Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"

•

0 gefällt mir•556 views

CloudCamp Chicago

"A Hypothetical Public Cloud Do Over" - John Downey, Product Developer and Security Lead at Braintree @jtdwney

Technologie

"A Hypothetical Public Cloud Do
Over"
!
John Downey,
Product Developer and Security Lead at
Braintree
!
!
Tweet: @jtdwney
#cloudcamp
Sponsored by
Hosted by
#cloudcamp
@CloudCamp_CHI

Why
• Hypothetical exercise
• Fun to think about
• Most of this didn't exist when we started
4

Amazon Web Services
• PCI Level 1 Service Provider
• Where our experience is
• A lot of movement happening
• Newer offerings
• Virtual Private Cloud (VPC)
• CloudHSM
5

Bank Connectivity
• VPN hardware
• MPLS link
• Can't do with regular EC2 !
9

VPC
• Replaces the network backing of AWS
• EC2
• RDS
• many others
• Allows greater control over IP addressing
10

Security
• Store keys in taper resistant way
• Acceleration for cryptographic operations
• Makes certain audits much easier
14

CloudHSM
• Pricey
• $5,000 upfront for one
• $1,373 average per month
• You'll probably want at least two
15

Disaster Recovery
• Capacity planning can be hard
• Physical hardware has lead times
• Run Multi-region
17

Photos
• https://flic.kr/p/8avArb
• https://flic.kr/p/8eRC2
18

Empfohlen

How to deploy a Private Cloud based on WAP and NutanixTom Van Gramberen

Event Sourcing your AngularJS applicationsMaurice De Beijer [MVP]

VMUG St Louis - SDN in the Real WorldChris Wahl

Automating Cloud Cluster Deployment: Beyond the BookBill Havanki

Comprendre les différents types de CloudOVHcloud

Automation for Anyone at Nutanix NEXT 2017 USChris Wahl

Bosh - Configuring ServicesAndrew Shafer

Cloud computing fundamentals with Microsoft AzureRadoslav Gatev

Empfohlen

How to deploy a Private Cloud based on WAP and NutanixTom Van Gramberen

Event Sourcing your AngularJS applicationsMaurice De Beijer [MVP]

VMUG St Louis - SDN in the Real WorldChris Wahl

Automating Cloud Cluster Deployment: Beyond the BookBill Havanki

Comprendre les différents types de CloudOVHcloud

Automation for Anyone at Nutanix NEXT 2017 USChris Wahl

Bosh - Configuring ServicesAndrew Shafer

Cloud computing fundamentals with Microsoft AzureRadoslav Gatev

Deploying Web-Scale Private Clouds using the Azure Pack and Nutanix Web-scale...Tom Van Gramberen

Scotland VMUG - My Journey to Full Stack EngineeringChris Wahl

How it's made - MyGet.org - AzureConfMaarten Balliauw

Containerization: The DevOps Revolution SoftServe

Kubernetes 201: Taking your Managed Kubernetes service to the next levelOVHcloud

Supercharge Application Delivery to Satisfy UsersNGINX, Inc.

Google Cloud Platform for DeVops, by Javier Ramirez @ teowakijavier ramirez

ECMDay2015 - Kim Oppalfens – Microsoft System Center Configuration Manager: H...Kenny Buntinx

Florin Loghiade - Azure Site Recovery si Backup in Microsoft AzureAvaelgo

Web scale architecture designNepalAdz

Microservices: Living Large in Your Castle Made of SandMongoDB

Kubernetes, The Day AfterApcera

The 7 deadly sins of micro servicesAidan Casey

Using the KVMhypervisor in CloudStackShapeBlue

Kudu voodoo slideshareAidan Casey

[db tech showcase Tokyo 2017] C16: Azure SQL Database - Are you ready for the...Insight Technology, Inc.

Altitude San Francisco 2018: Preparing for Video Streaming Events at ScaleFastly

Tudor Damian - Microsoft Azure ca si solutie pentru backup sau disaster recoveryAvaelgo

ECMDay2015 - Kent Agerlund – Configuration Manager 2012 – A Site ReviewKenny Buntinx

AWS Customer Presentation - SchoolofEverythingAmazon Web Services

Working in the CloudStefanie Ainge Hahn

Cloud in io t 12042016Fedor Antsiferov

Weitere ähnliche Inhalte

Was ist angesagt?

Deploying Web-Scale Private Clouds using the Azure Pack and Nutanix Web-scale...Tom Van Gramberen

Scotland VMUG - My Journey to Full Stack EngineeringChris Wahl

How it's made - MyGet.org - AzureConfMaarten Balliauw

Containerization: The DevOps Revolution SoftServe

Kubernetes 201: Taking your Managed Kubernetes service to the next levelOVHcloud

Supercharge Application Delivery to Satisfy UsersNGINX, Inc.

Google Cloud Platform for DeVops, by Javier Ramirez @ teowakijavier ramirez

ECMDay2015 - Kim Oppalfens – Microsoft System Center Configuration Manager: H...Kenny Buntinx

Florin Loghiade - Azure Site Recovery si Backup in Microsoft AzureAvaelgo

Web scale architecture designNepalAdz

Microservices: Living Large in Your Castle Made of SandMongoDB

Kubernetes, The Day AfterApcera

The 7 deadly sins of micro servicesAidan Casey

Using the KVMhypervisor in CloudStackShapeBlue

Kudu voodoo slideshareAidan Casey

[db tech showcase Tokyo 2017] C16: Azure SQL Database - Are you ready for the...Insight Technology, Inc.

Altitude San Francisco 2018: Preparing for Video Streaming Events at ScaleFastly

Tudor Damian - Microsoft Azure ca si solutie pentru backup sau disaster recoveryAvaelgo

ECMDay2015 - Kent Agerlund – Configuration Manager 2012 – A Site ReviewKenny Buntinx

AWS Customer Presentation - SchoolofEverythingAmazon Web Services

Was ist angesagt? (20)

Deploying Web-Scale Private Clouds using the Azure Pack and Nutanix Web-scale...

Scotland VMUG - My Journey to Full Stack Engineering

How it's made - MyGet.org - AzureConf

Containerization: The DevOps Revolution

Kubernetes 201: Taking your Managed Kubernetes service to the next level

Supercharge Application Delivery to Satisfy Users

Google Cloud Platform for DeVops, by Javier Ramirez @ teowaki

ECMDay2015 - Kim Oppalfens – Microsoft System Center Configuration Manager: H...

Florin Loghiade - Azure Site Recovery si Backup in Microsoft Azure

Web scale architecture design

Microservices: Living Large in Your Castle Made of Sand

Kubernetes, The Day After

The 7 deadly sins of micro services

Using the KVMhypervisor in CloudStack

Kudu voodoo slideshare

[db tech showcase Tokyo 2017] C16: Azure SQL Database - Are you ready for the...

Altitude San Francisco 2018: Preparing for Video Streaming Events at Scale

Tudor Damian - Microsoft Azure ca si solutie pentru backup sau disaster recovery

ECMDay2015 - Kent Agerlund – Configuration Manager 2012 – A Site Review

AWS Customer Presentation - SchoolofEverything

Andere mochten auch

Working in the CloudStefanie Ainge Hahn

Cloud in io t 12042016Fedor Antsiferov

Nice, France Talk. Working in the Cloud, 2011John Mayfield

Global IoT Cloud Services Survey-Aug-20160527August Lin

Cloud by Example for Interactive AgenciesAmazon Web Services

IoT Developer Survey 2015Ian Skerrett

Connected Car Security and the Future of Transportation Liz Slocum

AWS re:Invent 2016: Introduction to AWS IoT in the Cloud (IOT204)Amazon Web Services

Open IoT Cloud Architecture, Web of Things, Shenzhen, China.Jollen Chen

IoT Developer Survey 2016Ian Skerrett

Cloud computing simple pptAgarwaljay

Andere mochten auch (11)

Working in the Cloud

Cloud in io t 12042016

Nice, France Talk. Working in the Cloud, 2011

Global IoT Cloud Services Survey-Aug-20160527

Cloud by Example for Interactive Agencies

IoT Developer Survey 2015

Connected Car Security and the Future of Transportation

AWS re:Invent 2016: Introduction to AWS IoT in the Cloud (IOT204)

Open IoT Cloud Architecture, Web of Things, Shenzhen, China.

IoT Developer Survey 2016

Cloud computing simple ppt

Ähnlich wie Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"

02-WhyCloud.pdfBehroozDadkhah

Highly Available Docker Networking With BGPOpenDNS

Bursting into the public Cloud - Sharing my experience doing it at large scal...Igor Sfiligoi

Mapping Life Science Informatics to the CloudChris Dagdigian

Cloud Camp Chicago Dec 2012 SlidesRyan Koop

Cloud Camp Chicago Dec 2012 - All presentationsCloudCamp Chicago

Brisbane DevOps Meetup - Reinvent 2015Michael Villis

Real world cloud formation feb 2014 finalHoward Glynn

Matching Your Costs to Your DAU: Thin Client Back-End Infrastructure Made EasyPete Johnson

CloudStack Collaboration Conference Opening Remarksbuildacloud

Cloud storageBrappie

Cloud and Windows AzureRadu Vunvulea

Greenfields tech decisionsTrent Hornibrook

(SDD302) A Tale of One Thousand Instances - Migrating from Amazon EC2-Classic...Amazon Web Services

The impact of cloud NSBCon NY by Yves GoelevenParticular Software

Cloud Computing ExplainedGrant M Howe

IBM and Node.js - Old Doge, New TricksDejan Glozic

Cloud Computing: The Hard Problems Never Go AwayZendCon

ProfitBricks Cloud Computing IaaS An IntroductionProfitBricks

The Future of Cloud Networking is VMware NSX (Danish VMUG edition)Scott Lowe

Ähnlich wie Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over" (20)

02-WhyCloud.pdf

Highly Available Docker Networking With BGP

Bursting into the public Cloud - Sharing my experience doing it at large scal...

Mapping Life Science Informatics to the Cloud

Cloud Camp Chicago Dec 2012 Slides

Cloud Camp Chicago Dec 2012 - All presentations

Brisbane DevOps Meetup - Reinvent 2015

Real world cloud formation feb 2014 final

Matching Your Costs to Your DAU: Thin Client Back-End Infrastructure Made Easy

CloudStack Collaboration Conference Opening Remarks

Cloud storage

Cloud and Windows Azure

Greenfields tech decisions

(SDD302) A Tale of One Thousand Instances - Migrating from Amazon EC2-Classic...

The impact of cloud NSBCon NY by Yves Goeleven

Cloud Computing Explained

IBM and Node.js - Old Doge, New Tricks

Cloud Computing: The Hard Problems Never Go Away

ProfitBricks Cloud Computing IaaS An Introduction

The Future of Cloud Networking is VMware NSX (Danish VMUG edition)

Mehr von CloudCamp Chicago

CloudCamp Chicago lightning talk "IoT Perspectives from the Trenches" - Steve...CloudCamp Chicago

CloudCamp Chicago lightning talk IoT in Healthcare CloudCamp Chicago

CloudCamp Chicago lightning talk "Connecting Vehicles on Google Cloud Platfor...CloudCamp Chicago

CloudCamp Chicago lightning talk "The Internet of (Insecure) Things" - Chandl...CloudCamp Chicago

CloudCamp Chicago - June 17, 2015 The Internet of ThingsCloudCamp Chicago

CloudCamp Chicago lightning talk "Building warehousing systems on Redshi...CloudCamp Chicago

CloudCamp Chicago lightning talk "Spark: A Quick Ignition" - Matthew Kem...CloudCamp Chicago

CloudCamp Chicago lightning talk "Big Data without Big Infrastructure" by ...CloudCamp Chicago

CloudCamp Chicago - Big Data & Cloud May 2015 - All SlidesCloudCamp Chicago

CloudCamp Chicago April 2015 - Patrick Kerpan's talk "What Financial Cloud Sh...CloudCamp Chicago

CloudCamp Chicago April 2015 - Eero Pikat's talk "Micro-services and how they...CloudCamp Chicago

CloudCamp Chicago April 2015 - John Downey's talk "Put away the credit card, ...CloudCamp Chicago

CloudCamp Chicago April 2015 - "FinTech"CloudCamp Chicago

CloudCamp Chicago - March 2nd 2015 - Cloud Security CloudCamp Chicago

CloudCamp Chicago March 2nd Lightning talk from Jim Tarantino at MarkITx CloudCamp Chicago

CloudCamp Chicago March 2nd Lightning talk from Michael Roytman at Risk I/OCloudCamp Chicago

CloudCamp Chicago Jan 2015 - The Guts of the Cloud (full slides)CloudCamp Chicago

Cloudcamp Chicago Nov 2104 Fintech - Chris Hacker’s "Change is coming for re...CloudCamp Chicago

Cloudcamp Chicago Nov 2104 Fintech - Dwight Koop "East / West Chalkboard Talk"CloudCamp Chicago

Cloudcamp Chicago Nov 2104 Fintech - Justin Bouchard’s "Using Technology at ...CloudCamp Chicago

Mehr von CloudCamp Chicago (20)

CloudCamp Chicago lightning talk "IoT Perspectives from the Trenches" - Steve...

CloudCamp Chicago lightning talk IoT in Healthcare

CloudCamp Chicago lightning talk "Connecting Vehicles on Google Cloud Platfor...

CloudCamp Chicago lightning talk "The Internet of (Insecure) Things" - Chandl...

CloudCamp Chicago - June 17, 2015 The Internet of Things

CloudCamp Chicago lightning talk "Building warehousing systems on Redshi...

CloudCamp Chicago lightning talk "Spark: A Quick Ignition" - Matthew Kem...

CloudCamp Chicago lightning talk "Big Data without Big Infrastructure" by ...

CloudCamp Chicago - Big Data & Cloud May 2015 - All Slides

CloudCamp Chicago April 2015 - Patrick Kerpan's talk "What Financial Cloud Sh...

CloudCamp Chicago April 2015 - Eero Pikat's talk "Micro-services and how they...

CloudCamp Chicago April 2015 - John Downey's talk "Put away the credit card, ...

CloudCamp Chicago April 2015 - "FinTech"

CloudCamp Chicago - March 2nd 2015 - Cloud Security

CloudCamp Chicago March 2nd Lightning talk from Jim Tarantino at MarkITx

CloudCamp Chicago March 2nd Lightning talk from Michael Roytman at Risk I/O

CloudCamp Chicago Jan 2015 - The Guts of the Cloud (full slides)

Cloudcamp Chicago Nov 2104 Fintech - Chris Hacker’s "Change is coming for re...

Cloudcamp Chicago Nov 2104 Fintech - Dwight Koop "East / West Chalkboard Talk"

Cloudcamp Chicago Nov 2104 Fintech - Justin Bouchard’s "Using Technology at ...

Kürzlich hochgeladen

CNv6 Instructor Chapter 6 Quality of Servicegiselly40

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

Automating Google Workspace (GWS) & more with Apps Scriptwesley chun

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Real Time Object Detection Using Open CVKhem

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1

08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls

How to convert PDF to text with Nanonetsnaman860154

Artificial Intelligence: Facts and MythsJoaquim Jorge

A Year of the Servo Reboot: Where Are We Now?Igalia

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

Kürzlich hochgeladen (20)

CNv6 Instructor Chapter 6 Quality of Service

Presentation on how to chat with PDF using ChatGPT code interpreter

Automating Google Workspace (GWS) & more with Apps Script

Factors to Consider When Choosing Accounts Payable Services Providers.pptx

Axa Assurance Maroc - Insurer Innovation Award 2024

Real Time Object Detection Using Open CV

Data Cloud, More than a CDP by Matt Robison

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

The Codex of Business Writing Software for Real-World Solutions 2.pptx

Boost Fertility New Invention Ups Success Rates.pdf

08448380779 Call Girls In Friends Colony Women Seeking Men

How to convert PDF to text with Nanonets

Artificial Intelligence: Facts and Myths

A Year of the Servo Reboot: Where Are We Now?

08448380779 Call Girls In Civil Lines Women Seeking Men

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Breaking the Kubernetes Kill Chain: Host Path Mount

04-2024-HHUG-Sales-and-Marketing-Alignment.pptx

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"

1. "A Hypothetical Public Cloud Do Over" ! John Downey, Product Developer and Security Lead at Braintree ! ! Tweet: @jtdwney #cloudcamp Sponsored by Hosted by #cloudcamp @CloudCamp_CHI

2. A Hypothetical Public Cloud Do Over 1

3. 2

4. Gateway 3

5. Why • Hypothetical exercise • Fun to think about • Most of this didn't exist when we started 4

6. Amazon Web Services • PCI Level 1 Service Provider • Where our experience is • A lot of movement happening • Newer offerings • Virtual Private Cloud (VPC) • CloudHSM 5

7. Virtual Private Cloud (VPC) 6

8. 7

9. 8

10. Bank Connectivity • VPN hardware • MPLS link • Can't do with regular EC2 ! 9

11. VPC • Replaces the network backing of AWS • EC2 • RDS • many others • Allows greater control over IP addressing 10

12. Bridge AWS to real hardware! 11

13. Hardware Security Module (HSM) 12

14. 13

15. Security • Store keys in taper resistant way • Acceleration for cryptographic operations • Makes certain audits much easier 14

16. CloudHSM • Pricey • $5,000 upfront for one • $1,373 average per month • You'll probably want at least two 15

17. Disaster Recovery 16

18. Disaster Recovery • Capacity planning can be hard • Physical hardware has lead times • Run Multi-region 17

19. Photos • https://flic.kr/p/8avArb • https://flic.kr/p/8eRC2 18