Helix Nebula Architecture V1.5-public - CERN

Transcription

HELIXNEBULA- dreceivecloudworkload.HelixNebulaArchitecture 1 ightsreserved

HELIXNEBULA- itor:Marc- ElianBéginContributingAuthors:Marc- ditspartners.HelixNebulaArchitecture 2 ightsreserved

HELIXNEBULA- rsionAdditionofT- chTechArchTechArchHelixNebulaArchitecture 3 ightsreserved

HELIXNEBULA- ntroduction.72.CloudVision .82.1.Sharedgoals rovided.93.Requirements.103.1.Actors .103.2.FunctionalRequirements- ‐UserStories.113.2.1.SimpleProvisioning .113.2.2.Contextualisation acement .133.2.5.ImageMarketplace y.143.2.8.Networking .HybridCloudDeployment.153.2.11.ServiceDiscovery .153.3.IaaSEnablingFrameworksinvolvedinPoC .153.3.1.Atos.153.3.2.CloudSigma .183.3.3.T- ‐Systems andIdentityManagement .234.3.ImageFactory.244.4.Provisioning .244.5.Security .25HelixNebulaArchitecture 4 ightsreserved

HELIXNEBULA- rity .254.5.2.PerimitralSecurity .254.5.3.Administration .264.6.Monitoring/Metering.264.7.Billing/Payments .264.8.NetworkFederationandImage/DataMovement .274.9.Termination .274.10.RuntimeInfrastructure .284.12.1.SixSqSlipStream radue.304.12.4.T- ‐SystemsZimory .315.Roadmap .315.1.Release1 .315.1.1.Federation .315.1.2.ServiceCatalogue ning .325.1.5.Monitoring/Metering .325.1.6.DataManagement .Release2 .335.2.1.ServiceCatalogue ning .345.2.4.Monitoring/Metering .345.2.5.Billing/Payment.34HelixNebulaArchitecture 5 ightsreserved

HELIXNEBULA- 345.2.7.DataManagement .355.2.8.Security.355.3.Release3 ning ng .365.3.5.DataManagement .365.3.6.Billing/Payment.366.Conclusion .37HelixNebulaArchitecture 6 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries1. tworkislefttodo,aswellasconvergencewiththedemand- ories(seeSection3)foreasiercross- ortsummary.HelixNebulaArchitecture 7 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries2. ollows: oudframework. ndprivacyonaEuropean- ‐level. ucture,servicesanduser- ‐basegrows. cies)intoaPublic- ‐Private- fitablebusinessenvironmentadheringtoEuropean- ulaaimsatexhibitingare: Multi- ‐demand Multi- ‐supply Easyselectionbetweenproviders ngInfrastructurearenotenteringavendor“lock- esupplier.HelixNebulaArchitecture 8 ightsreserved

HELIXNEBULA- ovidedHelixNebulapromotesamodelforenablingon- omputingresources: high- ‐bandwidthnetworkconnectivity, largesetsofcommodityservers, federatedstoragewithsecuredatalayers, ions, ��innovationengine”forthemass- ‐market,needanoperationale- asticresources.HelixNebulaArchitecture 9 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries3. ipientofaresponse.1. Supply- ‐side- serstories) providesIAAS billsforresources acceptsfederatedaccess abilities ,OpenNebula,OpenStack,etc.)2. Demand- ‐side- ‐Consumers(akauserinthefollowinguserstories) discoverscapabilitiesviathecatalogueofservices provisionsresourcesandinitiatesjobs/work monitorsandcontrolsitsresources paysbills3. Broker- inguserstories) ow) hostsacatalogueofservices enables“thecube”- ability,etc. unifiesbilling4. SMESupplier- guserstories) providesvalueaddedimages providesvalueaddeddatasetsHelixNebulaArchitecture 10 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries providesvalueaddedsystemprovisioningcapabilities5. SMEConsumer- ngdemand- ‐sideamalgamation) takeadvantageof‘pay- ‐as- ‐you- ‐go’and‘no- dwiththeDemand- thematthisearlystage.3.2.FunctionalRequirements- heform:Asa actor ,Ican action ,suchthat(orinorderto) benefit .3.2.1. SimpleProvisioning1. cessthecreatedVMinthecloudofmychoice2. stheNcreatedVMsinthecloudofmychoice3. asanadditionaldisk/volumetoaVM4. volume)canbemanagedusingCRUDsemantic.3.2.2. Contextualisation5. zed asecureway.HelixNebulaArchitecture 11 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries6. isinformation.7. nsonVMs,usingpre- ‐configuredtemplates3.2.3. ImageManagement8. ndselecttherightimagetoinstantiate9. atIcankeepmylistofimagescleanandtidy10. provider11. ry#1and#212. ry#1and#213. se(PoC)are: GlusterFS:EMBLisusingafour- edtogethertodeliver7- ‐8Mb/s G- ofDataandProcessors,on- eusagescenario.14. aArchitecture 12 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries3.2.4. DataTransferandPlacement15. AsaHNconsumer,Icantransferalargeamountofdata( thecloudofmychoice,orpulldataoutofagivencloud.16. avetotransferlargeamountofdatatoprocessit.17. providers?3.2.5. ImageMarketplace18. 9. scopyandreplicationprocesses.20. following: Architecture:e.g.32bit,64bit O/S:e.g.Linux(allflavours),Windows,Solaris,AIX Disklayout Purpose,keywords Installedsoftware:e.g.packagelist Cost nprocess21. suchthatIcanseewhatimagesarepopularandwhy22. rketplaceimagespre- esan‘AWSdevpay’- itiesHelixNebulaArchitecture 13 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries3.2.6. DataMarketplace(DataMart)23. tplace),suchthatIcandiscoverhigh- ehighvalueassets24. AsaHNconsumer,Icanuploadhigh- ntificcommunity25. aVirtualOrganisations)haveaccesstothedata26. acrosscopyandreplicationprocesses.27. venuefromthese.Thisimpliesan‘AWSdevpay’- rsextrachargesthatgetpaidtothedatasetowner.28. suchthatIcanseewhatdatasetsarepopularandwhy3.2.7. Security29. AsaHNconsumer,Icanset- ancontrolaccessofmycloudresources30. orks.31. hhavepre- ng32. protectionandsecurityofmyVMs33. sistentdata.34. ssalltheHNservicesandCloudProvidersusingSSO3.2.8. Networking35. nnectedtoGEANT,suchthatIhavehigh- ulaArchitecture 14 ightsreserved

HELIXNEBULA- ‐THESCIENCECLOUDTechArchSeries3.2.9. CrossCloud/FederatedProvisioning36. ity)3.2.10.HybridCloudDeployment37. Asademand- loudresources38. Asademand- scovery39. hofferandsupport40. ctionweprovideahigh- entifiedHelixNebulaArchitecture.3.3.1. dedthefollowing: 64GBofRAM 8TBofdedicatedstorage acentertraffic Fastinternetconnection anopensourcesolutionHelixNebulaArchitecture 15 ightsreserved

HELIXNEBULA- awiththefollowingservices: - mentsignedwithanX.509certificate,

HELIX&NEBULA& THESCIENCECLOUD& TechArchSeries%& Helix&Nebula&Architecture -&All&rights&reserved& 7% & % 1 .