APEC Engineers Databank Operation and Maintenance Chin-Chou Chen Sep. 22, 2015 WORKSHOP ON FEASIBILITY AND IMPLEMENTATION OF A CENTRALIZED DATA BANK OF APEC ENGINEERS 1

Agenda IDC or Cloud Service Operation and Maintenance Discussions 2

Hosted in IDC SL B VPN or IPSEC VPN or FW ACL Firewall Internet Web/AP Servers DB Servers IDC Service Provider Users Operation & Maintenance ……. 3 Co-location, Servers/Network Equipment prepared by customer Co-location & Servers/Network Equipment Leasing

Cloud Services Subnet-1 (IPv4/v6) Subnet-2 (IPv4/v6) Subnet-3 (IPv4/v6) Subnet-4 (IPv4/v6) Subnet-5 (IPv4/v6) Internet Security Added Services MPLS VPN Advanced SLB FW + SLB Internet Gateway Intranet FW/Gateway IPSec VPN Virtual Private Cloud Storage Services VDI Services IDC Cloud Service Provider 4 Users Enterprise Operation & Maintenance

VM Firewall, Load Balancer, Router VM Control / Monitor Public cloud Government cloud Private cloud Enterprise cloud IDC & Network Mgmt. Operation Analysis Resource Usage Optimization 24x7 Monitoring Customer Satisfaction Cooperation with Partners Variety of Apps High Security ComponentServiceWebDB SaaS PaaS IaaS Infra. Automated Cloud Service Operations Self- service Portal Rapid Provision Service on Demand Service/ Resource/ Inventory Service/ Resource/ Inventory SLA & QoS guarantee SLA & QoS guarantee Integrated Resource Mgmt. Elastic Charging & Billing Pay per Use Cloud Service Operation & Maintenance 5

Cloud Service Security Management 6 IDS, IPS Anti-DDoS penetration testing Vulnerability scanning SOC (Security Operation Center) Security Info DB

7 What makes the Cloud so attractive New challenges to Software vendors Everything as a Service Startup/ISVs Need rapid development to keep pace with user demands Enterprises Need elastic resources against complicated and volatile environment Innovation and ideas could be realized through cloud technologies Unpredictable fluctuations on IT industry

8 Nice and tangible experiences with Cloud Success Story 1 Taiwan Railway online-bookingsystem Success Story 2 Real estate Transaction query system system Services based on cloud which make people have nice and tangible experiences Improve quality of government services

9 The system is usually overload at beginning but mitigated after then ~ 2.5x Benefit 2: System throughput increasing Benefit 1: On-demand provisioning Databases Application servers … Easily expand the capacity Success Story 1:Taiwan Railway online-booking system System throughput

10 The Government pushes for open data to boost effectiveness and establishes the Real estate transaction query system System was overloaded and unavailable on the first day  Almost 3,000 visitors at first 5 minutes.  Concurrent 2,500 visitors Then Chunghwa Telecom helps the systems upgrade to hicloud.  Government is satisfied with the new performance of concurrent 10,000 visitors.  Benifit1: Quickly migration to hicloud in 1 week after purchasing.  Benifit2: Dynamic provision of servers and bandwidths on user needs  Benifit3: Pay As You Use model reduces the hardware and maintenance costs. Success Story 2 : Real estate transaction query system

11 P2V Servers VMs New data posted on 16 th Cloud Service hicloud VPC Open hicloud Resource adjustment

12 CAVE & Virtuoso Cloud Animation Visual Effect

13 Life of Pi and CAVE Shooting with green(blue) screen Shooting with green(blue) screen Adding visual effects Mixing everything together 80% clips in Life of Pi, are generated by computer visual effects which are made from 5 locations of R&H and finished in Taiwan CAVE center CAVE: Cloud Animation Visual Effect

14 CAVE and CHT self-developed Virtuoso CAVE Taiwan R&H Mumbai, India R&H Hyderabad, India R&H Malaysia R&H LA R&H Vancouver The CAVE center based in Taiwan supports 5 R&H VFX computation through internet. The key component of CAVE is Virtuoso, which is a software to provide cloud services

IDC or Cloud To evaluate the cost, we need to discuss and confirm the following items – the system architecture, short-term and long-term scale – backup and DR solution – specifying the maintenance scope, which parts will be run by system owner, which parts will be hosted by service provider – Others 15 Discussion Items