loading...
The Business Suit: Spinach and Kryptonite
For VMworld this year I decided to pack heavy. I spent the week in suits rather than my typical IT polos and jeans, slacks and shirts type attire. No particular reasoning for the change although the factors were along the lines of: change of pace, stepping it up, and ‘It’s Vegas Baby!.’ To say the least it was an interesting experience being at VMworld in a suit for the first time.
The IT community is typically a dressed down society, we toil away in data centers, call centers, and cubicles and have no need for dress up. Jeans and a polo is business and flip flops put us in business casual. This means a suit is out of the norm. VMworld only amplifies that as the walking, back-to-back sessions, and being away from the home office make the case for casual. This means wearing a suit is not necessarily unique but noticeable, especially on the show floor.
The Spinach:
Like spinach for Popeye the suit had its benefits. I’m a firm believer in you can’t be overdressed (even if I don’t heed that often) and Vegas is no exception. During customer engagements, partner meetings, and vendor video shoots the suit boosted my confidence and professional appearance. It even had benefits on the gaming floor as pit bosses were much more accommodating of special requests such as opening new tables, raising maximum bets or lowering minimums than I recall in t-shirt and jeans. You definitely can’t overdress in Vegas.
The Kryptonite:
Like Kryptonite for Superman while working the booth or having discussions with vendor engineers I found that the suit downgraded my status as an engineer. By that I mean I had to prove I was technical, rather than sales, business development, etc. the immediate assumption of customers while I was at the WWT booth was that I was the sales guy and they needed to find the engineer. It was definitely an interesting experience. I had a lot more high level sales pitches, marketing fluff etc. thrown at me while walking the floor than I have in past years. Even more interesting was that I did not get harassed by the ‘booth babes’ as much. That brings me to my next point.
Booth Babes:
I’ve always enjoyed the attractive models known as booth babes that many vendors hire to scan badges and attract attention at trade shows. IT is a very male heavy industry and I looked at it as harmless marketing. I didn’t however think of it from the big picture perspective. Matt Simmons enlightened me with one of his post show blogs: http://www.standalone-sysadmin.com/blog/2011/09/seriously-stop-with-the-booth-babes/. The booth babes themselves may be harmless but the way in which they train us to stereotype women in a booth is not. In a similar way to the way in which my suit identified me as non-technical, booth babes cause us to look at women working trade show booths as non-technical or eye candy, that is a very bad thing (quick note I’m not equating the suit discrimination to sexual discrimination only drawing a parallel to the way our brains begin to stereotype.) There are some amazing women in IT and we should be encouraging more to join the ranks, not making an inhospitable atmosphere.
I encourage you to read matt’s blog and take part in ‘Operation Eliminate booth Babes.’
loading...
The Need to Design for Workload Mobility in the Cloud: DR and ROI Considerations
The pressure is on for business and information technology services to produce 100% available environments with an equally high return of the capital investment allocated to the infrastructure used to support and operate their technology environments. Despite businesses’ desire for 100% availability and an “availability-as- a-utility” model, a highly available IT infrastructure should not be architected as a utility. The availability-as-a-utility model currently lacks standards and the implementation architectures are complex; it is also interdependent on many components, and the level of people and process complexity in IT service delivery increases the risk of downtime when compared to technology adoption risks. These components are not easily quantized and their interactions are not well understood, which is preventing practical development of the availability-a-as-utility model.
While availability-as- a-utility may not be practical, architecting your IT environment to be part of an active / active cloud is practical. A recent study published by Gartner Research suggests that if the business impact of downtime can be considered significant for some business processes, such as those affecting revenue, regulatory compliance, customer loyalty, health, and safety, then the owners of enterprise technology infrastructure should invest in continuous availability architectures whose operating context is active / active (Scott, 2010).
Creating an active / active environment can be accomplished by using application level clustering or cloud based virtual mobile workloads. The traditional approach of application level clustering does not scale at the same rate as a virtualization based application platforms. In most cases, application level clusters need to be architected and coded on a case-by-case basis. At the same time, the hosting of these applications on a virtualized server platform typically requires no changes to the application level confirmation or metadata. Many third party analysts recommend emerging technologies that enable mobile workloads to replace the fragile, script-based or application dependent recovery routines. These new technologies are easier to maintain and can provide more granularity and greater consistency, and can increase efficiencies in the pursuit of this goal. Because emerging tools in this space tend to be more loosely coupled, rather than tightly coupled (like that of traditional application clustering), enterprises will be more likely to reduce the “spare” infrastructures required for recovery, and thus reduce the overall cost of providing highly available recovery infrastructures. In addition, as more virtualized cloud environments are deployed into production, these tools will be able to make use of the underlying virtual platform for providing something close to availability-as- a-utility via virtual server mobility (Witty & Morency, 2010). Therefore, both large and small organizations gain a greater ROI to virtualize the hosted application and rely on virtualized mobile workloads to provide availability versus investing in an application level active / active deployment.
Keep in mind that a subset of cloud, automated utility compute environments, do not improve availability alone. To deliver high preforming and highly available services and applications, storage and networking infrastructures must also be designed to support these environments via support for workload mobility (Filks & Passmore, 2010). For this, the best solution is to prepare your applications and infrastructure to exist within a virtual datacenter environment or to utilize fabric computing. This type of strategy can offer a number of advantages to an organization, such as improved time to deployment, greater infrastructure efficiencies, and increased resource utilization in the datacenter. In addition, recent studies found that placing fabric computing and creating a virtualized datacenters on the priority list of data center architecture planning when your virtualization plans call for a dynamic infrastructure (Weiss & Butler, Febuary 2011). High availability, highly efficient multiple datacenter implementations are prime examples of the previously mentioned dynamic infrastructure.
One of the tools to implement virtualized mobile workloads is the use of long-distance live migration of virtualized workloads through one of the various types of datacenter bridging technologies. The live migration of virtualized workloads enables an IT organization to move workloads as required. This can be a manual process such as in anticipation of a disaster, datacenter moves, workload migrations, and planned maintenance. It is also implemented automatically to rebalance capacity across datacenters. Architecting your application infrastructure to support mobile workloads will reduce or eliminate the downtime associated with these initiatives or projects. Moreover, the support for long-distance live migration could be used to enable live workload migration across internal and external service providers. An example of this is leveraging additional utility compute resources of cloud datacenters and hybrid private / public cloud architectures.
Consider a VDI deployment deployed in virtualized datacenter model over two geographic locations. This deployment would leverage long distance live migrations of workloads, first host redundancy protocol localization for egress traffic, an application delivery network for ingress traffic selection, and active / active SAN extensions to ensure storage consistency.
- The operations team is able to migrate workloads between datacenters and perform routine maintenance without the need for specialized maintenance windows. This allows for an increased level of operational productivity by way more efficient time management.
- The need to maintain state of infrastructure metadata and configuration revisions is diminished significantly as the active / active virtualized datacenter is providing continuous validation of operational consistency. This also increases productivity and reduces the task load of the operations team.
- The investment of the compute, network, and storage infrastructure at both sites is being realized on a continual basis; one whole set of infrastructure is not sitting dormant for lengthy periods of time.
- The need for periodic full scale “failover-test” is eliminated. Both site’s operational veracity is validated through continuous use. Again, this reduces operational staff requirements and workload. It also can result in removing the capitol required to secure large recovery centers for testing purposes only.
This short example demonstrates where ROI can be increased while simultaneously providing for increased application performance and utilization.
The purposeful design and integration of workload mobility technologies into an organization’s IT strategy has significant potential business benefits. Most enterprises approach availability in an opportunistic way after they have put their IT infrastructure into production. However, achieving 100% or near-100% availability and infrastructure efficiency requires a comprehensive planning and integration; ad-hoc or point-in-time designs and implementations will not suffice. When constructing your cloud or virtualized datacenter environment, it is critical to not just consider enabling specific piece-parts of workload migrations and automation, but also enable the entire end-to-end information technology service including network and storage infrastructures (Witty & Morency, 2010).
In some security circles there are the sayings, “secure by design” and “an environment that is 99% secure is eventually 100% insecure,” which are lessons directly related to the deployment of clouds and virtualized datacenters (in addition to the direct implications of the obvious InfoSec context). Specifically, a cloud environment should be designed with location agnosticism via virtualized mobile workloads from the start. It should not rely on legacy scripting, warm-standby modes, or offline migration processes that work 99% of the time. Doing so increases the probability for a costly redesign to improve infrastructure productivity, or worse, failure – to 100% of the time.
Jason Maki is a Datacenter Business Consultant with World Wide Technologies. He currently leads the cloud architecture design and implementation efforts for datacenter, commercial service providers, and federal customers. Jason was chosen to speak at VMWorld to comment on the trajectory of information infrastructure best practices in the business continuity and disaster planning space. Jason’s solutions have linked technical engineering and operational efficiencies, creating profitable innovative solutions. During Jason’s career he has been honored by Cisco, VMware, SunGard Availability Services, Dell, and Fujitsu Network Services as being an architectural leader in the datacenter and business continuity space.
References
Filks, V., & Passmore, R. E. (2010). How to Implement High-Availability Storage for Server Virtualized Environments. Gartner Report
Scott, D. (2010). Continuous Availability Architectures. Garnter Report
Weiss, G. J., & Butler, A. (Febuary 2011). Fabric Computing Poised as a Preferred Infrastructure. Gartner Report
Witty, R. J., & Morency, J. P. (2010). Hype Cycle for Business Continuity Management and IT. Gartner Report
loading...
Thoughts From a Global Technology Leadership Forum
I recently had the privilege to attend and participate in a global technology leadership forum. The forum consisted of technology investors, vendors and thought leaders and was an excellent event. The tracks I focused on were VDI, Big Data, Data Center Infrastructure, Data Center Networks, Cloud and Collaboration. The following are my notes from the event:
VDI:
There was a lot of discussion around VDI and a track dedicated to it. The overall feeling was that VDI has not lived up to its hype over the last few years, and while it continues to grow market share it never reaches the predicted numbers, or hits the bubble that is predicted for it. For the most part the technical experts agreed on the following:
- VDI has had several hang-ups both technical, cost and image wise that have held it back from mass-scale adoption
- The technical challenges have been solved for the most part, storage solutions like cache, tiering and SSD can solve the IOPS contention and help to reduce the costs. Storage optimization products like Atlantis Computing also exist to alleviate costs per seat by reducing storage requirements to obtain acceptable IOPS.
- The cost model is getting better but is still not at a place where VDI is a no-brainer. The consensus was that until a complete VDI solution can be rolled out for a cost per seat equal or lower to a typical enterprise desktop/laptop it will still be a tough decision. Currently VDI is still a soft cost ROI as in it provides added features and benefit at a slightly higher cost.
There was some disagreement on whether VDI is the right next step for the enterprise. The split I saw was nearly 50/50 with half thinking it is the way forward and will be deployed in greater and greater scale, and the other half thinking it is one of many viable current solutions and may not be the right 3-5 year goal. I’ve expressed my thoughts previously: http://www.definethecloud.net/vdi-the-next-generation-or-the-final-frontier. Lastly we agreed that the key leaders in this space are still VMware and Citrix. While each have pros and cons it was believed that both solutions are close enough as to be viable and that VMware’s market share and muscle make it very possible to pull into a dominant lead. Other players in this space were complete afterthoughts.
Big Data:
Let me start by saying I know nothing about big data. I sat in these expert sessions to understand more about it, and they were quite interesting. Big data sets are being built, stored, and analyzed. Customer data, click traffic, etc. are being housed to gather all types of information and insight. Hadoop clusters are being used for processing data, cloud storage such as Amazon S3 is being utilized as well as on-premises solutions. The main questions were in regard to where the data should be stored and where it should be processed, as well as the compliance issues that may arise with both. Another interesting question was the ability to leave the public cloud if your startup turns big enough to beat the costs of public cloud with a private one. For example if you have a lot of data you can mail Amazon disks to get it into S3 faster than WAN speed, but to our knowledge they can’t/won’t mail your disk back if you want to leave.
Data Center Infrastructure:
Overall there was an agreement that very few data center infrastructure (defined here as compute, network, storage) conversations occur without chat about cloud. Cloud is a consideration for IT leaders from the SMB to large global enterprise. That being said while cloud may frame the discussion the majority of current purchases are still focused on consolidation and virtualization, with some automation sprinkled in. Private-cloud stacks from the major vendors also come into play helping to accelerate the journey, but many are still not true private clouds (see: http://www.definethecloud.net/the-difference-between-private-cloud-and-converged-infrastructure.)
Data Center Networks:
I moderated a session on flattening the data center networks, this is currently referred to as building ‘fabrics.’ The majority of the large network players have announced or are shipping ‘fabric’ solutions. These solutions build multiple active paths at Layer 2 alleviating the blocked links traditional Spanning-Tree requires. This is necessary as we converge our data and ask more of our networks. The panel agreed that these tools are necessary but that standards are required to push this forward and avoid vendor lock-in. As an industry we don’t want to downgrade our vendor independence to move to a Fabric concept. That being said most agree that pre-standard proprietary deployments are acceptable as long as the vendor is committed to the standard and the hardware is intended to be standards compliant.
Cloud:
One of the main discussions conversations I had was in regards to PaaS. While many agree that PaaS and SaaS are the end goals of public and private clouds, the PaaS market is not yet fully mature (see: http://www.networkcomputing.com/private-cloud/231300278.) Compatibility, interoperability and lock-in were major concerns overall for PaaS. Additionally while there are many PaaS leaders, the market is so immature leadership could change at any time, making it hard to pick which horse to back.
Another big topic was open and open source. Open Stack, Open Flow and open source players like RedHat. With RedHat’s impressive YoY growth they are tough to ignore and there is a lot of push for open source solutions as we move to larger and larger cloud systems. The feeling is that larger and more technically adept IT shops will be looking to these solutions first when building private clouds.
Collaboration:
Yet another subject I’m not an expert on but wanted to learn more about. The first part of the discussion entailed deciding what we were discussing i.e. ‘What is collaboration.’ With the term collaboration encompassing: voice, video, IM, conferencing, messaging, social media, etc. depending on who you talk to this was needed. We settled into a focus on enterprise productivity tools, messaging, information repositories, etc. The overall feeling was that there are more questions than answers in this space. Great tools exist but there is no clear leaders. Additionally integration between enterprise tools and public tools was a topic and involved the idea of ensuring compliance. One of the major discussions was building internal adoption and maintaining momentum. The concern with a collaboration tool rollout is the initial boom of interest followed by a lull and eventual death of the tool as users get bored with the novelty before finding any ‘stickiness.’
loading...
Passwords Are Doomed: You NEED Two-Factor Authentication

How many people use eight-character or less passwords with the first letter being capital and last entries being numbers? People are predictable and so are their passwords. To make things worse, people are lazy and tend to use the same passwords for just about everything that requires one. A study from the DEFCON hacker conference stated, “with $3,000 dollars and 10 days, we can find your password. If the dollar amount is increased, the time can be reduced further”. This means regardless of how clever you think your password is, its eventually going to be crack-able as computers get faster utilizing brute force algorithms mixed with human probability. Next year the same researchers may state, “with 30 dollars and 10 seconds, we can have your password”. Time is against you.
Increasing password sizes and changing mandatory character types helps combat this threat however humans naturally will utilize predictable practices as passwords become difficult to remember. It’s better to separate authentication keys into different factors so attackers must compromise multiple targets to gain access. This dramatically improves security but doesn’t make it bullet proof as seen with RSA tokens being compromised by Chinese hackers. Ways to separate keys are leveraging something you know, have and are. The most common two-factor solutions are something you have and know which is a combination of a known password/pin and having a token, CAC/PIV card or digital certificate. Biometrics is becoming more popular as the cost for the technology becomes affordable.
There are tons of vendors in the authentication market. Axway and Active Identity focus on something you have offering CAC/PIV card solutions. These can be integrated with door readers to provide access control to buildings along with two-factor access to data. RSA and Symantec focus on hardware or software certificate/token based solutions. These can be physical key chains or software on smartphones and laptops that generate a unique digit security code every 30 seconds. Symantec acquired the leader of the cloud space VeriSign, which offers recognizable images, challenge and response type solutions. Symantec took the acquisition further by changing their company logo to match the VeriSign “Check” based on its reputation for cloud security.
VeriSign

PRE ACQUSITION LOGO

POST ACQUSITION LOGO

The consumer market is starting to offer two-factor options to their customers. Cloud services such as Google and Facebook contain tons of personal information and now offer optional two-factor authentication. Its common practice for financial agencies to use combinations of challenge and response questions, known images and verifying downloadable certificates used to verify machines to accounts. The commercial trend is moving in the right direction however common practice for average users is leveraging predictable passwords. As many security experts have stated, security is as strong as the weakest link. Weak authentication will continue to be a target as hackers utilizing advance computing to overcome passwords.
More security concepts can be found at http://www.thesecurityblogger.com/
loading...
Additional Private Cloud Blogs
For those that are interested and unaware I’ve been blogging for Network Computing for about a month on their Private Cloud Tech Center. You can find those blogs here: http://www.networkcomputing.com/private-cloud-tech-center. You should see a new one there every week or so. I will continue to publish content here as regularly as possible and I’m always seeking new contributors for guest posts or regular contributions. Contact me via the About page if you’re interested.
loading...
My Recent Guest Spot on The Cloudcast (.NET) Podcast
Brian Gracely, Aaron Delp, and I discuss converged infrastructure stack, tech news and industry direction: http://www.thecloudcast.net/2011/06/cloudcast.html. It was a lot of fun to chat with them and we covered some great topics.
loading...
Technology Passion
The May 24th IDC report on server market share by the IDC validated a technology I’ve been passionate about for some time; Cisco unified Computing System (UCS.) For the first time since UCS’s launch two years ago Cisco reported server earnings to IDC with amazing result – #3 in global Blade Server market share and 1.6% factory revenue share overall for servers as a whole. Find the summary of blades by Kevin Houston here: http://bladesmadesimple.com/2011/05/q1-2011-idc-worldwide-server-market-shows-blade-server-leader-as/ and the IDC report here: http://www.idc.com/getdoc.jsp?containerId=prUS22841411.
This report shows that in two years Cisco has either taken significant market share from incumbents, driven new demand, or both. Regardless of where the numbers came from they are impressive, as far as servers go it’s close to David and Goliath proportions and still playing out with Cisco about 1% behind IBM in the #2 spot. I have been a ‘cheerleader’ for UCS for nearly its entire existence but didn’t start that way. I describe the transition here: http://www.definethecloud.net/why-cisco-ucs-is-my-a-game-server-architecture.
Prior to Cisco UCS I was a passionate IBM BladeCenter advocate, great technology, reliable hardware and a go-to brand. I was passionate about IBM. When IBM launched the BladeCenter H they worked hard to ensure customer investment protection and in doing so anchored the H chassis as a whole. They hindered technical enhancements and created complexity to ensure the majority of components customers purchased in BladeCenter E would be forward compatible. At the time I liked this concept, and IBM had several great engineering concepts built in that provided real value.
In the same time frame HP released the C-Class blade chassis which had no forward/backward compatibility with previous HP blade architectures but used that fresh slate to build a world class platform that had the right technology for the time with the scalability to move far into the future. At that point from a technical perspective I had no choice but to concede HP as the technical victor but I still whole-heartedly recommended IBM because the technical difference was minimal enough that IBM’s customer investment protection model made them the right big picture choice in my eyes.
I always work with a default preference or what I call an ‘A-Game’ as described in the link above, but my A-Game is constantly evolving. As I discover a new technology that will work in the spaces I exist I assess it against my A-Game and decide whether it can provide better value to 80% or more of the customer base I work with. When a technology is capable of displacing my A-Game I replace it.
Sean McGee (http://www.mseanmcgee.com/) says it better than I can, so I’ll paraphrase him ‘I’m a technologist, I work with and promote the best technology I’m aware of and can’t support a product once I know a better one exists.’
In the same fashion I’ll support and promote Cisco UCS until a better competitor proves itself, and I’m happy to see that customers agree based on the IDC reporting.
For some added fun here are some great Twitter comments from before the IDC announcement served with a side of crow:
loading...
The Cloud Rules
Cloud Computing Concepts:
These are Twitter sized quick thoughts. If you’d like more elaboration or have a comment participation is highly encouraged. As I’ve run out of steam on this I’ve decided to move it into a blog rather than a page.
- 01: Cloud is a fad like computers, the Internet and social networking were before it.
- 02: It’s not all or nothing, its pick and choose.
- 03: It’s as secure as YOU make it
- 04: There’s no point arguing semantics, argue features.
- 05: You have at least one application today that’s a great candidate for cloud computing
- 06: Cloud requires a migration strategy, not a fork-lift.
- 07: Virtualization and automation are the building blocks of private cloud.
- 08: Encrypt locally store globally.
- 09: Open portability is key to public cloud.
- 10: Elasticity means scale-up AND scale-down.
- 11: Security should not be an afterthought.
- 12: Multi-Tenancy is your friend.
- 13: Silo’d organizations breed silo’d architectures.
- 14: IT should support the business, not the other way around.
- 15: Performance isn’t about highest/lowest it’s about application requirements.
- 16: Cloud pushes IT from CapEx to OpEx, without financing hardware.
- 17: Features only matter if you need, them now or will need them later.
- 18: Address organizational challenges before technical challenges.
- 19: The way you do things today should not dictate the way you do things tomorrow.
- 20: Latency operates independent of bandwidth, low-latency apps require low latency links.
- 21: Build a 5-Year plan and incorporate staged migration to cloud architectures/services.
- 22: Bad budget processes should not force bad IT decisions.
- 23: If you do things the way you’ve always done them, you get the results you’ve always had.
- 24: Integration and support are top considerations for private-cloud architectures.
- 25: Cloud computing provides business agility.
- 26: Getting applications out of the cloud is as important a consideration as getting them in.
- 27: There are no ‘One-size-fits-all’ solutions in IT, cloud is no different.
loading...
World Wide Technology’s Upcoming Geek Day
Coming up very quickly is World Wide Technology’s (www.wwt.com) annual Geek Day, March 10th 2011 (http://www.wwt.com/geekday/.) I’m very much looking forward to the event for two reasons:
- It’s free to customers
- It’s totally focused on geeks interacting with geeks.
The event is focused around live interactive demo’s from sponsor technology companies with breakout sessions chosen by the attendees via online voting. My favorite parts are that the sponsors aren’t allowed to do lead collecting (badge scanning you know from conferences), gimmicky swag giveaways, or stock their booths with gobs of marketing fluff. It’s true focus is the demo, and engineer to engineer discussion. See the link above for more information, and the video below for some customer feedback on the events. I hope to see you here in St. Louis in March!
loading...



