Cto cloud

BUSINESS IN THE CLOUD Advantages & Challenges

ABOUT: SEAN HULL20 Years Professional Technology ExperienceSpeaker IOUG, NYOUG, MeetupsOnline: DBJ, OTN, IOUG Select, ChangeThisExperience with 1/2 Dozen Cloud Hosted FirmsBook Author: Oracle & Open Source - O’Reilly 2001

INTRODUCTIONOracle on Sun >> Oracle on Commodity HardwareMigration to Cloud Hosted Applications Lower SLA, Less Reliable Servers & Disk PerfEconomic Pressure Trumps Quality & Performance Flexibility in Deployments Flexibility in Spending

CLOUD ADVANTAGESOn-demand Compute PowerLow Up-front CostsAutoscalingEasier Disaster Recovery & Compromise ResponseDisciplined Deployments, IaaS & AutomationAvailability Zones & Regions

CLOUD CHALLENGESPerformanceSLAs & Server ReliabilitySecurity ConsiderationsDatabase ConsiderationsNew Paradigm & Learning Curve

CHALLENGE: PERFORMANCEEBS Volumes Can Be Spotty - Use RAID0 Experience at Co. in Group Buying Space 4x EBS Vols in RAID0 Brought 3.5x Speedup1Gb Ethernet Saturation PointCPU Contention - Consider Dedicated InstancesUse EBS Rooted Servers - Not Instance Store

CHALLENGE: UNRELIABILITYAutomate Server SpinupsPerform Firedrill Tests & DocumentDeploy In Multiple Availability Zones & RegionsEmploy Automated Monitoring SystemsConsider Geographically Distributed Load Balancing

CHALLENGE: SECURITYLocation of Data & CompliancePotential Bugs in Virtualization SoftwareManaging CredentialsPassword Recovery Mechanisms

CHALLENGE: SECURITYNo Perimeter Security Use Security Groups - Mimic Firewall/VPN Use Principle of Least Privilege Consider Virtual Private Cloud Consider 3rd Party Solutions

CHALLENGE: SECURITYCloud Provider Problems Overly Broad Subpoena Against Them Fails to Protect Network Goes Out of Business

CHALLENGE: SECURITYTake Care in Choosing Secure Base AMIs Don’t Store Sensitive Data in an AMI Pass In Credentials at Spinup Time Avoid Additional Default Accounts Baked InConsider Intrusion detection & ApparmorBake In Packages to Avoid Version Changes

CHALLENGE: DATABASESPerform Replication Integrity CheckingBackups: Logical, Hot Backups & Offsite BackupsUse EBS Volumes & Software RAID0Vertical & Horizontal ScalingUse Availability Zones to Improve HA, Mitigate SLAConsider Encryption for FS & Network Trafﬁc

CHALLENGE: DATABASESAutomate Spinups & Check for DB MountWar Story - Production Outage Targeted Ad Business - Hosted on EC2 Rightscale Managed - Third Party Monitored Templated Replication Rebuild

CHALLENGES: DATABASESRDS Offering Downtime Window - 30min/week Slightly Cumbersome Conﬁg Changes Still Need to Perform Integrity Checking Beware Version Upgrades Can’t Use Percona, Can’t Encrypt Filesystem

CHALLENGE: LEARNING CURVEServer Spinups, AMIs, Shifting IP Addresses Automation Requires More Forethought Devops - Manage Infrastructure as CodeSecurity Groups, Credentials Mgmt, EncryptionProvisioning, Metered Spending Rate

FURTHER QUESTIONSWhat Types of Applications Make Sense?How Do I Build for Performance and Scalability?How Does On-Demand Change Provisioning?What About Mgmt Platforms & Frameworks?

Q: WHAT TYPES OF APPS?Apps with Seasonal Trafﬁc PatternsOne-off NeedsShort-term RequirementsAugmenting QuicklyDev & Test Environments

Q: BUILD FOR SCALABILITY?Build Separate Databases for Read & WriteCheck Freshness of Data - Replication Lag Be Careful of Stale DataBake Read/Write Connections Into Application

Q: ON-DEMAND & PROVISIONINGLarry Summers - “Preserving Optionality”Spending Now Controled by SoftwareCosts for Storage, Network, Instances, Elastic IPs

Q: PLATFORMS & FRAMEWORKSRightscale, Scalr, Cloudkick - dashboardsChef, Puppet, cfengine - conﬁguration managementAWS Cloud Formation - templatesAWS Elastic Beanstalk - full stack automation

CONCLUSIONDo You Have Existing Investments in Physical Servers? Hybrid Approach With Slow Cautious AdoptionDoes Your App Exhibit Seasonal Trafﬁc Patterns? The Cloud is Uniquely Suited To Your NeedsAre You Paying a Lot for DR Systems Currently? A Fully Scripted EC2 Deployment Could Save Big

ABOUT - SEAN HULL20 Years Professional Technology ExperienceLinux, MySQL, Web Operations & ScalabilityEC2, Rackspace Cloud & Rightscale Expertisehullsean @ GMAIL.comwww.iheavy.com/blog/www.twitter.com/@hullsean

Cto cloud

by Sean Hull on Apr 19, 2011

Accessibility

Categories

Upload Details

Usage Rights

1 Embed 104

Statistics

Cto cloud — Presentation Transcript