© 2006 The Linthicum Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. The Technical Essence of Cloud Computing, and How to Make it Work David S. Linthicum

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Cloud Computing makes SOA even more Cost Effective 2 Cloud Computing SOA Cha-Ching!

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Start with the Architecture Understand: Business drivers Information under management Existing services under management Core business processes 3

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. The Basic Concept One can consider cloud computing the extension of SOA out to cloud-delivered resources, such as storage-as-a-service, data- as-a-service, platform-as-a-service -- you get the idea. The trick is to determine which services, information, and processes are good candidates to reside in the clouds, as well as which cloud services should be abstracted within the existing or emerging SOA. 4

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. 5 The Basic Idea New Accounts Finance/ Operations Commission Calculation Sales Data Cleaning Sales Order Update SOA

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Security-as-a-Service Storage-as-a-Service Integration-as-a-Service Database-as-a-Service Information-as-a-Service Process-as-a-Service Application-as-a-Service Platform-as-a-Service Management/Governance-as-a-Service Testing-as-a-Service

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Defining Cloud Computing Storage-as-a-Service Database-as-a-Service Information-as-a-Service Process-as-a-Service Application-as-a-Service Platform-as-a-Service Integration-as-a-Service Security-as-a-Service Management/Governance-as-a-Service Testing-as-a-Service 7

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Storage-as-a-service, as you may expect, is the ability to leverage storage that physically exists remotely, but is logically a local storage resource to any application that requires storage. This is the most primitive component of cloud computing, and is a component or pattern that’s leveraged by most of the other cloud computing components. Storage-as-a-service providers include Amazon S3, Box.net, and Google Base. 8

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Database-as-a-service provides the ability to leverage the services of a remotely hosted database, sharing it with other users, and having it logically function as if the database were local. Different models are offered by different providers, but the power is to leverage database technology that would typically cost thousands of dollars in hardware and software licenses. Database-as-a-service providers include Amazon SimpleDB, Trackvia, and Microsoft SSDS. 9

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Information-as-a-service refers to the ability to consume any type of information, remotely hosted, through a well-defined interface such as an API, for example, stock price information, address validation, credit reporting, etc. There are over a 1,000 sources of information that can be found these days, most of them listed in

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Process-as-a-service refers to a remote resource that’s able to bind many resources together, either hosted within the same cloud computing resource or remote, to create business processes. These processes are typically easier to change than applications, and thus provide agility to those who leverage these process engines that are delivered on-demand. Process-as-a-service providers include Appian Anywhere, Akemma, and Intensil. 11

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Application-as-a-service, also known as software-as-a-service (SaaS), is any application delivered over the platform of the Web to an end user, typically leveraging the application through a browser. While many associate application-as-a- service with enterprise applications, such as Salesforce SFA, office automation applications are indeed applications-as-a- service as well, including Google Docs, Gmail, and Google Calender. This was really the first drive into modern cloud computing, but is based on the more traditional timesharing model from years past where many users shared one application and one computer. Application-as-a-service providers include Salesforce, Netsuite, Oracle On Demand, and Google Apps. 12

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Platform-as-a-service is a complete platform, including application development, interface development, database development, storage, testing, etc., delivered through a remotely hosted platform to subscribers. Based upon the traditional timesharing model, modern platform-as-service providers provide the ability to create enterprise- class applications for use locally or on-demand for a small subscription price or for free. Platform-as-a-service providers include Bungee Labs Connect, Coghead, Google App Engine, Long.jump, Force.com, Etelos, Oracle SaaS, and Apprenda SaaSGrind. 13

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Integration-as-a-service, something I helped create back in the late 90s, is the ability to deliver a complete integration stack from the cloud, including interfacing with applications, semantic mediation, flow control, integration design, etc. In essence, integration-as-a-service includes most of the features and functions found within traditional EAI technology, but delivered as a service. Integration-as-a-service providers include Amazon SQS, OpSource Connect, Boomi, and Mule OnDemand. 14

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Security-as-a-service, as you may have guessed, is the ability to deliver core security services remotely over the Internet. While typically the security services provided are rudimentary, more sophisticated services are becoming available such as identity management. Security-as-a-service providers include Ping Identity. 15

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Management/governance-as-a-service is any on- demand service that provides the ability to manage one or more cloud services, typically simple things such topology, resource utilization, virtualization, and uptime management. Governance systems are becoming available as well, such the ability to enforce defined policies on data and services. Management/governance-as-a-service providers include RightScale, rPath, Xen, and Elastra. 16

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Testing-as-a-service is the ability to test local or cloud-delivered systems using testing software and services that are remotely hosted. It should be noted that while a cloud service requires testing unto itself, testing-as-a-service systems have the ability to test other cloud applications, Web sites, and internal enterprise systems, and do not require a hardware or software footprint within the enterprise. Testing-as-a-service providers include SOASTA. 17

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. IT is Skeptical Enterprise IT is understandably skittish about cloud computing. However, many of the cloud computing resources out there will actually provide better service than on-premise. 18

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. However, Not So Fast Not all computing resources should exist in the clouds. Cloud computing is not always cost effective. Do your homework before making the move. 19

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. When Cloud Computing may be a Fit When the processes, applications, and data are largely independent. When the points of integration are well defined. When a lower level of security will work just fine. When the core internal enterprise architecture is healthy. When the Web is the desired platform. When cost is an issue. When the applications are new. 20

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. When Cloud Computing may not a Fit When the processes, applications, and data are largely coupled. When the points of integration are not well defined. When a high level of security is required. When the core internal enterprise architecture needs work. When the application requires a native interface. When cost is an issue. When the application is legacy. 21

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. 22 Understanding the Problem Cloud providers must integrate with existing enterprise systems to become more valuable. However, existing internal integration needs to exist to ensure: –Production and consumption of structured information –Semantic mediation –Security mediation –Service enablement –Firewall management –Transactional integrity –Unstructured data –Holistic management of the complete integration chain

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. 23 Getting Ready So, how do you prepare yourself? I have a few suggestions: –First, accept the notion that it's okay to leverage services that are hosted on the Internet as part of your SOA. Normal security management needs to apply, of course. –Second, create a strategy for the consumption and management of cloud services, including how you'll deal with semantic management, security, transactions, etc. –Finally, create a proof of concept now. This does a few things including getting you through the initial learning process and providing proof points as to the feasibility of leveraging cloud computing resources.

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Stepping to the Clouds 1.Access the business. 2.Access the culture. 3.Access the value. 4.Understand your data. 5.Understand your services. 6.Understand your processes. 7.Understand the cloud resources. 8.Identify candidate data. 9.Identify candidate services Identify candidate processes. 11.Create a governance strategy. 12.Create a security strategy. 13.Bind candidate services to data and processes. 14.Relocate services, processes, and information. 15.Implement security. 16.Implement governance. 17.Implement operations.

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. 25 Other Thoughts At the end of the day, external cloud service should function like any other enterprise application or infrastructure resource, both housing and sharing critical business information as well as services. You have access to thousands of services with a single cloud provider, as well as information, schemas, etc., and the same patterns found in other on-demand application providers as well. You subscribe to these resources rather than purchase them, and they should appear native.

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. 26 Final Thoughts Businesses will have to change to remain competitive. There are many examples of cloud success today, albeit it's still early in the cycle.

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. Thanks! Blogs: –InfoWorld “Real World SOA” –Intelligent Enterprise –eBizq.net Weekly Podcasts –InfoWorld SOA Report –Cloud Computing Podcast Columns –SOA Journal –Web 2.0 Journal –eBizq.net –Align Journal Follow me on Twitter (DavidLinthicum)

© 2006 The Linthicum. Group. All Rights Reserved. Reproduction without prior written permission is strictly prohibited. QUESTIONS? 28 Make Cloud Computing Work for you