This document discusses cloud computing and open source technologies. It defines cloud computing and the common service models of Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). It then provides examples of commercial and open source implementations for each service model, highlighting technologies like OpenStack, CloudStack, Eucalyptus, OpenShift, and CloudFoundry. The document also discusses security considerations for each service model and the use of open source in cloud computing.

1. Cloud & Security
and opensource
Bae KwonHan <darjeeling@gmail.com>

3. Q : What is Cloud?

4. • Data Sync Service on the cloud
• Commercial Cloud Service
• Cloud Service Implementation with open
source or closed source
• Any Cloud Service use instead of legacy
infrastructure
• http://en.wikipedia.org/wiki/
Cloud_computing

5. • Infrastructure as a Service
• Platform as a Service
• Service as a Service
• Backend as a Service
• Blah as a Service

6. COST

7. SURPLUS

8. Automation

11. IaaS
• Packaging VM with network
• Multitenancy
• Volume Service
• Object Store Service
• AAA
• Network Security Manager ( ACL )
• API / CLI / GUI

12. Security on IaaS
• network Isolation!!
• VM access
• VM host
• ACL
• IaaS Manager

13. IaaS safe?
• VM data?
• VM memory access?
• volume data?
• DDOS?
• think about a service
• multi service distribution

14. AWS security support
• VPC ( Virtual Private Cloud )
• S3 Encryption
• AWS Identity and Access Management
• AWS Security Group

15. Commercial
IaaS Implementation
• Amazon AWS EC2
• MS Azure Virtual Machines
• Google CE
• HP Cloud
• Joyent
• Rackspace Cloud
• cafe24?
• KT uCloud Biz
• SKT tCloud Biz
• Hostway?
• VMWARE Product

16. OpenSource
IaaS Implementation
• Openstack
• Cloudstack
• Eucalyptus
• others

18. http://ken.pepple.info/
openstack/2012/09/25/
openstack-folsom-architecture/

19. PaaS
• Packaging Process with database on IaaS
• runtime, middleware, os
• Multitenancy
• AAA
• ACL on Process
• API / CLI / GUI

21. Security on PaaS
• API
• Process Isolation
• Database Isolation
• PaaS Manager

22. Commercial
Platform as a Service
• Heroku
• Google App Engine
• Engine Yard
• Openshift
• Windows Azure
• vmware CloudFoundry
• appfog
• appcera

23. Opensource
Platform as a Service
• VMWARE CloudFoundry
• Redhat OpenShift

24. Security on PaaS
• DDOS
• Manager Problem
• Application Problem

25. SaaS
• Packaging Service on Infrastructure

26. Security on SaaS
• API
• SaaS Manager
• connection hook

27. SaaS Implementation
• Google Apps
• iCloud
• SalesForce
• others?

28. Plus
Baremetal as a Service
or Metal as a Service
• automate installing os
• use out of band management
• IPMI
• dell Drac
• KVM over IP
• HP ILO
• IBM Remote Supervisor Adapter

29. MAAS Implementation
• opensource
• ubuntu juju
• every hardware vender sells MAAS

30. Chain of aaS
• MaaS
• IaaS
• PaaS
• SaaS

31. Cloud Service User

32. • Cost
• you should know what/how you are doing
• you should know what/how they are doing
• focus on application programming
• focus on management console
• focus on AAA

33. OpenSource

34. why open source?

35. everything is
open source

37. open source
• openstack
• openvswich
• cloudfoundry
• openshift
• opensource VM implementation
• KVM ( Kernel-based Virtual Machine )
• XEN
• LXC
• OpenVZ
• QEMU
• VirtualBOX

38. OpenStack
• Infrastructure as a Service
• started by rackspace cloud and NASA since 2010
• Compute ( nova )
• Object Storage ( Swift )
• Image Service ( Glance )
• Identity Service ( Keystone )
• Dashboard ( Horizon )
• Networking ( Quantum )
• Block Storage ( Cinder )
• Metering ( Ceilometer - Beta )
• Basic Cloud Ochestration ( Heat - Beta - PaaS )

39. openvswitch
• http://openvswitch.org/
• security : vlan isolation, traffic filtering
• QoS : traffic queuing, traffic shaping
• monitoring : NetFlow, sFlow, SPAN, RSPAN
• automated control

40. DevOps?

46. what we should know?
• What is cloud
• Every component of cloud service
• Every boundary of cloud component
• how application works

47. Q &A