Intercloud Federation Framework: Basic Operational Models andArchitecture Patterns
Yuri Demchenko, Migiel de Vos, Canh Ngo, Marc X. Makkes, Cees de Laat
Intercloud Infrastructure/Services Provisioning

User/Customer Side Functions and Resources

Administration andManagement Functions(Client)

Content/Data Services* Data * Content * Sensor * Device

Security InfrastructureManagement

User/Client Services* Identity services* Visualisation

Operations Support System(General use case: Enterprise/Scientific Workflow deployment onheterogeneous cloud infrastructure)

Multi-layer Cloud Services Model (CSM)

1Access/Delivery
Infrastructure

Endpoint Functions* Service Gateway* Portal/Desktop

Inter-cloud Functions* Registry and Discovery* Federation Infrastructure

SaaSPaaS

Layer C5Services
Access/Delivery

Layer C4Cloud Services(Infrastructure,Platforms,Applications,Software)

Cloud Services (Infrastructure, Platform, Application, Software)
IaaS

Layer C6
User/Customer
side Functions

PaaS-IaaS IF
PaaS-IaaS Interface
IaaS – Virtualisation Platform Interface
Cloud Management Platforms

Cloud Management
Software(Functional Definition Proposed)

OpenStack

OpenNebula

KVM

Virtualisation Platform

VM

VM

VPN

OtherCMSXEN

Network
Virtualis

VMwareHardware/PhysicalResources

ComputeResources

Contrl&Mngnt Links

Layer C2
Virtualisation

Layer C1
PhysicalHardware
Platform andNetwork

Proxy (adaptors/containers) - Component Services and Resources
StorageResources

Layer C3
Virtual Resources
Composition andControl(Orchestration)

NetworkInfrastructure

Data Links

Cloud Services Model Layers
Layer C1 - Physical platform (PC hardware, network, and network infrastructure)
Layer C2 - Cloud virtualisation layer (e.g. VMware, Xen, KVM or Hyper-V virtualisation platforms)
Layer C3 - Cloud virtual resources composition and orchestration layer that is represented by the Cloud
Management Software (such as OpenNebula, OpenStack, or others)
Layer C4 - Cloud services layer that may include different type of cloud services IaaS, PaaS, SaaS
Layer C5- Access/Delivery infrastructure hosting components and functions to provide access to cloudservices/resources and interconnect multiple cloud domains
Layer C6 - User/customer side resources and services

The Intercloud Architecture Framework components• Multilayer Cloud Services Model (CSM) for vertical cloud services interaction, integration andcompatibility that defines both relations between cloud service models (such as IaaS, PaaS, SaaS) andother required functional layers and components of the general cloud based services infrastructure.

CSM is compatible with the NIST Cloud Computing Reference Architecture (CCRA, NIST SP 800282), ITU-T FG-Cloud Cloud Reference Model and IETF I-Draft Cloud Reference Framework• Intercloud Control and Management Plane (ICCMP) for Intercloud applications/infrastructure
control and management, including inter-applications signaling, synchronization and session
management, configuration, monitoring, run time infrastructure optimization including VM migration,
resources scaling, and jobs/objects routing.

• Intercloud Federation Framework (ICFF) to allow independent clouds and related infrastructurecomponents federation of independently managed cloud based infrastructure components belonging todifferent cloud providers and/or administrative domains; this should support federation at the level ofservices, business applications, semantics, and namespaces, assuming necessary gateway orfederation services.

• Intercloud Operation Framework (ICOF) includes functionalities to support multi-provider
infrastructure operation including business workflow, SLA management, accounting. ICOF defines thebasic roles, actors and their relations in sense of resources operation, management and ownership.
ICOF requires support from and interacts with both ICCMP and ICFF.

General Model and Actors in (Inter)Cloud Federations(a) Enterprise
Infrastructure

User
User2

Federated Cloud
Instance Customer A

TrustBroker

TrustBroker

BrokerCloud
Provider A

Broker

Discovery

OCX Interconnectionand Switching Facility

FedIDP

Directory
Directory(RepoSLA)(RepoSLA)

Gateway

Gateway

Gateway

Gateway

AAA

AAA

AAA

AAA

(I/P/S)aaS
Provider(I/P/S)aaS
Provider(I/P/S)aaS
Provider

IDP

IDP

IDP

…

(I/P/S)aaS
Provider
IDP

Instantiated
IDP-A => IDP-Xa

UserUser
UserX
Xa.2Xa.1 a.3
IDP-XaCloud
Service Xa

CSP IDPARsr
An1Rsr
Am1Customer sidefederation

Federation &Trust relations

Provider (Resource)side federation

Inter-provider federation for resources sharing

Open Cloud eXchange(OCX) Services
TrustedIntroducer

Federation relations

Rsr
Ak2 Rsr
Ak1

Federated Cloud
Instance Customer A(a) IDP-HO1(b) 3rd Party
IDP

Direct or Dynamic link

Intercloud Federation Infrastructure• Part of the Intercloud Access and Delivery Infrastructure ICADI (CSM Layer C5)• Federation Infrastructure services can be a part of the Open Cloud eXchange (OCX) defined
to support multi-provider services integration and delivery

User
User3
User
User1

(a) HO or(b) Custmr1
MgntSystem

Management(Ops&Sec)(b) External Users(Open Internet)

Rsr
K2

Rsr
Kn1
Cloud
Provider K

Rsr
IDP-K
M2

Rsr
N1

Rsr
M1
IDP-M

Cloud
Provider M

Main Actors in Cloud/Intercloud Federation• Cloud Service Provider (CSP) is an entity providing
cloud based services to customers, on their request
and based on the business agreement or SLA, withhigh degree of self-service and self-management• Customer is an entity that requests, creates, deploys
and manages cloud based services• User or consumer is an end-user consuming cloud
based services

Rsr
N2IDP-N
Cloud
Provider N• Cloud Broker is an entity that plays a role of thethird party in offering cloud service, adding value ofnegotiating with CSPs, optionally operating complex
multi-provider services• Identity Provider (IDP) is an entity providing
information about identities of all actors in cloudservices provisioning,• IDP-HO – by User Home Organisation• IDP-CSP by Cloud Service Provider

Related links
Intercloud Architecture Framework for Interoperability and Integration, Draft version 0.6, 15 Feb 2013. SNE Technical Report.
http://staff.science.uva.nl/~demch/worksinprogress/sne2012-techreport-12-05-intercloud-architecture-draft06.pdf
Cloud Reference Framework. Internet-Draft, version 0.4, December 27, 2012.
http://www.ietf.org/id/draft-khasnabish-cloud-reference-framework-04.txt
On-Demand Infrastructure Services Provisioning Best Practices, Version 1.3, 15 February 2013 (OGF ISOD-RG Deliverable)
https://forge.ogf.org/sf/docman/do/downloadDocument/projects.isod-rg/docman.root.drafts/doc16538

Contributing Projects
GEANT3plus JRA1 Task 2 – Network Architectures for Cloud Services - http://www.geant.net/
COMMIT Project - http://www.commit-nl.nl/

Credits: Yuri Demchenko, Migiel de Vos, Canh Ngo, Marc X. Makkes, Cees de Laat
Contact: Yuri Demchenko <y.demchenko@uva.nl>