ISOD-RG Discussion Infrastructure Services Definition

ISOD-RG Discussion

Infrastructure Services Definition

ISOD-RG

Slat Lake City, Utah

17 July 2011

ISoD-RG, OGF32, 17 July

2011, Salt Lake City Discussion Infrastructure Services 1

Outline

• General use cases for InterCloud Architecture and Infrastructure Services

provisioning

– Provisioning Cloud based project oriented infrastructures on-demand and

distributed virtualised applications mobility

• Standardisation on Cloud architecture and components

– NIST Cloud collaboration

• Infrastructure services definition

• Additional Information

– Architectural Framework of the Cloud IaaS Provisioning Model (by UvA)

Cloud Federation @OGF32 - 16 July

2011, Salt Lake City InterCloud Architecture and Security Slide_2

SNE Cloud Research Directions

(1) Generic Cloud IaaS Architecture, Release 1, 15 April 2011 Published as http://staff.science.uva.nl/~demch/worksinprogress/sne2011-techreport-2011-03-clouds-iaas-architecture-release1.pdf

• Infrastructure Services Modeling Framework (ISMF)

• Composable Services Architecture (CSA)

• Service Delivery Framework (SDF)

(2) InterCloud (OS/Middleware) • Targeting for InterCloud BGP-like protocol

• Merging (1) and (2) under InterCloud Architecture • Network infrastructure provisioning as part of Cloud infrastructure

provisioning

(3) Security Infrastructure for Cloud (dynamically provisioned) • Dynamic Access Control Infrastructure (DACI)

• Following Cloud standardisation and contributing to NIST Cloud collaboration

Cloud Federation @OGF32 - 16

July 2011, Salt Lake City InterCloud Architecture and Security 3

http://staff.science.uva.nl/~demch/worksinprogress/sne2011-techreport-2011-03-clouds-iaas-architecture-release1.pdf















General use cases for Cloud based

Infrastructure Services provisioning

• Clouds are evolving as a common way of provisioning

infrastructure services on-demand

– In this way, Clouds add a new type of services in addition and on the

top of currently existing network based and distributed services

– Using real life analogy like “moving house or office” from one location

to another

• Pack- Move – Unpack – (connect to local infrastructure)

• InterCloud Architecture (ICA) provide a framework to support

provisioning Cloud based project oriented infrastructures on-

demand and distributed virtualised applications mobility

– Hybrid Cloud/Grid e-Science collaborative environment

– Educational Lab deployment in Clouds

• Other use cases to be defined



Use case 1: Cloud based e-Science infrastructure

InterCloud Architecture and Security 5

Control &

Monitoring

Sc. Instrument

(Manufactrg)

Grid

Storage T1

Grid CE

Data Filtering

Grid

Storage T0

Grid VO-A

Visuali-

sation

User

Group A

User

CE

Campus A

Visuali-

sation

User

CE User

Group B

Campus B

CE CE CE

SE SE

CSE CSE CSE CSE CloudSE

T1

CE

Processed Data

Experimental

Data

Specialist

Data

Processing

Project based

Cloud Infrastructure

Data Filtering Ctrl&Mngnt

Plane

Project based Collaborating

user groups located in remote

campuses on data intensive

projects requiring high performance

computing and rich visualisation

Grid based core eScience

Infrastructure including

data intensive scientific

instrument

Campus

infrastructure

including

visualisation tools

Cloud

infrastructure

provisioned on

demand


July 2011, Salt Lake City

Use case 2: Educational Lab (mobility)

• Educational lab is created for a specific course in one

university

– A course is computing intensive and has periodicity of one semester

• The required infrastructure is expensive and is deployed on Cloud

(generally multiple)

– First installation requires significant efforts that need to preserved

• Between periodic course runs the Lab will be dormant or

should be suspended and resumed for the next term

– Used/required Cloud resources may change/evolve

• The Lab may need to be moved to another university with

different campus network installation and available Cloud

providers

– Requires Cloud services standardisation and interoperability



Defining InterCloud Architecture

• The prospective InterCloud Architecture should allow

interoperability and integration of existing models and Cloud

providers frameworks

– Should be supersede to Cloud Federation

• Be compatible and provide multi-layer integration of existing

Cloud service models – IaaS, PaaS, SaaS and Apps clouds

• Presumably following the same architecture patterns as

Internet and Grid/OGSA

– Provide functionalities for creating VO based infrastructures



Current relation between Cloud services models

• Cloud service

models IaaS, PaaS,

SaaS use

proprietary Physical

Platform and

Resources

Adaptation Layer



Cloud SaaS (Apps)

Cloud PaaS (OS, mw)

Cloud IaaS (VM MgntS)

API (Data, C&MP)

API (Data, C&MP)

Customers & Applications

Physical Platform and Resources Adaptation Layer (PPR Adaptation)

User and Application API (Data, C&MP)

Computer Platform

PPR Adaptation

PPR Adaptation

Computer Platform

Prospective InterCloud Architecture

• Standardisation

API’s between

different Cloud

service models

• Cloud/ICA layered

API – For application data

communication

– For Control and

Management



Cloud SaaS (Apps)

Cloud PaaS (OS, mw)

Cloud IaaS (VM MgntS)

API (Data, C&MP)

API (Data, C&MP)

Customers & Applications

Physical Platform and Resources Adaptation Layer

User and Application API (Data, C&MP)

Defining InterCloud Architecture API’s

• InterCloud Architecture (ICA) should address interoperability

of different Cloud service platforms and multi-cloud

integration, including with legacy campus infrastructure

• Define InterCloud protocols and API’s stack

– VI-API – IaaS API

– P-API – PaaS API

– SA-API – Software (and applications) API

– OCCI can be a base for defining most of APIs

• Depending on service model, some API’s may be run by

providers and some by customers/users


July 2011, Salt Lake City InterCloud Architecture and Security Slide_10

Architectural Framework for Cloud IaaS

Published as SNE Technical Report http://staff.science.uva.nl/~demch/worksinprogress/sne2011-techreport-2011-03-

clouds-iaas-architecture-release1.pdf

• Includes the following main components

– Infrastructure Services Modeling Framework (ISMF)

– Composable Services Architecture (CSA)

– Service Delivery Framework (SDF)

• Additional components (orthogonal)

– Cloud Security Infrastructure

– Control and Management Plane


July 2011, Salt Lake City InterCloud Architecture and Security Slide_11


















NIST Activity on Cloud Computing

• NIST – Collaboration on Cloud Computing Reference Architecture development – http://collaborate.nist.gov/twiki-cloud-

computing/bin/view/CloudComputing/WebHome

• Draft SP 800-145 The NIST Definition of Cloud Computing (Draft) – http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145_cloud-

definition.pdf

• DRAFT Cloud Computing Synopsis and Recommendations – http://csrc.nist.gov/publications/drafts/800-146/Draft-NIST-SP800-146.pdf

• Draft SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing – http://csrc.nist.gov/publications/drafts/800-144/Draft-SP-800-144_cloud-

computing.pdf

• NIST Cloud Standards Roadmap group – http://collaborate.nist.gov/twiki-cloud-

computing/pub/CloudComputing/StandardsRoadmap/NIST_CCSRWG_092_NIST_SP_500-291_Jul5.pdf

• SP 800-125 Guide to Security for Full Virtualisation Technologies – http://csrc.nist.gov/publications/nistpubs/800-125/SP800-125-final.pdf

ISoD-RG, OGF32, 17 July 2011,

Salt Lake City Discussion Infrastructure Services 12

http://collaborate.nist.gov/twiki-cloud-computing/bin/view/CloudComputing/WebHome





http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145_cloud-definition.pdf













http://csrc.nist.gov/publications/drafts/800-146/Draft-NIST-SP800-146.pdf











http://csrc.nist.gov/publications/drafts/800-144/Draft-SP-800-144_cloud-computing.pdf













http://collaborate.nist.gov/twiki-cloud-computing/pub/CloudComputing/StandardsRoadmap/NIST_CCSRWG_092_NIST_SP_500-291_Jul5.pdf










http://csrc.nist.gov/publications/nistpubs/800-125/SP800-125-final.pdf









NIST Cloud definition – Draft SP 800-145 (1)

Draft SP 800-145 The NIST Definition of Cloud Computing (Draft) http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145_cloud-

definition.pdf

• Five Cloud characteristics

– On-demand self-service

– Broad network access

– Resource pooling

– Rapid elasticity

– Measured Service

• 3 service/provisioning models

– Software as a Service (SaaS)

– Platform as a Service (PaaS)

– Infrastructure as a Service (IaaS)















NIST Cloud definition – Draft SP 800-145 (2)

• NIST Definition of Cloud – missing network provisioning, just “limited control over network”

Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access

to a shared pool of configurable computing resources (e.g., networks, servers, storage,

applications, and services) that can be rapidly provisioned and released with minimal

management effort or service provider interaction. This cloud model promotes availability and

is composed of five essential characteristics, three service models, and four deployment

models.

Service/provisioning models: SaaS – PaaS - IaaS

Cloud Infrastructure as a Service (IaaS). The capability provided to the consumer is to

provision processing, storage, networks, and other fundamental computing resources

where the consumer is able to deploy and run arbitrary software, which can include

operating systems and applications. The consumer does not manage or control the

underlying cloud infrastructure but has control over operating systems, storage,

deployed applications, and possibly limited control of select networking components

(e.g., host firewalls).



NIST Cloud Computing Reference Architecture

(CCRA) 2.0 - Main Roles (1)

• Cloud Carrier as a role to accommodate telco’s interests




(CCRA) 2.0 - Provider Functions (2)



Add:

Service Delivery

(Framework)

• Request&SLA

• Reservation/

Composition

• Deployment

• Operation

• Decommissioning

Provider functions

• Defined ambiguously

• Need clear separation between Delivery

process, Operation and Control&Mngnt

functions

• Service Orchestration is a Control function


(CCRA) 2.0 – Consolidated View (3)

• txt



Dedicated Network Provisioning in Clouds

• This issue is not addressed in details in any of currently

proposed CC architectures

• It can not be consistent infrastructure QoS without

(dedicated) network provisioning

– Specifically for Optical networks

• Telco, network providers and telecom equipment vendors

working in this direction

– GEYSERS project is an example of network+IT infrastructure

virtualisation

•



Infrastructure definition by Wikipedia (1)

The physical components of interrelated systems providing commodities and

services essential to enable, sustain, or enhance societal living conditions.

• Infrastructure is the basic physical and organizational structures needed for the

operation of a society or enterprise, or the services and facilities necessary for an

economy to function.

– The term typically refers to the technical structures that support a society, such as

roads, water supply, sewers, power grids, telecommunications, and so forth.

• Viewed functionally, infrastructure facilitates the production of goods and

services; for example, roads enable the transport of raw materials to a factory,

and also for the distribution of finished products to markets.

• In military parlance, the term refers to the buildings and permanent installations

necessary for the support, redeployment, and operation of military forces.

• Etymology

– the word infrastructure has been used in English since at least 1927 and meant: The installations

that form the basis for any operation or system.

– The military use of the term achieved currency in the United States after the formation of NATO in

the 1940s, and was then adopted by urban planners in its modern civilian sense by 1970.



Infrastructure definition by Wikipedia (2)

• “Hard” vs “Soft” infrastructure

– “Hard” infrastructure: Transport, energy, water communication

– “Soft” infrastructure: institutional, industrial, social

• The Internet, including the internet backbone, core routers and server farms, local

internet service providers as well as the protocols and other basic software

required for the system to function.



Open Group Integrated Information Infrastructure

Reference Model (III-RM)

• Infrastructure support business processes

– Integrated information so that different and potentially conflicting

pieces of information are not distributed throughout different systems

– Integrated access to that information so that staff can access all the

information they need and have a right to, through one convenient

interface

• The following components are involved

– Applications and applications platform

– Operating System and Network services

– Communication infrastructure

– Infrastructure application including management tools



Infrastructure definition by Sjaak Laan (NL)

From http://www.sjaaklaan.nl/pivot/entry.php?id=142 by Sjaak Laan (NL)

• IT infrastructure consists of the equipment, systems, software, and services used in

common across an organization, regardless of mission/program/project. IT Infrastructure

also serves as the foundation upon which mission/program/project-specific systems and

capabilities are built. (cio.gov - the website for the United States Chief Information Officers

Council)

• All of the components (Configuration Items) that are needed to deliver IT Services to

customers. The IT Infrastructure consists of more than just hardware and software. (ITILv2)

• All of the hardware, software, networks, facilities, etc., that are required to Develop, Test,

deliver, Monitor, Control or support IT Services. The term IT Infrastructure includes all of the

Information Technology but not the associated people, Processes and documentation.

(ITILv3) • Information technology infrastructure underpins the distributed operational and administrative computing environment.

Hidden from the application-based world of end-users, technology infrastructure encompasses the unseen realm of

protocols, networks, and middleware that bind the computing enterprise together and facilitate efficient data flows. Yet

information technology infrastructure involves more than just the mechanics of data systems; it also includes people

providing support and services. (Technology Governance Board Definition of Information Technology Infrastructure)

• Infrastructure is the shared and reliable services that provide the foundation for the enterprise IT portfolio. The

implementation of an architecture includes the processors, software, databases, electronic links, and data centers as well

as the standards that ensure the components work together, the skills for managing the operation etc. (Goethe University

of Frankfurt, http://www.is-frankfurt.de/)



http://www.sjaaklaan.nl/pivot/entry.php?id=142

http://www.sjaaklaan.nl/pivot/entry.php?id=142

Infrastructure definition by Sjaak Laan

IT infrastructure is the total set of foundation components and non functional attributes that enables applications to

function.

Typical IT infrastructure characteristics are:

• IT infrastructure is usually shared by a multiple applications

• IT infrastructure is more static and permanent than the applications running upon it

• The management of the infrastructure is disconnected from the system management of the applications running on top of it

• The departments owning infrastructure components is different from the department owning the applications running on it

• Foundation components

– Servers, datacenters, networking, virtualisation, OS, end user devices



Infrastructure definition - Discussion

• Recent discussions in context of Cloud IaaS

– Set of VMs with connecting them network links with

defined characteristics (e.g. QoS)

• Contribution is requested from the meeting



Additional Information

• Useful links on Cloud standardisation and practice



Cloud related links (1)

Additional NIST links

• NIST on Cloud - Standards Acceleration to Jumpstart Adoption of Cloud

Computing (SAJACC)

– http://www.nist.gov/itl/cloud/sajacc.cfm

– http://csrc.nist.gov/groups/SNS/cloud-computing/index.html

• NIST Cloud Computing Collaboration Site

– http://collaborate.nist.gov/twiki-cloud-

computing/bin/view/CloudComputing/WebHome

• NIST Cloud Computing Reference Architecture, v1.0

– http://collaborate.nist.gov/twiki-cloud-

computing/bin/view/CloudComputing/ReferenceArchitectureTaxonomy



http://www.nist.gov/itl/cloud/sajacc.cfm

http://www.nist.gov/itl/cloud/sajacc.cfm

http://csrc.nist.gov/groups/SNS/cloud-computing/index.html










http://collaborate.nist.gov/twiki-cloud-computing/bin/view/CloudComputing/ReferenceArchitectureTaxonomy







Other standardisation activities

• Federal Cloud Computing Strategy - this quite useful to read http://www.cio.gov/pages.cfm/page/IT-Reform-Series-Federal-Cloud-Computing-Strategy-Published

– http://www.cio.gov/documents/Federal-Cloud-Computing-Strategy.pdf

• IETF internet-draft, “Cloud Reference Framework”

– http://www.ietf.org/id/draft-khasnabish-cloud-reference-framework-00.txt

• OGF OCCI - http://occi-wg.org/

• GSA, “Cloud Computing Initiative Vision and Strategy Document (DRAFT)”,

– http://info.apps.gov/sites/default/files/Cloud_Computing_Strategy_0.ppt

• Cloud Taxonomy

– http://cloudtaxonomy.opencrowd.com/

• Open Security Architecture (OSA), “Cloud Computing Patterns”

– http://www.opensecurityarchitecture.org/cms/library/patternlandscape/251-pattern-cloud-computing



http://www.cio.gov/pages.cfm/page/IT-Reform-Series-Federal-Cloud-Computing-Strategy-Published

















http://www.cio.gov/documents/Federal-Cloud-Computing-Strategy.pdf








http://www.ietf.org/id/draft-khasnabish-cloud-reference-framework-00.txt












http://occi-wg.org/

http://occi-wg.org/

http://occi-wg.org/

http://info.apps.gov/sites/default/files/Cloud_Computing_Strategy_0.ppt

http://info.apps.gov/sites/default/files/Cloud_Computing_Strategy_0.ppt

http://cloudtaxonomy.opencrowd.com/



http://www.opensecurityarchitecture.org/cms/library/patternlandscape/251-pattern-cloud-computing










Other Cloud related initiatives

• ENISA Cloud Computing Risk Assessment (2010)

http://www.enisa.europa.eu/act/rm/files/deliverables/cloud-computing-

risk-assessment

• Collection of cloud identity management usecases by OASIS Identity in

the Cloud TC

– http://wiki.oasis-open.org/id-cloud/MemberSubmissions

• Good collection of up-to-date links

– http://cloud-standards.org/wiki/index.php?title=Main_Page

• Cloudscape III meeting presentations (may require registration)

– http://www.sienainitiative.eu/Pages/Static.aspx?id_documento=1d585f0b-

2b65-45b7-8f56-a1f1e93dbde9



http://www.enisa.europa.eu/act/rm/files/deliverables/cloud-computing-risk-assessment







http://wiki.oasis-open.org/id-cloud/MemberSubmissions





http://cloud-standards.org/wiki/index.php?title=Main_Page



http://www.sienainitiative.eu/Pages/Static.aspx?id_documento=1d585f0b-2b65-45b7-8f56-a1f1e93dbde9










Cloud development and frameworks by big IT companies

• IBM, “Cloud Computing Reference Architecture v2.0”

– http://www.opengroup.org/cloudcomputing/doc.tpl?CALLER=documents.tpl&d

cat=15&gdid=23840

• Oracle Cloud Computing

– http://www.oracle.com/us/technologies/cloud/index.html



http://www.opengroup.org/cloudcomputing/doc.tpl?CALLER=documents.tpl&dcat=15&gdid=23840

http://www.opengroup.org/cloudcomputing/doc.tpl?CALLER=documents.tpl&dcat=15&gdid=23840

http://www.oracle.com/us/technologies/cloud/index.html




Network vendors and providers

• Cloud reality blogs – http://www.rationalsurvivability.com/blog/?p=1672

– http://www.rationalsurvivability.com/blog/?p=2850

– http://www.rationalsurvivability.com/blog/?p=1717

– However they are mostly discussing what companies do or what they think about minor technical solutions, not approaching the problem from more conceptual view

• Extreme Networks – http://www.extremenetworks.com/solutions/datacenter_openstackcloud.aspx

– http://www.extremenetworks.com/blog/?p=83

• Juniper Networks, “Cloud-ready Data Center Reference Architecture”, – http://www.juniper.net/us/en/local/pdf/reference-architectures/8030001-en.pdf

• Cisco and Clouds – http://www.cisco.com/en/US/netsol/ns976/index.html



http://www.rationalsurvivability.com/blog/?p=1672








http://www.extremenetworks.com/solutions/datacenter_openstackcloud.aspx



http://www.extremenetworks.com/blog/?p=83

http://www.extremenetworks.com/blog/?p=83

http://www.cisco.com/en/US/netsol/ns976/index.html

Documents

ISOD-RG Discussion Infrastructure Services Definition