Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"

•

0 gefällt mir•556 views

CloudCamp Chicago

"A Hypothetical Public Cloud Do Over" - John Downey, Product Developer and Security Lead at Braintree @jtdwney

Technologie

"A Hypothetical Public Cloud Do
Over"
!
John Downey,
Product Developer and Security Lead at
Braintree
!
!
Tweet: @jtdwney
#cloudcamp
Sponsored by
Hosted by
#cloudcamp
@CloudCamp_CHI

Why
• Hypothetical exercise
• Fun to think about
• Most of this didn't exist when we started
4

Amazon Web Services
• PCI Level 1 Service Provider
• Where our experience is
• A lot of movement happening
• Newer offerings
• Virtual Private Cloud (VPC)
• CloudHSM
5

Bank Connectivity
• VPN hardware
• MPLS link
• Can't do with regular EC2 !
9

VPC
• Replaces the network backing of AWS
• EC2
• RDS
• many others
• Allows greater control over IP addressing
10

Security
• Store keys in taper resistant way
• Acceleration for cryptographic operations
• Makes certain audits much easier
14

CloudHSM
• Pricey
• $5,000 upfront for one
• $1,373 average per month
• You'll probably want at least two
15

Disaster Recovery
• Capacity planning can be hard
• Physical hardware has lead times
• Run Multi-region
17

Photos
• https://flic.kr/p/8avArb
• https://flic.kr/p/8eRC2
18

Empfohlen

How to deploy a Private Cloud based on WAP and NutanixTom Van Gramberen

Event Sourcing your AngularJS applicationsMaurice De Beijer [MVP]

VMUG St Louis - SDN in the Real WorldChris Wahl

Automating Cloud Cluster Deployment: Beyond the BookBill Havanki

Comprendre les différents types de CloudOVHcloud

Automation for Anyone at Nutanix NEXT 2017 USChris Wahl

Bosh - Configuring ServicesAndrew Shafer

Cloud computing fundamentals with Microsoft AzureRadoslav Gatev

Empfohlen

How to deploy a Private Cloud based on WAP and NutanixTom Van Gramberen

Event Sourcing your AngularJS applicationsMaurice De Beijer [MVP]

VMUG St Louis - SDN in the Real WorldChris Wahl

Automating Cloud Cluster Deployment: Beyond the BookBill Havanki

Comprendre les différents types de CloudOVHcloud

Automation for Anyone at Nutanix NEXT 2017 USChris Wahl

Bosh - Configuring ServicesAndrew Shafer

Cloud computing fundamentals with Microsoft AzureRadoslav Gatev

Deploying Web-Scale Private Clouds using the Azure Pack and Nutanix Web-scale...Tom Van Gramberen

Scotland VMUG - My Journey to Full Stack EngineeringChris Wahl

How it's made - MyGet.org - AzureConfMaarten Balliauw

Containerization: The DevOps Revolution SoftServe

Kubernetes 201: Taking your Managed Kubernetes service to the next levelOVHcloud

Supercharge Application Delivery to Satisfy UsersNGINX, Inc.

Google Cloud Platform for DeVops, by Javier Ramirez @ teowakijavier ramirez

ECMDay2015 - Kim Oppalfens – Microsoft System Center Configuration Manager: H...Kenny Buntinx

Florin Loghiade - Azure Site Recovery si Backup in Microsoft AzureAvaelgo

Web scale architecture designNepalAdz

Microservices: Living Large in Your Castle Made of SandMongoDB

Kubernetes, The Day AfterApcera

The 7 deadly sins of micro servicesAidan Casey

Using the KVMhypervisor in CloudStackShapeBlue

Kudu voodoo slideshareAidan Casey

[db tech showcase Tokyo 2017] C16: Azure SQL Database - Are you ready for the...Insight Technology, Inc.

Altitude San Francisco 2018: Preparing for Video Streaming Events at ScaleFastly

Tudor Damian - Microsoft Azure ca si solutie pentru backup sau disaster recoveryAvaelgo

ECMDay2015 - Kent Agerlund – Configuration Manager 2012 – A Site ReviewKenny Buntinx

AWS Customer Presentation - SchoolofEverythingAmazon Web Services

Working in the CloudStefanie Ainge Hahn

Cloud in io t 12042016Fedor Antsiferov

Weitere ähnliche Inhalte

Was ist angesagt?

Deploying Web-Scale Private Clouds using the Azure Pack and Nutanix Web-scale...Tom Van Gramberen

Scotland VMUG - My Journey to Full Stack EngineeringChris Wahl

How it's made - MyGet.org - AzureConfMaarten Balliauw

Containerization: The DevOps Revolution SoftServe

Kubernetes 201: Taking your Managed Kubernetes service to the next levelOVHcloud

Supercharge Application Delivery to Satisfy UsersNGINX, Inc.

Google Cloud Platform for DeVops, by Javier Ramirez @ teowakijavier ramirez

ECMDay2015 - Kim Oppalfens – Microsoft System Center Configuration Manager: H...Kenny Buntinx

Florin Loghiade - Azure Site Recovery si Backup in Microsoft AzureAvaelgo

Web scale architecture designNepalAdz

Microservices: Living Large in Your Castle Made of SandMongoDB

Kubernetes, The Day AfterApcera

The 7 deadly sins of micro servicesAidan Casey

Using the KVMhypervisor in CloudStackShapeBlue

Kudu voodoo slideshareAidan Casey

[db tech showcase Tokyo 2017] C16: Azure SQL Database - Are you ready for the...Insight Technology, Inc.

Altitude San Francisco 2018: Preparing for Video Streaming Events at ScaleFastly

Tudor Damian - Microsoft Azure ca si solutie pentru backup sau disaster recoveryAvaelgo

ECMDay2015 - Kent Agerlund – Configuration Manager 2012 – A Site ReviewKenny Buntinx

AWS Customer Presentation - SchoolofEverythingAmazon Web Services

Was ist angesagt? (20)

Deploying Web-Scale Private Clouds using the Azure Pack and Nutanix Web-scale...

Scotland VMUG - My Journey to Full Stack Engineering

How it's made - MyGet.org - AzureConf

Containerization: The DevOps Revolution

Kubernetes 201: Taking your Managed Kubernetes service to the next level

Supercharge Application Delivery to Satisfy Users

Google Cloud Platform for DeVops, by Javier Ramirez @ teowaki

ECMDay2015 - Kim Oppalfens – Microsoft System Center Configuration Manager: H...

Florin Loghiade - Azure Site Recovery si Backup in Microsoft Azure

Web scale architecture design

Microservices: Living Large in Your Castle Made of Sand

Kubernetes, The Day After

The 7 deadly sins of micro services

Using the KVMhypervisor in CloudStack

Kudu voodoo slideshare

[db tech showcase Tokyo 2017] C16: Azure SQL Database - Are you ready for the...

Altitude San Francisco 2018: Preparing for Video Streaming Events at Scale

Tudor Damian - Microsoft Azure ca si solutie pentru backup sau disaster recovery

ECMDay2015 - Kent Agerlund – Configuration Manager 2012 – A Site Review

AWS Customer Presentation - SchoolofEverything

Andere mochten auch

Working in the CloudStefanie Ainge Hahn

Cloud in io t 12042016Fedor Antsiferov

Nice, France Talk. Working in the Cloud, 2011John Mayfield

Global IoT Cloud Services Survey-Aug-20160527August Lin

Cloud by Example for Interactive AgenciesAmazon Web Services

IoT Developer Survey 2015Ian Skerrett

Connected Car Security and the Future of Transportation Liz Slocum

AWS re:Invent 2016: Introduction to AWS IoT in the Cloud (IOT204)Amazon Web Services

Open IoT Cloud Architecture, Web of Things, Shenzhen, China.Jollen Chen

IoT Developer Survey 2016Ian Skerrett

Cloud computing simple pptAgarwaljay

Andere mochten auch (11)

Working in the Cloud

Cloud in io t 12042016

Nice, France Talk. Working in the Cloud, 2011

Global IoT Cloud Services Survey-Aug-20160527

Cloud by Example for Interactive Agencies

IoT Developer Survey 2015

Connected Car Security and the Future of Transportation

AWS re:Invent 2016: Introduction to AWS IoT in the Cloud (IOT204)

Open IoT Cloud Architecture, Web of Things, Shenzhen, China.

IoT Developer Survey 2016

Cloud computing simple ppt

Ähnlich wie Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"

02-WhyCloud.pdfBehroozDadkhah

Highly Available Docker Networking With BGPOpenDNS

Bursting into the public Cloud - Sharing my experience doing it at large scal...Igor Sfiligoi

Mapping Life Science Informatics to the CloudChris Dagdigian

Cloud Camp Chicago Dec 2012 SlidesRyan Koop

Cloud Camp Chicago Dec 2012 - All presentationsCloudCamp Chicago

Brisbane DevOps Meetup - Reinvent 2015Michael Villis

Real world cloud formation feb 2014 finalHoward Glynn

Matching Your Costs to Your DAU: Thin Client Back-End Infrastructure Made EasyPete Johnson

CloudStack Collaboration Conference Opening Remarksbuildacloud

Cloud storageBrappie

Cloud and Windows AzureRadu Vunvulea

Greenfields tech decisionsTrent Hornibrook

(SDD302) A Tale of One Thousand Instances - Migrating from Amazon EC2-Classic...Amazon Web Services

The impact of cloud NSBCon NY by Yves GoelevenParticular Software

Cloud Computing ExplainedGrant M Howe

IBM and Node.js - Old Doge, New TricksDejan Glozic

Cloud Computing: The Hard Problems Never Go AwayZendCon

ProfitBricks Cloud Computing IaaS An IntroductionProfitBricks

The Future of Cloud Networking is VMware NSX (Danish VMUG edition)Scott Lowe

Ähnlich wie Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over" (20)

02-WhyCloud.pdf

Highly Available Docker Networking With BGP

Bursting into the public Cloud - Sharing my experience doing it at large scal...

Mapping Life Science Informatics to the Cloud

Cloud Camp Chicago Dec 2012 Slides

Cloud Camp Chicago Dec 2012 - All presentations

Brisbane DevOps Meetup - Reinvent 2015

Real world cloud formation feb 2014 final

Matching Your Costs to Your DAU: Thin Client Back-End Infrastructure Made Easy

CloudStack Collaboration Conference Opening Remarks

Cloud storage

Cloud and Windows Azure

Greenfields tech decisions

(SDD302) A Tale of One Thousand Instances - Migrating from Amazon EC2-Classic...

The impact of cloud NSBCon NY by Yves Goeleven

Cloud Computing Explained

IBM and Node.js - Old Doge, New Tricks

Cloud Computing: The Hard Problems Never Go Away

ProfitBricks Cloud Computing IaaS An Introduction

The Future of Cloud Networking is VMware NSX (Danish VMUG edition)

Mehr von CloudCamp Chicago

CloudCamp Chicago lightning talk "IoT Perspectives from the Trenches" - Steve...CloudCamp Chicago

CloudCamp Chicago lightning talk IoT in Healthcare CloudCamp Chicago

CloudCamp Chicago lightning talk "Connecting Vehicles on Google Cloud Platfor...CloudCamp Chicago

CloudCamp Chicago lightning talk "The Internet of (Insecure) Things" - Chandl...CloudCamp Chicago

CloudCamp Chicago - June 17, 2015 The Internet of ThingsCloudCamp Chicago

CloudCamp Chicago lightning talk "Building warehousing systems on Redshi...CloudCamp Chicago

CloudCamp Chicago lightning talk "Spark: A Quick Ignition" - Matthew Kem...CloudCamp Chicago

CloudCamp Chicago lightning talk "Big Data without Big Infrastructure" by ...CloudCamp Chicago

CloudCamp Chicago - Big Data & Cloud May 2015 - All SlidesCloudCamp Chicago

CloudCamp Chicago April 2015 - Patrick Kerpan's talk "What Financial Cloud Sh...CloudCamp Chicago

CloudCamp Chicago April 2015 - Eero Pikat's talk "Micro-services and how they...CloudCamp Chicago

CloudCamp Chicago April 2015 - John Downey's talk "Put away the credit card, ...CloudCamp Chicago

CloudCamp Chicago April 2015 - "FinTech"CloudCamp Chicago

CloudCamp Chicago - March 2nd 2015 - Cloud Security CloudCamp Chicago

CloudCamp Chicago March 2nd Lightning talk from Jim Tarantino at MarkITx CloudCamp Chicago

CloudCamp Chicago March 2nd Lightning talk from Michael Roytman at Risk I/OCloudCamp Chicago

CloudCamp Chicago Jan 2015 - The Guts of the Cloud (full slides)CloudCamp Chicago

Cloudcamp Chicago Nov 2104 Fintech - Chris Hacker’s "Change is coming for re...CloudCamp Chicago

Cloudcamp Chicago Nov 2104 Fintech - Dwight Koop "East / West Chalkboard Talk"CloudCamp Chicago

Cloudcamp Chicago Nov 2104 Fintech - Justin Bouchard’s "Using Technology at ...CloudCamp Chicago

Mehr von CloudCamp Chicago (20)

CloudCamp Chicago lightning talk "IoT Perspectives from the Trenches" - Steve...

CloudCamp Chicago lightning talk IoT in Healthcare

CloudCamp Chicago lightning talk "Connecting Vehicles on Google Cloud Platfor...

CloudCamp Chicago lightning talk "The Internet of (Insecure) Things" - Chandl...

CloudCamp Chicago - June 17, 2015 The Internet of Things

CloudCamp Chicago lightning talk "Building warehousing systems on Redshi...

CloudCamp Chicago lightning talk "Spark: A Quick Ignition" - Matthew Kem...

CloudCamp Chicago lightning talk "Big Data without Big Infrastructure" by ...

CloudCamp Chicago - Big Data & Cloud May 2015 - All Slides

CloudCamp Chicago April 2015 - Patrick Kerpan's talk "What Financial Cloud Sh...

CloudCamp Chicago April 2015 - Eero Pikat's talk "Micro-services and how they...

CloudCamp Chicago April 2015 - John Downey's talk "Put away the credit card, ...

CloudCamp Chicago April 2015 - "FinTech"

CloudCamp Chicago - March 2nd 2015 - Cloud Security

CloudCamp Chicago March 2nd Lightning talk from Jim Tarantino at MarkITx

CloudCamp Chicago March 2nd Lightning talk from Michael Roytman at Risk I/O

CloudCamp Chicago Jan 2015 - The Guts of the Cloud (full slides)

Cloudcamp Chicago Nov 2104 Fintech - Chris Hacker’s "Change is coming for re...

Cloudcamp Chicago Nov 2104 Fintech - Dwight Koop "East / West Chalkboard Talk"

Cloudcamp Chicago Nov 2104 Fintech - Justin Bouchard’s "Using Technology at ...

Kürzlich hochgeladen

Gen AI in Business - Global Trends Report 2024.pdfAddepto

"ML in Production",Oleksandr BaganFwdays

Streamlining Python Development: A Guide to a Modern Project SetupFlorian Wilhelm

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays

Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdfPrecisely

DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy

Search Engine Optimization SEO PDF for 2024.pdfRankYa

From Family Reminiscence to Scholarly Archive .Alan Dix

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada

SAP Build Work Zone - Overview L2-L3.pptxNavinnSomaal

Designing IA for AI - Information Architecture Conference 2024Enterprise Knowledge

Story boards and shot lists for my a level piececharlottematthew16

DevEX - reference for building teams, processes, and platformsSergiu Bodiu

What's New in Teams Calling, Meetings and Devices March 2024Stephanie Beckett

TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc

Commit 2024 - Secret Management made easyAlfredo García Lavilla

Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxLoriGlavin3

Unraveling Multimodality with Large Language Models.pdfAlex Barbosa Coqueiro

Connect Wave/ connectwave Pitch Deck PresentationSlibray Presentation

Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed

Kürzlich hochgeladen (20)

Gen AI in Business - Global Trends Report 2024.pdf

"ML in Production",Oleksandr Bagan

Streamlining Python Development: A Guide to a Modern Project Setup

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...

Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf

DevoxxFR 2024 Reproducible Builds with Apache Maven

Search Engine Optimization SEO PDF for 2024.pdf

From Family Reminiscence to Scholarly Archive .

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024

SAP Build Work Zone - Overview L2-L3.pptx

Designing IA for AI - Information Architecture Conference 2024

Story boards and shot lists for my a level piece

DevEX - reference for building teams, processes, and platforms

What's New in Teams Calling, Meetings and Devices March 2024

TrustArc Webinar - How to Build Consumer Trust Through Data Privacy

Commit 2024 - Secret Management made easy

Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx

Unraveling Multimodality with Large Language Models.pdf

Connect Wave/ connectwave Pitch Deck Presentation

Scanning the Internet for External Cloud Exposures via SSL Certs

Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"

1. "A Hypothetical Public Cloud Do Over" ! John Downey, Product Developer and Security Lead at Braintree ! ! Tweet: @jtdwney #cloudcamp Sponsored by Hosted by #cloudcamp @CloudCamp_CHI

2. A Hypothetical Public Cloud Do Over 1

3. 2

4. Gateway 3

5. Why • Hypothetical exercise • Fun to think about • Most of this didn't exist when we started 4

6. Amazon Web Services • PCI Level 1 Service Provider • Where our experience is • A lot of movement happening • Newer offerings • Virtual Private Cloud (VPC) • CloudHSM 5

7. Virtual Private Cloud (VPC) 6

8. 7

9. 8

10. Bank Connectivity • VPN hardware • MPLS link • Can't do with regular EC2 ! 9

11. VPC • Replaces the network backing of AWS • EC2 • RDS • many others • Allows greater control over IP addressing 10

12. Bridge AWS to real hardware! 11

13. Hardware Security Module (HSM) 12

14. 13

15. Security • Store keys in taper resistant way • Acceleration for cryptographic operations • Makes certain audits much easier 14

16. CloudHSM • Pricey • $5,000 upfront for one • $1,373 average per month • You'll probably want at least two 15

17. Disaster Recovery 16

18. Disaster Recovery • Capacity planning can be hard • Physical hardware has lead times • Run Multi-region 17

19. Photos • https://flic.kr/p/8avArb • https://flic.kr/p/8eRC2 18