Cloud Day – 17th Dec

2011

iWeekend – JECRC

whoami

Open source enthusiast and a Linux user since 2002

Co-founder Linux User Group, Jaipur

Associated with Fedora Project since 2008

Eucalyptus Community Member since 2009

Known as @jeevanullas on the internet

Agenda

Cloud Computing

Amazon Web Services (AWS)

Cloud APIs

Building our own AWS using Eucalyptus

Cloud Security

Cloud ?

“Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This cloud model promotes availability and is composed of five essential characteristics, three service models, and four deployment models”

Definition according to NIST

Essential Characteristics

On-demand self service

Broad network access

Resource pooling

Rapid elasticity

Measured service

Service Models

Cloud Software as a Service (SaaS)

Cloud Platform as a Service (PaaS)

Cloud Infrastructure as a Service (IaaS)

Deployment Models

Private Cloud

Community Cloud

Public Cloud

Hybrid Cloud

Amazon Web Services

Biggest public cloud Provider (IaaS)

Set of web services – accessible via API

Compute – EC2

Storage – S3, EBS

Database - RDS

Messaging - SQS

AWS is Huge ! Regions

Availability zones

AMI

Security Groups

Key pairs

Elastic IP

EBS

S3

EC2

IAM

RDS

ELB

Cloud Watch

Cloud Front

SNS

SQS

Elastic Beanstalk

Cloud Formation

Elastic Map Reduce

VPC

Route 53

…

AWS Security

SSH Keypairs

SSL Endpoints

Protect your Access/Secret keys

Protect your X.509 certificates

Security Groups

Virtual Private Cloud

Identity Access Management

Encrypting data at rest and data during transit

Different ways to access AWS• Command Line tools

• AWS Management Console• APIs

AWS Demo

Eucalyptus for the win !

AWS is so awesome so

why not build your own ?

Eucalyptus - Introduction

Elastic Utility Computing Architecture for Linking Your Programs To Useful Systems

Developed at UC Santa Barbara

Eucalyptus interface compatible with AWS

More than 25000 cloud deployments

Support for multiple hypervisors – XEN, KVM, VMware

Packaged for popular Linux distributions – Ubuntu, Centos, Debian

Eucalyptus – Architectural Components

Cloud Controller – EC2

Cluster Controller – Build availability zones similar to AWS

Storage Controller - EBS

Walrus – S3

Node Controller – Runs the virtual machines on Cloud

How to get started with Eucalyptus

Faststart – Quickest available to have your own cloud

http://open.eucalyptus.com/try/faststart

Eucalyptus Community Cloud

http://open.eucalyptus.com/try/community-cloud

Setup your own on your favorite Linux distribution

Demo of ECC

Image Management - Eucalyptuseuca-bundle-image -i vmlinuz-2.6.28-11-generic --kernel true

euca-upload-bundle -b jeevan-fed-kernel -m /tmp/<kernel file>.manifest.xml

euca-register jeevan-fedora/<kernel file>.manifest.xml

Image Management - Eucalyptus

euca-bundle-image -i initrd.img-2.6.28-11-generic --ramdisk true

euca-upload-bundle -b jeevan-fed-initrd -m /tmp/<initrd file>.manifest.xml

euca-register jeevan-fed-initrd/<initrd file>.manifest.xml

Image Management - Eucalyptus

euca-bundle-image -i fedora.10.x86-64.img --kernel <eki-XXXXXXXX> --ramdisk <eri-XXXXXXXX>

euca-upload-bundle -b jeevan-fed-vm -m /tmp/<vm image file>.manifest.xml

euca-register jeevan-fed-vm/<vm image file>.manifest.xml

Cloud Security

Protecting sensitive data on Cloud

Regulatory Compliant Cloud Computing (RC3)

http://www.infoq.com/articles/regulatory-compliant-cloud-computing

Classifying data

Sensitive and Regulated

Sensitive and non-Regulated

Non Sensitive Data

Importance of KeyAppliance

Eucalyptus Community#eucalyptus on irc.freenode.net

Regular IRC meetings in #eucalyptus-meeting

Meeting Calendar:

http://sl.eucalyptus.com/meetings

Mailing list for all (Join Us!)

http://lists.eucalyptus.com

Projects for Everyone

https://projects.eucalyptus.com/

Questions

Thanks