The Hybrid Cloud

Presented by:

Simeon Stoychev – CIO

2

About Telerik

Leading provider of development and testing tools for web, desktop and mobile applications.

Trusted by over 100,000+ customers from 94 countries worldwide

Well known for its industry-leading support and innovation

600+ employees

11 offices around the globe

3

How to fail a cloudy project . . .

Fail to understand your own requirements

Falling in love with the technology too early

Asking “when” instead of “why”

Looking at cloud computing as a mere platform change and not architecture

Ignoring performance

4

What is a Hybrid Cloud?

A combination of public and private clouds bound together by either standardized or proprietary technology that enables data and application portability.

The shift from ‘cloud’ to ‘clouds’ and the new dimension to effectively manage both exceptional and routine business processes.

In reality it’s about your business goals and how to transform IT to support those goals.

5

How it looks like?

6

Benefits

Business Agility

Both the controls available in a private cloud deployment along with the ability to rapidly scale using public clouds.

Support for unexpected additional computing resource needs.

Drastic improvements in organizational agilityLeverage public clouds Increased opportunities unavailable in traditional infrastructure or pure private clouds.

7

More Benefits

Cost Savings

Reduces capital expenses Some infrastructure needs are outsourced to public cloud providers.

Improves resource allocation for temporary projects at a vastly reduced cost

Helps optimize infrastructure spending during application lifecycle stages.

Private clouds can be used for productionPublic clouds can be tapped for development and testing Public clouds can be used to retire applications at lower costs.

8

Security Considerations

Perimeter extensionHybrid cloud extend the IT perimeter outside the organizational boundariesOpen up a larger surface area for attacks with a section of the hybrid cloud infrastructure under the control of the service provider.

Identity and access managementApproach to solve identity needs – extend the existing enterprise identity and access management to the public clouds. Concerns – effect on enterprise identity and impact on organization’s security.

Management toolsConsider security implications of complex hybrid cloud management tools (both as parts of the platform or as third-party tools)

9

More Security Considerations

Data migrationHybrid clouds make data flow from private environment to public cloud much easier. Concerns – privacy controls in public cloud environment vary significantly from private clouds.

Security policiesRisks associated with security policies spanning the hybrid cloud existE.g. issues with how encryption keys are managed in a public cloud compared to a pure private cloud environment.

10

Security Best Practices

VM-level securityPerimeter of hybrid cloud environment is not only elastic Also spans multiple clouds including on-premise private cloudsImplement security at the virtual machine level that travels through the on-premise data center, in the cloud and between multiple cloud providers

Multi-layered defenseTools like firewall, IDS/IPS, log inspection, etc. geared towards virtual machines.Traffic between virtual machines continuously monitored by setting appropriate policies

Traffic controlControl the incoming traffic to the public cloud with on-premise gatewayDo not provide direct access

11

More Security Best Practices

Data and encryptionData in the cloud should be encryptedAn encryption solution needs well-designed encryption key management policiesBusiness should retain encryption-key ownership (separation of duties with cloud provider)Encryption-key ownership benefits: own encryption across cloud, prevent vendor lock-in

Security controlSecurity controlled by the business, not the cloud vendor.

Regulatory complianceUnderstand the impact of regulationsAssess policies and procedures that with respect to hybrid cloud deployment.

Examine application securityApplications require a detailed security assessment To gauge the required security posture in multi-tenancy cloud environment.

12

Icenium is an Integrated Cloud Environment (ICE) that simplifies cross-platform mobile development by combining the convenience of a local development environment with the power and flexibility of the cloud.

Icenium™ intends to let web and mobile web developers to use their existing skills in HTML5, CSS and JavaScript to easily create modern and compelling native applications that run will engage your users on whatever platform they are on.

13

Thank you!

Get in touch

simeon@telerik.com

bg.linkedin.com/pub/simeon-stoychev/32/311/40

http://www.facebook.com/simeon.stoychev.3