This document discusses delivering workload automation from a software-as-a-service (SaaS) platform. It describes how workload engines and servers can be hosted in the cloud while maintaining security. The document outlines different SaaS models for workload automation and how a virtual private network (VPN) approach allows multiple tenants to securely share a single workload instance hosted in the cloud. It also addresses considerations for hosting workload dynamically in the cloud.

1. World®
’16
Delivering CA Workload
Automation From a SaaS Platform
Chris Elvin, CA Technologies, Senior Director – Engineering Services
MFX136S
MAINFRAME AND WORKLOAD AUTOMATION

2. 2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

3. 3 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Abstract
Workload Automation has traditionally been viewed as a data
center discipline with on-premise hardware with the attendant
IT operational processes and staff. This session aims to show
how both the workload engines, and the servers to which
workload is scheduled can be cloud based. It further
demonstrates that the security mechanisms built-in to CA
Workload Automation solutions can be used to enable the
secure and safe scheduling of workload to multiple “tenants”
sharing a single workload instance.
Christopher
Elvin
CA Technologies
Senior Director
- Engineering Services

4. 4 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Agenda
SAAS AND WORKLOAD AUTOMATION
WORKLOAD AUTOMATION SAAS MODELS
CONCLUSIONS
NETWORK CONSIDERATIONS
MULTIPLE TENANTS
ON DEMAND CONSIDERATIONS
1
2
3
4
5
6

5. 5 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
SaaS and Workload Automation
Reach for the Clouds

6. 6 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
SaaS and Workload Automation
§ In simple terms, SaaS = Outsourcing
§ Typical features for consumers
– Consumption based pricing
– Subscription model
– Externally hosted (web based)
§ Typical features for providers
– Multi-tenant
– Scalable
Reach for the Clouds

7. 7 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
SaaS and Workload Automation
Aligning WLA with Cloud Principles
§ Consumption based pricing
§ Subscription model
– Commercial, not technical
§ Scalable
– Yes
§ Multi-tenant
– To most intents/purposes
– Workload consumers
§ Web-based
– Yes
§ Externally hosted
– Here is main challenge

8. 8 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
On Premise
Internet/Cloud
Workload Automation SaaS Models
Traditional Workload Automation
Workload
Manager
Workload

9. 9 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload Automation SaaS Models
Workload Automation Outsourcing
On Premise
Internet/Cloud
Workload
Manager

10. 10 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload Automation SaaS Models
Workload Automation Outsourcing
On Premise
Internet/Cloud
Workload
Manager

11. 11 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload Automation SaaS Models
Workload in the Cloud
On Premise
Internet/Cloud
Workload
Manager

12. 12 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload Automation SaaS Models
Moving the Manager to “The Cloud”
On Premise
Internet/Cloud
Workload
Manager

13. 13 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Network Considerations
Achieving Connectivity
On Premise
Internet/Cloud
Workload
Manager Web Traffic
VPN

14. 14 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload
Manager
Multiple Tenants
Operational and Network Security
On Premise
Internet/Cloud
Customer A
Customer B
Customer C
!!!!!!!

15. 15 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
The Lightbulb Moment
Redesign the VPN

16. 16 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload
Manager
Introducing OpenVPN
Open Source, Highly Configurable
On Premise
Internet/Cloud
Customer A
Customer B
Customer C

17. 17 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
OpenVPN Configuration
Other VPNs are Available
§ SSL tunnel (443/tcp)
– Encrypted
– Works with proxies, NAT etc
§ Point-Point connectivity
– No traffic “leakage”
§ PKI security
– Strong authentication
§ Port MUX
– Can share port 443 with the
workload web GUI
§ Each workload client has its
own VPN IP address
– Avoids naming conflicts
between customers

18. 18 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload
Manager
Introducing OpenVPN
Open Source, Highly Configurable
On Premise
Internet/Cloud
Customer A
Customer B
Customer C

19. 19 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Deployment Considerations
§ VPN hostnames
– Unique
– Strong naming standards
§ IP address overlap
– Use multiple instance
of OpenVPN
– Different ports and/or IPs
§ Strong naming conventions
– Separates “tenants”
– Leverages strong
security model
§ Resilience and failover
– VPN level
– WLA level

20. 20 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload in the Cloud
§ Conceptually no different to “vanilla” workload
– Cloud provider gives static IP/Hostname
– Use OpenVPN to provide static IP/Hostname
§ Node offline/online
– If offline, spin up before starting jobs/workflows
– After completion do we spin down?
On Demand Considerations

21. 21 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Workload in the Cloud
§ CA Process Automation (formerly IT Process Automation)
– Power Pack for CA Workload Automation AE – Cloud
§ Self service
§ Machines allocated dynamically in cloud
– Deleted once workload is complete
– Clean up after exceptions
Truly Dynamic Placement

22. 22 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
The Market Opportunity
§ Better leverage cloud resources
– Dynamic placement
– Spin up and tear down
§ Better serves the SME marketplace
– Service provider opportunity
– Caters for smaller environments

23. 23 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Questions?

24. 24 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Thank you
Stay connected at communities.ca.com

25. @CAWORLD #CAWORLD © 2016 CA. All RIGHTS RESERVED.25 @CAWORLD #CAWORLD
Mainframe and Workload Automation
For more information on Mainframe and Workload Automation,
please visit: http://cainc.to/9GQ2JI