120 likes | 281 Views
Cloud Service Provisioning. Jens Jensen (STFC), Piyush Harsh (INRIA) et al. contrail is co-funded by the EC 7th Framework Programme under Grant Agreement nr. 257438 . 0 1. Background. Federated cloud services Using OpenNebula for underlying cloud And Amazon EC2
E N D
Cloud Service Provisioning Jens Jensen (STFC), Piyush Harsh (INRIA) et al contrailis co-funded by the EC 7th Framework Programme under Grant Agreement nr. 257438 contrail-project.eu 01
Background • Federated cloud services • Using OpenNebula for underlying cloud • And Amazon EC2 • And (eventually) Nimbus, OpenStack... • Single “provider” interface to multiple services • IaaS • PaaS: database, key/value store • PaaS: • Distributed filesystem – GAFS (based on XtreemFS) • XtreemFS demonstrated at OGF in Chicago (previous) • Virtual (secure) networks
Provider Responsibilities • SLA negotiation using WS-Agreement/Negotiation • Publish SLA templates • Publish QoS and QoP (Quality of Service and Protection) • User account management • Access control (based on user attributes (XACML)) • Service state (internal/external control) • Monitoring information • Accounting data returned to fed level
Provider Responsibilities – Service Service features, advertising/discovery Advance Reservation Service Level Agreements Service integrity Constraints – environment, geography
Provider Access Control • Extract SAML assertions from certificate • Pass assertions to PDP • Enforce decision... • Listen for updates from PDP (volatile attrs.: “Usage Control”) • Track/Enforce service states
Architecture – where to adapt Federation: Provider Manager Federation: Provider Manager
Adaption – Anatomy of an Arrow Shared Advertising service/discovery SLA negotiation Monitoring Accounting User management Specific *aaS
Adapter services – stack slice Request Handler (*aaS) Access Control (SAML) Web Services (REST) Socket (TCP/IP, TLS)
Applicable Standards (for IaaS) General questions • Complexity? • Putting pieces together, pragmatically • Plus some pieces of innovation... • Fed id management framework (EUDAT, EGITF) OVF, CIMI (DMTF) XACML, SAML (OASIS)
Summary List of provider responsibilities Can we reach a state of single interface for all aspects? Or should we have an abstraction layer (cfjcloud) Lots of common interfaces for shared activities
contrail is co-funded by the EC 7th Framework Programme http://contrail-project.eu Funded under: FP7 (Seventh Framework Programme) Area: Internet of Services, Software & virtualization (ICT-2009.1.2) Project reference: 257438 Total cost: 11,29 million euro EU contribution: 8,3 million euro Execution: From 2010-10-01 untill 2013-09-30 Duration: 36 months Contract type: Collaborative project (generic) contrail-project.eu 012