1. © 2010 IBM Corporation John Pritchard Cloud Architect Cloud Computing Client Engagements January, 2010 IBM Cloud Computing Reference Architecture

2. © 2009 IBM Corporation 2 “Cloud” is a new consumption and delivery model inspired by consumer Internet services. Cloud enables:  Self-service  Sourcing options  Economies-of-scale “Cloud” represents:  The Industrialization of Delivery for IT supported Services Multiple Types of Clouds will co-exist:  Private, Public and Hybrid  Workload and / or Programming Model Specific Cloud: Consumption & Delivery Models Optimized by Workload Cloud Services Cloud Computing Model

3. © 2009 IBM Corporation 3 Cloud Platforms and Services Cloud Connectivity Common Cloud Service Platform (Cloud Application Infrastructure Services) Common Cloud Management Platform (System Infrastructure Services) Application Services Information Services Collaboration Services Business Process Services Cloud Service Life Cycle Tools

4. © 2009 IBM Corporation 4 Cloud Service Provider Common Cloud Management Platform Virtualized Infrastructure – Server, Storage, Network, Facilities Service Business Manager Service Operations Manager Cloud Services User Interface Cloud Service Consumer Partner Clouds Customer In-house IT Consumer Administrator Consumer Business Manager Consumer End user API Software-as-a-Service Platform-as-as-Service Infrastructure-as-a-Service Business-Process-as-a-Service Metering, Analytics & Reporting Service Provider Portal Cloud Service Developer Developer Service Development Tools Service Definition Tools Image Creation Tools Configuration Mgmt Offering Mgmt Order Mgmt Accounting & Billing Customer Mgmt Entitlements Contract Mgmt SLA Reporting Pricing & Rating Peering & Settlement Subscriber Mgmt Service Offering Catalog Invoicing Service Automation Management Virtualization Mgmt Provisioning Monitoring & Event Management IT Asset & License Management Service Request Management IT Service Level Management Image Lifecycle Management Capacity & Performance Management Incident, Problem & Change Management BSS Business Support System BSS Business Support System Service Development Portal API Service Delivery Portal OSS Operational Support System OSS Operational Support System Common Cloud Management Platform Reference Architecture Service Transition Manager Service Security Manager Security & Resiliency Service Delivery Catalog Service Templates

5. © 2009 IBM Corporation 5 Core operational support capabilities required for a Cloud platform  An operational support system is required to deliver cloud services  Key capabilities are provided below and need to work together as a basis for customer cloud service delivery Configuration Mgmt Service Automation Management Virtualization Mgmt Provisioning Monitoring & Event Management IT Asset & License Management Service Request Management IT Service Level Management Image Lifecycle Management Capacity & Performance Management Incident, Problem & Change Management OSS Operational Support System OSS Operational Support System Service Delivery Catalog Service Templates Security and Resiliency

6. © 2009 IBM Corporation 6 Management Concerns in Cloud Computing Configuration Mgmt Service Automation Management Virtualization Mgmt Provisioning Monitoring & Event Management IT Asset & License Management Service Request Management IT Service Level Management Image Lifecycle Management Capacity & Performance Management Incident, Problem & Change Management OSS Operational Support System OSS Operational Support System Service Delivery Catalog Service Templates Security and Resiliency Image Management –Design, build and manage images for cloud services Security –Design for Multi-Tenancy –Protect assets through Isolation, integrity, image- risk and compliance management Heat and Power Management –Control Energy Consumption Service Automation Management –Interpret and Execute Build- and Management Plans –Orchestrate Management Componentry Usage Metering and Accounting –Flexible support of delivery models Virtualized Resource Management –Deploy cloud services on virtualized resources –Manage virtual resources

7. © 2009 IBM Corporation Typical Cloud Use Case Scenario 2. Integrate with service desk and IT asset management processes 1. Request Service 3. Provision Service 4. Integrate with advanced storage area network (SAN) and network pools 8. Collect, analyze, Report and bill based on Service usage and costs 6. Monitor the Service to detect bottlenecks and potential problems; generate alerts 5. Discover the Service; track configuration and changes to the Service 7. Real-time management and consolidation of events associated with Business Service 9. Visualize and align the Service with business objectives and service levels 10. Manage supported Service Level Agreements (SLAs) Service = Software, Platform, Infrastructure (i.e. Composite Application, Physical / Virtual OS, Middleware, Network, Storage Not in all cases will all steps exist in a client engagement Cloud Services BSS OSS Common Cloud Management Platform

8. © 2010 IBM Corporation 8 Core Components of Service Managed Virtualization and Clouds Deploying Cloud Services Managing Cloud Services Secure User Centric Self-Service Portal, Automation engine and Catalog Automated Provisioning and Image Management Monitoring, Security and Metering For Locating and Requesting Services

9. © 2009 IBM Corporation Optimizing Cloud Management Platform deployments Service Subscription Service Delivery Service Activation Service Design Service Operations For those clients who wish to leverage a service management portfolio to build a customized cloud solution Tivoli Service Automation Manger (introduced in November 2008) + IBM Service Management Portfolio Powered by Tivoli process automation engine and Service Management products. For those clients who wish to rapidly deploy a turn-key environment with little to no customization IBM CloudBurst (introduced in May 2009) A purpose built service delivery platform that leverages the same software components in the Tivoli Service Automation Manager as well as integrated purpose built workflows

10. © 2009 IBM Corporation Tivoli process automation engine Federated data subsystem Services, assets, configuration items IBM Tivoli Service Automation Manager Aggregated capabilities for managing your cloud environment Operational management technology IBM Tivoli Service Automation Manager ● Built on top of the IBM Service Management Platform ● Orchestrates technology, processes, people and data to provide cloud computing services and service management of cloud computing ● Provides rapid provisioning of physical and virtual resources IT infrastructure Platform management services Security services Provisioning services Usage and accounting services Monitoring services Energy management services Tivoli Service Automation Manager IBM Service Management Platform

11. © 2009 IBM Corporation Tivoli Service Automation Manager

12. © 2009 IBM Corporation Tivoli Process Automation Engine Tivoli Service Automation Manager High-Level Component Architecture  Tivoli Service Automation Manager is a component based on the Tivoli Process Automation Engine (TPAe), implementing a data model, workflows and applications for automating the management of IT services Tivoli Provisioning Manager Tivoli Service Automation Manager Tivoli Service Request Manager MEA / REST APIs Web2. 0 GUI Admin GUI Service Designers, Service Operators, Administrators End Users IBM Tivoli Monitoring Tivoli Usage and Accounting Manager

13. © 2009 IBM Corporation Tivoli Service Automation Manager and the IBM Service Management Architecture Process Management Products Tivoli Process Automation engine

14. © 2009 IBM Corporation 14 IBM Cloudburst – an Integrated Cloud solution Tivoli Service Automation Manager (TSAM) IBM Cloudburst  Orchestration of Cloud operations  Integration point for service mgmt capabilities  Service catalog and templates  Automated provisioning of virtual systems  Monitor both physical and virtual server environments Monitoring  Make management system DB highly available High Availability  Provide an enhanced security infrastructure for cloud Security  Provide metering and accounting for cloud services  Enable integration to billing systems if needed Usage and Accounting  Enhanced management of the virtual environment Virtualized HW Management  Energy management of the hardware infrastructure Energy Management “Built for Purpose” Cloud Solution  Preinstalled and configured on IBM hardware Server, Storage, Network HW

15. © 2009 IBM Corporation IBM CloudBurst

16. © 2009 IBM Corporation IBM CloudBurst: an integrated service delivery platform  Self contained on-premise cloud: Prepackaged hardware, software, and services based on System x Blade Center platform and Tivoli Service Management products.  Web 2.0 Self-service portal: Automated request, (de-) provisioning of production or development/test workloads utilizing virtualization technologies across server, network, and storage, including reservation of compute and storage resources.  Pre-packaged automation templates and workflows for most common resource types, such as VMWare and KVM virtual machines (provisioned- to capabilities).  Integrated core service management capabilities: Real-time monitoring of virtualized resources, energy management, (de-)provisioning, patch management and remediation, security, usage and accounting, reusable library for rapid deployment, pre-built reports (BIRT).  Modular/Plug and Play: Incrementally, automatically expandable and scalable.  Multi-tenant: Management of multi-customer, multi-project collections of virtual systems.  Quickstart implementation services included to get Cloud platform up and running in days.  Extensibility across data center with TSAM integration.  Enablement for WebSphere Cloudburst outside-the-box integration. Single product, single delivery, single installation, single invoice, single support structure

17. © 2009 IBM Corporation …provide data for planning, budgeting, billing and accurate chargeback for services Built-in Metering, Usage and Accounting  Understand costs, track, allocate and invoice by department, user and many additional criteria.  Collect, analyze and bill based on usage and costs of shared assets.  Deliver detailed information and reports about the intricate use of shared resources.

18. © 2009 IBM Corporation …stay ahead of evolving threats and compliance measures Optional security to protect your production cloud  Help detect and block network attacks, and unauthorized network access.  Enable cloud computing service providers to deliver segmented security in multi- tenant virtual environments.  Integrate virtualized security with traditional network protection to reduce complexity of security operations

19. © 2009 IBM Corporation Compliance Complying with SOX, HIPPA and other regulations may prohibit the use of clouds for some applications. Comprehensive auditing capabilities are essential. High-level cloud security concerns Less Control Many companies and governments are uncomfortable with the idea of their information located on systems they do not control. Providers must offer a high degree of security transparency to help put customers at ease. Reliability High availability will be a key concern. IT departments will worry about a loss of service should outages occur. Mission critical applications may not run in the cloud without strong availability guarantees. Security Management Providers must supply easy, visual controls to manage firewall and security settings for applications and runtime environments in the cloud. Data Security Migrating workloads to a shared network and compute infrastructure increases the potential for unauthorized exposure. Authentication and access technologies become increasingly important.

20. © 2010 IBM Corporation 20 IBM Security Framework & Cloud Computing Authentication and role-based access control Federated Identity including single sign-on Isolation Management Server, Storage and Network Security for Image Management Security Metadata, Access Control, Authorization Integrity management Virtual Image integrity Risk and Compliance Auditing and Configuration Management Enterprise-level Regulatory Compliance Policy Management Threat Management

21. © 2009 IBM Corporation 21 Hybrid Cloud Management, Security and Integration From the Enterprise Client’s perspective:  Management of workloads running off- premise on clouds –Management of software applications and services (monitoring, events, availability, performance) –Service Request Management (governance of service provisioning) –Dashboard for service visibility  Security for Hybrids –Control security and resilience of services (identity management, compliance, isolation)  Integration (Connectivity) of hybrid applications & information –On-premise to off-premise business application connectivity & governance –Information exchange across the enterprise and clouds Enterprise Resources Public Cloud Trusted Cloud Enterprise Management, & Governance of Cloud software, applications, workload

22. © 2010 IBM Corporation 22 Production ImagesTest ImagesVMware ImagesAIX Images Data Center N Production ImagesTest ImagesVMware ImagesAIX Images Data Center 1  Federates Master and Instance images wherever they are in the datacenter  Tracks versions, owners, deployments  Tracks content of images using OVF  Tracks provenance (Parent/child)  Manages replication  Federates IBM and non-IBM platform repositories ( e.g. IBM Systems Director VMControl) Tivoli Provisioning Manager – Federated Image Library Image Lifecycle Management & Tivoli Image Library

23. © 2010 IBM Corporation 23 Cloud Energy Monitoring and Optimization TDW Centralized Energy Views & Reporting Thermal Visualization of Data Center Integrated IT and Facilities Alerts Integration of Energy and Asset Data IT Operator/ Manager Data Center Administrator Facility Manager / Engineer Information Technology Data Center Infrastructure Building Infrastructure Private Cloud

24. © 2009 IBM Corporation 24  Common Cloud Management Platform –Provide foundation for IBM cloud offerings –Support flexible deployment and business models –Enable competitive delivery economics  Integrated Service Management is essential for a Cloud Management Platform –Cloud Service Lifecycle Management –Image Management –Event Management, Business Service Management –Identity, Isolation and Compliance Management  Enterprise use of Public Clouds will drive Hybrid Management, Security and Integration In Summary…