Chapter 6 The Cloud · PDF file · 2014-07-226-42 PaaS Services at AllRoad...
Transcript of Chapter 6 The Cloud · PDF file · 2014-07-226-42 PaaS Services at AllRoad...
The Cloud
Chapter 6
6-2
“No, I mean 25 cents an hour . . . and probably less.”
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
• Uses a traditional, third-party hosting organization whose servers
most certainly are not elastic.
• Web hosting costs rising rapidly.
• Lucas suggests provisioning Web servers and databases in the
cloud.
• Costs: $50/mo plus 25-cents per hour for processing time used.
• Need to store new, large 3D printing design files.
• Storage requirement depends on sales volume.
6-3
Study Questions
Q1: Why is the cloud the future for most organizations?
Q2: What network technology supports the cloud?
Q3: How does the cloud work?
Q4: How do organizations use the cloud?
Q5: How can AllRoad Parts use the cloud?
Q6: How can organizations use cloud services securely?
Q7: 2024?
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-4
Q1: Why Is the Cloud the Future for Most
Organizations?
• The cloud
– Elastic leasing of pooled computer resources over the
Internet.
– Elastic
Leased computing resources quickly increased or
decreased dynamically, programmatically,
organizations only pay for resources used.
– Flexibility for unpredictable demand while limiting financial
risks.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-5
Example of a Video Banner Ad Customer
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-6
Pooled
• Cloud resources are pooled
– Many different organizations share same physical
hardware through virtualization.
• Benefit from economies of scale
– Average cost of production decreases as size of
operation increases.
– Major cloud vendors operate enormous Web farms.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-7
• Apple Data
Center in
Maiden, NC
Billion-dollar
facility contains
more than
500,000 sq ft
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-8
Why Is the Cloud Preferred to In-House Hosting?
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-9
Why Is the Cloud Preferred to In-House Hosting?
(cont'd)
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-10
Why Now?
• Been around since 1960s
– Time-sharing vendors provided slices of computer time on a
use-fee basis.
• Cloud-based hosting advantageous
– Cheap processors, data communication, data storage nearly
free.
– Virtualization technology enables near instantaneous creation
of new virtual machine.
– Internet-based standards enable cloud-hosting vendors to
provide flexible, standardized processing capabilities.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-11
When Does the Cloud Not Make Sense?
• When, by law or standard industry practice, required to have
physical control over its data.
• Financial institution might be legally required to maintain
physical control over its data.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-12
Ethics Guide: Cloudy Profit?
• Data broker (or data aggregator).
• Specializes in acquiring and analyzing market, buyer, and
seller data for real estate agents.
• Alliance transitioned data storage and processing from own
Web farm to the cloud.
• Improved speed and quality of data services at fraction of
prior costs, cut in-house hardware support staff by 65%.
• Plowing money back into R&D.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-13
Q2: What Network Technology Supports the Cloud?
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-14
Typical Small
Office/Home
Office
(SOHO) LAN
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-15
LAN Protocol
•IEEE 802.3
– Wired LAN
– 10/100/1000 Mbps
– Ethernet
•IEEE 802.11
– Wireless LAN
– 802.11n
– Up to 600 Mbps
– Bluetooth
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-16
Abbreviations Used for Communications and
Computer Memory Speeds Differ.
• Communications equipment, k stands for 1,000, not 1,024
as it does for memory.
• M stands for 1,000,000, not 1,024 × 1,024.
• G stands for 1,000,000,000, not1,024 × 1,024 × 1,024. Thus,
100 Mbps is 100,000,000 bits per second.
• Communications speeds are expressed in bits, memory
sizes expressed in bytes.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-17
Connecting Your LAN to the Internet
Important ISP functions:
1.Provide a legitimate Internet address.
2.Gateway to the Internet.
3.Pay for Internet by collecting money from customers and
paying access fees and other charges to telecoms.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-18
Summary of LAN and WAN Networks
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-19
Q3: How Does the Cloud Work?
The cloud resides
in the Internet
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-20
TCP and IP Protocols
• Transmission Control Protocol (TCP)
– Breaks traffic up into packets and send each one along.
• IP (Internet Protocol).
• Routers.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-21
IP Addressing
Public IP Addresses
• Identifies particular device on public Internet.
• Public IP addresses unique, worldwide.
• Assignment controlled by ICANN (Internet Corporation for Assigned Names and Numbers).
Private IP Addresses
• Identifies particular device on a private network.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-22
IP Addressing (cont'd)
Major benefits
• Public IP
– Devices on LAN share a public IP address.
• Private IP
– Need not register computer with ICANN-approved
agencies.
– Assignment controlled within the LAN.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-23
Public IP Addresses and Domain Names
• IPv4
– Four decimal dotted notation like 165.193.123.253
• Domain name
– Worldwide-unique name affiliated with a public IP address.
– Affiliation of domain names with IP addresses is dynamic.
•URL (Uniform Resource Locator)
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-24
Domain Registrar Company
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-25
Sample of Commerce Server Pages; Product Offer
Pages
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-26
Three-tier Architecture
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-27
Watch the Three Tiers in Action! Sample of Commerce
Server Page
• Commerce server requests shoe’s data from
DBMS.
• DBMS reads from database then returns data to
commerce server.
• Server formats Web page with data and sends
html version of page to user’s computer.
• Customer places items in shopping cart.
• Customer checks out, commerce server
program processes payment, schedules
inventory processing, arranges shipping.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-28
Approval Request Interactions Among Three
Departments
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-29
Services for the Credit Department Using SOA
Principles
• CheckCustomerCredit
– ApproveCustomerCredit
• For the Inventory Department
– VerifyInventoryAmount
– AllocateInventory
– ReleaseAllocatedInventory
• Each department formally states data that it expects to receive with the
request and data it promises to return in response. Every interaction is
done exactly the same way.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-30
Services for the Credit Department Using SOA
Principles (cont'd)
• Requests emailed to a generic email address in Credit or
Inventory, and those departments decide who will process
the request and how it will be processed.
• SOA terms, work of the department encapsulated in the
department.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-31
SOA for Three-tier Architecture
Services
• ObtainPartData
• ObtainPartImages
• ObtainPartQuantityOnHand
• OrderPart
• JavaScript written to
invoke these services
correctly.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-32
Protocols Supporting Web Services
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-33
WSDL, SOAP, XML, and JSON
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-34
Example XML Document
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-35
Example JSON Document
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-36
Q4: How Do Organizations Use the Cloud?
Three Fundamental Cloud Types
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-37
Content Delivery Networks from Cloud Vendors
• Content delivery network (CDN)
– System of hardware and software stores user data in
many different geographical locations and makes data
available on demand.
– Provides specialized type of PaaS, but usually
considered in its own category.
– Minimize latency.
– Often used to store and deliver content seldom changes.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-38
CDN Benefits
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-39
Server Locations for Amazon’s CloudFront
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-40
Web Services Principles Applied to Inventory
Applications
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-41
Q5: How Can AllRoad Parts Use the Cloud?
• Some SaaS products AllRoad could use
– Google Mail
– Google Drive
– Office 365
– Salesforce.com
– Microsoft CRM OnLine
– And many others
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-42
PaaS Services at AllRoad
• Lease EC2 (Elastic Cloud 2) from Amazon.com
– Amazon.com pre-install Linux or Windows Server on cloud
hardware.
– AllRoad installs own software.
– Could license a DBMS, say SQL Server from Microsoft, and place
on an EC2 Windows Server instance.
• Use Windows Servers with SQL Server already installed from Microsoft
Azure cloud offerings.
• Use a CDN to distribute content worldwide and respond to leads
generated from advertising.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-43
Amazon DBMS products with EC2
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-44
IaaS Services at AllRoad
• Provides basic hardware in the cloud.
• Some companies acquire servers this way to load operating
systems on.
• Requires considerable technical expertise and management
not available in small company.
• Data storage services elastically available.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-45
Q4: How Can Organizations Use Cloud Services
Securely?
Remote Access Using VPN: Actual Connections
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-46
Remote Access Using VPN: Apparent Connection
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-47
Private Cloud for Inventory and Other Applications
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-48
Accessing Private Cloud over a Virtual Private
Network
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-49
Using A Virtual Private Cloud
Subset of a
Public Cloud
With Highly
Restricted,
Secure Access
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-50
Using MIS Inclass 6: What, Exactly, Does That
Standard Mean ???
• ISO 27001 - What does it mean?
• What's purpose of this standard
• Does Microsoft Azure comply with ISO 27001?
• Does Amazon’s EC2 comply with ISO 27001?
• Is Microsoft in accordance with SAS 70?
• Is Amazon in accordance with SAS 70?
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-51
Q7: 2024
• Cloud services faster, more secure, easier to use, cheaper.
• Fewer organizations set up own computing infrastructure.
• More pooling of servers across organizations.
• More economies of scale achieved by cloud vendors.
• Individuals, small businesses, large organizations readily
obtain elastic resources at a very low cost.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-52
Q7: 2024 (cont'd)
• Large server farms employing few employees reduces
number of small companies that install and maintain in-
house email exchange and other servers, and jobs.
• Cheap and elastic cloud services enable new small startups.
• Enable organizations to develop more information systems,
cheaply and quickly, and increase demand for employees
who know how to use and manage information systems.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-53
Q7: 2024 (cont'd)
• Foster new categories of work.
• Mobile systems will be standard.
• More remote action systems
– Telediagnosis
– Telesurgery
– Telelaw enforcement
– Drones and other military equipment.
– Live remote digital broadcasting.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-54
Security Guide: You Said What? About Me? In Class?
• Packet sniffing on networks, especially public wireless
networks, is always a possibility and can be done by people
outside the room that you don’t even see.
• Never send sensitive data except in an https or other
encrypted connection.
• Never send anything over a public network that you wouldn’t
be proud to have published the next day.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-55
Guide: Is It Spying or Just Good Management
• 92% of employers monitor employees’ email, telephone, and
Internet use (2003) by using:
– Key loggers
– Log files
– Packet sniffers
– Text mining
• First Amendment preserves your free speech regarding
laws.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-56
Active Review
Q1: Why is the cloud the future for most organizations?
Q2: What network technology supports the cloud?
Q3: How does the cloud work?
Q4: How do organizations use the cloud?
Q5: How can AllRoad Parts use the cloud?
Q6: How can organizations use cloud services securely?
Q7: 2024
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-57
Case Study 6: FinQloud Forever … Well, At Least For
The Required Interval …
• 1937, Securities and Exchange Commission (SEC) set out
rules that required securities brokers' records to be stored on
media that cannot be altered.
• 2003, SEC interpreted rule to enable storage of records on
read-write medium, provided it included software to prohibit
data alteration.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-58
Components of the FinQloud System
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-59
FinQloud Forever … (cont'd)
• Excludes extrinsic controls--authentication, passwords, and
manual procedures because possible for such systems to
overwrite records.
• Meets requirements of SEC’s Rule17a-3) and similar rule set
out by Commodities Futures Trading Commission, when
properly configured.
C o p y r i g h t © 2 0 1 5 P e a r s o n E d u c a t i o n , I n c .
6-60