Understanding Virtualization Introduction

Basic computing is always bound by its limitations, usually physical. You can only store as much data as you have capacity to hold the data. The number of nodes data must pass through on the network will slow down the transmission speed. The bandwidth of the connection will restrict how much data can be passed. While these limitations have been present, computer technologies are constantly striving to break through these limitations. While some achievements are simple, such as adopting fiber optics to expand the bandwidth, other achievements seem complex. Virtualization is a technique used to overcome limitations across multiple aspects of computing. While it may seem complex in implementation, virtualization is actually simple in concept.

What is Virtualization? Virtualization, in its broadest sense, is the emulation of one or more workstations/servers within a single physical computer. It is the emulation of hardware within a software platform.

A simplified timeline of the emergence of virtualized technology since the IBM mainframe in Virtualization is not only limited to the simulation of entire machines. What is Virtualization? ’s1999 IBM Mainframe X86 PC - LAN VMWare For X86 PC’s

Growth The massive growth in the use of computer technology created new IT demands as well as problems.

How does Virtualization work? 70% 53% 45% 84% 100TB Volumes 300TB Volume 56%

How does Virtualization work? RESOURCE User Interface Virtual Resource ATTACK Flow of Information

How does Virtualization work? DATA Processing Manager Processor A Processor B Processor C Processor D

Virtualization – Goals & Objectives Increase usage of hardware resources Reduce management of resource costs Improve business flexibility Improve security and reduce downtime

Virtualization – Some Benefits Easier manageability Elimination of compatibility issues Fault isolation Increased security

Virtualization – Even More Benefits Rapid deployment Portability Ability to separate applications Problem-free testing More efficient use of resources Reduced costs

Considerations Virtualization is usually a technique applied in larger solutions, such as: – Storage – Parallel Processing – Cloud Computing – Big Data – Mobile Computing How virtualization is applied will reap different benefits.

Standards and Guidelines Several standards of interest in virtualization are: – Open Virtualization Format (OVF) – PCI DSS Virtualization Guidelines – NIST SP Full Virtualization Security Guidelines – SNIA Standards and Education

Hypervisor The hypervisor is the workhorse of full virtualization. It performs five key activities: Partitioning Isolation Encapsulation Load Balancing Fault Tolerance

Moving to Virtualization 1. Define what virtualization technologies will be used. 2. Evaluate the risks associated with desired virtualization technologies. 3. Understand the impact to computing environment. 4. Secure physical assets and hypervisor. 5. Isolate/restrict admin access and functions.

Managing Processes The following service management processes would most likely be impacted by the use of virtualization: Capacity Management Availability Management IT Continuity Management Configuration Management

Understanding Cloud Computing Introduction

Cloud computing is a technology available because of the advancements of other technologies, such as Web 2.0, virtualization, and service-oriented architectures. Cloud computing encompasses any web-based on- demand utility service. The scope and opportunity of cloud computing is still being defined, though some recognized characteristics have become prevalent.

What is Cloud Computing?

NIST Definition of Cloud Computing Cloud Computing encompasses: Four Deployment Methods Three Service Models Five Essential Characteristics

Deployment Models Public Clouds Community Clouds Private Clouds Hybrid Clouds

Service Models Infrastructure as a Service Platform as a Service Software as a Service

Essential Characteristics On-demand self-service Broad network access Resource pooling Rapid elasticity Measured service

Cloud Services SaaS— Software as a Service BaaS—Business as a Service OaaS—Organization as a Service DaaS—Data as a Service SaaS – Storage as a Service PaaS—Platform as a Service FaaS—Framework as a Service IDaaS— Identity as a Service IaaS – Infrastructure as a Service

What is SaaS? SaaS changes the way software applications are stored and accessed. Through SaaS, software applications and services can be accessed by remote users via the Internet. SaaS = Software-as-a-Service

SaaS Checklist There are four basic points common to every SaaS implementation. Software applications or services are owned, delivered, and managed by a service provider. The location of the application and required resources are transparent to the user. Users can access these services or software applications using a web browser or program interface. The user only pays for the resources they use when accessing the application.

Categories of SaaS Business-Oriented Services Software solutions to companies or enterprises Software is offered on a subscription-basis and costs are attributed to actual usage Example: Product Mgmt. services or customer relations applications Customer-Oriented Services Software solutions to the individual, generally the public Software is offered on a subscription basis or offered free Example: Web-based services

What is a Platform? A platform is a system that can be reprogrammed and customized by outside developers. An application is a system that cannot be reprogrammed by outside developers.

Platform Layers Do It Yourself Managed Hosting Cloud Hosting Cloud IDEs Cloud Application Builders

Multi- tenancy Methodology tools Analysis and Design Tools Build Tools and SDKs Workflow and Integration Tools Testing Tools Deployment Tools Ported Cloud Application Native Cloud Application Cloud Development Stack Metering and Analytics Cloud Applications Infrastructure Services Administration Virtualization Security DBMS Access Storage Other Services Developer Services Middleware Services

Why use Cloud Computing? Financial Capital vs. operational expenditures Pay-as-you-go features Reduced IT management costs Financial Capital vs. operational expenditures Pay-as-you-go features Reduced IT management costs Internal Transfer of risk Business without walls Better security Internal Transfer of risk Business without walls Better security Innovation Environmental Sharing resources Green IT Innovation Environmental Sharing resources Green IT Technological Adoption of emerging technologies Rapid Scalability Access Anywhere Insurance against future Technological Adoption of emerging technologies Rapid Scalability Access Anywhere Insurance against future Competitive Advantage

Considerations regarding Clouds Using cloud computing is dependent on the organization itself and their relationship to computing: – Is the organization a user or provider of IT services? – Does the organization have a steady demand on IT or is the demand seemingly uncontrolled in a business year? – Does the organization have business processes which utilize sensitive or restricted data or information?

Effectively using Cloud Services Supporting a well-defined business function or process activity. – Functions include , calendars, customer relationship management, and enterprise resource management. – Activities include data analysis, data storage, transaction management, and identity management. Plan-Do-Check-Act

Standards for Cloud Computing The aforementioned NIST definition for Cloud Computing is the only internationally recognized “standard” for cloud computing, though several groups are working to create standards, such as DMTF, OMG, SNIA, and ETSI. IEEE has announced two working groups to create standards related to: – P2301 – Cloud Interoperability and Portability Profiles – P2302 – Intercloud Interoperability and Federation

Moving Forward Use the document, Developing Virtualization and Cloud Computing Capabilities, to determine and act on your organization’s requirements regarding these two technologies and how to effectively use the aids and templates provided in the toolkit.