This talk is the companion talk to the 'PHP Development in the Cloud' book I wrote with Vito Chin. It's an introduction into cloud computing for PHP developers. Delivered on may 25 at php|tek in Chicago.
IBM and OpenStack: Collaboration Beyond the CodeDaniel Krook
Presentation at the OpenStack Summit in Paris, France on November 5, 2014.
As the largest open source project in the world, OpenStack is produced by a huge and diverse community of global contributors. The most high profile efforts come from the individuals and organizations that produce the code and package the releases, however there are many other ways to get involved. In this sponsored session, we will highlight some of the key ways that IBM participates in the OpenStack community. We'll start off by reviewing some of our major code contributions, then we will highlight our conference and summit content, local meetup leadership activity, social media activism, web content, and more. After this presentation, you'll appreciate the full range of the activities that make an open source community strong, and learn how you can take part in the OpenStack community, as IBMers have. Finally, you'll have a chance to provide your feedback to guide IBM with its community activities, and have a starting point to get involved yourself.
Daniel Krook - Senior Certified IT Specialist
Manuel Silveyra - Senior Cloud Solutions Architect
Github Projects Overview and IBM Streams V4.1lisanl
Samantha Chan is the architect of the IBM Streams community. In her presentation, Samantha describes the Streams content available on GitHub, as well as how to get started with the key new features in IBM Streams V4.1.
Capella (once again) in space, meeting nanosatellitesObeo
Previously, Capella models (slightly extended by new features dedicated to system test specification) was used by the French Space Agency (CNES) to demonstrate that the current document-centric process could be improved. Applied on the “Space Variable Objects Monitor (SVOM)” operational use case, it helped the CNES in the definition and the validation of its future space system dedicated to the gamma ray detection and study. Proof being made, Kineis, created by the CNES and the CLS, reiterates the experience and continues to make it a strategic technology for science. Its current challenge is to add 25 state-of-the-art nano-satellites to the existing system to enhance IoT capabilities and address new markets. In line with the CNES Capella experience, Kinéis decided to build its “System Test” process on Capella. The extendibility and the flexibility of Capella nevertheless allowed them to carry on the previously initiated toolchain in order to cover the full process and support more use cases.
Jonathan Lasalle (Artal / Magellium)
- In charge of MBSE-related activities at Artal / Magellium
- Architect of the Citrus framework dedicated to model-based test mean engineering
3-2-1 Action! Running OpenStack Shared File System Service in ProductionSean Cohen
As OpenStack’s Shared File System Service is getting more and more adoption as one of top leading emerging projects in OpenStack deployments (according to the last OpenStack foundation user survey), we would like to share some of the key customers use cases such as DevOps, Containers and Enterprise Applications as well review the latest Newton release project updates towards delivering a production-grade deployments.
Slides from OpenStack Summit Barcelona,, October 25, 2016
Session video: https://www.youtube.com/watch?v=F5o-EbESNr8
IBM and OpenStack: Collaboration Beyond the CodeDaniel Krook
Presentation at the OpenStack Summit in Paris, France on November 5, 2014.
As the largest open source project in the world, OpenStack is produced by a huge and diverse community of global contributors. The most high profile efforts come from the individuals and organizations that produce the code and package the releases, however there are many other ways to get involved. In this sponsored session, we will highlight some of the key ways that IBM participates in the OpenStack community. We'll start off by reviewing some of our major code contributions, then we will highlight our conference and summit content, local meetup leadership activity, social media activism, web content, and more. After this presentation, you'll appreciate the full range of the activities that make an open source community strong, and learn how you can take part in the OpenStack community, as IBMers have. Finally, you'll have a chance to provide your feedback to guide IBM with its community activities, and have a starting point to get involved yourself.
Daniel Krook - Senior Certified IT Specialist
Manuel Silveyra - Senior Cloud Solutions Architect
Github Projects Overview and IBM Streams V4.1lisanl
Samantha Chan is the architect of the IBM Streams community. In her presentation, Samantha describes the Streams content available on GitHub, as well as how to get started with the key new features in IBM Streams V4.1.
Capella (once again) in space, meeting nanosatellitesObeo
Previously, Capella models (slightly extended by new features dedicated to system test specification) was used by the French Space Agency (CNES) to demonstrate that the current document-centric process could be improved. Applied on the “Space Variable Objects Monitor (SVOM)” operational use case, it helped the CNES in the definition and the validation of its future space system dedicated to the gamma ray detection and study. Proof being made, Kineis, created by the CNES and the CLS, reiterates the experience and continues to make it a strategic technology for science. Its current challenge is to add 25 state-of-the-art nano-satellites to the existing system to enhance IoT capabilities and address new markets. In line with the CNES Capella experience, Kinéis decided to build its “System Test” process on Capella. The extendibility and the flexibility of Capella nevertheless allowed them to carry on the previously initiated toolchain in order to cover the full process and support more use cases.
Jonathan Lasalle (Artal / Magellium)
- In charge of MBSE-related activities at Artal / Magellium
- Architect of the Citrus framework dedicated to model-based test mean engineering
3-2-1 Action! Running OpenStack Shared File System Service in ProductionSean Cohen
As OpenStack’s Shared File System Service is getting more and more adoption as one of top leading emerging projects in OpenStack deployments (according to the last OpenStack foundation user survey), we would like to share some of the key customers use cases such as DevOps, Containers and Enterprise Applications as well review the latest Newton release project updates towards delivering a production-grade deployments.
Slides from OpenStack Summit Barcelona,, October 25, 2016
Session video: https://www.youtube.com/watch?v=F5o-EbESNr8
Find out all about H1B visa lottery and how to improve your selection and approval.
Contact VisaPro at
http://www.visapro.com/Contact-VisaPro/default.asp if you have any questions regarding the H1B Cap 2016, or need help in filing the H1B applications.
Interactions 12 Redux - Beyond the screenJason Mesut
A redux of a number of talks at Interactions 12 that I saw connected by a theme of moving beyond the screen. Beyond the Natural User Interface. Beyond 'mobile.
Extensionen, Kontagionen und die Grenzen von BildungsprozessenBenjamin Jörissen
Tagung "Subjekt Bildung Medialität" der Sozietät Kunst Medien Bildung und des Theorieforums des Sektion Medienpädagogik der DGfE. Universität Köln, 23.3.2012. (Text in den Vortragsnotizen!)
Theses are the slides from a presentation made by Justgiving's head of client services, Tom Mansel, at the Institute of Fundraising's National Convention on July 9th 2008
Open a window, see the clouds - php|tek 2011Rafael Dohms
Is your application ready to take off into the cloud? What does this mean? What do you need to worry about? What frameworks and tools do you need to look at and what new concepts do you need to put in your PHP toolbox to prepare? Get acquainted with Microsoft Azure's platform and features, and discover what tools and frameworks are ready to benefit from this new paradigm.
ARMA IM Days "Open source and open standards"Cheryl McKinnon
Session delivered at ARMA IM Days - Ottawa /National Capital Region chapter event by Cheryl McKinnon. Outlines importance of open standards and open source for organizations who need to take control of their ECM/IM roadmap.
Find out all about H1B visa lottery and how to improve your selection and approval.
Contact VisaPro at
http://www.visapro.com/Contact-VisaPro/default.asp if you have any questions regarding the H1B Cap 2016, or need help in filing the H1B applications.
Interactions 12 Redux - Beyond the screenJason Mesut
A redux of a number of talks at Interactions 12 that I saw connected by a theme of moving beyond the screen. Beyond the Natural User Interface. Beyond 'mobile.
Extensionen, Kontagionen und die Grenzen von BildungsprozessenBenjamin Jörissen
Tagung "Subjekt Bildung Medialität" der Sozietät Kunst Medien Bildung und des Theorieforums des Sektion Medienpädagogik der DGfE. Universität Köln, 23.3.2012. (Text in den Vortragsnotizen!)
Theses are the slides from a presentation made by Justgiving's head of client services, Tom Mansel, at the Institute of Fundraising's National Convention on July 9th 2008
Open a window, see the clouds - php|tek 2011Rafael Dohms
Is your application ready to take off into the cloud? What does this mean? What do you need to worry about? What frameworks and tools do you need to look at and what new concepts do you need to put in your PHP toolbox to prepare? Get acquainted with Microsoft Azure's platform and features, and discover what tools and frameworks are ready to benefit from this new paradigm.
ARMA IM Days "Open source and open standards"Cheryl McKinnon
Session delivered at ARMA IM Days - Ottawa /National Capital Region chapter event by Cheryl McKinnon. Outlines importance of open standards and open source for organizations who need to take control of their ECM/IM roadmap.
CMPE 297 Lecture: Building Infrastructure Clouds with OpenStackJoe Arnold
Lecture for the San Jose State masters program on cloud computing. Topic focuses on using OpenStack to deploy infrastructure clouds with commodity hardware and open source software. Covers virtualization, networking, storage, deployment and operations.
Open Source and Open Standards for Information and Records ManagersCheryl McKinnon
Slides from the session "Open source and Open Standards - Next Generation for Enterprise Content Managemetn" - June 1, 2011 ARMA Information Management Symposium in Toronto. Delivered by Cheryl McKinnon, Candy Strategies.
Presentation on the current state of cloud computing and the role that open source, containers and microservices are playing in the cloud.
Presented to Florida Linux Users Exchange on April 9th, 2015
An overview of cloud computing for PHP developers.
This is a slightly updated version of my earlier 'PHP and the Cloud' slides, mostly to reflect my new company's layout.
Radisys, along with Orange and Strategy Analytics presented this webinar entitled: Radisys Makes ONAP Real for High Performance Services. The presenter team, Sue Rudd of SA, Al Balasco and Adnan Saleem of Radisys and Morgan Richomme of Orange covered topics such as: NFV and ONAP, Media Server 'readiness', Tier 1 challenges and finish up with some real-world use cases. For more on ONAP and how Radisys can get you ready, please contact us at: sales@radisys.com
Want to get an update on Nuxeo's involvement in semantic search and knowledge extraction? Watch this slideshow to hear all the latest news on this topic and learn how it may impact the future of Enterprise Content Management!
If you want to go further, watch the video of a webinar using this slideshow http://www.youtube.com/watch?v=YLgJKx1y6Fk
Reduce Third-Party Tool Dependencies in Your Test FrameworkTechWell
Have you found yourself forced to use outdated test tools because the cost to migrate was prohibitive? Have you abandoned or rewritten existing tests because it was easier (and cheaper) than migrating? With technology ever changing, most businesses struggle to keep up with producing high-quality products for the lowest price possible. And it is usually testers who suffer the most, as they are forced to use tools that are outdated, or no longer supported, because the company cannot afford the migration cost. Chris Mauck offers a new way to design your automation tests to reduce the third-party tool dependencies in your current test framework and significantly shorten the time required to migrate those tests in the future. Using real coding examples Chris explains the approach, design, and implementation. Learn a different way to structure your tests and how you can implement better coding practices across your team.
The Three Stages of Cloud Adoption - RightScale Compute 2013RightScale
Speaker: James Staten - VP and Principal Analyst, Forrester Research
As a RightScale user you are clearly a leading adopter of cloud computing, but have you matured your use of the cloud to the point that you are fully exploiting the advantages it provides? Most cloud users aren’t. In this session, Forrester Research VP and Principal Analyst James Staten will help you understand how to move from a cloud user to an optimizer to a profit maker as you progress your understanding of cloud economics and evolve your application design and deployment practices.
Data Center Networking: A Brave New World
Abstract: Data centers are changing the way networking is done. When the revolution is over, the landscape will be as altered as the server landscape was when the Lintel tsunami swept aside the vertically integrated server market of the late 90s. In this talk, we'll explore the ideas that underpin these changes, ideas that include modern network architectures, network overlays and network management.
Handling Service Orchestration in the Cloud for GlassFish - JavaOne, San Fran...Sivakumar Thyagarajan
Handling Service Orchestration in the Cloud
for GlassFish
Presentation in JavaOne, San Francisco, 2011
Speakers: Jagadish Ramu and Sivakumar Thyagarajan, Oracle Corporation.
--- Session details ----
Title: Handling Service Orchestration in the Cloud for GlassFish
Time: Thursday, 02:00 PM, Hilton San Francisco - Imperial Ballroom B
Length: 1 Hour
Abstract: A PaaS offering typically facilitates application deployment without the cost and complexity of managing infrastructure, by providing all of the facilities required to build and deliver services.
Current Java EE deployment models assume that the deployer provisions the various dependent services of an application. To support PaaS deployment scenarios, GlassFish is working to provide a simplified application provisioning and deployment interface to users, with the runtime handling the discovery of service dependencies, provisioning services, and associating service references with these services.
This session details how Java EE containers such as GlassFish can provide such service orchestration capabilities to PaaS application deployers.
Track: Enterprise Service Architectures and the Cloud
Optional Track: Java EE Web Profile and Platform Technologies
Experience Level: Advanced
--- Session details ----
[QCon London 2020] The Future of Cloud Native API Gateways - Richard LiAmbassador Labs
The introduction of microservices, Kubernetes, and cloud technology has provided many benefits for developers. However, the age-old problem of getting user traffic routed correctly to the API of your backend applications can still be an issue, and may be complicated with the adoption of cloud native approaches: applications are now composed of multiple (micro)services that are built and released by independent teams; the underlying infrastructure is dynamically changing; services support multiple protocols, from HTTP/JSON to WebSockets and gRPC, and more; and many API endpoints require custom configuration of cross-cutting concerns, such as authn/z, rate limiting, and retry policies.
A cloud native API gateway is on the critical path of all requests, and also on the critical path for the workflow of any developer that is releasing functionality. Join this session to learn about the underlying technology and the required changes in engineering workflows. Key takeaways will include:
A brief overview of the evolution of API gateways over the past ten years, and how the original problems being solved have shifted in relation to cloud native technologies and workflow
Two important challenges when using an API gateway within Kubernetes: scaling the developer workflow; and supporting multiple architecture styles and protocols
Strategies for exposing Kubernetes services and APIs at the edge of your system
Insight into the (potential) future of cloud native API gateways
https://qconlondon.com/london2020/presentation/future-cloud-native-api-gateways
Four considerations when monitoring microservicesJason Bloomberg
The adoption of microservices add a new layer of complexity to an already complex application environment. When application issues arise, it becomes difficult to pinpoint the source and, too often, you find yourself in lengthy war rooms or assigning experts to triage every issue. As a result, brand loyalty, customer satisfaction and innovation are negatively impacted. The old approach to monitoring application performance just isn’t working. A new approach is needed. In this session we will discuss four areas that you should consider which will change the way you think about monitoring microservices
These are the slides for a three hour primer for PHP developers. It covers the whole spectrum from the mobile web to apis for native apps, as well as topics such as generating QR codes and sending push notifications from PHP to android and apple devices.
Building an SSO platform in PHP (Zend Webinar Edition)Ivo Jansch
I did a Webinar for Zend on March 31st, 2011 about Single Sign On. In this presentation I covered openid, oauth and saml as suitable implementations for single sign on to web applications.
This talk was presented at the Daycamp 4 Developers 2 on March 5th, 2011. In this talk I talked about my experiences with telecommuting, and why it makes sense for businesses to allow developers to work remotely.
Updated version of my PHP in a mobile ecosystem talk. Looks at how PHP plays a role in the mobile world, and explains what php developers need to know about mobile development.
Presentation delivered at the PHPBenelux 2011 conference and the PHP UK conference 2011.
Building an SSO platform in php (Zendcon 2010)Ivo Jansch
A presentation explaining how to build Single Sign On functionality in PHP using standards such as OpenID, OAuth and SAML. Delivered on November 4, 2010 at Zendcon in Santa Clara
PHP in a Mobile Ecosystem (Zendcon 2010)Ivo Jansch
A look at PHP's role in mobile web and app development. Delivered at Zendcon 2010 on November 3, 2010.
If you like the content or want to give feedback or if you need help with any of the concepts mentioned here, contact me at egeniq.com.
Content Management Selection and StrategyIvo Jansch
A presentation I did at the IMS 2009 event in London, helping organizations define a content management system strategy and helping them with the selection of CMS systems.
Slides of the talk I did at Zendcon 09. It tells PHP developers what they need to know about the cloud and gives exampes of how to interact with cloud services and applications.
Dynamic Languages In The Enterprise (4developers march 2009)Ivo Jansch
Slightly more generic version of my 'Enterprise PHP' talk, adjusted for the 4developers conference's 'dedicated languages' track that features developers with different backgrounds.
SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdfPeter Spielvogel
Building better applications for business users with SAP Fiori.
• What is SAP Fiori and why it matters to you
• How a better user experience drives measurable business benefits
• How to get started with SAP Fiori today
• How SAP Fiori elements accelerates application development
• How SAP Build Code includes SAP Fiori tools and other generative artificial intelligence capabilities
• How SAP Fiori paves the way for using AI in SAP apps
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
UiPath Test Automation using UiPath Test Suite series, part 4DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap.
The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies.
Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques
What will you get from this session?
1. Insights into SAP testing best practices
2. Heatmap utilization for testing
3. Optimization of testing processes
4. Demo
Topics covered:
Execution from the test manager
Orchestrator execution result
Defect reporting
SAP heatmap example with demo
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Albert Hoitingh
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™UiPathCommunity
In questo evento online gratuito, organizzato dalla Community Italiana di UiPath, potrai esplorare le nuove funzionalità di Autopilot, il tool che integra l'Intelligenza Artificiale nei processi di sviluppo e utilizzo delle Automazioni.
📕 Vedremo insieme alcuni esempi dell'utilizzo di Autopilot in diversi tool della Suite UiPath:
Autopilot per Studio Web
Autopilot per Studio
Autopilot per Apps
Clipboard AI
GenAI applicata alla Document Understanding
👨🏫👨💻 Speakers:
Stefano Negro, UiPath MVPx3, RPA Tech Lead @ BSP Consultant
Flavio Martinelli, UiPath MVP 2023, Technical Account Manager @UiPath
Andrei Tasca, RPA Solutions Team Lead @NTT Data
PHP Frameworks: I want to break free (IPC Berlin 2024)Ralf Eggert
In this presentation, we examine the challenges and limitations of relying too heavily on PHP frameworks in web development. We discuss the history of PHP and its frameworks to understand how this dependence has evolved. The focus will be on providing concrete tips and strategies to reduce reliance on these frameworks, based on real-world examples and practical considerations. The goal is to equip developers with the skills and knowledge to create more flexible and future-proof web applications. We'll explore the importance of maintaining autonomy in a rapidly changing tech landscape and how to make informed decisions in PHP development.
This talk is aimed at encouraging a more independent approach to using PHP frameworks, moving towards a more flexible and future-proof approach to PHP development.
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
A tale of scale & speed: How the US Navy is enabling software delivery from l...sonjaschweigert1
Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved:
- Reduction in onboarding time from 5 weeks to 1 day
- Improved developer experience and productivity through actionable findings and reduction of false positives
- Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO)
Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production.
We will cover:
- How to remove silos in DevSecOps
- How to build efficient development pipeline roles and component templates
- How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence)
- How to streamline operations with automated policy checks on container images
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
13. Clouds According to NIST
“Cloud computing is a model for enabling convenient, on-demand
network access to a shared pool of configurable computing
resources that can be rapidly provisioned and released with
minimal management effort or service provider interaction.
This cloud model promotes availability and is composed of five
essential characteristics, three service models, and four
deployment models.”
National Institute of Standards and Technology
http://csrc.nist.gov/groups/SNS/cloud-computing/
7
Wednesday, May 25, 2011
14. NIST: Five Characteristics
Things that are considered cloud:
‣ On-demand, self-service
‣ Broad network access
‣ Resource pooling
‣ Rapid elasticity
‣ Measured service
8
Wednesday, May 25, 2011
15. NIST: Three Service Models
Cloud applications are:
‣ Software as a Service
‣ Platform as a Service
‣ Infrastructure as a Service
9
Wednesday, May 25, 2011
16. NIST: Four Deployment Models
‣ Private cloud
‣ Community cloud
‣ Public cloud
‣ Hybrid cloud
10
Wednesday, May 25, 2011
18. Application Layers
Standard layers in a typical application:
Application
System Software
Storage
Operating System
Hardware
Network
12
Wednesday, May 25, 2011
19. Infrastructure as a Service
Parts of the infrastructure offered as service to your app:
Application
System Software
Storage
Operating System
Hardware
Network
13
Wednesday, May 25, 2011
20. Infrastructure as a Service
‣ Advantages:
• Easily scalable
• Move from capital expense to operational expense
• Metered use
• Don’t worry about hardware
14
Wednesday, May 25, 2011
21. Example: The Rackspace Cloud
‣ The RackspaceCloud is what used to be called Mosso
‣ Powerful API for managing your cloud
‣ Easy access in PHP through Aleksey Korzun’s PHP API:
• http://github.com/AlekseyKorzun/php-cloudservers
‣ Concepts
• Images (various operating systems)
• Flavors (configuration: mem, cpu, disk)
15
Wednesday, May 25, 2011
24. IaaS Architecture
Prepare your app to run on IaaS
18
Wednesday, May 25, 2011
25. Horizontal Scalability
‣ If you run your app on multiple servers today, would it work?
‣ Typical problem areas:
• Sessions
• Files
19
Wednesday, May 25, 2011
26. Horizontal Scalability
‣ Danga - http://www.danga.com/
• People behind LiveJournal / SixApart
• Creators of tools to help make software horizontally scalable
• Memcache - distributed caching, session clustering
‣ http://github.com/andreiz/php-memcached
• MogileFS - distributed file storage
‣ http://projects.usrportage.de/index.fcgi/php-mogilefs
• Gearman - distributed parallel job processing / message queue
‣ http://pecl.php.net/package/gearman/
20
Wednesday, May 25, 2011
32. Abstraction
‣ Con:
• Common denominator functionality
24
Wednesday, May 25, 2011
33. Abstraction
‣ Con:
• Common denominator functionality
• Adds some overhead
24
Wednesday, May 25, 2011
34. Abstraction
‣ Con:
• Common denominator functionality
• Adds some overhead
‣ Pro:
• Reduce vendor lock-in
24
Wednesday, May 25, 2011
35. Abstraction
‣ Con:
• Common denominator functionality
• Adds some overhead
‣ Pro:
• Reduce vendor lock-in
• Save development time
24
Wednesday, May 25, 2011
36. Abstraction
‣ Con:
• Common denominator functionality
• Adds some overhead
‣ Pro:
• Reduce vendor lock-in
• Save development time
• No need to learn different APIs
24
Wednesday, May 25, 2011
37. Abstraction
‣ Con:
• Common denominator functionality
• Adds some overhead
‣ Pro:
• Reduce vendor lock-in
• Save development time
• No need to learn different APIs
• Promotes competition between providers
24
Wednesday, May 25, 2011
38. Abstraction
‣ Zend’s SimpleCloud
• http://simplecloud.org
• Good attempt at generic cloud abstraction
25
Wednesday, May 25, 2011
40. Platform as a Service
Complete platform offered as a service:
Application
System Software
Storage
Operating System
Hardware
Network
27
Wednesday, May 25, 2011
42. Rackspace’s TrueHybrid
‣ Platform selects the best operating system for your site
‣ Magically blends Windows and Linux, ASP.NET and PHP
29
Wednesday, May 25, 2011
44. Other Platforms for PHP
‣ PHPFog
• http://phpfog.com
‣ Orchestra.io
30
Wednesday, May 25, 2011
45. Other Platforms for PHP
‣ PHPFog
• http://phpfog.com
‣ Orchestra.io
• http://orchestra.io
‣ Both are PaaS cloud platforms for PHP apps
30
Wednesday, May 25, 2011
46. Other Platforms for PHP
‣ PHPFog
• http://phpfog.com
‣ Orchestra.io
• http://orchestra.io
‣ Both are PaaS cloud platforms for PHP apps
• Relatively young, look very promising
30
Wednesday, May 25, 2011
47. Other Platforms for PHP
‣ PHPFog
• http://phpfog.com
‣ Orchestra.io
• http://orchestra.io
‣ Both are PaaS cloud platforms for PHP apps
• Relatively young, look very promising
‣ Google AppEngine
30
Wednesday, May 25, 2011
48. Other Platforms for PHP
‣ PHPFog
• http://phpfog.com
‣ Orchestra.io
• http://orchestra.io
‣ Both are PaaS cloud platforms for PHP apps
• Relatively young, look very promising
‣ Google AppEngine
• http://code.google.com/appengine/
30
Wednesday, May 25, 2011
49. Other Platforms for PHP
‣ PHPFog
• http://phpfog.com
‣ Orchestra.io
• http://orchestra.io
‣ Both are PaaS cloud platforms for PHP apps
• Relatively young, look very promising
‣ Google AppEngine
• http://code.google.com/appengine/
• Python/Java only, but PHP support through Quercus
30
Wednesday, May 25, 2011
53. Software as a Service
‣ Complete applications or application components
33
Wednesday, May 25, 2011
54. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
33
Wednesday, May 25, 2011
55. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
33
Wednesday, May 25, 2011
56. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
• Gmail
33
Wednesday, May 25, 2011
57. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
• Gmail
• Google Apps (office apps, calendar, email)
33
Wednesday, May 25, 2011
58. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
• Gmail
• Google Apps (office apps, calendar, email)
• Salesforce for CRM
33
Wednesday, May 25, 2011
59. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
• Gmail
• Google Apps (office apps, calendar, email)
• Salesforce for CRM
‣ Often built on IaaS
33
Wednesday, May 25, 2011
60. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
• Gmail
• Google Apps (office apps, calendar, email)
• Salesforce for CRM
‣ Often built on IaaS
• Dropbox file sharing (makes use of Amazon S3 for storage)
33
Wednesday, May 25, 2011
61. Software as a Service
‣ Complete applications or application components
‣ Popular phrase: “We are moving our ... to the cloud”
‣ Examples:
• Gmail
• Google Apps (office apps, calendar, email)
• Salesforce for CRM
‣ Often built on IaaS
• Dropbox file sharing (makes use of Amazon S3 for storage)
• Jungledisk backups (same)
33
Wednesday, May 25, 2011
62. Example: Salesforce
‣ Gives access to all your data in Salesforce using SOAP
‣ PHP library available
‣ Documentation abundant
• http://developer.force.com/
‣ Salesforce was SaaS way before term ‘cloud’ was coined
‣ Most developer friendly SaaS
• Documentation
• Sandbox functionality (paid)
34
Wednesday, May 25, 2011
63. Example: Salesforce
Source adapted from tutorial at http://www.mikesimonds.com
35
Wednesday, May 25, 2011
69. General SaaS suggestions
‣ Want to work with X from PHP?
• Google ‘X php api’ or ‘X php tutorial’
37
Wednesday, May 25, 2011
70. General SaaS suggestions
‣ Want to work with X from PHP?
• Google ‘X php api’ or ‘X php tutorial’
• You’re almost never the first to want to work with it
37
Wednesday, May 25, 2011
71. General SaaS suggestions
‣ Want to work with X from PHP?
• Google ‘X php api’ or ‘X php tutorial’
• You’re almost never the first to want to work with it
37
Wednesday, May 25, 2011
72. General SaaS suggestions
‣ Want to work with X from PHP?
• Google ‘X php api’ or ‘X php tutorial’
• You’re almost never the first to want to work with it
‣ Interesting finding: Cloud apps are easier to work with than
most desktop/noncloud apps.
37
Wednesday, May 25, 2011
73. The ‘Warcraft Effect’
Clouds are living entities that change when you’re not looking
38
Wednesday, May 25, 2011
76. Creating SaaS
‣ Building a single application for multiple users/customers
40
Wednesday, May 25, 2011
77. Creating SaaS
‣ Building a single application for multiple users/customers
‣ Things to pay attention to:
• Reliability (one customer getting in the way of another)
• Security (competitors seeing each other’s data)
• Deployment
40
Wednesday, May 25, 2011
78. Multi-Tenancy evolution
Source: http://msdn.microsoft.com/en-us/library/aa479069.aspx
41
Wednesday, May 25, 2011
86. Summary
‣ What is the Cloud?
48
Wednesday, May 25, 2011
87. Summary
‣ What is the Cloud?
• The cloud = IaaS + PaaS + SaaS
48
Wednesday, May 25, 2011
88. Summary
‣ What is the Cloud?
• The cloud = IaaS + PaaS + SaaS
‣ If you have trouble remembering:
48
Wednesday, May 25, 2011
89. Summary
‣ What is the Cloud?
• The cloud = IaaS + PaaS + SaaS
‣ If you have trouble remembering:
• Cloud = Platform, Infrastructure & Software as a Service
48
Wednesday, May 25, 2011
90. Summary
‣ With your next PHP application:
• See if you can run it on a Cloud Platform
• See if you can run parts on Cloud Infrastructure
• See if you can use Software as a Service components
• See if you can offer it as a service
• Keep your architecture ‘cloud ready’
‣ Think about clouds!
• In a couple of years, we’ll all be doing it
49
Wednesday, May 25, 2011
91. Food for Thought
Let’s leave you with something to think about
50
Wednesday, May 25, 2011
92. Food for Thought
Are you worried about this?
Cloud
Cloud
Provider
Where’s my
data?!
51
Wednesday, May 25, 2011
93. Food for Thought
Then what about this?
Financial System
Bank
Where’s my
money?!
52
Wednesday, May 25, 2011
94. Food for Thought
Then what about this?
Financial System
Bank
Where’s my
money?!
Our money has been in the cloud since the 18th century!
52
Wednesday, May 25, 2011
96. Credits
Pictures used (under Creative Commons Attribution licenses)
Cloud (slide 3):
http://flickr.com/photos/kables/6324973/
Rubber Band Man:
http://flickr.com/photos/thenovys/3791884189/
Clipart used (royalty free and public domain)
http://www.clker.com/
Wednesday, May 25, 2011