Welcome!

@DevOpsSummit Authors: Elizabeth White, Zakia Bouachraoui, Liz McMillan, Pat Romanski, Roger Strukhoff

Related Topics: Containers Expo Blog, @CloudExpo, Cloud Security

Containers Expo Blog: Article

Clouds for the Enterprise Security & Performance

Enterprise Clouds - Part 1

Cloud Security Journal

The intent of the blogs is to provide the thought leadership for readers seeking to create a sound strategy for exploiting cloud computing for the enterprise.

Foundational principles of enterprise-class clouds

  • To create a real-time enterprise, firms must assemble an IT operation that executes as the business behaves: on demand, ad-hoc and predictable calendar events
  • The IT delivery model must accommodate an as-needed/when-needed set of capabilities that deliver information, processing, and collaboration in an on-demand manner
  • Operational risk cannot be sacrificed in pursuit of this on-demand IT delivery
  • IT is a supply chain of applications, information, content, infrastructure, and facilities
  • Sourcing of the IT supply chain can be multidimensional: acquisition, management, and component-level sourcing. For example,
    1. Management level: Built internal, bought external/hosted internal, bought external/hosted external
    2. Component level: Infrastructure can be supplemented externally, the development platform can be provided externally, the application and infrastructure can be provided externally
    3. Acquisition: Can be capitalized, opex funded, variable usage expensed, or fixed contract expensed

Part 1: Security and performance
Lessons from Wall Street IT should be incorporated into your enterprise cloud strategy plans. Security and performance in a cloudlike delivery model have been hardened into best practices on Wall Street for some time. The insatiable demand for instantaneous data, rapid decision support, and microsecond latency all happening in the intermediary cloud trading exchanges provides a reference framework that can be repeated in any firm across any industry -- today!

Based on this, we can take from Wall Street three fundamental building blocks for enterprise class security in the cloud as:

  • Access/trust acceptance/policy enforcement
  • Data transfer security
  • Data protection across multitenancy environments

In these terms, two companies (Cisco and Unisys) are providing these capabilities out of the box today.

In building private/trusted cloud models, we learned how to create both a secure and robust delivery channel in the cloud by leveraging Cisco technology. By decomposing the workload transaction lifecycle from the external data sources and market connectivity to traders or trading systems, we were able to identify performance and security design related issues across the transaction path operating through the cloud.

To accommodate this, we incorporated a software/hardware infrastructure ensemble of capabilities from Cisco. By leveraging Cisco Policy Manager and Cisco ACE appliances, we were able to create a trust acceptance channel where CRUD policies and business entitlement could be enforced at wire speed in microseconds. The relevance to the cloud is this is a DMZ zone building block that can be established as an intermediation point for enterprises and the cloud. It creates a cloud intermediary solution that both protects with regulatory granularity and enables performance. (Side note: This model can be used inside the firewall that operates across business units where access, control, and performance are critical for a private cloud delivery model.)

The other lesson we learned is the transfer and access of highly confidential data in a shared environment/multitenant cloud model requires advanced encryption in a performance-oriented capability. Unisys is a firm we collaborate with that provides software technology and integration expertise that scrambles data packets being transferred or in motion and scrambles associated data in a multitenant stored environment with advanced encryption and compression to ensure both performance and security.

The technology enables Unisys to uniquely provide to firms a hybrid solution of cloud management capabilities with a secure IAAS cloud model that allows firms to rapidly leverage cloudlike delivery models.

These technologies and capabilities have been available for some time. The key takeaway from above is for anyone tasked with building cloud models for the enterprise; there are proven technologies and approaches that can be leveraged today in building enterprise-class clouds.

The next blog in this series will focus on the lifecycle management capabilities, and operating model that firms need to incorporate into their enterprise coud strategy to be successful.

More Stories By Tony Bishop

Blueprint4IT is authored by a longtime IT and Datacenter Technologist. Author of Next Generation Datacenters in Financial Services – Driving Extreme Efficiency and Effective Cost Savings. A former technology executive for both Morgan Stanley and Wachovia Securities.

@DevOpsSummit Stories
The platform combines the strengths of Singtel's extensive, intelligent network capabilities with Microsoft's cloud expertise to create a unique solution that sets new standards for IoT applications," said Mr Diomedes Kastanis, Head of IoT at Singtel. "Our solution provides speed, transparency and flexibility, paving the way for a more pervasive use of IoT to accelerate enterprises' digitalisation efforts. AI-powered intelligent connectivity over Microsoft Azure will be the fastest connected path for IoT innovators to scale globally, and the smartest path to cross-device synergy in an instrumented, connected world.
There are many examples of disruption in consumer space – Uber disrupting the cab industry, Airbnb disrupting the hospitality industry and so on; but have you wondered who is disrupting support and operations? AISERA helps make businesses and customers successful by offering consumer-like user experience for support and operations. We have built the world’s first AI-driven IT / HR / Cloud / Customer Support and Operations solution.
ScaleMP is presenting at CloudEXPO 2019, held June 24-26 in Santa Clara, and we’d love to see you there. At the conference, we’ll demonstrate how ScaleMP is solving one of the most vexing challenges for cloud — memory cost and limit of scale — and how our innovative vSMP MemoryONE solution provides affordable larger server memory for the private and public cloud. Please visit us at Booth No. 519 to connect with our experts and learn more about vSMP MemoryONE and how it is already serving some of the world’s largest data centers. Click here to schedule a meeting with our experts and executives.
Codete accelerates their clients growth through technological expertise and experience. Codite team works with organizations to meet the challenges that digitalization presents. Their clients include digital start-ups as well as established enterprises in the IT industry. To stay competitive in a highly innovative IT industry, strong R&D departments and bold spin-off initiatives is a must. Codete Data Science and Software Architects teams help corporate clients to stay up to date with the modern business digitalization solutions. Achieve up to 50% early-stage technological process development cost cutdown with science and R&D-driven investment strategy with Codete's support.
As you know, enterprise IT conversation over the past year have often centered upon the open-source Kubernetes container orchestration system. In fact, Kubernetes has emerged as the key technology -- and even primary platform -- of cloud migrations for a wide variety of organizations. Kubernetes is critical to forward-looking enterprises that continue to push their IT infrastructures toward maximum functionality, scalability, and flexibility. As they do so, IT professionals are also embracing the reality of Serverless architectures, which are critical to developing and operating real-time applications and services. Serverless is particularly important as enterprises of all sizes develop and deploy Internet of Things (IoT) initiatives.