云计算与下一代IDC的架构与运维

2012华东架构师大会演讲主题：云计算与下一代IDC的架构与运维演讲嘉宾：李志霄CloudFundamentalsInfrastructureasaService(IaaS):basiccomputeandstorageresourcesOn-demandserversAmazonEC2,VMWarevCloudPlatformasaService(PaaS):cloudapplicationinfrastructureOn-demandapplication-hostingenvironmentE.g.GoogleAppEngine,S,WindowsAzure,AmazonSoftwareasaService(SaaS):cloudapplicationsOn-demandapplicationsE.g.GMail,MicrosoftOfficeWebCompanions今天的IT部署方式与时俱进了吗？基于运算与知识的服务将成为社会化的服务（utility-水电气）今天许多CIO，CFO仍然在——投资昂贵的设备-服务器，路由器。磁盘（CAPEX）;等待一两年的项目实施的周期;承担项目开发和上线的风险;为维护系统，灾备而烦恼;缺乏弹性-业务需求变化造成设备，带宽闲置（被投资人骂翻）或不足（被用户骂翻）。把大规模、分散的计算资源整合为可以按须提供服务的计算资源，提高了IT设施的利用率，降低了成本和用户使用门槛TheBenefitsoftheCloudTheCloudisaboutcheap,on-demandcapacity=ManagedforYouStandaloneServersIaaSPaaSSaaSApplicationsRuntimesDatabaseOperatingSystemVirtualizationServerStorageNetworkingEgWindowsAzureYouroptionsincreasewiththeCloud

ExtendapplicationtotheCloudStoredataintheCloudMoveapplicationtotheCloudCreatenewCloudserviceCombineCloudservicestocreatenewsol’n.生态系统鸟瞰图–认识自己（Ecosystem）信息电网信息电器信息电厂ConnectedDevice3G/4GLTEADSL/WiFi/Femtocell/FTTX高速卫星宽带数据中心

/IaaSSaaS/PaaSXaaSTIME云端产业elecomTediantertainment数据中心也在向增值服务与时俱进

MigrationtoValueAddedServicesColocationModelManagedServicesModelManagedHostingModelCloudModelCustomerServer,MgmtIPBWColo,PowerCustomerServerInstall,test,Monitor,RHIPBWColo,PowerServer,StorageConsultingOps,Mgmt,MonitorIPBW,IPVPNColo,PowerUtilityHostingServer,StorageConsultingOps,Mgmt,MonitorIPBW,IPVPNColo,Power21VManaged21VManagedAParadigmShift思维转换今天的IT竞争已经不是企业的竞争，也不是产品的竞争，而是进入了一场产业链竞争（Wintel-8/2开放/封闭式，苹果-99.9/0.1封闭/开放式）云计算产业正从传统IT产业和互联网产业中脱胎换骨，以全新的形态呈现在人们眼前云计算就是把廉价硬件（COTS）软件化软件服务化服务运营化运营规模化的一套技术和业务模式因此我们有必要及早定位云计算产业链、布局关键环节YouManageYouManageVendorManagesYouManageVendorManagesPlatform(asaService)StorageServersNetworkingO/SMiddlewareVirtualizationApplicationsRuntimeDataSoftware(asaService)StorageServersNetworkingO/SMiddlewareVirtualizationApplicationsRuntimeDataInfrastructure(asaService)StorageServersNetworkingO/SMiddlewareVirtualizationDataApplicationsRuntimeCustomerManagesVendorManagesCloudServicesOnPremisesStorageServersNetworkingO/SMiddlewareVirtualizationDataApplicationsRuntimeMostofToday’s

CloudIDCTrueCloudIDCExample:WindowsAzureComponents

WindowsAzurePaaSApplicationsWindowsAzureServiceModelRuntimes.NET3.5/4,ASP.NET,PHPOperatingSystemWindowsServer2008/R2-CompatibleOSVirtualizationWindowsAzureHypervisorServerMicrosoftBladesDatabaseSQLAzureStorageWindowsAzureStorage(Blob,Queue,Table)NetworkingWindows

Azure-Configured

NetworkingWhata“CloudOS”shouldbe:CloudOS=OSforthedatacenterModel:TreatthedatacenterasamachineHandlesresourcemanagement,provisioning,andmonitoringManagesapplicationlifecycleAllowsdeveloperstoconcentrateonbusinesslogicProvidessharedpoolofcompute,diskandnetworkVirtualizedstorage,computeandnetworkIllusionofboundlessresourcesProvidescommonbuildingblocksfordistributedapplicationsReliablequeuing,simplestructuredstorage,RDBSstorageApplicationserviceslikeaccesscontrolandconnectivityThe“HeartandSoul”ofCloudOS--FabricController(FC)The“kernel”ofthecloudoperatingsystemManagesdatacenterhardwareManagesWindowsAzureservicesFourmainresponsibilities:DatacenterresourceallocationDatacenterresource

provisioningServicelifecyclemanagementServicehealth(fault,performance)managementInputs:DescriptionofthehardwareandnetworkresourcesitwillcontrolServicemodelandbinariesforcloudapplicationsServerKernelProcessDatacenterFabricControllerServiceWindowsKernelServerWordSQLServerFabricControllerDatacenterExchangeOnlineSQLAzureWindowsAzureFabricControllerIServerHardwareWindowsServerWindowsAppSQLServerDataCenterWindowsAzureAzureAppSQLAzureWindowsKernelFabricControllerWindowsAzureFabricControllerLoginAzurePortalRDFEAggregatorsandLoadBalancersFabricControllerNodeModelingCloudApplicationsAcloudapplicationistypicallymadeupofdifferentcomponentsFrontend:e.g.load-balancedstatelesswebserversMiddleworkertier:e.g.orderprocessing,encodingBackendstorage:e.g.SQLtablesorfilesMultipleinstancesofeachforscalabilityandavailabilityCDNcachingidentity

&securitybusiness

analyticscommercemediaintegrationHPCcomputedatamanagementnetworkingSQL

databasenoSQL

databasewebsitescloudservicesblobconnectvirtualnetworktrafficmanagerVMsGlobalPhysicalInfrastructureservers/network/datacentersautomatedelasticmanagedresourcesusagebasedcomputedatamanagementnetworkingSQL

databasenoSQL

databasewebsitescloudservicesblobconnectvirtualnetworktrafficmanagerVMsThereAreThreeWaystoGetStartedUsingWindowsAzureCompute:WebSites–Quicklyandeasily

deploysitestothecloudwithsupportformultipleframeworksandpopular

opensourceapplicationsincludingWordPress,Drupal,Joomla!

andUmbraco.VirtualMachines–InstantlyrunyourexistingapplicationsandinfrastructureinaVHDimage.

Youretainfullcontroltoconfigureandmaintaintheimage.

Capturesomebenefitsofthe

cloudincludingloadbalancing

andfailover.CloudServices–Capturethefullbenefitsofthecloudthatquicklyscaleupordown.

InfrastructuremanagementisalldonebyMicrosoft,soyoucanfocusyourresourcesonbuildingthebestapp.WindowsAzureCloudServicesWebRoleWorkerRoleCloudServicescomein

twoFlavors:Aplaceforyourapplicationcodetorun…Webroleispre-configuredwithIISWorkerroleisforbackend,async

codeYoupackageyourcode/artifactsandWindowsAzuredeploysandmanagesitforyouautomaticallycomputedatamanagementnetworkingSQL

databasenoSQL

databasewebsitesblobconnectvirtualnetworktrafficmanagerVMscloudservicesWindowsAzureVirtualMachinesBlobStorageCloudManagementPortalScripting(Windows,

LinuxandMac)computedatamanagementnetworkingSQL

databasenoSQL

databasewebsitesblobconnectvirtualnetworktrafficmanagercloudservicesRESTAPI(forservicemgmt)GettingStartedSelectImageandVMSizeNewDiskPersistedinStorageBootVMfromNewDiskVMsTheWindowsAzureSDKprovidesseveralAPIsforprogrammingintheWindowsAzureenvironmentTheWindowsAzureServiceManagementAPIisaRESTAPIformanagingyourstorageaccountsandservicedeployments.服务管理API是一个RESTAPI,可以管理WindowsAzure存储账户和托管部署服务。ItprovidesprogrammaticaccesstomuchofthefunctionalityavailablethroughtheManagementPortal.

AllAPIoperationsareperformedoverSSLandmutuallyauthenticatedusingX.509v3certificates.所有API操作均需要进行基于SSL的身份验证和使用X.509v3的证书.ThemanagementservicemaybeaccessedfromwithinaservicerunninginWindowsAzure,ordirectlyovertheInternetfromanyapplicationthatcansendanHTTPSrequestandreceiveanHTTPSresponse.。RESTAPI在Azure两种服务类型的应用StorageAccounts:提供访问WindowsAzureBlob,Queue,andTable的服务.可以实现管理现有的StorageAccount，实现在订阅清单包含存储账户信息；返回存储账户属性；重新生成密钥。Hosted

Services:提供在Azure环境中部署WebRole;WorkRole;VMRole。可以创建、删除部署；返回一个托管服务的属性；更新升级，重启，和管理已经部署的服务。RESTAPIWindowsAzureStorageService:egCreateStorageAccountPOST/<subscription-id>/services/storageservices

RESTAPI(POST，GET，PUT或DELETE)LoadBalanceBlobQueueTableREST(RepresentationalStateTransfer)WindowsAzureWebSitesQuicklyandeasilydeploysitestoahighlyscalablecloudenvironmentwiththeframeworksandopensourceappsofyourchoiceusingWindowsAzureWebSitesSupportsmultipleframeworks

(ASP.NET,ClassicASP,PHP,Node.js)Pickfrompopular

OpenSourceappsPickyourDB

(SQLDatabase,MySQL)Chooseyourtools

(VisualStudio,Git(一个开源的分布式版本控制系统),FTP,WebMatrix)Buildonanyplatform

(Windows,Mac,Linux)computedatamanagementnetworkingSQL

databasenoSQL

databaseblobconnectvirtualnetworktrafficmanagercloudservicesVMsGIT:FTPGIT:FTPGIT:FTPWebDeploy:TFSDeploy101011100101010101000101010001110101110010101010100010101000111010111001010101010001010100011SupportedDeploymentProtocolswebsitesfilename.cspkg+filename.cscfgApplicationDeployedVHDXMLStorage(URL)FabricControllerHostOSAgentGuestOSAgentSettingLoad

balance&DNS在WindowsAzure上建一个免费的网站

在WindowsAzure上建一个免费的网站时间:2012-07-1619:46来源:风信网作者:末信点击:257次我要评论-如果你想建立一个低成本的网站但是又具有极好的扩展能力能满足业务和流量增长的需求，或者你想快速的建一个免费的网站，同时又有保障网站能稳定安全的运行，那么微软的WidnowsAzure的websites新功能就能满足要求。如果我是一个刚起步不久的公司，或者我想做一个个人网站，我觉得Websites无疑是一个最佳的选择。WindowAzure在今年六月的IaaS预览版本里公布了Websites的新功能，用户可以在WindowsAzure上建十个免费12个月的网站（是不是对现在的一些网站托管很有压力？），主要的优点：快速便捷-用户可以容易地轻点几下鼠标，就能建立一个网站，免去网站托管和域名申请等繁琐的步骤多种开发语言和平台的支持–websites支持ASP.NET,传统的ASP,PHP,Node.js，支持Windows,Mac,Linux，支持SQLServer,SQLAzure,MySQL的数据库优秀的可扩展性-在Azure上建网站可以充分利用到Azure的可扩展性的能力，随着网站流量的增加，可以随时增加资源来支持网站原文出自【风信网】，转载请保留原文链接：/server/118212.shtmlTheWindowsAzureServiceModelAWindowsAzureapplicationiscalleda“service”DefinitioninformationConfigurationinformationAtleastone“role”RolesarelikeDLLsintheservice“process”CollectionofcodewithanentrypointthatrunsinitsownvirtualmachineTherearecurrentlythreeroletypes:WebRole:IIS7andASP.NETinWindowsAzure-suppliedOSWorkerRole:arbitrarycodeinWindowsAzure-suppliedOSVMRole:uploadedVHDwithcustomer-suppliedOScomputedatamanagementnetworkingSQL

databasenoSQL

databaseblobconnectvirtualnetworktrafficmanagercloudservicesVMswebsitesWindowsAzureoffersmultiplewaystomanageyourdatainthecloud.SQLDatabase,formerlyknownasSQLAzureDatabase,enablesyou

torapidlycreate,scaleandextendapplicationsinthecloudusingfamiliartoolsandskills.DataManagementareasetofmanagedserviceshavinga99.9%monthlySLASQLDatabasealsoincludesfeaturesthatenableeasymigration,exportandongoingsynchronizationthroughSQLDataSyncofon-premisesSQLServerdatabaseswithWindowsAzuredatabases.Tables

offermanual,key-basedaccesstoun-schematizeddataatalowcostforapplicationswithsimpledataaccessneeds.Blobs

provideinexpensivestorageofvideo,audioandimages.SQLDatabaseCloudrelationaldatabasebasedonSQLServerengineUsesametools,dataaccessframeworks,

T-SQLbasedlanguageGlobaldatacentersHighAvailability&RedundancyReadsarecompletedattheprimaryWritesarereplicatedtoaquorumofsecondariesSingleLogical

DatabaseMultiplePhysical

ReplicasSinglePrimaryMultipleSecondariesReplica1Replica2Replica3computedatamanagementnetworkingnoSQL

databaseblobconnectvirtualnetworktrafficmanagercloudservicesVMswebsitesSQL

databaseOn-PremisesCloudScale-outviamultiplecopiesofdataE.g.Separatereporting&OLTPworkloads;multipleWebsitesGeo-locatedwebapplicationsUsewithWindowsAzureTrafficManagerHybridapplications;one-waypublishortwo-waysharingMultiplelocations(e.g.branchoffice,retailoffices);sharedatabetweenlocationsand/oraggregatedataincloudSQLServerApplicationSQLServerApplicationSQLDatabaseApplicationSQLDatabaseApplicationSQLDatabaseApplicationSQLDatabaseApplicationSQLDataSync(easiertoaccess,security,compliance,DR,etc.)computedatamanagementnetworkingnoSQL

databaseblobconnectvirtualnetworktrafficmanagercloudservicesVMswebsitesSQL

databaseSQLAzureSQLAzureDBDBMSAzureSyncDataSyncDataSyncTDS(TabularDataStream)protocolReportingTwokindsofdatasyncExtendyournetwork

intothecloudTreatyourWindowsAzureservicesasif

theyareonyourowncorporatenetwork.

EnablesservicesinAzure(e.g.SQLDatabase)touseserviceson-premise

(e.g.ActiveDirectory)directly.IncreaseperformanceandavailabilityofservicesRedirectusertobest/closestdeployment.

Redirecttraffictoanotherdeployment

basedonavailability.

Trafficisdistributedequallytoallcloudservices.computedatamanagementnetworkingnoSQL

databaseconnectvirtualnetworktrafficmanagercloudservicesVMswebsitesSQL

databaseblobWindowsAzure

NetworkingWindowsAzureRolesOnpremisemachinesConnectFordevelopersDesignedfordeveloperssoitissimple

tosetup,easytomanageandcanbe

rapidlyprovisionedcomputedatamanagementnetworkingnoSQL

databasevirtualnetworktrafficmanagercloudservicesVMswebsitesSQL

databaseblobconnectSubnetsin

Windows

AzureOn-premisesubnetsVirtualNetworkFornetworkadministratorsProvidesnetworkadminsthecontrolto

setupsubnetsintheCloudandmanage

themasextensionsofon-premisedatacentersWindowsAzure

NetworkingcomputedatamanagementnetworkingnoSQL

databaseconnecttrafficmanagercloudservicesVMswebsitesSQL

databaseblobvirtualnetworkWindowsAzureTrafficManagerLoadbalanceusertrafficacrosscloudservicesrunninginsameordifferentdatacenterstobuildgloballyavailable,highperformingappsCloudServiceCloudServiceCloud

ServiceLoad-balancingEndpointmonitoringCNAMEPoliciesDNSbasedtrafficmanagementbasedonpolicies:Performance,Round-robin,FailoverImproveappperformancebyservinguserrequestswithservices‘closest’tothemImproveappavailabilitybyautomaticallyfailingoverwhenaservicegoesdowncomputedatamanagementnetworkingnoSQL

databaseconnectvirtualnetworkcloudservicesVMswebsitesSQL

databaseblobtrafficmanagerWindowsAzureActiveDirectoryisamoderncloudserviceprovidingidentitymanagementandaccesscontrolcapabilitiestocloudapplications,whetherthoseareWindowsAzureapplications,MicrosoftOffice365,DynamicsCRMOnline,WindowsIntuneorother

3rdpartycloudservices.EasilyintegrateLiveID,Facebook,Yahoo,Google,

&ActiveDirectoryforapplicationsinglesign-on.Supportforindustrystandardsandexisting.NETAPIs.CDNcachingidentity

&securitybusiness

analyticscommercemediaintegrationHPCAmoderncloudserviceprovidingidentitymanagement

andaccesscontrolcapabilitiestocloudapplicationsWindowsAzureActiveDirectory(Identity&Security)On-PremisesActiveDirectoryADFS2.03rdParty

AppsWindowsAzureActiveDirectoryMicrosoftAppsYour

AppsAmoderncloudserviceprovidingidentitymanagement

andaccesscontrolcapabilitiestocloudapplications(通过对诸如WRAP和SAML之类的标准协议的支持,ACSwillperformsign-inwithanyOpenID2.0identityprovider-Google,Facebook,Yahoo)CDNcachingidentity

&securitybusiness

analyticscommercemediaintegrationHPCFederationTrustACSV2MediaServicesprovideascalableandreliableinfrastructureallowingyoutofocusonyourcorebusinessandthevaluablefeaturesthatdifferentiateyourproducts.WindowsAzureMediaServicesareeasytouse,flexible,andprovidecost-effectiveandfullycustomizedsolutionsthatcancreate,manage,anddistributecontentforallthedevicesandplatformsyoucareabout.CDNcachingidentity

&securitybusiness

analyticscommercemediaintegrationHPCMediaServicesenableContentCompaniesandSolutionProviderstobuildend-to-endmediaworkflowsonWindowsAzure.WindowsAzureMediaServicesBroadcastersNetworkOperatorsContentOwnersEnterprisesEncodingFormat

ConversionContentProtectionOn-DemandStreamingLiveStreamingAnalyticsWindowsAzureMediaServicesRental|Subscription|Purchase|FreeWindowsAzureCDN3rd

PartyCDNCDNcachingidentity

&securitybusiness

analyticscommercemediaintegrationHPCMediaServicesenableContentCompaniesandSolutionProviderstobuildend-to-endmediaworkflowsonWindowsAzure.WhatPaaSIDCis:ProvidesPlatformasaServiceApplicationPlatformintheCloudProvides:ComputeWeb,Worker&VMRoleStorageBlob,Table,Queue&RDBSServerApplicationFabricServiceBus,AccessControl,Cache,IntegrationGlobalPhysicalInfrastructureservers/network/datacentersautomatedelasticmanagedresourcesusagebasedCDNcachingidentity

&securitybusiness

analyticscommercemediaHPCintegrationcomputedatamanagementnetworkingSQL

databaseblobconnectvirtualnetworktrafficmanagernoSQL

databasewebsitescloudservicesVMsDatacenterArchitectureNodesTORLBLBAggPDULBLBAggLBLBAggLBLBAggLBLBAggLBLBAggRacksDatacenterRoutersAggregationRoutersandLoadBalancersNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDUNodesTORPDU………………TopofRackSwitchesPowerDistributionUnitsFaultDomainHardware&NetworkTopologyHighAvailability:FaultDomainsPurpose:AvoidsinglepointsoffailuresUnitoffailurebasedondatacentertopologyE.g.top-of-rackswitchonarackofmachinesWindowsAzureconsidersfaultdomainswhenallocatingservicerolesE.g.don’tputallrolesinsamerackOSS(Equipment(network,server,storage)andSWhealthmonitoringandcontrol)-necessaryforanykindofcloudBSS(online/offlinesales,billing/finance,marketingBI,CC,ICPCompliance,etc.)-necessaryforpubliccloudChallenges-Security

andInteroperabilitySecurity

ConfidentialityFreefromattacksServiceLevelAgreementSLA

mustassureQoS(quality-of-service),e.g.,serviceresponsetimeInteroperabilityEnsureacloudserviceusercanmovefromonecloudservicetoanother45Source:Lin,G.,Fu,D.,Zhu,J.andDasmalchi,

G.,

“CloudComputing:

ITasaService,”ITProMarch/April2009IT部署边界的演变:

基础设施虚拟化/服务管理标准化、自动化-四大板块虽会有消长，但都会继续存在，尤其是核心应用-可定制性，合规要求，业务流程引擎，业务规则引擎（通用云平台面向企业应用的短板）企业内共享应用-不同应用可以共享资源企业内核心应用-不同应用所需的资源均保持独立增值型云托管CloudHosting-不同客户的不同应用可以共享资源传统托管/租赁托管，多用户数据中心Colocation，ManagedHosting-资源为客户拥有或专用

VideoConferencingEmailIM开发测试存储ERPSCMCRMEmailSearchIdentity/Security存储FinanceHR企业机密政务内网存储eMailSearchERPCRMSCM存储互操作性共享的面向服务体系结构（如http,XML,SOAP,WSDL,UDDI）文档使用标准化技术统一业界标准从数据获取可重用性信息连接人，数据，与异构系统在文档、应用程序和系统间实现数据互操作建立智能应用程序以提高数据质量

ServiceBus

Whatisit?ExtensiontothefamiliarWCFbindingmodel

SOAP/HTTPSOAP/TCPHTTPSimpleHTTPAPIsforserviceManagement

ServiceRegistry(AtomPublishingProtocol)MessageBuffer(REST)FullyintegratedwithAccessControlService

ServiceBusExchangemessagesbetweenlooselycoupledapplicationsNetworksend/receivefromanyinternetconnecteddeviceTraverseNAT