1. Cloud Service Provisioning Jens Jensen (STFC), Piyush Harsh (INRIA) et al contrail is co-funded by the EC 7th Framework Programme under Grant Agreement nr. 257438 contrail-project.eu 01

2. Background Federated cloud services – Using OpenNebula for underlying cloud – And Amazon EC2 – And (eventually) Nimbus, OpenStack... Single “provider” interface to multiple services – IaaS – PaaS: database, key/value store – PaaS: – Distributed filesystem – GAFS (based on XtreemFS) XtreemFS demonstrated at OGF in Chicago (previous) – Virtual (secure) networks

3. Provider Responsibilities SLA negotiation using WS-Agreement/Negotiation – Publish SLA templates – Publish QoS and QoP (Quality of Service and Protection) User account management Access control (based on user attributes (XACML)) Service state (internal/external control) Monitoring information Accounting data returned to fed level

4. Provider Responsibilities – Service Service features, advertising/discovery Advance Reservation Service Level Agreements Service integrity Constraints – environment, geography

5. Provider Access Control 1.Extract SAML assertions from certificate 2.Pass assertions to PDP 3.Enforce decision... 4.Listen for updates from PDP (volatile attrs.: “Usage Control”) 5.Track/Enforce service states

6. Service State (IaaS, VM state)

7. Architecture – where to adapt Federation: Provider Manager

8. Adaption – Anatomy of an Arrow Shared Advertising service/discovery SLA negotiation Monitoring Accounting User management Specific *aaS

9. Adapter services – stack slice Socket (TCP/IP, TLS) Web Services (REST) Access Control (SAML) Request Handler (*aaS)

10. Applicable Standards (for IaaS) OVF, CIMI (DMTF) XACML, SAML (OASIS) General questions Complexity? Putting pieces together, pragmatically Plus some pieces of innovation... Fed id management framework (EUDAT, EGITF)

11. Summary List of provider responsibilities Can we reach a state of single interface for all aspects? Or should we have an abstraction layer (cf jcloud) Lots of common interfaces for shared activities

12. Funded under: FP7 (Seventh Framework Programme) Area: Internet of Services, Software & virtualization (ICT- 2009.1.2) Project reference: 257438 Total cost: 11,29 million euro EU contribution: 8,3 million euro Execution: From 2010-10-01 untill 2013-09-30 Duration: 36 months Contract type: Collaborative project (generic) contrail is co-funded by the EC 7th Framework Programme http://contrail-project.eu contrail-project.eu 012