1. DISCUSSION LEADERS PRAVINA KOTA, KEVAN ESSMYER, NAVEEN KARDURI
Scalability Options …leaving room to grow (VM’s, AWS, Oss, multiple logins)
DISCUSSION LEADERS PRAVINA KOTA, KEVAN ESSMYER, NAVEEN KARDURI

2. We don’t have any problems, who cares about scaling?
“We just went to a Shibboleth single sign on, we can handle 10,000 users right…?”
“Why is it taking so long to send out 40,000 surveys…?”
“They want separate FISMA and Part 11 Compliant servers….”
“….the web server is 6 years old, what should we buy next…? ”

3. Virtual Machines (VM) and Containers (VM 2.0)
Not tied,….or “Loosely” tied to hardware
Small footprint
Multiple dedicated service VM’s (web server, compute node, DB, Special Certified instances )
High availability clustering
Shared virtual IP & Load balancing
Automated capacity expansion (spin up more servers to support peak usage)
Redundant host servers
Failover capability
VM’s automatically migrated to different host servers
Server Snapshot Template
Quickly rebuild/redeploy service
Backup entire server with software solutions
Easy database restoration to recover project data

4. Amazon Web Services/Hosted IT services …aka “The Cloud”…
Multi-level Redundancy
Server/Storage/Data Center
Managed IT infrastructure
Enterprise level services with defined SLA’s
Purchase only amount of service you need when you need it (hardware/support)
Standardized infrastructure with experienced support staff
Usage based cost structures
Resize resources based on need
Predictable IT pricing
Scale up or down as usage demands
BAA service agreement for Protected Information (PHI)
Data security risk management
Where’s my data scenario?

5. Open Source Software (OSS)
Hidden Costs - Free to use not free to operate
Modify at your own risk - drifting too far off course
Niche solutions - (ex. High performance DB backup/restore without enterprise $$$ )
Support
Community forums - coalition of the willing
Paid external commercial support
Paid internal support - local expert + X (...rhymes with Frugal)
Maintenance
Deployment restrictions -
Legacy changes
Licensing
GPL-Compatible? -- Usage restrictions
Source code protection

6. Multiple Logins Login Methods Add on Security layer on Login Module
Table based/ldap, Shibboleth SSO
Overhead vs Control
Add on Security layer on Login Module
Two Factor Authentication
2 What? -- “Anybody seen my cell...mobile...phone…”
Infrastructure support
Institution requirement
Consistent security behavior across applications
Reduce poor password security
Added 2FA

7. Discussion Who’s looking for ways to reduce current costs?
Who’s looking for ways to expand capacity?
What’s holding you back?
Who’s using one of the solutions we’ve talked about?
What benefits? What problems?