•
Tomorrow, GroundWork Open Source Inc. and Eucalyptus Systems will be announcing that they have partnered to deliver monitoring and management of applications running in a Eucalyptus private cloud environment. If your enterprise is running private cloud powered by Eucalyptus, you now can plug your cloud into the GroundWork's monitoring solution. This allows you to join your view of resources from Amazon and other servers in your enterprise with your private cloud solution. Sponsor What is Eucalyptus? We covered Eucalyptus recently in an interview with the company's founder and CTO. The company is a first-mover in helping organizations build private clouds that can achieve parity with Amazon's EC2. The company's enterprise addition will allow you to run an Amazon instance on your VMware infrastructure, effectively joining your virtual infrastructure and the Amazon cloud. "Detailed monitoring and management of private cloud applications can give Eucalyptus users important real-time information to increase productivity and reduce costs," said Marten Mickos, CEO of Eucalyptus Systems. "Through our partnership with GroundWork Open Source, Eucalyptus open source users and Enterprise Edition customers can now benefit from a proven, open source solution to monitor private clouds as part of their overall network environment." GroundWork's newest solution offers the ability to monitor topology of your private cloud and to plug the results into the monitoring you are doing with other servers and the Amazon public cloud infrastructure. In the briefing we attended with company executives, several things emerged that we're considering. First, it was pointed out that private clouds are "where the action is" for large enterprises. What we heard is that some companies, like pharmaceuticals that GroundWork currently has in its portfolio simply won't be able to move all of their data out to the public cloud yet. But, they do want to get the benefits of cloud computing internally. Second, we learned that one thing GroundWork's offers is a flexible hosting model, where your monitoring infrastructure can be hosted internally, or in the cloud on a managed EC2 instance. Recently, we checked out CloudKick , another cloud monitoring startup that also can monitor servers in the cloud and in the enterprise. The GroundWorks solution that is launching in beta both offers topology view of the private cloud and flexible hosting options that may be attractive to enterprises that plan on keeping most of their assets internal. From what we can see, CloudKick is positioned to companies that are starting on the cloud for scaling purposes, and GroundWork seems positioned towards companies where the center of gravity is inside the data center and now the private cloud. "More and more of our customers are investigating and investing in private cloud usage. Eucalyptus gives incredible power and cost savings to IT teams building out cloud services. Coupled with GroundWork's automatic instance and application monitoring, this partnership provides a robust cloud solution with clear ROI that enterprises can take advantage of quickly," said Peter Jackson, GroundWork Open Source President and CEO. What is GroundWorks private cloud solution? GroundWorks offers the premise that if you are running a private cloud, the monitoring solution needs to be aware of your architecture (topology, software stacks, and servers). Here is a visual representation of how the company envisions cloud aware monitoring: Here is a screenshot of the GroundWorks monitoring solution: Here is a bit more from the companies on the beta program: The GroundWork Monitor Enterprise Cloud for Eucalyptus beta program offers: "GroundWork Monitor Enterprise Cloud usage to cover on-premise, public or private cloud hosted applications and infrastructure Access to Eucalyptus EE, including VMware support to implement private clouds in existing environments The opportunity to provide direct feedback to the engineering and product teams, helping define the future of IT operations in the cloud Engineering and technical assistance for the duration of the beta program. Participants will gain these benefits with the combined GWOS and Eucalyptus Quickly and easily build and monitor private and hybrid clouds with your existing environment and other public clouds Run Amazon Machine Image (AMI) instances on VMware-based hypervisors within your Eucalyptus private cloud Seamlessly manage environments with multiple hypervisors (Xen, KVM, vSphere, ESX™ and ESXi™) under one management console and transition applications without any modifications Manage service performance and availability based on IT monitoring insight trend and usage reports across environments" More information available about the beta program at http://www.gwos.com/products/Enterprise_Cloud_beta.html It is becoming clear that private clouds are increasingly becoming an important part of the enterprise. Eucalyptus has a real opportunity as a first-mover in deploying them with its tools. From experience, we know that where enterprise-class computing exists, monitoring follows. GroundWork and Eucalyptus are working together to make a seamless offering that plugs into the private cloud deployment process in this beta release - and they are asking for feedback from administers interested in the program. Does deploying a private cloud change your view of administration tools and monitoring? Discuss
See the original post:
Cloud Aware Monitoring: GroundWork and Eucalyptus Offer Private Cloud Beta Program
Tags:
amazon,
announcements,
architecture,
CEO. What,
cloud,
companies,
enterprise,
Eucalyptus,
groundwork,
groundwork open source,
Marten Mickos,
open source inc,
open source solution,
partnership,
Peter Jackson,
private,
ROI,
servers,
virtual
•
The news may be about the iPad this weekend but it's the cloud that will hover hot over Apple by the Fall and in many respects challenge its hegemony over how we store and share music and video. According to CNET , that's about the time of year that it looks like Apple will unveil its cloud-based music service. Sponsor In the meantime we are seeing a number of storage services emerge for the iPad that could be used for people to store their music and other media. Yesterday, we looked at the Box.net app. Dropbox has an iPad app as does SugarSync. And then there are the forces that are not tethered to the iPad at all. Last week, Canonical started a public beta for its cloud-based music service. Most cloud-based services allow you to store your own music in the cloud. With Canonical, you purchase your music through its music store that syncs with your device and your own personal cloud. That means you control your Apple appears to be looking at a similar strategy, allowing consumers to store music and movies in the cloud, albeit the media being that from the major labels and even more so, the studios. Will they go for it? Well, a long time ago, perhaps, but with the options available, the studios, have far more possibilities to pursue. But how can the Apple strategy work in a cloud built on open-source? Apple's Fair Play digital rights management software is intended to keep music, movies and other entertainment locked down so it can not be shared. It's in contrast to the open-nature of cloud computing that we see with services that allow for online storage lockers. People will find ways to store and organize data in the way they wish. That makes sense for a number of reasons: People have media on multiple devices. Keeping it in the cloud makes it easier to access. Syncing to the cloud makes sense. Cables? Dongles? That's old school. You can update a file in the cloud and see that same update on your smart phone. If a number of people have their own personal clouds than that means we can share, right? Yes it does! It's that last point that must give Apple a bit of a chill. For years, iTunes seemed like the only option. But Apple has locked down its hardware, software and the content. In league with the labels and studios, Apple has used DRM to get its leverage at the expense of us all. Will that strategy continue to work? Well, it's going to take a while but all these storage providers know that those home videos can bloat a hard drive pretty fast. Or maybe just maybe, Steve will put the screws back in the iPad, give us the schematics and let us all see what we really can do with that tablet. He'll then thank Cory Doctorow for waking him up and sure enough we'll all wonder if we had just fallen into a hot tub time machine. Discuss
Visit link:
Will the Cloud Challenge Apple's Dynasty?
Tags:
apple,
cloud,
cloud computing,
digital rights management,
entertainment,
iPad,
makes-it-easier,
music,
personal cloud,
smart,
Steve,
studios,
the-cloud,
time
•
Zynga is a leading example of how to wield cloud infrastructure to achieve scale. The company uses RightScale to help match demand of its incredibly successful game franchise with appropriate resources. Zynga seems to be a master of understanding how to model customer demand and underlying resources. As even virtual goods have COGS (cost of goods sold) server resources are part of the bill when conjuring up virtual goods for tens of millions of users. Although we can't all be as smart (or cute) as Zynga, many of us are catching on that scaling into the cloud is a smart choice. This brief analysis of RightScale looks at its offerings and the momentum the company is gaining in the market. Sponsor What Does RightScale Offer ? RightScale is a platform that abstracts cloud offerings from Amazon and a host of other cloud providers to help orchestrate the management and provisioning of cloud assets. In the case of social games, this may be algorithms that help spin up services during a dramatic swing of usage. Or, in the reverse case, it maybe scaling infrastructure across the life cycle of a property as it is launched, goes viral, and eventually is replaced with the next thing. The company also offers resource portability, where it can deploy servers with Amazon, or other cloud providers that compete in providing cloud workload services and the ability to spin up new services through APIs. RightScale has tuned its tools to both learn and to react to changes required in the infrastructure for applications using the platform. New customer announcements include Hitachi Systems and Services in Japan and ProKarma in the United States. Both are strong systems integrators that have chosen RightScale as the platform to bring the cloud to their customers. RightScale has announced over one million servers launched using its platform. Maybe Zynga is the next Zynga The company certainly has the viral pattern down, and delivery nailed. And, one thing that we've learned in watching the excitement of social games is that demand can be like a roller-coaster. In addition to all of the natural benefits of cloud infrastructure in cost and timing, we think being ready for wild success is just good practice - it can much less expensive than failing to scale. More importantly, have a platform that scales can open up new doors to business that may have not existed without it. RightScale: For All Shapes and Sizes At RightScale, it doesn't matter if your application is an addictive game, or monthly billing application. The company knows that in the next years, it is likely that hosting in the cloud makes sense for internet infrastructure and it is well positioned to be a piece of a lot of solutions that want to scale with demand. If the momentum with heavy-hitting system integrators continues, RightScale will be coming to you through its partners. Of course, you can also try it for free and get started in managing the cloud. The company is targeting companies that have more than a handful of servers and has a compelling offering to get started and to grow from there. Does RightScale fit into your scaling plans? Photo Credit: jurvetson Discuss
See the article here:
Are You the Next Zynga? The Rocket Science at RightScale Helps Deliver a Safe Liftoff
Tags:
amazon,
Business,
cloud,
infrastructure,
Japan,
life,
management,
momentum,
photo-credit,
platform,
united
•
At 1:00 a.m. on Sunday morning I was doing routine maintenance on my personal Amazon Web Services account and instead found myself looking at something I had no right to be seeing: A database with 800,000 user accounts to the e-card site CardMaster.com . Along with that were the database passwords and back end of a major U.S. Public Broadcasting Service news show website ( Gwen Ifill's Washington Week ), including daily updates from panelists on the stories they cover. I wish I wasn't the person to find this. I founded one of Amazon's earliest dashboards. My consultancy is on Amazon's European Customer Advisory Board. But this highlights a significant issue in the cloud today: There is a whole new user profile acting as developer and administrator. We are becoming empowered with amazing tools - and being given enough rope to really hang ourselves. Sponsor Guest author Jonathan Siegel is a serial entrepreneur and founder of the cloud applications consultancy ELCTech.com as well as a handful of cloud startups. Jonathan's book, Electric Connections , is due out in June of this year. I am an early adopter, business builder and owner of a cloud consultancy. On Sunday morning I went to clear out my personal Amazon Web Services account of excess files after seeing huge usage numbers from a report by CloudSplit. For those technically inclined, I was clearing out my S3 buckets and moving the few files that I wanted to save into an EBS disk instead. My EBS disk ran out of space and I went to use a feature called EBS Snapshots. Snapshots are like a tape backup of your EBS disk drive. That's when I noticed something odd: My EBS Snapshot account was filled with hundreds of snapshots, when I knew I had only made a handful. I wondered, Why do I have access to these backups? Were these backups made by my teammates? Shared snapshots from Amazon? Or something else... What I saw were backups of Enron emails, a genomics database and then two made my stomach turn - a database for 800,000 user accounts to CardMaster.com and the database and site files for the Washington Week website. Yeah, the Enron emails are a non sequitur and the genomics database was likely meant to be public. But the other two, there's no way they were intended for the public, yet here they were - marked as public and available to me or any other Amazon cloud user. How Did This Happen? Amazon is the largest and longest running public cloud computing platform. It has pushed the boundaries of technology infrastructure for us users. In fact, it has given us tools that are more powerful than anything we previously had available in our own small datacenters. This is great, because before we needed to hire trained Cisco or NetApp administrators in order to do basic tasks as our websites scaled. This was expensive and added another step - a delay - to our deployments. Amazon's infrastructure commoditizes much of this technology into simple Web calls; paste some XML to Amazon and your website gets a full incremental backup to live-networked NAS. But as Stan Lee has warned us: With great power comes great responsibility. By giving programmers control of the network and storage, we've empowered developers to take on system administration chores. This power has come too quickly or is being digested too lightly - as my discovery has shown. In the case of PBS's Washington Week there was quick acceptance of the issue. "It was human error and nothing personal was exposed," said Kevin Dando, PBS's Director of Digital Communications. "Although we weren't aware of the issue initially, it was easily corrected. Because of Amazon's strong audit capabilities we could pinpoint the error and fix it quickly." Despite numerous attempts we were unable to reach CardMaster.com. This highlights a deeper issue in the cloud today: Despite what you may think, cloud security is not sexy. We are seeing products that address the baseline needs of cloud functionality, like Amazon's dashboard and the support sites for the cloud. They focus on the sexy: deploying mobile apps, auto-scaling, grid processing and other buzz-word-friendly features. But the dirty truth is that the cloud has a whole new user profile acting as administrator and needs a new set of tools and expectation management to ensure that little mistakes make little problems and not big ones. Remember: This is not something that Amazon did wrong. This is an intentional switch thrown by Amazon's users that allowed their data to be public to any other Amazon user. The users did not mean to hit that switch and it's unclear whether those users would have found this issue without my notification. This is the switch in Amazon's Web Console. It can be more subtle when packaged deep within cloud-assisting tools: And Why Me? A spokesperson for Amazon pointed out that snapshots were private by default and users must choose to share them. According to Amazon, "users understand this feature very well as this is no different than users explicitly choosing to share their data by any means." However, as we've seen, users are obviously making their data inadvertently public. Amazon said they were updating their documentation "to provide more explicit guidance on this feature," and that they would be "reaching out to the few who may be unknowingly sharing their snapshots." The question, though, is: Is it too easy to accidentally make your data public - and whose role is it to play data cop? This leads to me, at 1 a.m., and finding security leakage with Amazon's cloud customers while doing unrelated housekeeping. Look, I'm anything but an IT Security guy; I've got enough on my plate to worry about. For god's sakes, I have 6 kids! Moreover, I'm an outspoken supporter for moving companies to the cloud - and I exclusively recommend Amazon's cloud because of its reliability and features. Why is it me that finds this security issue - one that has been open since January of this year if the Snapshot dates are accurate. This tells me that there is a pattern about to be replayed: That the users on the cloud today are a motley crew. That we need more supervision and hand-holding - whether we like it or not. That powerful services like CloudKick and CloudSplit need to be encouraged to add security as a top-priority feature. And we need to budget for their services and embrace their boring, yet hyper-important role as perimeter guard and security inspector. If I were to try to keep this security problem in the bag - and avoid alerting the community - I would be fostering a sense of complacency that is antithetical to the marketplace needs. The cloud is so young that when we find a problem we need to admit it and find real, workable solutions. Since the cloud represents new ways of doing things, it gives us new ways of getting in trouble, and we need a lively forum for nipping these issues in the bud and laying a framework for ongoing success. What Now? If you are on Amazon's cloud, I can't stress enough that you need to immediately go to your AWS Management Console. Check at a minimum that your Snapshots, for every Region, are marked PUBLIC only if you mean them to be available to ALL other Amazon Web Services users. I've already checked mine. If you find data that you did not intend to make public, you need to engage your security team to remove the snapshots from the public and mitigate any data exposure. Hopefully this gets chalked on the wall as a lesson learned - and we continue our march to the cloud with a deeper appreciation of our security support needs. This isn't about calling people out. I work in the cloud and am passionate about its development. These mistakes could very well have been ones I made - or any other cloud user. To move the cloud forward we need to encourage a dialog about our new found power, new paradigms and new needs in the cloud. Discuss
Read the original here:
User Ignorance Causes Cloud Security Leak; Accounts, Passwords Revealed
Tags:
amazon web,
Cisco,
cloud,
data,
database,
digital,
director,
european,
Jonathan Siegel,
network,
person,
personal,
public broadcasting service,
security,
snapshots,
technology
•
Cloudkick is a cloud monitoring start-up that helps system admins manage cloud servers. Today, the company announced it is getting physical, bringing its cloud monitoring capabilities to internally hosted servers and virtual machines. The company has had a lot of success in helping companies who startup in the cloud and start to achieve scale. It already has a host of hot startup companies including Posterous , Bump Technologies , and Urban Airship . Through listening to users, the company decided to offer local server support to merge its view of all server assets for these organizations. Sponsor What is CloudKick? Cloudkick enables a company to manage internally hosted servers and run the Cloudkick's agent and report into the same console as your cloud computing infrastructure from AWS, RackSpace, SliceHost and others. When installed, the CloudKick agent will respond to status checks from the Cloudkick monitoring solution, which itself is a distributed cloud application. Cloudkick supports a host of cloud provider solutions and shares a report of feature. We met with the company at their offices in San Francisco. Upon entry to the warehouse, called " The Farm " near the Mission District, we realized that was a true technology startup , founded by system administrators trying to make their jobs easier. The team participated in Y-Combinator and has received an initial capital infusion by Avalon Ventures. The Cloudkick system offers consolidated server reports and shows server events by polling registered clients in cloud (and now data centers) and piping them to Cloudkick's multi-tentant event aggregator. The tools are modeled after administrative tools like Cacti, Nagios, and Munin, but are delivered on on top of an agent-driven real time view of the underlying assets of server infrastructure. When checking out the demonstration, we also noted that the browser is updated in real-time as events are polled. This keeps the information fresh without having to re-check and brings the best of browser based real-time communication to system administrations. Cloudkick's implementation is simple and elegant. The young company is demonstrating product leadership by living the mantra of simplicity and utility. Here's a sample of the graphs from CloudKick's feature inventory . Monitoring Every Server The goal of this release is to bring servers from the datacenter to power of cloud monitoring. It allows a larger and larger region of infrastructure to rely on outside controls to monitor it's health and well being. One feature we we intrigued by with Cloudkick was the ability to tag and filter groups of hosts, and to then set rules across them. For example, tagging all servers "web apps" allows a rule to quickly set custom rules for checking up time. The company offers an API for its services and uses 2-legged OAuth for API authentication. OAuth is "an open protocol to allow secure API authorization in a simple and standard method from desktop and web applications.". The company also offers a proxy service that streamlines and secures the connections for hosts that will connect to the Cloudkick services. Cloudkick is a cloud company monitoring clouds and shows us in many ways the architecture of the future. In one of the blog posts from company, they share " love affair with cassandra " and how multi-master database technology is an enabler for co-location of server assets in infrastructure clouds. Where does Cloudkick go from here? Discuss
Continue reading here:
Cloudkick Broadens its Scope: Now Monitors the Datacenter
Tags:
announcements,
api,
architecture,
brings-the-best,
browser,
cloud,
Cloudkick,
cloudkick-tools,
connections,
demonstration,
jobs,
tools