How to Develop a Successful Hybrid Cloud Strategy

advertisement
IT concerns, decision points
Trends driving IT pressures
Devices
Apps
Big data
Cloud
Enable your employees
to work from anywhere
Evolve your business
apps to meet new needs
Help your business make
(1ZB=1024 EB)
fasterZB
decisions
Ensure infrastructure will
scale to meet demand
more than half
of information workers
across 17 countries report
using 3+ devices for work
one quarter
of external app
implementation spending
will be on mobility, cloud,
analytics & social, by 2016
Devices: “Info Workers Will Erase Boundary Between enterprise And Consumer Technologies.” Forrester Research. August 30, 2012
Apps: Gartner: “Predicts 2013: Business Impact of Technology Drives the Futures Application Services Market.” Nov. 21, 2012
Big data: Compiled from IDC digital universe forecasts
Cloud: “Prepare For 2020: Transform Your IT Infrastructure And Operations Practice.” Forrester Research. Oct. 24, 2012
40
the size of digital universe
by 2020, of which 90%
will be unstructured data
nearly half
of total IT spend will be
cloud-related by 2020
Case Study
Hurricane Sandy
About 8.6 million citizens lost electricity in the U.S. during the storm
Source: U.S. Department of Energy, Office of Electricity Delivery and Reliability situation reports. Chart data reflect situation posted at 3:00 PM EST on November 9 2012.
business continuity measures
Hurricane Sandy was meticulously managed end-to-end
 Initiated a proactive war room with monitoring and control
 Delivered internal communications
 Latest developments on hurricane status
 Health of services
 Contingency plans
 BCP implemented on all Edge services and properties
 Supply of fuel to generators on regular basis
 Worked with service providers for restoration of internet
circuits
infrastructure & services
Infrastructure Challenges
 Drop in capacity via network provider fiber cut
 Water flooding caused partial failure of
communications lines
 Water leakages during storm period at facilities
 Core network device outages due to
combination of power, network, and load issues
Services
Microsoft services were migrated to avoid
service impact
Results
Successful implementation of Business
Continuity and Disaster Recovery Plans
No major service impact to customers
No significant impact to the datacenter or
assets
Increased resources to aid local relief efforts
Excellent overall coordination among internal
and external teams for combined execution to
ensure minimal impact
Trends
A Unified Cloud Strategy
Best Practices to build a Hybrid Cloud
Hybrid Cloud Sample Architectures
Case Studies
Next Steps
Transform
IN THIS NEW WORLD …
Growing Complexity
Grow
LOOKING FORWARD …
Run
Silos
OPTIMIZED DATA CENTER
Well Managed
Infrastructure & Applications
App
Resource
silo #1
App
Resource
silo #2
Mainframe Windows
Unix
CLOUD
Service Oriented
Linux
App
Resource
silo #3
Identity
Application
Data
OS
Virtualization
HW
Storage
Network
Consuming
compute
Silo-ed
Architectures
Managing Services
App 1
On Premises
Legacy
Silo-ed
Expansion
Expansion
Expansion
Expansion
Expansion Expansion
App 1
App 2
App 3
Silo-ed Architectures
To Modernizing
Workloads
storage
network
Leveraged
Infrastructure
Service
Oriented
App 2
App 3
Leveraged
Infrastructure
Services
On Premises
Off Premises
Private Cloud IaaS – SaaS - PaaS
Efficiency
Legacy Application
Cost Reduction
Legacy / Silo Application
New
Requirements
New Functionality
Scalability
Additional Functionality
Innovate
Cloud Native Application
Cloud Capability
Long time to
deploy
One chance
for success
Failure is not an option
Miss the opportunity for learning
Best Option
Architecture
Pattern #1
Architecture
Pattern #2
Elastic Sandbox
Architecture
Pattern #3
Production
Architecture
Elastic
Production
Burst-out
Production
Architecture
BI / Analytics
Mobile Services
Architecture
Elastic Production Environment
Production
Architecture
Elastic Production
1
Replication
Environment
Burst-out
or Additional
Functionality
Elastic Production
n
Evolving services to
Delivering Cloud-Scale services requires
a radical restructuring of technology, processes and people
Enterprise IT
Seats
Talent
Data Quality
Data Access
Assessment
Supply Chain
Budget
Architecture
Application Integration
Infrastructure
Reach
Cloud-Scale
Talent1,000,000,000
10,000
Custodians
Enterprise
Directional
Custodians
Pull
Physical
Process
Fixed Cost
Silo’d
Enterprise
Loose
Overhead
Hardware
Regional
Designers
Cloud-Scale
Foundational
Designers
Push
Statistical
Strategic
Rates
Integrated
Cloud-Scale
Tight
Enabler
Software
Global
Reliability
Enterprise IT
Cloud-Scale
Manual
Cloud-Scale
Infrastructure
MTBF
Integrated
Hardware
Audit
Impacting
99.999%
Cloud-Scale
Primary/Backup
Weeks
MTTR
UI
Commodity
Automated
Service
MTTR
Software
Intrinsic
Irrelevant
99.9%
Active/Active
Minutes
API
Architectures
Custom
Hardware
Deployment
Enterprise
Availability
Silo’d
Operability
Reliability
Security
Network Downtime
Network Availability
Enterprise
Design
Deployment Time
MTBF
System Admin
Operability
Customer
ONE
Microsoft
Consistent
Platform
Service
Provider
A UNIFIED
CLOUD STRATEGY
5.8+ billion
250+
million
worldwide queries each month
2.4+ million
emails per day
48+
million
users in 41
markets
50+
million
active users
400+ million
Active
accounts
8.6+ trillion
objects in Windows Azure
storage
1 in 4
Enterprise customers
active users
50+ billion
Minutes of connections handled
each day
200+ Cloud Services
1+ billion customers · 20+ million businesses · 90+ markets worldwide
An Integrated vision
• flexible development
• unified management
• common identity
• integrated virtualization
Compute/storage/network
• complete data platform
Compute/storage/network
430B+
280%
50%
29K+
93%
2:3
46%
66%
Windows Azure runs
on Windows Server 8.5T objects
stored in Windows Azure
Bing runs on Windows
Server 5.5B+ global
queries per month
Windows Azure AD
authentications
of the Fortune 1000
use Active Directory
year-over-year
database growth
in Windows Azure
servers worldwide run
on Windows Server**
of Fortune
500 use
Windows Azure
organizations
already use
Windows Intune
worldwide share:
SQL Server most widelydeployed database*
of enterprise seats
covered with System
Center
1B+Office users, 1 in 4
enterprise customers
now has Office 365
* IDC Server Workloads Study 2013 ** IDC 2013 WW Server Tracker
By: Thomas W Shinder and Jim Dial
Service Delivery
Business
Relationship
Management
Availability and
Continuity
Management
Capacity
Management
Information
Security
Management
Regulatory
Policy and
Compliance
Management
• Green subdomains contain components that represent IT
Financial
Management
Service Level
Management
Service Lifecycle
Management
operational processes
• Blue subdomains contain technical capabilities components,
Define
Enable services
Define
Software
Enable services
Management
and Support
Access
Management
Service
Monitoring
Asset and
Configuration
Management
Systems
Administration
Service
Management
Configuration
Management
Change
Management
Knowledge
Management
Authorization
Authentication
Release and
Deployment
Management
Incident and
Problem
Management
Directory
Data Protection
Virtualization
Deployment and
Provisioning
Process
Automation
Network
Fabric
Management
Network
Support
Manage
and
support
Platform
Usage and
Billing
Service
Reporting
Service
Operations
Request
Fulfillment
Provide
capability
Consumer and
Provider Portal
Define
Support
Provide
capability
Infrastructure
Compute
Define
Provide
capability
Storage
http://blogs.technet.com/b/cloudsolutions/archive/2013/08/15/cloud-services-foundation-reference-architecture-reference-model.aspx
This diagram is updated periodically. The latest
version can be found online. Version 1
Detailed information about this diagram is
provided in the Cloud Services Foundation
Reference Model article.
which represent the functionality that is provided by hardware
devices or software applications or both
Compliance
•
•
Customers ultimately responsible for ensuring their compliance obligations are met
Microsoft will share its certifications and audit reports to allow customers to establish reliance
IaaS
PaaS
SaaS
Responsibility:
Data Classification and Accountability
Application Level Controls
Operating System Controls
CLOUD CUSTOMER
Host Level Controls
Identity and Access Management
CLOUD PROVIDER
Network Controls
Physical Security
IS 577753
ISO/IEC 27001:2005
Audit and
Certification
SOC 1 and SOC 2
SSAE 16/ISAE 3402
Attestations
Cloud Security Alliance
Cloud Controls Matrix
HIPAA Business Associate
Agreement (BAA)
Federal Risk and Authorization
Management Program
BEST PRACTICES
FOR HYBRID CLOUD
DEFINE
THE FABRIC
DEFINE
THE SERVICES
 Network Virtualization
 Application Specification
 Storage Consolidation
 Server Virtualization
SELF
SERVICE
OPERATE &
MONITOR
 Self Service Catalogue
 Service Dependencies
(Physical / Virtual / IaaS /
 Service Management
 Application Insight
PaaS or Hybrid)
 Chargeback / Showback
 Scalability & Recovery
 Automation
 Dynamic Optimization
 Cloud Sourcing
 Service Template
 Access & Information Protection
 Service library
 Capacity Planning
 Management & Automation
 Deployment Services
 Dashboards
 High Availability
 Role Based Administration
 Multi-Cloud Support (Physical,
Virtual, Private, Hybrid, Public)
DEFINE
THE FABRIC
DEFINE THE FABRIC
2012 R2
Storage
Consolidation
o Software Defined
Networking
o Virtual IP Address
Management
o Datacenter Bridging
Fast Track V3
http://technet.microsoft.com/en-us/jj572811
App services
Server
Virtualization
o Offloaded Data transfer o High Performance &
(ODX)
Share Nothing Live
o Storage Spaces
Migration
o Thin-Provisioning
o System Center Multi
o Deduplication
Hypervisor support
o Tier-ing
(Hyper-V, VMware, XEN)
o BitLocker Encryption
o Up to 64TB Virtual Hard
Disk (VHDX) Size
Windows Azure
Microsoft Private Cloud Fast Track Guidance Set
Cloud
services
Caching
Mobile
services
Web sites
Identity
Service bus
Media
Workloads
System Center
Integration
HPC
Analytics
Data services
Windows Server 2012
o Windows Server &
Azure Active Directory
o Active Directory
Federation Services
o PowerShell Automation,
>3000 cmdlets
o Desired Configuration
o Windows Management
Framework: WSManagement, REST,
HTTP, PSRP
o Hyper-V Replica
o Windows Azure Hyper-V
Recovery Manager
SQL
database
HDInsight
Table
Blob
storage
Infrastructure services
Virtual
machines
Virtual
network
VPN
Traffic
manager
CDN
DEFINE
THE SERVICE
Design and Create your Cloud Services
Pool Resources
with existing
investments
Assign Roles,
Quotas &
Actions
Microsoft
Hyper-V
Create a
Service
VMware
vSphere
Template
Delegated
Read Only
Administrator
Administrator
Administrator
App Resource
App Resource
silo #1
silo #2
compute
storage
Any Action Administration Operations
Microsoft
Hyper-V
compute
VMware
vSphere
storage
Deploy
Citrix
Services
XenServer
Self
Service
App
UserResource
silo #3
Revocable Actions
Quota Controlled
Citrix
XenServer
network
network
Monitor
Deployed
Services
OPERATE
& MONITOR
On-premises
Windows Azure
QUEST SOFTWARE (DELL)
BRIDGEWAYS
INFRONT CONSULTING GROUP
OPSLOGIX
A wide variety of operating systems and
middleware
Oracle DB, Oracle WebLogic, DB2, MySQL, IBM
WebSphere, Java Attributes, VMware, Apache,
JBoss, ConfigWise
RightFax, McAfee, TrendMicro, Avamar, EZPay,
Isilon, other
Oracle, Blackberry Enterprise
Quest SoftwareServer
(Dell)
A(BES)
wide variety of operating
systems and middleware
Bridgeways
Oracle DB, Oracle WebLogic, DB2,
MySQL, IBM WebSphere, Java
Attributes, VMware, Apache, JBoss,
ConfigWise
Infront Consulting Group
RightFax, McAfee, TrendMicro,
Avamar, EZPay, Isilon, other
SAP
Opslogix
Oracle, Blackberry Enterprise
Server (BES)
SAP
E-View
AS/400
Veeam
VMware EX
E-VIEW
AS/400
VEEAM
VMware EX
OZSOFT CONSULTING
REALTECH
Supported Operating Systems
Supported OS for Hyper-V and System Center
“Oracle’s strategy and commitment is to support multiple platforms, and Microsoft Windows has
long been an important supported platform. Oracle is now extending that support by providing
certification and support for Oracle applications, middleware, database, Java and Oracle Linux on
Windows Server Hyper-V and Windows Azure. Customers can now deploy Oracle software on
Microsoft private clouds and Windows Azure, as well as Oracle private and public clouds and
other supported cloud environments.”
http://www.oracle.com/technetwork/topics/cloud/faq-1963009.html
Windows Azure Pack
Private Cloud in a Box
Azure vs Windows Azure Pack
Cloud OS Consistent Experiences
Windows Azure
Web Sites
Apps
Database
VMs
Customer
Subscriber
Self-Service
Portal
Self Service Portal
Moves On-Premises
Service
Plans
Users
Provider
Portal
Service Provider
Web Sites
Apps
Database
VMs
Consumer
Self-Service
Portal
Common Mgt.
Experience
Worker
Role
Web
Sites
VM
Role
SQL
Other
Service
Caching Services
CDN.
Bus
Media,, etc.
Cloud-Enabled Services
Move On-Premises
Web
Sites
VMs
SQL
Service
Bus
Future
Services
R2 w/ Service Provider Foundation
Workload Portability
R2
Consistent Dev.
Experience
One consistent experience
Azure
Azure
Private Cloud
Azure –Pack
Private– Cloud
Azure Pack
Customer
ONE
Microsoft
Consistent
Platform
Service
Provider
HYBRID CLOUD
SAMPLE ARCHITECTURES
Hybrid Cloud Scenarios
Encrypted Backup
VPN
Windows Backup
SC Data Protection Manager
Recovery
Health Monitor
Manage
Recovery
plan
System Center
Virtual Machine
Manager
AD
Hyper-V Replica
SQL
Exchange
Site B
System Center
Virtual Machine
Manager
AD
SQL
Exchange
Orchestrated Recovery in case of outage
Policies
Automation
Most
Active Data
on SSD
De duplicated, Compressed
& Encrypted
De duplicated
VPN
Application
Servers
Site A
StoreSimple
Cloud
Integrated
Storage
Warm data
on SAS
Local Tier
De duplicated
& Compressed
Encrypted Backup
Recovery
Benefits
• Consolidates primary, archive,
backup, DR thru seamless
integration with Azure
• Cloud Snapshots
• De duplication
• Compression
• Encryption
• Reduces enterprise storage TCO
by 60–80%
Hybrid Cloud Scenarios
File / Application
Servers
File / Application
Servers
• Live Backups, Archives,
and Disaster Recovery
• Dramatic Cost
Reduction
• No Changes to
Application Environment
• File share with integrated
data protection
• All-in-one primary data +
backup + live archives +
DR with de-duplication &
Compression
Most
Active Data
on SSD
De duplicated
VPN
Encrypted Backup
Warm data
on SAS
Local Tier
StoreSimple
Archive
Data
Encrypted
• SharePoint storage on
StorSimple + Azure
• StorSimple SharePoint
Database Optimizer
• Improved performance
& scalability
De duplicated, Compressed
& Encrypted
Policies
De duplicated
& Compressed
Automated
Control Virtual Sprawl
Cloud-as-a-tier
Offload storage footprint
VMware Storage DRS Storage
pools
• Virtual Machine Archive
• Regional VM Storage
•
•
•
•
Recovery
Benefits
• Consolidates primary, archive,
backup, DR thru seamless
integration with Azure
• Cloud Snapshots
• De duplication
• Compression
• Encryption
• Reduces enterprise storage TCO
by 60–80%
Hybrid Cloud Scenarios
Developers
Tier 1
VPN
Windows
Azure SDK
Windows
Azure AD
VPN
Tier 2
Tier 3
Availability Set
Availability Set
Availability Set
Load
Auto Web Virtual VHD
Balancing Scaling Site Machines
Auto SharePoint Mobile
Scaling
Service
Azure HDInsight
Analytics
SQL
Storage
& Reporting Azure
(Hadoop)
Windows Azure
CDN
Windows Azure
Cache
Storage
BLOB
Storage
Table
Notification Hub
Storage
Queue
Users
On Premises
INGRESS NODES
Collect / Decode
Connected Devices
Load
Auto Worker
Balancing Scaling Roles
ANALYTICS NODE
Record
Filter / Analyze / Aggregate
Azure
Storage
Auto Worker
Scaling Roles
CONSUME
Reporting / BI
Azure
Analytics
SQL
& Reporting Azure Storage
Hybrid Cloud Scenarios
Encrypted Synchronization
Microsoft apps
Consumer
identity providers
AD
PCs and devices
Multi-Factor Authentication can be
configured through Windows Azure
AD
AD
Multi-Factor Authentication can
be configured through the AD FS
integration with Windows Azure
User attributes are synchronized
using DirSync including the
password hash, Authentication
is completed against Windows
Azure Active Directory
User attributes are synchronized
using DirSync, Authentication is
passed back through federation and
completed against Windows Server
Active Directory
Custom ISV/CSV
LOB apps apps
3rd party clouds/hosting
Hybrid Cloud Scenarios
Multi-Factor
Authentication
Server
On Premises
Applications
ADFS / SAML
.NET, Java, PHP, …
AD
Multi-Factor
Authentication
Server
BYOD / Personal
devices
Corporate devices
VPN
Admin
Remote Users
•
•
•
•
•
•
Built-in
SDK for integration
Strong multi Factor Authentication
Real Time Fraud Alert
Reporting, Logging & Auditing
Enables compliance with NIST 80063 Level 3, HIPAA,
PCI DSS, and other regulatory
requirements
SQL Server Hybrid Cloud Scenarios
Publish
Compare
Sync
Import / Export
Register / Unregister
Management Portal
VPN
Management Portal
VPN / Encrypted Data
Primary
Dispersed Teams
SQL Backup tool for legacy
Manual Console Backup
Managed Backups
Asynchronous Commit
VPN
Console 2014 / Scripts 2012
Backup
Availability Groups
Periodic Snapshots
Geo Replication
Secondary
Disaster Recovery
Powering BI Apps
Customer
ONE
Microsoft
Consistent
Platform
Service
Provider
A UNIFIED
CLOUD STRATEGY
On Premises
$$$ Self Service
$$$ Conversion
$$$
$$$
Private Cloud
$$$ + Self Service Portal + Charge Back + Automation
Public Cloud
Public Cloud
$$$
+ The Hypervisor + Management + High Availability
+ Subscription
+ Service Contract
Maybe another
+ Self Service Portal + Charge Back + Automation
+ The Hypervisor
Virtual
Servers
+ The Hypervisor + Management + High Availability
$$$
+ Tools to Manage the Virtual Environment
+ High Availability for the Virtual Environment
$$$
$$$ Conversion
$$$
$$$ P2V
Physical to Virtual
Partner Cloud
$$$
The Operating System (OS)
Physical Tools to Manage the Existing Workload
Servers Workload and its Data, Security, & other Requirements
+ Subscription
+ Service Contract
Maybe another
+ Self Service Portal + Charge Back + Automation
+ The Hypervisor + Management + High Availability
CASE STUDIES
Hybrid Cloud Case Studies
Domino’s Pizza is a leader in pizza delivery and carryout,
with even more than 10,200 stores in more than 70
international markets. Domino’s is headquartered in Ann
Arbor, Michigan, and employs an estimated 205,000
people.
Business Situation
Domino’s wanted to improve the
reliability and performance of its 10,000
US store servers, which are critical in
feeding orders to pizza makers and
running the company’s point-of-sale
system.
Solution
Domino’s is switching its in-store
virtualization software to Hyper-V in
the Windows Server 2008 R2 operating
system and uses Microsoft System
Center data center solutions to manage
those servers.
“If our store servers go down, a third of
our business evaporates. It’s that
simple. It’s absolutely critical that our
store servers remain running, and with
Hyper-V, we’ve reduced store
downtime.”
“I have two people managing 15,000
computers… We’d have been under
water without System Center”
- Lance Shinabarger, Vice President,
Global Infrastructure
Benefits
• Improved reliability and
performance of store servers
safeguards online orders
• Increased IT efficiency reduces costs
• Lower licensing costs helps
franchisees
http://www.microsoft.com/en-us/server-cloud/cloud-os/customerstories/Dominos.aspx#fbid=MbgnzmlKE56
Lufthansa Systems provides consulting and IT
services to airlines and other industries.
Lufthansa Systems is based on Kelsterbach,
Germany, and has offices in 16 countries.
Business Situation
Lufthansa Systems had used
virtualization technology extensively,
but competitive pressures prompted
the company to further automate IT
processes, speed service delivery, and
reduce data center costs.
Solution
Lufthansa Systems upgraded to
Windows Server 2012 R2 and Microsoft
System Center 2012 R2 in order to
enhance its private cloud environment
and is using Windows Azure to expand
its capabilities.
“By using hybrid cloud resources from
Microsoft, we can offer even more
consistent capabilities and services to our
customers without adding storage capacity
to our data centers worldwide.”
Bardo Werum
Senior Vice President Infrastructure,
Lufthansa Systems AG
Benefits
• Gain standardized global service
delivery
• Deliver IT services in hours instead of
days
• Reduce IT capital and operating
costs
http://www.microsoft.com/casestudies/Case_Study_Detail.aspx?CaseStudyID=710000001388
Hybrid Cloud Case Studies
Aston Martin is a British manufacturer of
luxury sports cars. Founded in 1913, it has
evolved into an automotive icon
synonymous with luxury, performance and
craftsmanship.
Business Situation
The IT team used multiple tools to
manage the heterogeneous
infrastructure at Aston Martin. The
company needed to standardize its
server platform and tools so that the IT
team could improve its services.
Solution
Aston Martin uses the Windows Server
2012 operating system and Hyper-V
virtualization technology running on
HP hardware and Microsoft System
Center 2012 to manage its new
environment.
“With the private cloud, Microsoft
extends way beyond the infrastructureas-a-service concept and pushes the
boundaries by blurring public, private,
and hybrid clouds together.”
Daniel Roach-Rooke
IT Infrastructure Manager,
Aston Martin
Benefits
• Improved production efficiency
• Increased flexibility with hybrid cloud
• Simplified IT management
• Self-service software deployment
• Cohesive, efficient operations
http://www.microsoft.com/casestudies/Windows-Server-2012/Aston-Martin/Luxury-Sports-CarManufacturer-Accelerates-Efficiency-with-Latest-Operating-System/710000002666
Telefónica, S.A. is a Spanish broadband and
telecommunications provider that serves
more than 315 million customers across
Europe, the United States and Latin America.
Business Situation
Telefónica wanted to reduce server
sprawl to trim costs, but it also wanted
a more flexible way to deliver IT
services to Business and make those
services always available.
“By reducing our IT spend by 15%
through the use of Microsoft cloud
software and service, we free up
money to spend on creating new
innovative services to make the
business more competitive”
Solution
Telefónica is adopting a hybrid-cloud
strategy whereby it runs some
applications in an efficient on-premises
private cloud based on Windows
Server 2012 and Windows Server 2012
Hyper-V and others in the Windows
Azure Public Cloud.
“Our strategy is neither all private nor
all public. What we love about using
Hyper-V in our private cloud is that it
gives us complete flexibility to mesh
with and ultimately move into
Windows Azure when we need it”
Adrian Steel, Global Head of
Infrastructure, Telefónica
Benefits
•Consolidated 18,000 physical servers
across Europe into 6,000 centralized
host on a Hyper-V Private Cloud
•Reduce IT costs by 15 percent
•Increase business agility
•Improve availability and flexibility
http://www.microsoft.com/casestudies/Case_Study_Detail.aspx?CaseStudyID=710000003203
For More Information
Windows Server 2012 R2
http://technet.microsoft.com/en-US/evalcenter/dn205286
System Center 2012 R2
http://technet.microsoft.com/en-US/evalcenter/dn205295
Azure Pack
http://www.microsoft.com/en-us/servercloud/products/windows-azure-pack
Microsoft Azure
http://azure.microsoft.com/en-us/
Come Visit Us in the Microsoft Solutions Experience!
Look for Datacenter and Infrastructure Management
TechExpo Level 1 Hall CD
http://channel9.msdn.com/Events/TechEd
www.microsoft.com/learning
http://microsoft.com/technet
http://microsoft.com/msdn
Download