Open Cloud eXchange (OCX)
Draft Proposal and Progress
GN3plus JRA1 Task 2 - Network Architectures for Cloud Services

Yuri Demchenko
SNE Group, University of Amsterdam
10 October 2013, GN3plus Symposium, Vienna

Outline• GN3+ JRA1: Network Architectures for Horizon 2020
• General use cases and scenarios for Cloud services delivery to NRENs
and universities– Cloud and Intercloud Infrastructure and Services• Open Cloud eXchange (OCX)– Requirements to OCX– OCX design principles and suggestions• Pilot implementation by SURFnet– GreenQloud and OneXS• Topics for discussion• Additional information– Intercloud Architecture Framework (ICAF) and Intercloud Federation Framework (ICFF)

GN3Plus Symposium

Open Cloud eXchange (OCX)

Slide_2

JRA1: Network Architectures for Horizon 2020

• Task 0: Activity Leadership• Task 1: Future Network Architectures• Task 2: Network Architectures for Cloud Services• Task 3: Network Architecture for Aggregating HighSpeed Mobile Networking

GN3Plus Symposium

Open Cloud eXchange (OCX)3

JRA1 Goals and Tasks•

Network Access and Delivery Network Infrastructure (NADI) plays important rolein delivering cloud services to campuses and research organisations and includes
3 parts/layers– The user access network, which connects users to applications.
– Extreme high-speed networks, which interconnect physical servers and the movement of
their virtual machines (VMs).
– Mega pipe networks, interconnecting storage tiers.

•

JRA1 Task2 and Task 1 will investigate and propose the best architecture forpractical NADI implementation– To support cloud-based services, including the distribution of very large scientific data
– Pilot implementation and demonstration of few use cases•

JRA1 and JRA2 will cooperate on multiple topics– Network virtualisation and automation to deliver Performance on Demand by automating theallocation of shared network resources among data centres on behalf of cloud operations– JRA1’s focus on the network elements to support cloud-based services interconnection andintegration, with focus on the southbound elements of the management and related control
plane when interworking with the software-driven network elements– JRA2 will research true software-driven networking for cloud-based services, with automatedresource orchestration and provisioning that yield reduced network capacity requirements,
predictable service performance, and simpler operations

GN3Plus Symposium

Open Cloud eXchange (OCX)

4

Use Cases for delivering Cloud services tocampus based users• Scientific application and scientific data
– LHC/HEP, genomics, astronomy, climate, video, etc. (+long tailscience)• Streaming high-speed high volume experimental data to labs
in campus location– Direct links through campus network• Distributed (Big) Scientific Data processing with MPP tools
on distributed facilities– Data distributed between few locations next to local datacenters• CSP and campus L0-L2 (L3) network peering– Dark fiber with termination as campus network or as CSP network• VoIP – SURFnet approach with mobile data access– Support mobile access network (LTE) and tunnel access to campus
network
GN3Plus Symposium

Open Cloud eXchange (OCX)

5

General use case for infrastructure provisioning:
Workflow => Logical (Cloud) InfrastructureEnterprise/Scientific workflow
Storage
Data

SpecialProc 1
Data
Filtering

Input
Data

VisualPresent
SpecialProc 2

Instrum.
Data

Campus A

Data
Archive

Visualisation

Visualisation

CE

User
Group A

CE

User
User
User

User
User
User
VR6

Cloud 2 PaaS

VR2

VR7

VR5

Resource/
Service
ProviderEnterprise/Scientificworkflow
Is mapped
to heterogeneous cloudinfrastructure containing
IaaS, PaaS components

User
Group B

VR4

VR1

GN3Plus Symposium

Campus B

VR3Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

Resource/
Service
Provider
CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

Open Cloud eXchange (OCX)

6

Multi/inter- cloud infrastructure provisioning:=> ICADI and OCX functions
Enterprise/Scientific workflow
Campus A

Storage
Data

Visualisation

Visualisation

Data
Archive

Data
Filtering

Input
Data

CE
User
Group ASpecialProc 1VisualPresent

CE

SpecialProc 2

Instrum.
Data

Campus B

User
User
User

User
User
User

User
Group BOCX as a part of GEANT infrastructure

OCX
at NREN

OCX
at NREN
VR6

Cloud 2 PaaS

VR2

VR7
VR4

VR1

Open Cloud eXchange(OCX) interconnects
CSP and Customer(campus) infrastructures

VR5

Resource/
Service
ProviderVR3

Cloud 1 IaaS

GN3Plus SymposiumIntercloud infrastructure:=> Federated Accessand Delivery
Infrastructure

Resource/
Service
ProviderCNCN

OCX assumes collocationor collapsed backbone forconnecting all OCX members

Enterprise/Project basedIntercloud Infrastructure

CN
CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

Open Cloud eXchange (OCX)

7

Multilayer Cloud Services Model (CSM)
http://www.ietf.org/id/draft-khasnabish-cloud-reference-framework-05.txt

Security InfrastructureManagement

Operations Support System

User/Client Services* Identity services (IDP)* Visualisation

User/Customer Side Functions and Resources

Administration andManagement Functions(Client)

Content/Data Services* Data * Content * Sensor * Device

1

Endpoint Functions* Service Gateway* Portal/Desktop

Federated Access andDelivery Infrastructure (FADI)

Inter-cloud Functions* Registry and Discovery* Federation Infrastructure

Cloud Services (Infrastructure, Platform, Application, Software)

IaaS

SaaS

PaaS

PaaS-IaaS IF

Layer C5
Services
Access/Delivery

Layer C4Cloud Services(Infrastructure,
Platforms,
Applications,
Software)PaaS-IaaS Interface
IaaS – Virtualisation Platform Interface

Cloud Management
Software(Generic Functions)

Cloud Management Platforms
OpenNebula

Virtualisation Platform

OpenStack

KVM

VM

VM

VPN

Other
CMS

XEN

VMwareNetwork
Virtualis

Proxy (adaptors/containers) - Component Services and Resources

StorageResources

ComputeResources

Contrl&Mngnt Links
GN3Plus Symposium

Layer C6
User/Customer
side Functions

Hardware/PhysicalResources

Network
Infrastructure

Layer C3
Virtual Resources
Composition andControl(Orchestration)

CSM layers(C6) User/Customer side
Functions(C5) Intercloud Access andDelivery Infrastructure(C4) Cloud Services(Infrastructure, Platform,
Applications)(C3) Virtual Resources
Composition andOrchestration(C2) Virtualisation Layer(C1) Hardware platform anddedicated network
infrastructure

Layer C2
Virtualisation

Layer C1
PhysicalHardwarePlatform andNetwork

Control/
Mngnt Links

Data Links

Data Links

Open Cloud eXchange (OCX)

Slide_8

General use case for infrastructure provisioning:
Logical Infrastructure => Network Infrastructure (2)Resource and Cloud Provider Domains
VR3

VR1

VR5

VR7

Campus A
Infrastructure

Campus B
Infrastructure

VR2

VR4

OCX at Cloud Carrier or Network
Provider (NREN) level

Network Provider 1

Campus A

Visualisation

User
User
User

User
User
User
VR6

Cloud 2 PaaS

UserGroup B

VR7
VR4

VR1

VR5

Resource/
Service
ProviderProvisioning network
infrastructure may
involve multiple providers
Introducing OCX(Open Cloud eXchange)

Campus B

CE

VR2

GN3Plus Symposium

Visualisation

Cloud Carrier or Network Provider 2

CE

User
Group A

VR6

VR3Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

Resource/
Service
Provider
CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

Open Cloud eXchange (OCX)

9OCX Definition and Operational Principles• Direct service/inter-member peering– Re-use and leverage Internet eXchange– Open collocation services– Scalability for growing number of members– Controlled network parameters/QoS• No third party (intermediary/broker) services– Transparency for cloud based services– No involvement into peering or mutual business relations• Trusted Third Party (TTP)– To support dynamic service agreements and/or federation establishment– Trusted Introducer for dynamic trust establishment• May include other special services to support smooth services
delivery and integration between CSP and Customer– E.g., Local policies, service registry and discovery

GN3Plus Symposium

Open Cloud eXchange (OCX)

10

OCX Topological model and Connectivity

OCX

Nodes: Providers and customers

OCX

OCX Facilities

OCX L0-L2/L3 topology• Any-to-any• Distributed or collapsed backbone• Hierarchical• Topology information exchange
L0-L2 + L3? between members• SDN control over OCX switching

QoS parameters• Bandwidth• Speed, latency• Jitter, impairment

OCX backbone links/connectivity(Lo-L2)GN3Plus Symposium

OCX

Open Cloud eXchange (OCX)

11

OCX Trusted Third Party services
TTP goals and services• Enable dynamic federations
establishing• Trusted Certificates and CA’s
Repository

TTP– Similar to TACAR (TERENA
Academic CA Repository)• Trusted Introducer Service– Trusted Introduction Protocol
OCX• Service Registry and Discovery• Intercloud policy clearinghouse– Repository of CSP policies– Common policy templatePre-established trust relation with OCX as TTP• SLA repository andclearinghouse

Trust relations established as a part ofdynamic federation between OCX members
GN3Plus Symposium

Open Cloud eXchange (OCX)

12

OCX location options: GN3, NREN (+University?)
GEANT

CSP

NREN

University

Visualisation

VR6

CE

VR7

DFlow

OCX

VR4
VR5

User
User
User

VR3

IP/L3
L2

Visualisation

VR6

CE

VR7

L1

OCX

VR4

User
User
User

VR5

L0

GN3Plus Symposium

VR3

Open Cloud eXchange (OCX)

13

OCX Hierarchical Topology Model
GEANT

CSP

NREN

University

Visualisation

VR6

CE

VR7

OCX

VR4
VR5

User
User
User

VR3

DFlow
IP/L3
L2

Visualisation

VR6

CE

VR7

L1

OCX

VR4

User
User
User

VR5

L0

GN3Plus Symposium

VR3

Open Cloud eXchange (OCX)

14

OCX Extended Backplane Topology Model
GEANT

CSP

NREN

University

Visualisation

VR6

CE

VR7

OCX

VR4
VR5

User
User
User

VR3

DFlow
IP/L3
L2

Visualisation

VR6

CE

VR7

L1

OCX

VR4

User
User
User

VR5

L0

GN3Plus Symposium

VR3

Open Cloud eXchange (OCX)

15

Pilot OCX Concept Implementation by SURFnet•

NetherLight as an Open Lightpath Exchanges (OLE) operated by SURFnet– To Bandwidth on Demand, Virtual Networking– 100G transatlantic trials, and– Open Cloud eXchange (OCX) pilot/prototype••

Since 2012, SURFnet and NetherLight have been performing pilots with cloudproviders that want to offer their services with lightpath characteristics to
SURFnet connected institutions
GreenQloud (Iceland) offers service delivery over lightpaths via
NetherLight/SURFnet with advantages above the regular IP services
–
–
–
–

•

Guaranteed bandwidth and latency
Protected from the external Internet
Possibility of domain extension (VM’s appear as if inside campus network)
Cost reduction due to offloading of traffic

Pilot since 2012 between OneXS and Windesheim University of Applied Sciences
to deliver unified services of fixed and mobile telephony– Guaranteed bandwidth and latency– Protected from the external Internet– Protected from DDOS attacks

GN3Plus Symposium

Open Cloud eXchange (OCX)

16

General SURFnet Lightpath interconnection

Universities• GeenQloud: cloud services• OneXS: unified services of fixed and mobile telephony

GN3Plus Symposium

Open Cloud eXchange (OCX)

17

OCX Development – Next Steps (for Discussion)• First public draft – 12 September 2013
• GN3plus inter-activities discussion and feedback– 17 May 2013 - First draft published– June 2013 - First round of comments and update– Sept 2013 - Second round of comments and update– Sept - Oct 2013 - External comments and community feedback• Design and implementation – Starting November 2013?
– SDN based control and management over OCX• Standardisation contribution – OGF, IETF, ITU-T, IEEE,NIST– IEEE Intercloud Testbed Initiative as a dissemination andvalidation channel GN3Plus Symposium

Open Cloud eXchange (OCX)

18

Discussion• Network for Clouds or for future Big Data
applications (cloud based)?
– eScience use cases need to be analysed and new
requirements identified– Trends in university’s and research services use• SDN vs Software Defined Infrastructure– Big Data data-centric applications will require data
structures and processing workflow to be mapped toinfrastructure• Distributed storage, distributed processing, security,
lifecycle/staging, etc.

• Lower layer infrastructure virtualisation
GN3Plus Symposium

Open Cloud eXchange (OCX)

19

Gartner Technology Hypercycle
Big Data
Cloud Computing

Source http://www.gartner.com/technology/research/methodologies/hype-cycle.jsp
GN3Plus Symposium

Open Cloud eXchange (OCX)20

5 yr for Cloud Computing
2 yr for Big Data adoption

GN3Plus Symposium

Open Cloud eXchange (OCX)

21

Improved: 5+1 V’s of Big Data
VolumeVariety
•
•
•
•
•
•

Structured
Unstructured
Multi-factor
Probabilistic
LinkedDynamic••••

Terabytes
Records/Arch
Tables, Files
Distributed

Velocity••••

6 Vs ofBig Data

Value• Changing data
• Changing model• Linkage

Variability

Batch
Real/near-time
Processes
Streams

•
•
•
•
•

•
•
•
•

Correlations
Statistical
EventsHypothetical

Trustworthiness
Authenticity
Origin, Reputation
Availability
Accountability

Generic Big Data
Properties• Volume• Variety• Velocity
Acquired Properties(after entering system)• Value• Veracity• Variability
Commonly accepted
3V’s of Big Data

Veracity
GN3Plus Symposium

Open Cloud eXchange (OCX)

22

From Big Data to All-Data – Paradigm Change• Breaking paradigm changing factor– Data storage and processing– Security– Identification and provenanceMove or not
to move?

Big Data• Traditional model– BIG Storage and BIG Computer with
FAT pipe– Move compute to data vs Move datato compute

Network?
Distributed Big Data
Storage
Data Abstraction• New Paradigm– Continuous data production– Continuous data processing– DataBus as a Data container andProtocol• Data centric infrastructureand service models
GN3Plus Symposium

Big
Computer

Data Bus

VisualisationPresentationActionInfrastructure Abstraction

Distributed Computeand Analytics

Open Cloud eXchange (OCX)

DataBus:(1) Data Container(2) Metadata, State(3) Data Transfer
Protocol23

Data
SourceData
Collection&
Registration

Data
Filter/Enrich,Classification

Data
Analytics,
Modeling,
Prediction

Data
Delivery,
Visualisation

Consumer

Big Data Ecosystem: Data, Transformation,
Infrastructure

Big Data Target/Customer: Actionable/Usable Data
Target users, processes, objects, behavior, etc.

Federated
AccessandDeliveryInfrastructure(FADI)Big Data Source/Origin (sensor, experiment, logdata, behavioral data)

Big Data Analytic/Tools

Storage
GeneralPurposeData Management

ComputeGeneralPurposeHigh
Performance
Computer
Clusters

StorageSpecialised
Databases
Archives(analytics DB,
In memory,
operstional)

Data
categories: metadata,(un)structured, (non)identifiable
Data
Datacategories:
categories:metadata,
metadata,(un)structured,(un)structured,(non)identifiable(non)identifiable• Data management
infrastructure and tools• Registries, search,
ontologies, schemas,
namespace• Collaborative
Environment• Heterogeneous multiprovider Inter-cloudinfrastructure• Federated Access andDelivery Infrastructure(FADI)• High performance(programmable)
network• Security infrastructureIntercloud multi-provider heterogeneous Infrastructure
Security Infrastructure

GN3Plus Symposium

Network InfrastructureInternal

InfrastructureManagement/Monitoring

Open Cloud eXchange (OCX)

24

Big Data Infrastructure and Analytic Tools
Big Data Target/Customer: Actionable/Usable Data
Target users, processes, objects, behavior, etc.
Big Data Source/Origin (sensor, experiment, logdata, behavioral data)

Big Data Analytic/Tools
Analytics:
Refinery, Linking, Fusion

Analytics :Realtime, Interactive,
Batch, Streaming

Storage
GeneralPurposeData Management

ComputeGeneralPurposeAnalytics Applications
Link Analysis
Cluster Analysis
Entity Resolution
Complex Analysis

High
Performance
Computer
Clusters:

Federated
AccessandDeliveryInfrastructure(FADI)

StorageSpecialised
Databases
Archives

Data
categories: metadata,(un)structured, (non)identifiable
Data
Datacategories:
categories:metadata,
metadata,(un)structured,(un)structured,(non)identifiable(non)identifiable

Intercloud multi-provider heterogeneous Infrastructure
Security Infrastructure

GN3Plus Symposium

Network InfrastructureInternal

InfrastructureManagement/Monitoring

Open Cloud eXchange (OCX)25

http://mattturck.com/2012/10/15/a-chart-of-the-big-data-ecosystem-take-2/

GN3Plus Symposium

Open Cloud eXchange (OCX)26

GN3Plus Symposium

Open Cloud eXchange (OCX)27

Additional Information

GN3Plus Symposium

Open Cloud eXchange (OCX)

28

Initiatives by the major CSP• Amazon Direct Connect• Google patent US 2012/0151057 A1 (January 2012)
Virtualised Connectivity in a Cloud Service Environment• Microsoft Azure campus PoP (Point of Presence)

GN3Plus Symposium

Open Cloud eXchange (OCX)

29

New Service: Amazon Direct Connect• AWS Direct Connect links
customer internal network to an
AWS Direct Connect location overa standard 1 Gbps or 10 Gbps
Ethernet fiber-optic cable– One end of the cable is connected
to customer router, the other to an
AWS Direct Connect router– Allows creating virtual interfaces
directly to the AWS cloud (Amazon
EC2, S3) and to Amazon Virtual
Private Cloud (Amazon VPC),
bypassing Internet service
providers in your network path

• Access is limited to Amazon Web
Services in the region
5 Nov 2013, Chasopys, Kiev

Cloud and Big Data

30

InterCloud Architecture Framework (ICAF)• Multi-layer Cloud Services Model (CSM)– Combines IaaS, PaaS, SaaS into multi-layer model with inter-layer interfaces– Including interfaces definition between cloud service layers and virtualisation
platform• InterCloud Control and Management Plane (ICCMP)– Allows signaling, monitoring, dynamic configuration and synchronisation of the
distributed heterogeneous clouds– Including management interface from applications to network infrastructure andvirtualisation platform• InterCloud Federation Framework (ICFF)– Defines set of protocols and mechanisms to ensure heterogeneous clouds
integration at service and business level– Addresses Identity Federation, federated network access, etc.

• InterCloud Operations Framework (ICOF)– RORA model: Resource, Ownership, Role, Action•

RORA model provides basis for business processes definition, SLA and access control– Broker and federation operation• Intercloud Security Framework (ICSF)– Dynamic Security Infrastructure provisioning and protocols
GN3Plus Symposium

Open Cloud eXchange (OCX)

31

Multilayer Cloud Services Model (CSM)
http://www.ietf.org/id/draft-khasnabish-cloud-reference-framework-05.txt

Security InfrastructureManagement

Operations Support System

User/Client Services* Identity services (IDP)* Visualisation

User/Customer Side Functions and Resources

Administration andManagement Functions(Client)

Content/Data Services* Data * Content * Sensor * Device

1

Endpoint Functions* Service Gateway* Portal/Desktop

Federated Access andDelivery Infrastructure (FADI)

Inter-cloud Functions* Registry and Discovery* Federation Infrastructure

Cloud Services (Infrastructure, Platform, Application, Software)

IaaS

SaaS

PaaS

PaaS-IaaS IF

Layer C5
Services
Access/Delivery

Layer C4Cloud Services(Infrastructure,
Platforms,
Applications,
Software)PaaS-IaaS Interface
IaaS – Virtualisation Platform Interface

Cloud Management
Software(Generic Functions)

Cloud Management Platforms
OpenNebula

Virtualisation Platform

OpenStack

KVM

VM

VM

VPN

Other
CMS

XEN

VMwareNetwork
Virtualis

Proxy (adaptors/containers) - Component Services and Resources

StorageResources

ComputeResources

Contrl&Mngnt Links
GN3Plus Symposium

Layer C6
User/Customer
side Functions

Hardware/PhysicalResources

Network
Infrastructure

Layer C3
Virtual Resources
Composition andControl(Orchestration)

CSM layers(C6) User/Customer side
Functions(C5) Intercloud Access andDelivery Infrastructure(C4) Cloud Services(Infrastructure, Platform,
Applications)(C3) Virtual Resources
Composition andOrchestration(C2) Virtualisation Layer(C1) Hardware platform anddedicated network
infrastructure

Layer C2
Virtualisation

Layer C1
PhysicalHardwarePlatform andNetwork

Control/
Mngnt Links

Data Links

Data Links

Open Cloud eXchange (OCX)

Slide_32

General use case for infrastructure provisioning:
Workflow => Logical (Cloud) InfrastructureEnterprise/Scientific workflow
Storage
Data

SpecialProc 1
Data
Filtering

Input
Data

VisualPresent
SpecialProc 2

Instrum.
Data

Campus A

Data
Archive

Visualisation

Visualisation

CE

User
Group A

CE

User
User
User

User
User
User
VR6

Cloud 2 PaaS

VR2

VR7

VR5

Resource/
Service
ProviderEnterprise/Scientificworkflow
Is mapped
to heterogeneous cloudinfrastructure containing
IaaS, PaaS components

User
Group B

VR4

VR1

GN3Plus Symposium

Campus B

VR3Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

Resource/
Service
Provider
CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

Open Cloud eXchange (OCX)

33

General use case for infrastructure provisioning:
Logical Infrastructure => Network Infrastructure (1)Resource and Cloud Provider Domains
Cloud 1 IaaS
VR3

VR1

Cloud 2 PaaS

VR5

VR7

Campus A
Infrastructure

Campus B
Infrastructure

VR2

Campus A

VR4

VR6

Cloud Carrier Network Infrastructure

Visualisation

Visualisation

CE

User
Group A

CE

User
User
User

User
User
User
VR6

Cloud 2 PaaS

VR2

VR7

VR5

Resource/
Service
ProviderDistributed
Resource/
heterogeneous cloud
Service
Providerinfrastructure requires
separately provisioned
network infrastructure thatcan be outsourced to Cloud Carrier

User
Group B

VR4

VR1

GN3Plus Symposium

Campus B

VR3Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

Open Cloud eXchange (OCX)34

General use case for infrastructure provisioning:
Logical Infrastructure => Network Infrastructure (2)Resource and Cloud Provider Domains
VR3

VR1

VR5

VR7

Campus A
Infrastructure

Campus B
Infrastructure

VR2

VR4

OCX at Cloud Carrier or Network
Provider (NREN) level

Network Provider 1

Campus A

Visualisation

User
User
User

User
User
User
VR6

Cloud 2 PaaS

UserGroup B

VR7
VR4

VR1

VR5

Resource/
Service
ProviderProvisioning network
infrastructure may
involve multiple providers
Introducing OCX(Open Cloud eXchange)

Campus B

CE

VR2

GN3Plus Symposium

Visualisation

Cloud Carrier or Network Provider 2

CE

User
Group A

VR6

VR3Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

Resource/
Service
Provider
CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

Open Cloud eXchange (OCX)

35

Intercloud Applications Interaction (1) - ICCMP
IaaS Domain

Cloud Layers
Layer 7 - Applications

User
definedPlatform
andSW&Apps

InterCloud Control andManagement Plane(ICCMP)

PaaS Domain

Layer 6 – SaaS/Apps
Layer 5 - PaaS
Cloud based Platform

Layer 4 - PaaS

Layer 4 - IaaS
Cloud Infrastructure

Layer 3 - IaaS

ProviderdefinedInfrastr.
andVirt&OS
Platform

Layer 3 – Composition

Campus A

Visualisation

Providerdefined
Virt&OS
Platform

ICCMP – InterCloud Control
and management Plane

User
defined
SW&Apps

Layer 2 - Virtualisation

Visualisation

Layer 1 - Physical
HW Platform/Network

CE

User
Group A

Campus B

CE

User
User
User

User
User
User
VR6

Cloud 2 PaaS

VR2

VR7
VR4

VR1

VR5

Resource/
Service
ProviderConsistent and tight
Resource/
management ofService
Providerthe heterogeneouscloud infrastructure requires
Intercloud Control andManagement Plane (ICCMP)AINA2013, 28 March 2013

User
Group B

VR3

Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

InterCloud Architecture Framework

36

Intercloud Applications Interaction (2) - ICFFIntercloud Federation
Infrastructure

IaaS Domain

PaaS Domain
Registry

Discovery

User
SW&Apps

Layer C3-IaaS

BrokerBrokerGW

GW
ProviderVirt&OS
Platform

IdP
Trust
BrokerAttribs

Visualisation

ICFF – InterCloud
Federation Framework

LayerC4-PaaS

Trust
Broker

ProviderVirt&OS
PlatformCampus A

User
SW&AppsVisualisation

Trust

CE

User
Group A

Campus B

CE

User
User
User

User
User
User
VR6

Cloud 2 PaaS

VR2

VR7
VR4

VR1

VR5

Resource/
Service
ProviderIndependently
managed cloud domains Resource/
Service
Providermay use federated
model for resources andprocesses integration andinteroperation
AINA2013, 28 March 2013

User
Group B

VR3

Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

CN

CN
CN

CN

Cloud PaaS Provider

CN

CN

CN
CN

CN

CN
CN

Cloud IaaS Provider

InterCloud Architecture Framework

37

Intercloud Federation Infrastructure and OCX
Federated Cloud
Instance Customer A(University A)

OCXServices

Trust
BrokerTrust
BrokerBrokerCert Repo(TACAR) TTP Trusted
Introducer

BrokerOCX Interconnectionand Switching Facility

Cloud
Service
BrokerFedIDP

GN3Plus Symposium

Federated Cloud
Instance Customer B(University B)

Discovery
Directory

Directory(RepoSLA)(RepoSLA)

Gateway

Gateway

Gateway

Gateway

AAA

AAA

AAA

AAA

(I/P/S)aaS
Provider(I/P/S)aaS
Provider(I/P/S)aaS
Provider

IDP

IDP

IDP

Open Cloud eXchange (OCX)…

(I/P/S)aaS
ProviderIDP

38

Intercloud Applications Integration (3) - ICOF

Storage
Data

SpecialProc 1

Data
Archive

Data
Filtering

Input
Data

Business Processes Management and Services
Operation Support• SLA Management• Business roles and Actors• Business level Service Registry and Broker• Mobility?

Intercloud Federation
Infrastructure
Registry
User
SW&AppsVisualPresent

Layer C3-IaaS

Disco-very

BrokerBrokerGW

LayerC4-PaaS

Trust
Broker

Provider Virt&OS
Platform

SpecialProc 2

Instrum.
Data

Layer 6 – SaaS/Apps
Layer 5 - PaaS
Cloud based Platform

Visualisation

Trust

Layer 2 - Virtualisation

Campus B

Visualisation

ProviderdefinedInfrastr.
andVirt&OS
Platform

Layer 3 – Composition
Providerdefined
Virt&OS
Platform

Trust
BrokerPaaS Domain

Layer 4 - PaaS

Layer 4 - IaaS
Cloud Infrastructure

Layer 3 - IaaS

CE

CE

Layer 1 - Physical
HW Platform/Network

User
User
User

User
User
User
VR6

Cloud 2 PaaS

VR2

VR7

VR5

Resource/
Service
ProviderAINA2013, 28 March 2013

User
Group B

VR4

VR1

Resource/
Operational andService
Providerbusiness issues are
typically addressedby Operations services anda framework

Provider Virt&OS
Platform

Userdefined
SW&Apps

Layer 7 - Applications

User
definedPlatform
andSW&AppsUser
Group A

GW

IdP
Attribs

IaaS Domain Cloud Layers

Campus A

User
SW&Apps

VR3

Enterprise/Project basedIntercloud Infrastructure

Cloud 1 IaaS

ICOF – InterCloudOperations Framework
CN

CN
CN

CN
CN

CN

Cloud PaaS Provider

CN
CN

CN

CN
CN

Cloud IaaS Provider

InterCloud Architecture Framework39