rightscale webinar: hybrid-it: connecting your on-premises infrastructure with aws

Ask the Architect Connect Your On-‐Premises Infrastructure to AWS

Brian Adler, Sr. Services Architect, RightScale Miles Ward, Sr. Manager, SoluBons Architecture, AWS August 27, 2013

IntroducBons

Q&A •  Michael Curry, Account Execu6ve, RightScale •  Bryan Cox, Sales Development Representa6ve

Brian Adler Senior Services Architect RightScale

Miles Ward Senior Manager SoluBons Architecture AWS

Agenda

•  DefiniBons and terminology •  Enterprise strategies for hybrid IT •  Technologies for implemenBng hybrid paOerns with AWS •  Key consideraBons for hybrid IT •  ImplemenBng hybrid IT with RightScale and AWS •  Use cases •  Q&A

Hybrid IT Trends

Source: RightScale State of the Cloud 2013

Currently running apps in public cloud

Currently running apps in on-premises environments

Currently running apps in hybrid environments

Current Cloud Usage By organizations with a Hybrid IT strategy

Enterprises want multi-cloud/hybrid IT

Hybrid IT 47%

Multi-private 15%

Multi-public 15%

DefiniBons and Terminology

On-‐Premises IT A collecBon of compute, storage, and network resources for a single tenant that are accessed programmaBcally via an API endpoint.

Cloud Architecture A similar set of resources that is mulB-‐tenant and is provided by a cloud vendor with access via an API endpoint.

Hybrid IT An environment that spans your cloud provider as well as one or more on-‐premises IT environments.

Mul6-‐Cloud An environment that spans two or more separate cloud providers or regions

The Business Case for Moving to the Cloud IT Needs The AWS + RightScale SoluBon

The ability to scale your project porYolio without the need to scale headcount.

•  Professional services to design and implement. •  Provision predictable and repeatable AWS and on-‐

premises resources. •  Ensure compliance on all IT resources.

Ensuring 24x7 upBme in a global marketplace.

•  Advanced monitoring and alerBng. •  Automated remedial acBons across all your IT resources.

Maintain visibility and control. Advanced reporBng and user access providing visibility and control across all your IT resources.

Consolidated management of infrastructure environments.

A single pane of glass for managing both all your IT resources.

AWS ConnecBons to the Enterprise

Enterprises are AdopBng AWS to Achieve the Benefits of the Cloud

Replace CapEx with OpEx

✔

Lower Overall Costs

✔

No More Guessing Capacity

✔

Agility / Speed / Innovation

✔ ✔

Shift Focus to Differentiation

Go Global in Minutes

✔

Many Enterprises Worry that These Are the Only Two Choices

Build a new ‘private’

cloud.

Rip everything out and move to AWS.

#1 #2

The Good News Is that the Cloud Isn’t an ‘All or Nothing’ Choice

Corporate Data Centers

On-premises Resources

Cloud Resources Integration

Active Directory Network Configuration

Encryption Back-up Appliances

Users & Access Rules (IAM) Your Private Network (VPC)

Encryption (S3, RDS, HSM) Back-ups (Storage Gateway)

AWS Direct Connect

Your On-premise Apps Your Cloud Apps

IntegraBng AWS with Your ExisBng On-‐premises Infrastructure


The AWS Ecosystem Allows You to Use Your ExisBng Management Tools

Single Pane of Glass

On-premises Data Centers

Consulting & Management Partner

Strategies Enterprises Are Using To Connect with AWS

Strategy 1: Cloud for Development and Test Environments

SAP

Reduced deployment time from weeks to days

SAP

70% reduction in operational costs

Oracle

Reduced dev & test environment costs

“Using cloud for Test and Development workloads is an easy win. A lot of enterprises are using AWS in this way first.”

James Governor, Founder

Strategy 2: Build New Apps for the Cloud

Faster to build

Facebook app

Global web sites

Mobile streaming

Social games

Consumer apps

Genetic sequencing

Marketing campaigns

Less expensive to run

Distributed architectures for high availability

Easier to manage

Financial record archiving

Analytics

Backup

Storage Gateway

Elastic Map Reduce

Redshift

Amazon S3

Strategy 3: Use Cloud to Make ExisBng On-‐Prem Apps BeOer


...

App 1

App 2

App N

Operational applications

Export data to AWS for analytics processing

Oracle databases

Automated back-up to S3 with Oracle RMAN

Strategy 3: Use Cloud to Make ExisBng On-‐Prem Apps BeOer

Retail operational applications

Data synchronization & back-up with AWS storage gateway

Strategy 4: New Cloud Apps that Integrate Back to On-‐Prem Systems

On-premises Data Centers

Hybrid App

AWS serves up application content & data

Integration back to Samsung Data Centers for financial transactions

Strategy 5: Migrate ExisBng Apps to the Cloud

1/3 of servers migrated to AWS

Saved 1-1.5 million GBP

App

Your Data Center

Migrated 500 web properties in 5

months

New product web sites in 2 days vs. 2

weeks

Migrated clinical trials simulations platform

Simulations in 1.2hrs vs. 60hrs

64% reduction in costs

App

Strategy 6: All-‐In

10,000s of EC2 instances in multiple regions & zones

100s of middle tier services & applications to support 33M+ global members

At peak consumes 1/3 of US Internet bandwidth

On-premises Cloud

AWS Direct Connect

Internet

VPC VPN

The AWS Storage Gateway

Internet

S3 Storage Gateway

App

Volume

On-premises Cloud

Storage Gateway

The AWS Storage Gateway

On-premises

Internet

S3 Storage Gateway

App

Cloud

Volume

Volume

Internet

Cloud

Storage Gateway

On-premises

Internet

S3 Storage Gateway

App

Volume

A Disaster Happens

Internet

Storage Gateway

Internet

Storage Gateway

App

Volume

Disaster Recovery

EBS

On-premises

S3 Storage Gateway

Internet

SNAPSHOT

Internet

S3 Storage Gateway

App

Volume

Disaster Recovery

EC2 EBS

On-premises

Storage Gateway

Internet

App

Internet

Disaster Recovery

EC2 EBS

App

On-premises

EC2 EBS

App

Internet

ImplementaBon and Management of Hybrid IT

On-‐Premises IT: Key ConsideraBons

Cost •  Sunk investment in physical infrastructure – try to maximize the uBlizaBon of

this CAPEX Workload and Infrastructure Interac6on

•  ApplicaBons have different resource needs •  Choose the right fit for your applicaBon and your infrastructure

Compliance •  Data may be contained on-‐premises for compliance needs or requirements.

On-‐Premises IT: Key ConsideraBons

Latency •  Consumers of the on-‐premises resources are generally “closer” to the

environment, which reduces latency User Experience

•  Related to latency, end user experience is enhanced due to proximity to resources.

Management ConsideraBons

Elevates: •  Configurations •  APIs •  Automation behaviors •  Access control •  Billing and governance

Users and systems

RightScale – MulB Infrastructure Resource Management

Common API and UI

AWS On-‐Premises OS

Hardware Hypervisor Services

APIs APIs

Design Considerations

Location of Physical Hardware •  On-premises

•  Availability considerations (power, cooling, networking, etc.) •  Hosted or Co-location facility

•  Accessibility of hardware for additions and/or modification •  Latency to end users •  Security

Design ConsideraBons

Availability and Redundancy Configuration •  Easiest configuration (single zone, single region, single API endpoint)

does not promote high availability •  High Availability of resources requires more complex configurations

Design ConsideraBons/OpBons

Simple ConfiguraBon No HA or Redundancy

HA ConfiguraBon

Design ConsideraBons

Intended Workloads and Use Cases •  Does the applicaBon require high availability or is it tolerant of interrupBons

of service? •  Does the applicaBon require (or greatly benefit from) specialized hardware or

network configuraBons?

Use Cases Cloudburs6ng

–  An applicaBon deployment model in which an applicaBon runs in your on-‐premises environment and bursts to a cloud provider when the demand for compuBng capacity spikes.

–  The advantage of a cloud bursBng-‐enabled deployment is that an organizaBon only pays for extra compute resources when they are needed.

–  ConsideraBons: •  Control – public Internet traversal may be required •  Latency – traversal of public Internet involves the Great Unknown •  Cost – bandwidth charges for public Internet traversal •  Complexity – numerous opBons exist for configuraBon of a hybrid secure environment

Hybrid IT / CloudbursBng

ON-PREMISES CLOUD

LOAD BALANCERS

APP SERVERS

MASTER DATABASE

SLAVE DATABASE

OBJECT STORAGE

APP SERVERS

PUBLIC INTERNET

CloudbursBng

Use Cases

Disaster Recovery (DR) •  ProducBon environment in on-‐premises environment •  DR environment in the cloud •  Most common configuraBon is the “Warm DR” scenario

•  ReplicaBng slave in the cloud •  All other servers in non-‐operaBonal state

Use Cases

On-Premises Public Cloud or On-Premises Resources

Disaster Recovery (DR)

Use Cases Self-‐Service IT Portal (“IT Vending Machine”)

•  Users select one of several pre-‐configured tech stacks •  Isolated Test/Dev environments

User identity Your portal

On-Premises

end users (web browser)

request a certain server type is launched, and specify cloud location

Amazon Web Services

Deploy the chosen server in a private or public cloud, based on the ServerTemplate

Service catalog of IaaS applications (ServerTemplates) RightScale API

RightScale UI

service designers(web browser)

server instance

Self Service IT Portal

server instance

is displayed as service catalogue items within

review access logs, version control and change logs, set permissions

managers (web browser)

billing data sent to RightScale, for all cloud usage

The Business Case for Moving to the Cloud IT Needs The AWS + RightScale SoluBon

The ability to scale your project porYolio without the need to scale headcount.

•  Professional services to design and implement. •  Provision predictable and repeatable AWS and on-‐

premises resources. •  Ensure compliance on all IT resources.

Ensuring 24x7 upBme in a global marketplace.

•  Advanced monitoring and alerBng. •  Automated remedial acBons across all your IT resources.

Maintain visibility and control. Advanced reporBng and user access providing visibility and control across all your IT resources.

Consolidated management of infrastructure environments.

A single pane of glass for managing both all your IT resources.

Upcoming “Ask the Architect” Events

OperaBonalize Your AWS Usage Through An Enterprise IT Vending Machine

Depth of con

tent

Webinar

Digging Deep with Hybrid IT

AWS re:Invent

In Person

Online 9/17

Los Angeles 9/10 NYC 10/1 Boston 10/15

Connecting your Datacenter to AWS Designing and Implementing a Hybrid IT Strategy and Solution

@ AWS re:Invent Las Vegas, NV

11/12

Q&A

•  [I am] looking for reusable templates, best pracBces, and approaches to perform assessments on moving workloads to the cloud.

•  RightScale MulBCloud Marketplace

–  Repository of hundreds of publicly-‐available ServerTemplates

•  Onboarding/CloudSight/CloudRank

Q&A

•  How does applicaBon management work in hybrid clouds where the private cloud workload may burst to AWS? What are good pracBces for app data sync when the app is running in private cloud and AWS?

•  Stateless applicaBon servers are best-‐suited to cloudbursBng. •  If data synchronizaBon is required:

–  Highly-‐available shared storage (such as S3) –  High-‐performance shared filesystem (like GlusterFS or OpenAFS) –  Implement a low-‐latency secure link (such as DirectConnect).

Q&A

•  Is there a published checklist somewhere of what all needs to be validated prior to deciding to move a system (Exchange, AD, etc.) to the cloud? And is there a checklist for what all needs to take place when you actually decide to move something? Do you have any whitepapers to show how customers have been impacted posiBvely by moving on prem systems to cloud that most customers have (i.e. Exchange, Email, etc.) How have they saved money, provided beOer performance, etc.), and made their lives easier?

•  This is a common quesBon we get at RightScale -‐-‐ so common that we developed a consulBng product offering around for this exact need (CloudSight). This is tough to answer in general terms, but would be a great topic for our in-‐person events.

Q&A

•  How does using Amazon VPC impact using right scale middle ware? •  Instances need to route out to RightScale (no inbound access required).

–  NAT –  EIPs –  Route through on-‐premise device

Q&A

•  How to deal with long distance latency issues in data transfer? •  WAN OpBmizaBon Tools

–  Compression/De-‐dup/TCP OpBmizaBons, etc.

Q&A

•  If we save data to the AWS cloud, does the key reside on the cloud or with us exclusively? (for security reasons, we would prefer not to have the key reside on the cloud as it does on some systems)

•  TrendMicro, a RightScale partner, has SecureCloud which allows data

encrypBon with the key management provided by Trend’s SaaS plaYorm (not in AWS), or in your own datacenter.

rightscale webinar: hybrid-it: connecting your on-premises infrastructure with aws

Technology