearinggoodbuzzaboutavendor,andifyouareinthemarkettoswitchvendors,they
shouldbeatthetopofyourlist.
Also,youcanuseatoollikeCloudStatustoseehowdifferentcloudprovidersare
doinginoverallperformance.
314 Part III: Cloud Computing at Work
GetReady
Aswementionedintheprevioussection,understandinghowapplicationsareevolvingcan
helpyoubereadyforCloud2.0.Thatsaid,youshouldalsostayontopofchangestothe
worldofcloudcomputing,ingeneral.Isthereanewcloudproviderofferingsomethingmore
uniquethananyoneelse?Isthereanewcompanyusingcloudcomputinginauniqueway?
Cloudcomputingisinitsinfancy.ThinkofitliketheInternetbackin1995—itwasn’t
veryglamorous,somewhatclunky,butstilluseful.Asmorepeoplehavegottentheirhands
intoit,ithasevolvedandchanged(andwillcontinuetodoso).Lookformoreevolutionof
cloudcomputingandlookformorewaysthatitcanbenefityourorganization.
APPENDIX
Glossary, Vendors,
and Resources
E
venthoughyou’relookingatthelastfewpagesofanentirebookoncloudcomputing,
it’sreallyjustthetipoftheiceberg.Cloudcomputingisaverylargesubjectthatis
evolvingatarapidpace.Inthisappendix,you’llseeaglossaryofterms,andyou’ll
findsomeexcellentplacestoboneuponcloudcomputing,learnmoreabouttheservices
outthere,andperhapsdiscoverafewnewthings.Thefirstpartofthisappendixisaglossary
ofcloudcomputingterms.It’sallthejargonyou’relikelytohearthatpertainstocloud
computing.Next,we’lltalkaboutsomeofthecompaniesthatoffertheirowncloudservices.
Finally,we’lloffersomeresourcesforyoutofindoutmoreinformation.
Glossary
Themoreyou’reexposedtotheworldofcloudcomputing,themorecloudjargonyou’ll
hear.Thereisnolackofwebsitesandblogsouttherethatrailoncloudjargon.We’renot
goingtotakeastanceeitherway,butforthesakeofunderstandingwhateveryonemeans
whentheyuseacloudterm,here’saglossaryofsomeofthemorecommonlyspoken
(andwritten)cloudterms.
applicationvirtualization TheseparationoftheapplicationfromtheOS.Thisappliesto
applicationsatalltiers,fromserverstodesktops.Normally,thisisachievedusing
encapsulation.EncapsulatingandisolatingtheapplicationfromtheOSchangestheway
applicationscaninstallandinteractwiththeOS.Thismakesitpossiblefortheapplication
tobemovedfromonesystemtoanother,patched,andupdatedwithoutinteractionswith
otherapplicationsorOSes.Applicationvirtualizationalsoallowsapplicationstobecopied
orbackedupasasinglefile.
capsules Capsulesembodyanisolatedapplicationanditsdependenciessothatan
applicationinacapsulecanrunonanyhostOS.Withencapsulation,theapplication’sOS
dependencyhasbeenbroken.
315
316 Part III: Cloud Computing at Work
cloudapp Asoftwareapplicationthatisnotinstalledonalocalmachine.Itisaccessiblevia
theInternet.
cloudarcs Anabbreviationforcloudarchitectures,whicharedesignsforsoftware
applicationsthatcanbeaccessedovertheInternet.
cloudbridge Runninganapplicationsothatitscomponentsareintegratedwithinmultiple
cloudenvironments.Thiscouldbeacombinationofinternalorprivateorpublicclouds.
cloudclient Acomputingdeviceforcloudcomputing.Alsoknownasathinclient.
cloudenvy Avendorwhorebrandsanexistingservicetojumponthecloudcomputing
bandwagon.
cloudlock-in Thelevelofdifficultyassociatedwithmovinganapplicationordatafromone
cloudprovidertoanywhereelse—toanotherproviderorbacktoyourorganization.Cost,
time,levelofdifficulty,andportabilityareallvariablesindeterminingcloudlock-in.
cloudOS AnotherwaytodescribePlatformasaService(PaaS)likeGoogleAppEngineor
Salesforce.com
cloudportability Theabilitytomoveapplicationsanddatabetweenseveralcloud
computingvendors.
cloudprovider Aproviderthatmakesstorage,software,oranoperatingsystemavailableto
othersoveraprivateorpublicnetwork.
cloudservicearchitecture(CSA) Anarchitectureinwhichapplicationsandapplication
componentsactasservicesontheInternet.
cloudstorage Storingdataonacloudprovider’sstorageinfrastructure.Datayougenerate
ishousedoff-sitewithathirdparty.
NOTE Cloudstorageisoftencomparedtoleasingacar—youalwayshavethelatestandgreatest
technology,butyoupayforiteachmonthandneverownit.
cloudburst Aeuphemismusedwhenyourcloudservicehasasecuritybreachoryouare
unabletoaccessyourdata.
cloudcenter Alargeserviceprovider(likeGoogle)thatrentsitsinfrastructure.
cloud-orientedarchitecture(COA) Anarchitecturethatlendsitselftoincorporatingcloud
computingcomponents.
cloudsourcing Makinguseofanytypeofcloudservice.
cloudstorm Occurswhenmultiplecloudcomputingenvironmentsaretiedtogether.Also
calledcloudnetwork.
Appendix: G l o s s a r y, Ve n d o r s , a n d R e s o u r c e s 317
cloudware Softwarethatallowsbuilding,deploying,running,ormanagingapplicationsin
acloudcomputingenvironment.
cloudwashing Puttingtheword“cloud”onproductsandservicesyoualreadyhave.
encapsulation Defininganapplicationandallofitsdependencies,andthenlocatingthem
inaphysical,isolatedfolder.
externalcloud Acloudcomputingenvironmentthatisexternaltotheorganization.
funnelcloud Dialogueaboutcloudcomputingthatgoesroundandround,yetnever
touchestheground(thatis,comestofruition).
gridcomputing Atechniqueinwhichdisparatecomputingandstorageresourcesare
organizedtoperformaspecifictask.Theresourcesarebroughttogetherthroughthe
Internetormoresecureprivatenetworks.
hardwarevirtualization AtechnologythatemulateshardwaretoallowmultipleOSes,
multipleinstancesofasingleOS,oranycombinationthereoftocoexistonthesame
machine.
PART III
hypervisor Softwarethatcontrolsthelayerbetweenthehardwareoperatingsystems.It
allowsmultipleoperatingsystemstorunonthesamephysicalhardware.Therearetwo
typesofhypervisors:
• Baremetal,whichallowsthehypervisortorundirectlyonthehardware
• Hostedarchitecture,inwhichthehypervisorrunsontopofanexistingoperating
system
hybridcloud Acomputingenvironmentinwhichbothpublicandprivatecloudcomputing
environmentsarepresent.
internalcloud Sometimescalledaprivatecloud.Thistypeofcloudexistswithinthe
boundariesofanorganization.
networkvirtualization Mappingtwodisparatenetworksintoasingle,unifiednetwork.This
makesitlookasifallremotenetworksareinasingleplace.
OSvirtualization Thecreationofaseparaterun-timeenvironmentwithinthesame
operatingsystem.Applicationsareinstalledandinteractionwiththeoperatingsystemis
notchanged,sotherearenosubstantialchangesoccurringtothehostoperatingsystem.
paravirtualization Avirtualservertechniquethatemulateshardwareforaguestoperating
system.Paravirtualizedserversaremodifiedguestoperatingsystemsexistingontopofthe
hypervisor.Thechiefdifferencebetweenavirtualmachineandaparavirtualizedmachine
isthattheguestOSonavirtualmachineisunmodified,whiletheOSinaparavirtualized
environmentismodifiedtoworkmoredirectlywiththehypervisor.
318 Part III: Cloud Computing at Work
personalcloud SometimesknownasMiFi(pronounced“mefi”).Thisisaportable,personal
routerthatallowsmultipleuserstoconnectbytakingmobilewirelesssignalsandtranslating
themtoWiFi.
Physical-to-Physicalmigration(P2P) MovingacompleteOSenvironmentandinstalled
applicationsfromonephysicalservertoanother.Thisisdoneeitherbycloningdrivesand
puttingthecloneddriveintoanewserver,orbyusingapplicationvirtualizationtocontrol
thetransferfromservertoserver.
Physical-to-Virtualmigration(P2V) TheprocessofcapturingandmigratingacompleteOS
environmentandapplicationsfromaphysicaltoavirtualenvironment.
privatecloud Seeinternalcloud.
publiccloud Cloudcomputingenvironmentsthatareopenforusetothepublic.
servervirtualization TheabilitytohostmultipleOSimagesonasinglehardwareplatform.
storagevirtualization Theabstractionofphysicalstoragefromlogicalstorage.Storagemay
consistofstoragepoolsanddevicesindifferentphysicallocations,buttheenduserwould
onlyseeitasone,centrallymanagedpool.
utilitycomputing Ameteredserviceinwhichcomputingorstorageisprovidedonaneeded
basis,muchlikethewaypublicutilities(water,gas,andsoon)areprovidedtohomesand
paidforonasimilarbasis.Utilitycustomerspayfortheservicetheyuse,ratherthan
specificequipment.
virtualappliance Aminimalistvirtualmachineimagedesignedtorunavirtualization
technology(likeVMware).Virtualappliancesaimtoeliminatetheinstallation,configuration,
andmaintenancecostsassociatedwithrunningcomplicatedsoftware.Thedifference
betweenavirtualmachineandavirtualapplianceisthatavirtualapplianceisfully
preinstalledandpreconfigured,whileavirtualmachineisreadyforsoftwaretobeinstalled.
verticalcloud Acloudcomputingenvironmentthatisoptimizedforaparticularvertical
industry.
virtualmachine AserveremulatingrealorfictionalhardwareforanunmodifiedguestOS.
ItisinstalledasanapplicationonahostOS.Applicationsinstalledonthevirtualmachine
arenotawarethattheyexistonavirtualmachine.
Virtual-to-Physicalmigration(V2P) Theprocessofinstallingavirtualenvironmentonto
aphysicalserver.
virtualprivatecloud(VPC) Akintoavirtualprivatenetwork(VPN),butthecloudversion
ofit.Itisoftenusedtobridgeprivatecloudstoapubliccloud.
Appendix: G l o s s a r y, Ve n d o r s , a n d R e s o u r c e s 319
CloudVendors
WhilewetalkedaboutsomeofthebignamesincloudcomputinginChapter3,theyaren’t
theonlyones.Notbyalongshot.TableA-1listssomeothercloudvendors.Thelistisnot
exhaustive,andtherearedozensmoreoutthere;thisisjustalittlelookattherestofthe
iceberg.
PART III
by saying, “to enable you to increase or decrease
capacity within minutes, not hours or days.” They
also brought the topic to the forefront of public
awareness.
Apache Hadoop Hadoop.apache.org Apache Hadoop Core is a software platform that
Core makes it easy to write and run applications that
process vast amounts of data.
Appirio www.appirio.com Offers services and products to help accelerate
the adoption of on-demand solutions.
Appistry www.appistry.com Offers a grid-based application platform that
makes it easy to scale out CPU- and data-
intensive applications across a virtualized grid.
Apprenda www.apprenda.com Offers an operating system for building and
deploying SaaS applications and a platform for
conducting SaaS business.
Aptana www.aptana.com/cloud Aptana bills its cloud as follows: “[It] is architected
to complement cloud infrastructure providers like
Amazon, Google, Joyent, and others.”
Arjuna www.arjuna.com Arjuna describes its Agility service as an “on-ramp
to the cloud [that] allows the IT department to
begin to experiment with cloud computing in a
gradual, incremental way, without any need for
disruption to existing service.”
PART III
eVapt www.evapt.com Promises to enable “usage based monetization
(instant SaaS metering) for SaaS and Cloud
Computing vendors.”
FlexiScale www.flexiscale.com A flexible, scalable, automated hosting platform.
G.ho.st g.ho.st An online desktop complete with standard office
applications.
GigaSpaces www.gigaspaces.com Allows businesses and developers “to predictably
scale on-line systems under any peak demand,
guarantee real-time performance under any data
processing load and seamlessly leverage the
economies of scale offered by virtual computing
environments such as clouds and grids.”
GoGrid www.gogrid.com GoGrid offers customers the ability to grow
production servers in real time to meet demand
without affecting uptime.
Google www.google.com Google is the hands-down leader in cloud
computing, offering everything from online
applications to a development platform for
creating custom apps.
Hyperic www.hyperic.com Provides monitoring and management applications
for all types of web tools.
IBM www.ibm.com IBM is focused on helping organizations build
secure and efficient infrastructures with cloud
computing as part of the solution.
PART III
Their toolkit for cloud development is Force.com.
SIMtone www.simtone.net Commercialized their Universal Cloud Computing
Platform, which allows network operators and
businesses to host, manage, and provision any
cloud-hosted services.
Skytap www.skytap.com Skytap Virtual Lab is a hosted, on-demand service
for virtual lab automation and management.
SLA@SOI www.sla-at-soi.eu The European company’s vision is “to create a
business-ready service-oriented infrastructure that
will empower the service economy in a flexible
and dependable way.”
SmugMug www.smugmug.com Offers unlimited storage and stores backups of
stored photos in multiple datacenters.
SOASTA www.soasta.com Web testing is at the heart of SOASTA’s CloudTest
offering.
Sun www.sun.com Network.com is Sun’s cloud offering and is based
on the Sun Grid project.
Terremark www.theenterprisecloud.com Offers enterprise cloud services that allow
organizations to control a resource pool of
processing, storage, and networking.
VMware www.vmware.com VMware is nearly synonymous with virtualization and
the technology that makes today’s clouds possible.
Zuora www.zuora.com The leader in cloud billing technology. The
company calls its Z-Commerce platform “the first
commerce platform for cloud developers.”
Resources
Cloudcomputingisconstantlyevolving,sokeepinguponwhat’snewisessential.TableA-2
containsalistofcloudcomputingresourcesavailableontheWorldWideWeb.
Name URL
3TERA—Grid Operating System for Web http://www.3tera.com/
Applications
Access Grid Project http://www.AccessGrid.org/
Amazon Elastic Computer Cloud (Amazon EC2) http://aws.amazon.com/ec2/
CenterGate Research Group LLC http://www.centergate.com/
CloudBuddy—Your Virtual Desktop http://www.mycloudbuddy.com/
Cloud Computing and Emerging IT Platforms: http://www.gridbus.org/reports/
Vision, Hype, and Reality for Delivering CloudITPlatforms2008.pdf
Computing as the 5th Utility
Cloud Computing and High-Performance http://search.techrepublic.com.com/
Computing search/cloud+computing+and+high-
performance+computing.html
Cloud Computing Expo http://cloudcomputingexpo.com/
Cloud Computing Journal http://cloudcomputing.sys-con.com/
Cloud Computing Resource Center http://www.deitel.com/ResourceCenters/
Programming/CloudComputing/tabid/3057/
Default.aspx
Cloud Computing Resource, News and Support http://www.dabcc.com/section
.aspx?sectionid=12
Cloud Computing—Wikipedia http://en.wikipedia.org/wiki/Cloud_computing
Cloudo—The Computer Evolved http://www.cloudo.com/
CloudSim: A Novel Framework for Modeling and http://www.gridbus.org/reports/CloudSim-
Simulation of Cloud Computing Infrastructures ICPP2009.pdf
and Services by Rodrigo N. Calheiros, Rajiv
Ranjan, César A. F. De Rose, and Rajkumar
Buyya
Condor Project—High Throughput Computing http://www.cs.wisc.edu/condor/
DataMiningGrid Consortium http://www.datamininggrid.org/
Digipede Technologies—Distributed Computing http://www.digipede.net/
Solutions on Microsoft.NET Platform
Distributed.net—Node Zero http://www.distributed.net/
Name URL
Distributed Computing Resources http://www.jamesthornton.com/hotlist/
distcomp.html
Distributed Generic Information Retrieval (DiGIR) http://digir.sourceforge.net/
Distributed Search Engines http://www.openp2p.com/pub/t/74
Distributed Systems—Google Code University http://code.google.com/edu/parallel/index.html
Distributed Systems Laboratory at University of http://dsl.cs.uchicago.edu/
Chicago
eyeOS—Cloud Computing Operating System http://eyeos.org/
Force.com—Cloud Computing for the Enterprise http://www.Force.com/
Ganglia—Distributed Monitoring System for http://www.ganglia.info/
Clusters and Grids
Google App Engine—Run Your Web Apps on http://code.google.com/appengine/
Google’s Infrastructure
Google Apps—Software-As-a-Service for http://www.google.com/apps/intl/en/business/
PART III
Business Email, and Information Sharing index.html
IBM Cloud Computing http://www.ibm.com/ibm/cloud/
IEEE Task Force on Cluster Computing http://www.ieeetfcc.org/
Internet-based Distributed Computing Projects http://distributedcomputing.info
IRIS: Infrastructure for Resilient Internet http://iris.lcs.mit.edu/
Systems
Lawrence Berkeley National Laboratory—Above http://www.lbl.gov/CS/
the Clouds: A Berkeley View of Cloud Computing
Manjrasoft—Innovative Cloud and Grid http://www.manjrasoft.com/
Computing Technologies
Microsoft Cloud Computing Tools http://msdn.microsoft.com/en
Mithral—Client-Server Software Development Kit http://www.mithral.com/products/cs
(CSSDK)
MysterNetworks—The Evolution of Peer-to-Peer http://www.mysternetworks.com/
Network World Fusion http://www.nwfusion.com/
NeuroGrid—P2P Search http://www.neurogrid.net/
NSF Middleware Initiative http://www.nsf-middleware.org/
NVIDIA Tesla Personal Supercomputer http://www.nvidia.com/object/personal_
supercomputing.html
Open Cluster Group http://www.openclustergroup.org/
OpenP2P.com http://www.openp2p.com/
Name URL
OSCAR: Open Source Cluster Application http://www.csm.ornl.gov/oscar/
Resources
Parabon Computation—Internet Computing Is http://www.parabon.com/
Computing Outside the Box
Peer to Peer Working Group—P2P WG—Internet2 http://p2p.internet2.edu/
PlanetLab http://www.planet-lab.org/
Public Data Sets on AWS http://aws.amazon.com/publicdatasets/
PVM: Parallel Virtual Machine http://www.csm.ornl.gov/pvm/
QADPZ—Quite Advanced Distributed Parallel http://qadpz.sourceforge.net/
Zystem
Reservoir—Infrastructure for Cloud Computing http://www.reservoir-fp7.eu/
rPath—A Pragmatic, Incremental Approach to http://www.rpath.com/corp/cloud-adoption-
Cloud Computing model?pi_ad_id=2947665472&gclid=CLzfgpmh
k5kCFQITswodsmUaZw
SmartFrog—Smart Framework for Object Groups http://www.hpl.hp.com/research/smartfrog/
The Cloud, Cloud Computing, Cloud Hosting, http://www.mosso.com/
and Cloud Services
TOP500 Supercomputer Sites http://www.top500.org/
UNICORE Distributed Computing and Data http://www.unicore.eu/
Resources
UPnP Forum http://www.upnp.org/
WaveMaker—Open Source Development Platform http://www.WaveMaker.com/
Worldwide Virtual Computer—Legion http://www.cs.virginia.edu/~legion/
Yahoo! Directory Computer Science > http://dir.yahoo.com/Science/Computer_
Distributed Computing Science/Distributed_Computing/
327
328 Cloud Computing: A Practical Approach
cloudbursts,316
cloudcenters,316
D E
DaaS(DatabaseasaService) EBS(AmazonElasticBlock
CloudFront,55 model.SeeDatabaseasa Store),56
CloudNAS,145–146 Servicemodel EC4(AmazonElasticCompute
cloud-orientedarchitecture dashboards,287 Cloud),21,54–55,70–71,114
(COA),316 data economicbenefits,78
CloudPS,114 ElasticBlockStore(Amazon
centralized,37
clouds,24,317,318 EBS),56
cloudsourcing,316 medical,26
proprietary,32 ElasticComputeCloud
CloudStatustool,300–302 (AmazonEC4),21,54–55,
cloudstorms,316 regulated,26
sensitive,25 70–71,114
cloudware,317.Seealso EMCCorporation,45–46
PlatformasaServicemodel webservices,165
dataleakage,94 encapsulation,317
cloudwashing,317 EnterpriseManager,Oracle,19
CMiCEmerging,188–189 dataloss,reduced,38
dataownership,40 enterprise-classcloudofferings
COA(cloud-oriented
dataprotection,32–33 MicrosoftExchange
architecture),316
CollabNetCUBiT,302–304 databaseapplications,17–19 Online,288–290
collaborationindustry,188 DatabaseasaService(DaaS) VMotion,290
communication,secure,33 model VMwarevCenter
CommunitySource MicrosoftSQLServer Converter,291–292
program,163 DataServices(SSDS), entityinSQLServer,18
Compaqclients,270 18–19,48 EpicorSoftwareCorporation,189
compliance,95–97 Oracle,19 EthernetUnificationCenterof
componentsofcloud overview,17–18 Excellence,47
computing databases,17,19 evaluationtips,79–80
clientdevices,7 datacenters Evernote,279
datacenters,7 deletionof,81–83 ExchangeOnline,51–52,205–211
distributedservers,8 description,7 executives,surveyof,35
DDOS(distributeddenialof expectations,realistic,87–88
fullvirtualization,9–11
service)attacks,36–37 ExtensibleHypertextMarkup
gridcomputing,8–9 Language(XHTML),160
infrastructure,8 Dell,271–273
denialofservice(DOS)attacks, ExtensibleMessagingand
overview,6 PresenceProtocol(XMPP),
paravirtualization,10–11 36–37
dependencies,hardware,27 155–156
ComputationalResearch externalclouds,317
Laboratories(CRL) development,application.See
partnerships,63–64 applicationdevelopment
computeclouds,24 devices.Seeclientdevices
DHTML(DynamicHypertext
F
CongaMerge,287 Firefoxwebbrowser,
connectivity.Seenetwork MarkupLanguage),159,160 127–130,287
connectivity disasterrecovery,11 flash-cutapproach,308–309
constructionindustry,188–189 distributeddatabases,17 Force.com
consumers,cloud,104 distributeddenialofservice Apexformigration,
containerinSQLServer,18 (DDOS)attacks,36–37 285–286
cost,27 distributedservers,8
applications,286–287
CP-42researchsystem,9 Django,113–114
Docs,Google,278 delivery,74
CRL(ComputationalResearch features,117–118
Laboratories)partnerships, DocumentObjectModel
(DOM),159 Googlealliance,76,
63–64 215–216
CRM(customerrelationship DOM(DocumentObject
Model),159 MigrationTool,284
management),59
CSA(cloudservice DOS(denialofservice)attacks, on-demandservices,
architecture),316 36–37 73–74
CSS(cascadingstylesheets),160 DynamicHypertextMarkup overview,58
CUBiT,302–304 Language(DHTML),159,160 forensics,95
customerrelationship DynamicsCRMOnline,22, fullvirtualization,9–11
management(CRM),59 53,221 funnelclouds,317
FusionMiddleware,Oracle,19
330 Cloud Computing: A Practical Approach
G H overview,161
virtualization,9–11,162
Gears,Google,216–218 HaaS(HardwareasaService)
GeneralServices model,15–16 InfrastructureandMiddleware
Administration(GSA),40 hackers,36–37 onDemand(IMOD),250–251
geopoliticalconcerns,26 HardwareasaService(HaaS) InfrastructureasaService
GFS(GlobalFoundational model,15–16 (IaaS),69
Service),221 hardwaredependencies,27 integrationofapplications,6,28
G.ho.st(GlobalHosted hardwarevirtualization,317 integrationofservices,108–109
OperatingSystem),281 healthrecords,26 IntelCorporationpartnerships,
GlobalFoundationalService healthcareindustries,184–187 65–67
(GFS),221 HewlettPackard(HP) IntelVirtualizationTechnology
GlobalHostedOperating Compaqclients,270 (IVT),10
System(G.ho.st),281 internalclouds,317
partnerships,65–67
glossary,315–318 internalresources,31
thinclients,268–273 Internet
Gmail,277,287 TheHostingCloud,114–115
GoGrid,71–72,124 hostingservices,114–115
accelerated,102
GoogleAppEngine HP.SeeHewlettPackard optimizedoverlay,102
applicationdevelopment, HTML(HypertextMarkup outages,5–6
213–218 Language),158–159 public,101
cost,43 HTTP(HypertextTransfer InternetExplorer,127
features,42–43 Protocol),153–155 intranets
Force.comand,76, hybridcloud,317 components,20
215–216 HypericHQInc.,298–299 hypervisorapplications,
GoogleGears,216–218 HypertextMarkupLanguage 20–21
payment,214–215 (HTML),158–159 overview,19–20
Salesforceand,75–76 HypertextTransferProtocol Intuitcloudservices
security,76 (HTTP),153–155 QuickBase,222–224
Googlecloudservices Hyper-V,259–263,292–293 SoftwareasaService
AdWords,287 hypervisorapplications,20–21, offerings,178–179
162–163 iPhoneSDK(software
Android,198–202
hypervisors,317 developmentkit),203–205
AppEngine.SeeGoogle
ITexecutives,surveyof,35
AppEngine IVT(IntelVirtualization
application I Technology),10
development, IBMcloudservices
213–218 cloud,movement
BigtableDatastore, into,62 J
146–148 consultingservices, JavaScript,160
ChromeWebbrowser, 61–62 JavaScriptObjectNotation
130–133 CP-42researchsystem,9 (JSON),165–166
DataAPIs,123–124 partnerships,64–65, Jooce,279
Docs,278 67–68,189 JSON(JavaScriptObject
Gadgets,122–123 security,63 Notation),165–166
Gears,216–218 SoftwareasaService
GoogleHealth,44
offerings,22,41–42
offerings,183–184
IDCsurveyofITexecutives,35
K
Kaavo,250–251
partnerships,124,215 identityofservices,107–108 keymanagementinVPNs,
SoftwareasaService illumita,281 99–100
offerings,179–180 IMOD(Infrastructureand knowledgeablevendors,30
WebToolkit,42–45 MiddlewareonDemand),
governmentprocurement,40 250–251
governmentrole,39 information,sensitive,25,31–32 L
gridcomputing,8–9,317 infrastructure LAMP(Linux,Apache,MySQL,
GSA(GeneralServices CommunitySource Perl),34
Administration),40 program,163 laptops,lost,35
gridcomputing,8–9 latency,28–29
OpenVirtualization lead-trackingdashboards,287
Format(OVF),163–164 leakageofdata,94
legislativeissues,26
Index 331