Building and Operating Clouds

What to Do Once You Hit The On Switch

Roy Ritthaler, Sr. Director Product Marketing, BMC

Rich Plane, Director, Solution Development and Delivery, Harris Corp.

Building and Operating Clouds:

© Copyright 04/10/2023 BMC Software, Inc 2© Copyright 04/10/2023 BMC Software, Inc 2

Objectives

Building and operating cloud environments is a known science

There are commercially viable software and solution provider opportunities in the market today for cloud

Leveraging out-of-the-box software, it’s now possible to achieve an enterprise-level, fully operational cloud

You should leave today’s session knowing….

© Copyright 04/10/2023 BMC Software, Inc 3

Agenda

Cloud Operations – Delivering Highly Available Clouds- Roy Ritthaler, Sr. Director, Product Marketing

Trust in the Cloud – From Definition to Delivery- Rich Plane, Director, Solution Development and

Delivery, Harris Corporation

Question & Answers


Cloud availability is business critical

So far, cloud projects have focused on automated provisioning …but availability and cloud operations are usually an after thought


Clouds are difficult to manage

…With new cloud complexity:

o Incredible, global scaleo Local and public resourceso Highly movable workloadso Ongoing new/ retired services o End-user expectations

Traditional challenges remain:

o Complex IT infrastructureso End-to-End application monitoringo Multiple data sourceso Security considerations

The result, a loss of business reputation

Frustrated CustomersLong Recovery Times

Cost and Efficiency Overruns


Cloud Operations use cases

Identify issues with cloud infrastructure to avoid outages

Enforce service levels for services delivered through cloud

Ensure service availability of unpredictable workloads

Improve service quality with hybrid cloud

Ensure quality of transient cloud services

Optimally balance workload distribution in the cloud


Operations is asking for three key capabilities

Right-size capacity of individual services and the entire cloud

Meet the user’s ongoing expectations for service qualityService Level Enforcement

Proactive Service

Performance Management

Continuous Resource

Optimization

Ensure the performance of services and infrastructure

Cloud Operations SolutionIncorporate all three capabilities into a unified, modular solution


Meet the user’s ongoing expectations for service qualityBMC End User Experience Management

Cloud Operations

Service Level Enforcement

Proactive Service Performance Management

Continuous Resource

Optimization


Ensuring Infrastructure PerformanceBMC ProactiveNet Performance Management

Predictive analytics and prioritization based on business impactExtend service views into cloud, virtual and physical infrastructureSingle platform to monitor private and public (Harris, AWS, Azure) clouds

Cloud Operations



Continuous Resource

Optimization


Right-size capacity of cloud services and the entire cloudBMC Capacity Optimization

Cloud Infrastructure Planning Intelligent Placement

Assess overall health and performance of your cloud environmentCross-cloud visibility of resource capacity utilization and efficiency

Provide intelligent placement advisory to Cloud Lifecycle ManagementOptimally allocate workload according to performance and policy constraints

Cloud Operations



Continuous Resource

Optimization


Cloud Operations – The Critical Capabilities

End User Behavior Monitoring- Real-time business and end user impact analysis

Predictive Service Impact- Proactive identification of service performance problems

Business-Aware Capacity Planning- Continuously alignment of Cloud capacity with business

demand

Open, Heterogeneous Design- Prevention of vendor lock-in and protection of long term

business value

Integrated Operating Model- Integration with existing IT processes to maintain cloud

services


Harris builds a trusted cloud using BMC Software

Harris Corp.- More than 16,000 employees including nearly

7,000 engineers and scientists- $6 billion annual revenue - Industry leader in mission critical networked

systemsCloud Goals- Delivering secure services in the cloud to their

customersKey Use Cases- Rapidly provision new services for customers- Ensure customer service levels are met- Automated event identification & remediation

Implementation Highlights- Greenfield implementation, building a new

business from the ground up


Trust in the Cloud – From Definition to Delivery

Trust – The Industry Perspective

Harris Perspectives on Trust

Implementing Trust

You Can Trust the Cloud!


About the TechAmerica CLOUD2 Commission

Formed to provide recommendations to Obama Administration - Government deployment of cloud

technologies- Public policies that will help drive US

innovation in the cloud

Participation from 71 experts across industry and academiaCommissioned in April 2011 and final recommendations presented July 26, 2011Deliverables- Final Report of recommendations- Cloud Buyer’s Guide


Summary of CLOUD2 Recommendations

Committee activities were structured around the four T’s

Trust Transparency

Transnational Data Flows Transformation

Require vendors to share relevant

information about their capabilities,

offerings and service levels

Recommendations in policy, infrastructure, and training to help

facilitate broader adoption of the cloud

Need for collaboration & standardization of

data access across national borders

Ensuring the combination of factors that allows consumers of cloud services to be

confident that the services are meeting

their computing needs


CLOUD2 Recommendations on Trust

Ensuring that the cloud is meeting consumer’s needs for security, privacy, availability

Factors Contributing to Trust

• Transparency of practices

• Accountability

• Resiliency

• Redundancy

• Access and Connectivity

• Supply chain provenance

• Life cycle integrity

• Governance

Specific Recommendations

• International standards for security and assurance Frameworks

• Accelerate the development of an identity management ecosystem

• Enact and improve legislation related to data breaches

• Develop a joint research agenda for cloud technology


Contents



Implementing Trust



The Pillars of Trust


Barriers to the Cloud are RealTr

ust

Cost

& C

ontr

ol


Defining Cyber Trust

Assumed Trust:- Perimeter-Centric, Heuristic and/or Blacklist-based, used for both Data in

Motion and Data at Rest

Explicit Trust:- Infrastructure and Information-Centric with a focus on specific positive

image and software reference measurement and attestation

Intrinsic Trust:- Building explicit, positive and immutable trust methods into the hardware

and software systems, for example Root of Trust for Measurement (RTM) and Trusted Platform Modules (TPM’s), along with supply chain-anchored hardware and software provenance and attestation


Contents



Implementing Trust



ReferenceConfigurations

Application Data and Signature Database Global Trust Repository

(GTR)

Enterprise Trust Server

Reporting

Inventory Reports

Change Reports

Compliance Reports

Notifications

IT Infrastructure• Ecommerce Service• Trading Service• Virtual Infrastructure• Web Servers• Database Servers• File Servers

• Directory Servers

Compliance Assessment

+2000 other vendors

Trusted Reference Technology

> 2.8B code component signatures as deployed directly from the source

Firmware and software on all active network (switches, routers, firewalls) and computing components continuously monitored

Beyond Security – Explicit Trust

Control over your IT

Compliance posture delivered on demand

Software supply chain integrity


Proof that the code was actually built by the named supplier is a crucial element of software and device validation or attestation

Trust and Supply Chain

Do I know that the software elements that I am loading and running on my platform ARE what they say they are?

What proof do I have that the code I am using was actually built by the named vendor?

Is an increasing concern for software & hardware vendors and users in all sectors


Delivering Cyber Assurance Through Continuous Monitoring and Control


Contents



Implementing Trust



The Trusted Enterprise Cloud

World-class and purpose-built infrastructure – the Cyber Integration Center and Harris’ network of cyber facilities and operations centers

Best-of-breed systems and processes – focused on virtualization, automation, a unique end-to-end service model, and customized control through the client portal

Trust Enablement Technology – continuous monitoring and assessment of the device and software supply chain using our Global Trust Repository of industry standard reference images and external vulnerability feeds

The industry’s first enterprise-grade, high-assurance cloud computing solution

ReferenceConfigurations

Application Data and Signature Database Global Trust Repository

(GTR)


Reporting

Inventory Reports

Change Reports

Compliance Reports

Notifications

IT Infrastructure• Ecommerce Service• Trading Service• Virtual Infrastructure• Web Servers• Database Servers

• File Servers• Directory Servers

Compliance Assessment

+2000 other vendors


Trust In The Cloud

The industry’s first enterprise-grade, high-assurance cloud computing solution

World class partners providing best of breed technology

Cyber integration expertise to cost effectively meet the unique needs of your business

Trust enablement technology that goes beyond security to unprecedented visibility and control of your infrastructure

www.cyber.harris.com


Q & A

To ask a question, - Follow Operator Instructions- Or use the webex chat window


Learn more at www.bmc.com


Security ≠ Trust


Delivering Explicit Trust: Positive Assurance Methods

Trust is established at the hardware level via Trusted Computing Group (TCG) defined standard methodologies (TPM, Integrity Management Model)

When the system needs to prove its integrity, it sends the collected measurements in a process called attestation.

Before each subsequent level of the stack is loaded, it is measured by the preceding level and the result is stored in trusted hardware.


Proving Trust: Active & Continuous Transparency


Key Features & Benefits

Features Benefits

Global Trust Repository• Explicit trust that goes beyond security• Software supply chain traceable directly to vendor


• High fidelity change identification & control– What is on your system– Where it came from– How it is configured

• Control platform drift and increase platform stability

Built to industry's highest security standards

• Security controls in place to host compliant applications for HIPAA, PCI, FISMA, SOX and others

S-CAP Standardized Automation

• Real time vulnerability identification and security adjustments• See your compliance posture on demand• Lower your certification costs

Control via the client portal• Robust self service capability• Appears as extension of your infrastructure


BMC Cloud Lifecycle ManagementDelivers the foundation of Cloud Operations

Deliver business services with end-to-end cloud managementAutomatically installs, deploys and configures monitoringGuided monitoring configuration in CLM PlannerIntelligent policy-based placement and ongoing operations with the industry’s first Service GovernorSupport for heterogeneityIntegrated with key operational processes, performance and capacity management


Organizations are waking up to the problemThey are asking for three Cloud Management capabilities ….

Right-size capacity of individual services and the entire cloudOptimize the cloud infrastructure capacity for maximum business impact and utilization

Meet the user’s ongoing expectations for service quality End-user experience is managed according to business priorities, user identity, workload, location and impact


Proactive Service

Performance Management

Continuous Resource

Optimization

Ensure the performance of services and infrastructureDynamically monitor the cloud by analyzing known behaviors against established KPI’s to anticipate and automate management action

Cloud Operations SolutionIncorporate all three capabilities into a unified, modular solution


DB TierCDN

Web TierApp Tier

BMC End User Experience Mgmt Deep Diagnostics

From the data-center perspectiveService Level Enforcement

Service Level Enforcement End to end visibility for cloud and enterprise services

End to End

From the end-user perspective

Cloud Operations



Continuous Resource

Optimization


Service Level EnforcementTurn Visibility into Action

Manage horizontally – by site, by location, by customer, by delivery networkManage vertically – by application, business priority, audience, high value user, web page

Cloud Operations



Continuous Resource

Optimization


Proactive Service Performance ManagementExtend monitoring to public cloud resources

Single platform to monitor hybrid (public and private) IT servicesPublic Cloud monitoring OOTB – Amazon Web Services and Microsoft Azure Remote public cloud deployment of agents

Enterprise Data Center

BMC ProactiveNet Performance Management

Real-Time Predictive Analytics

Predictive Root Cause

Predictive Service Impact

Behavior Learning

Predictive Correlation

Public Cloud KM

Clo

ud P

ublic

A

PI

BPPM Agent

Secure Connection

BPPM Agent

Public Cloud Resources In-house Resources

Cloud Operations



Continuous Resource

Optimization


Continuous Resource OptimizationMaintaining the Right Infrastructure

IT INFRASTRUCTURE

Risk Tolerance

Business Volume

TIME

Budgets

SLAs

Optimize Physical Server UtilizationOptimize Virtual Machine DensitySupport multi-platform, multi-vendor physical, virtual cloud resources

vs.

Cloud Operations



Continuous Resource

Optimization


Current Challenges

Availability - Reactive management processes

struggling in an elastic environment

Service Performance- Unmet service expectations

Risk- High decision latency caused by

information silos

Operational Efficiency- Service delivered by underutilized

infrastructure and over burdened human resources


Meet the user’s ongoing expectations for service qualityBMC End User Experience Management

Cloud Operations



Continuous Resource

Optimization


Ensuring Infrastructure PerformanceBMC ProactiveNet Performance Management

Predictive analytics and prioritization based on business impactExtend service views into cloud, virtual and physical infrastructureSingle platform to monitor private and public (AmazonWS, Azure) clouds

Cloud Operations



Continuous Resource

Optimization


Right-size capacity of cloud services and the entire cloudBMC Capacity Optimization

Cloud Infrastructure Planning Intelligent Placement

Assess overall health and performance of your cloud environmentCross-cloud visibility of resource capacity utilization and efficiencySupport for VMWare and Citrix XenServer environments

Provide intelligent placement advisory to CLMOptimally allocate workload according to performance and policy constraintsIncrease the efficiency and utilization level of the entire cloud infrastructure

Cloud Operations



Continuous Resource

Optimization

Date post:	12-Jan-2015
Category:	Technology
Upload:	bmc-software
View:	1,471 times
Download:	0 times