Intercloud Architecture Framework (ICAF): Federation Infrastructure
Components and Open Cloud eXchange (OCX)
Yuri Demchenko, Migiel de Vos, Damir Regvart, Craig Lee, Canh Ngo, Cees de Laat
Intercloud Infrastructure/Services Provisioning

Intercloud Federation Infrastructure(Enterprise Workflow deployment on heterogeneous cloud infrastructure)• Part of the Intercloud Access and Delivery Infrastructure ICADI (CSM Layer C5)• Federation Infrastructure services can be a part of the Open Cloud eXchange (OCX) defined
to support multi-provider services integration and delivery

Resource and Cloud Provider Domains
VR3

VR1VR5VR7Campus A
Infrastructure

VR4VR2VR6

Visualisation

Visualisation

Cloud Carrier or Network Provider 2CE

TrustBroker

OCXServices

OCX at Cloud Carrier or Network
Provider (NREN) level

Network Provider 1

Campus A

Federated Cloud
Instance Customer A(University A)

Campus B
Infrastructure

Campus B

BrokerCert Repo(TACAR) TTP Trusted
Introducer

CE

Federated Cloud
Instance Customer B(University B)

TrustBroker
BrokerOCX Interconnectionand Switching Facility

Cloud ServiceBroker

User
Group A

User
User
User
Cloud 2 PaaS

VR6VR2User
Group B

Gateway

Gateway

Gateway

Gateway

AAAAAAAAA

AAA(I/P/S)aaS
Provider(I/P/S)aaS
Provider(I/P/S)aaS
Provider

IDP

IDP

IDP

VR7
VR4

VR1

Enterprise/Project basedIntercloud Infrastructure

VR5

Resource/ServiceProvider

VR3Resource/
ServiceProvider
CN
CN
CN

Cloud 1 IaaS

CN

CN

Directory
Directory(RepoSLA)(RepoSLA)FedIDP
User
User
User

Discovery…

(I/P/S)aaS
Provider
IDP

CN
CN

CN
CN

Cloud PaaS Provider
CN

CN

Cloud IaaS Provider

The Intercloud Architecture Framework components

Open Cloud eXchange (OCX) Definition, Design and Operational Principles• Multilayer Cloud Services Model (CSM) for vertical cloud services interaction, integration andcompatibility that defines both relations between cloud service models (such as IaaS, PaaS, SaaS)
and other required functional layers and components of the general cloud based services
infrastructure, including Intercloud Access and Delivery Infrastructure/Layer (ICADI).
• Intercloud Control and Management Plane (ICCMP) for Intercloud applications/infrastructure control
and management, including inter-applications signaling, synchronization and session management,configuration, monitoring, run time infrastructure optimization including VM migration, resources
scaling, and jobs/objects routing.
• Intercloud Federation Framework (ICFF) to allow independent clouds and related infrastructurecomponents federation of independently managed cloud based infrastructure components belonging
to different cloud providers and/or administrative domains; this should support federation at the levelof services, business applications, semantics, and namespaces, assuming necessary gateway orfederation services.
• Intercloud Operation and Management Framework (ICOMF) includes functionalities to support multiprovider infrastructure operation including business workflow, SLA management, accounting. ICOMF
defines the basic roles, actors and their relations in sense of resources operation, management andownership. ICOMF requires support from and interacts with both ICCMP and ICFF.

• Direct service/inter-member peering

TTP––––• No third party (intermediary/broker)
services– Transparency for cloud based services– No involvement into peering or mutual businessrelations

OCX• Trusted Third Party (TTP) services–––

Nodes: Providers and customers

General Model and Actors in (Inter)Cloud Federations(a) Enterprise
Infrastructure

User
User2

User
User3

OCX Facilities
OCX backbone links/connectivity (Lo-L2)
Pre-established trust relation with OCX as TTP• May include other special services tosupport smooth services delivery andintegration between CSP and Customer– Local policies, service registry and discovery– Topology information exchange L0-L2 (L3)

• QoS parameter: bandwidth, speed, latency(a) IDP-HO1(b) 3rd PartyIDP

OCX Implementation: Hierarchical Topology Model

Direct or Dynamic link

Cloud
Provider A

Federation relations

Rsr
An1

Rsr
Am1

Customer sidefederation

CSP IDPA

Cloud
Provider K

Rsr
IDP-K
M2

NREN

University

Visualisation

VR6

CE
VR7

OCX
VR4

Federation &Trust relations

Provider (Resource)side federation

VR5
UserUserUser

VR3

DFlow
IP/L3Inter-provider federation for resources sharing
Rsr
Kn1

GEANTCSP

Instantiated
IDP-A => IDP-Xa

UserUser
UserX
Xa.2Xa.1 a.3
IDP-XaCloudService Xa

Rsr
Ak2 Rsr
Ak1

Rsr
K2

OCX

To support dynamic service agreements and/orfederation establishment
SLA Repository and Clearinghouse
Trusted Introducer for dynamic trust establishment

Trust relations established as a part ofdynamic federation between OCX members

UserUser1(a) HO or(b) Custmr1
MgntSystem

Management(Ops&Sec)(b) External Users(Open Internet)

Re-use and leverage Internet eXchange
Open collocation services
Scalability for growing number of members
Controlled network parameters/QoS

L2

Rsr
N1

Rsr
M1
IDP-M

Cloud
Provider M

Main Actors in Cloud/Intercloud Federation• Cloud Service Provider (CSP) is an entity providing
cloud based services to customers, on their request
and based on the business agreement or SLA, withhigh degree of self-service and self-management• Customer is an entity that requests, creates, deploys
and manages cloud based services• User or consumer is an end-user consuming cloud
based services

Rsr
N2

Visualisation

VR6CE
VR7

L1

IDP-NVR4OCX

VR5

User
UserUserVR3L0CloudProvider N
Related links• Cloud Broker is an entity that plays a role of thethird party in offering cloud service, adding value ofnegotiating with CSPs, optionally operating complex
multi-provider services• Identity Provider (IDP) is an entity providing
information about identities of all actors in cloudservices provisioning,• IDP-HO – by User Home Organisation• IDP-CSP by Cloud Service Provider

Intercloud Architecture Framework for Interoperability and Integration, Draft version 0.7, 1 July 2013. SNE Technical Report.
http://staff.science.uva.nl/~demch/worksinprogress/sne2012-techreport-12-05-intercloud-architecture-draft07.pdf
Cloud Reference Framework. Internet-Draft, version 0.6, January 2, 2014.
http://www.ietf.org/id/draft-khasnabish-cloud-reference-framework-06.txt
Open Cloud eXchange (OCX): Architecture and Functional Components. Proc. The 3rd workshop on Network Infrastructure
Services as part of Cloud Computing (NetCloud 2013), 2-5 December 2013, Bristol, UKContributing Projects
GEANT3plus JRA1 Task 2 – Network Architectures for Cloud Services - http://www.geant.net/EUBrazil Cloud Connect Project - http://eubrazilcc-rm.i3m.upv.es/projects/eubrazilcc

Credits: Yuri Demchenko, Migiel de Vos, Damir Regvart, Craig Lee, Canh Ngo, Cees de Laat
Contact: Yuri Demchenko <y.demchenko@uva.nl>