Cloud computing perspectives and questions - Revision history

Andyo: Tried to narrow topic of wiki

Andyo — Tue, 18 Aug 2009 14:22:20 GMT

Tried to narrow topic of wiki

←Older revision		Revision as of 14:22, 18 August 2009
Line 9:		Line 9:
	ideas can suggest points for ongoing research into the social and		ideas can suggest points for ongoing research into the social and
	economic issues (as well as relevant technical issues).		economic issues (as well as relevant technical issues).
		+
		+	Cloud computing is a huge topic, of course, spawning whole fields of study (as well as a lot of hype). This wiki tries to focus on long-term social and economic effects, especially on a global basis.

	= Definitions of cloud computing =		= Definitions of cloud computing =

Andyo: Fleshed out some considerations

Andyo — Mon, 17 Aug 2009 12:27:14 GMT

Fleshed out some considerations

←Older revision		Revision as of 12:27, 17 August 2009
Line 49:		Line 49:

	*** Best-known example is Google App Engine		*** Best-known example is Google App Engine
-
-	* APIs are central to all models and permit mash-ups, which may become much more pervasive and even dominate over stand-alone applications eventually

	* Data can also be stored in the cloud		* Data can also be stored in the cloud
Line 71:		Line 69:

	*** Jesse Vincent's Prophet		*** Jesse Vincent's Prophet
		+
		+	= APIs and mash-ups =
		+
		+	* Application Programming Interfaces (APIs) are central to all models
		+
		+	* APIs permit mash-ups, which may become much more pervasive and even dominate over stand-alone applications eventually
		+
		+	* Possibility of mash-ups can shift innovation to the periphery and democratize it,

	= Benefits and drawbacks for potential clients =		= Benefits and drawbacks for potential clients =
Line 123:		Line 129:

	* Sunk costs in existing hardware may slow move to cloud computing		* Sunk costs in existing hardware may slow move to cloud computing
-		+
		+	* Effects on innovation
		+
		+	** In addition to possibly reducing costs, the provision of a platform can simplify tasks for clients developing new uses and applications
		+
		+	*** IaaS removes the need to manage hardware and other physical aspects of data centers
		+
		+	*** PaaS provides the benefits of IaaS and also handles many of the logistical and configuration tasks that programmers traditionally have to handle
		+
		+	** Choices made by the platform vendor can also, however, limit options for clients
		+
	= Benefits and drawbacks for vendor of offering software as a service or using a development environment =		= Benefits and drawbacks for vendor of offering software as a service or using a development environment =

Andyo: Some additions

Andyo — Mon, 17 Aug 2009 12:20:24 GMT

Some additions

←Older revision		Revision as of 12:20, 17 August 2009
Line 58:		Line 58:
	** Some services build in replication, often by partitioning data in such a way that a subset of replicas can rebuild the entire data		** Some services build in replication, often by partitioning data in such a way that a subset of replicas can rebuild the entire data

-	* ~~Private~~ cloud is virtualization ~~applied~~ within a single organization to support its own operations	+	* The term "private cloud" refers to virtualization implemented within a single organization to support its own operations

		+	** Can provide some of the same flexibility and culture change as use of an external cloud
		+
	* Peer-to-peer systems permit clients to coordinate storage		* Peer-to-peer systems permit clients to coordinate storage

Line 133:		Line 135:

	** Testing can be simplified by simply cloning an instance of the software environment		** Testing can be simplified by simply cloning an instance of the software environment
		+
		+	** Reduced support costs because vendor doesn't have to deal with many divergent versions of software in the field (although differences in browsers and other aspects of the environment can still affect the service's behavior)

	* Many free software developers already use a service such as SourceForge or Launchpad to develop and distribute software		* Many free software developers already use a service such as SourceForge or Launchpad to develop and distribute software
Line 292:		Line 296:
	* When data is stored on a vendor's server, the client must trust the vendor or encrypt all data (see [[#Security in Cloud Computing]])		* When data is stored on a vendor's server, the client must trust the vendor or encrypt all data (see [[#Security in Cloud Computing]])

-	* The vendor may use information about the client for marketing and other purposes, depending on the terms of service and privacy policy	+	* Questions about ownership of data (particularly for Saas)
		+
		+	** When different clients' data has additional value when aggregated (such as in social networks), the vendor may claim ownership
		+
		+	*** Clients can usually delete items of data, but bulk deletions may be difficult
		+
		+	*** The vendor usually leaves copyright with the client, but claims certain rights to use
		+
		+	** The vendor may use information about the client for marketing and other purposes, depending on the terms of service and privacy policy
		+
		+	** Questions whether vendors can be held liable for illegal use of systems or illegal content stored on them

	* In the United States, data stored by a third party is more easily demanded by governments than data on the client's own systems (which require a subpoena)		* In the United States, data stored by a third party is more easily demanded by governments than data on the client's own systems (which require a subpoena)

-	* Regulations (such as HIPAA and Sarbanes-Oxley in the United States) ~~can~~ rule out the use of a cloud or increase the difficulties of using one	+	* Regulations (such as HIPAA and Sarbanes-Oxley in the United States) might rule out the use of a cloud or increase the difficulties of using one
		+
		+	* Jurisdiction about laws apply to the location where data the data is stored, not the location of the client
		+
		+	** For instance, European Union privacy laws require personal data to be stored in a jurisdiction that respects their privacy directive
		+
		+	** Some governments require services to pay local taxes for services rendered to clients in those jurisdictions ([http://luminotes.com/blog/big-news-luminotes-is-now-free Luminotes case]), adding complexity to transactions

Andyo: Added APIs and mash-ups

Andyo — Sun, 16 Aug 2009 20:35:13 GMT

Added APIs and mash-ups

←Older revision		Revision as of 20:35, 16 August 2009
Line 49:		Line 49:

	*** Best-known example is Google App Engine		*** Best-known example is Google App Engine
		+
		+	* APIs are central to all models and permit mash-ups, which may become much more pervasive and even dominate over stand-alone applications eventually

	* Data can also be stored in the cloud		* Data can also be stored in the cloud

Andyo: More subtle about LANs

Andyo — Sat, 15 Aug 2009 23:35:53 GMT

More subtle about LANs

←Older revision		Revision as of 23:35, 15 August 2009
Line 276:		Line 276:
	** To protect data from unscrupulous service vendors, from those who can potentially break in, and from government demands, encryption becomes more important (see [[#Legal and privacy considerations]])		** To protect data from unscrupulous service vendors, from those who can potentially break in, and from government demands, encryption becomes more important (see [[#Legal and privacy considerations]])

-	** Because ~~there is no concept of~~ a local area network, ~~many~~ protocols and services that rely on the cooperation of benevolent parties on a local area network ~~must be eliminated~~	+	** Because systems are not on a local area network, administrators must create virtual LANs or forgo the use of protocols and services that rely on the cooperation of benevolent parties on a local area network (includes popular filesystem sharing protocols such as Microsoft's CIFS and Unix's NFS)
-		+
-	*** Includes popular filesystem sharing protocols such as Microsoft's CIFS and Unix's NFS	+

	** Access is also controlled by password, not by IP address or other indications of physical location		** Access is also controlled by password, not by IP address or other indications of physical location

Andyo: Added regulations

Andyo — Sat, 15 Aug 2009 21:29:05 GMT

Added regulations

←Older revision		Revision as of 21:29, 15 August 2009
Line 295:		Line 295:

	* In the United States, data stored by a third party is more easily demanded by governments than data on the client's own systems (which require a subpoena)		* In the United States, data stored by a third party is more easily demanded by governments than data on the client's own systems (which require a subpoena)
		+
		+	* Regulations (such as HIPAA and Sarbanes-Oxley in the United States) can rule out the use of a cloud or increase the difficulties of using one

Andyo: Private cloud

Andyo — Sat, 15 Aug 2009 21:26:38 GMT

Private cloud

←Older revision		Revision as of 21:26, 15 August 2009
Line 55:		Line 55:

	** Some services build in replication, often by partitioning data in such a way that a subset of replicas can rebuild the entire data		** Some services build in replication, often by partitioning data in such a way that a subset of replicas can rebuild the entire data
		+
		+	* Private cloud is virtualization applied within a single organization to support its own operations

	* Peer-to-peer systems permit clients to coordinate storage		* Peer-to-peer systems permit clients to coordinate storage
Line 256:		Line 258:
	* Should governments collaborate on producing public-domain or open-source social networks and cloud services tailored to their needs?		* Should governments collaborate on producing public-domain or open-source social networks and cloud services tailored to their needs?

-	= Cloud ~~Computing Standards~~ =	+	= Cloud computing standards =

	* Much talk of "open cloud computing" that would facilitate moving instances of servers or applications between vendors		* Much talk of "open cloud computing" that would facilitate moving instances of servers or applications between vendors
Line 266:		Line 268:
	** Compute-cycle measurement [http://www.elasticvapor.com/2009/05/redux-universal-compute-unit-compute.html proposal by Reuven Cohen]		** Compute-cycle measurement [http://www.elasticvapor.com/2009/05/redux-universal-compute-unit-compute.html proposal by Reuven Cohen]

-	= Security in ~~Cloud Computing~~ =	+	= Security in cloud computing =

	* Data and operations in the cloud can be as secure as they are on physical systems, and the basic building blocks of security are the same		* Data and operations in the cloud can be as secure as they are on physical systems, and the basic building blocks of security are the same

Andyo: Added security and legal issues

Andyo — Sat, 15 Aug 2009 21:23:47 GMT

Added security and legal issues

←Older revision		Revision as of 21:23, 15 August 2009
Line 268:		Line 268:
	= Security in Cloud Computing =		= Security in Cloud Computing =

-	* ~~Cloud~~ might provide a recovery strategy for distributed denial-of-service attacks [http://www.elasticvapor.com/2009/07/federal-cloudbursting-cyber-defense.html Cloudbursting proposal by Reuven Cohen]	+	* Data and operations in the cloud can be as secure as they are on physical systems, and the basic building blocks of security are the same
		+
		+	* But the weights of different threats and solutions are different inside and outside the cloud
		+
		+	** To protect data from unscrupulous service vendors, from those who can potentially break in, and from government demands, encryption becomes more important (see [[#Legal and privacy considerations]])
		+
		+	** Because there is no concept of a local area network, many protocols and services that rely on the cooperation of benevolent parties on a local area network must be eliminated
		+
		+	*** Includes popular filesystem sharing protocols such as Microsoft's CIFS and Unix's NFS
		+
		+	** Access is also controlled by password, not by IP address or other indications of physical location
		+
		+	** Firewalls, both on the IP and application levels, are still valuable, although the concept of a DMZ or of being "behind the firewall" is virtual, not tied to the architecture of a physical network
		+
		+	** Backups and replication are crucial because virtual servers often go down and all data can be lost
		+
		+	* Clouds might provide a recovery strategy for distributed denial-of-service attacks [http://www.elasticvapor.com/2009/07/federal-cloudbursting-cyber-defense.html Cloudbursting proposal by Reuven Cohen]
		+
		+	= Legal and privacy considerations =
		+
		+	* When data is stored on a vendor's server, the client must trust the vendor or encrypt all data (see [[#Security in Cloud Computing]])
		+
		+	* The vendor may use information about the client for marketing and other purposes, depending on the terms of service and privacy policy
		+
		+	* In the United States, data stored by a third party is more easily demanded by governments than data on the client's own systems (which require a subpoena)

Andyo: Cut down and integrated Cohen cloudbursting proposal

Andyo — Sat, 15 Aug 2009 21:08:59 GMT

Cut down and integrated Cohen cloudbursting proposal

←Older revision		Revision as of 21:08, 15 August 2009
Line 266:		Line 266:
	** Compute-cycle measurement [http://www.elasticvapor.com/2009/05/redux-universal-compute-unit-compute.html proposal by Reuven Cohen]		** Compute-cycle measurement [http://www.elasticvapor.com/2009/05/redux-universal-compute-unit-compute.html proposal by Reuven Cohen]

-	= Cloud Computing ~~/ Cyber Defense & Security~~ =	+	= Security in Cloud Computing =

-	~~== Federal CloudBursting & Cyber Defense Contingency Plan ==~~	+	* Cloud might provide a recovery strategy for distributed denial-of-service attacks [http://www.elasticvapor.com/2009/07/federal-cloudbursting-cyber-defense.html Cloudbursting proposal by Reuven Cohen]
-		+
-	~~A few of the key points I will be presenting at Monday's Federal~~ Cloud ~~Standards summit in Washington DC include;~~	+
-		+
-	* Defining how to actually recover from serious Cyber attacks with a ~~minimum level time cost and disruption.~~	+
-		+
-	* Focus on limiting the effects that cyber attacks ~~cause.~~	+
-		+
-	* A plan to address specific strategies and actions to deal with cyber threats in realtime	+
-		+
-	* Include a monitoring process and “triggers” for initiating planned actions (GovBursting)	+
-		+
-	~~See my complete post here >~~ http://www.elasticvapor.com/2009/07/federal-cloudbursting-cyber-defense.html	+

Andyo: More about benefits, costs

Andyo — Sat, 15 Aug 2009 19:57:05 GMT

More about benefits, costs

←Older revision		Revision as of 19:57, 15 August 2009
Line 72:		Line 72:
	** Allows new organizations to be formed with minimal overhead		** Allows new organizations to be formed with minimal overhead

-	** Existing organizations can change personnel, move ~~or mutate rapidly~~	+	** Existing organizations can change personnel, move, experiment, and deploy new services rapidly
-		+
-	** Enables virtual organizations - with no physical infrastructure, ~~just shared data and processes~~	+
-		+
-	* Existing organizations can experiment ~~with~~ and deploy new services ~~quickly~~	+

	** Less reliance on a central IT group to provision servers		** Less reliance on a central IT group to provision servers

	** May disrupt old centers of power and decision-making, somewhat as the desktop PC did in the 1980s		** May disrupt old centers of power and decision-making, somewhat as the desktop PC did in the 1980s
		+
		+	** Enables virtual organizations -- with no physical infrastructure, just shared data and processes

	* Total reliance on a cloud service (virtual machine services or SaaS)		* Total reliance on a cloud service (virtual machine services or SaaS)
Line 114:		Line 112:
	** If clients' system administrators are deskilled by outsourcing system administration, can reduce companies' competence to judge SLAs and negotiate safe contracts.		** If clients' system administrators are deskilled by outsourcing system administration, can reduce companies' competence to judge SLAs and negotiate safe contracts.

		+	* Costs and potential savings
		+
		+	* Much disagreement over costs of system administration after move to a cloud -- many sysadmin tasks are just as complex and demanding as with stand-alone systems
		+
		+	* Sunk costs in existing hardware may slow move to cloud computing
		+
	= Benefits and drawbacks for vendor of offering software as a service or using a development environment =		= Benefits and drawbacks for vendor of offering software as a service or using a development environment =