May 2009 - Posts
Nat Sakimura – Founder of OpenID Japan – Senior Researcher
http://www.sakimura.org/en
Cloud makes solutions
- Faster
- Cheaper
- Safer
- Well, System is but what about account Management? We need some kind of Federated Identity
Two Types of Federation
- Closed Federation
- Out of bound trust exchange
- Open Federation
OpenID
- Assertion Format: Tag=Value
- Protocol for request/response of the Assertion
- Discovery of IdP through XDRS
- Dynamic association through DH
- Supported by AOL, Yahoo!, France Telecom, Goolge, Facebook
- Soon to come? Microsoft , NTT
Is this enough?
- No. In cloud computing we also need the following
- Roles and Authorization
- We need to extract attributed from the authoritative sources
- Audit and Trust Formation
- OpenId is Dynamic
- Federation – Out of bound TRUST formation
- OpenID is “Open” = “Promiscuous”
- Relationship Management and Non-repudiation
- CX Features
- Non-repudiation and Integrity
- Confidentiality
- Extensible Context
- Applicable to limited functionality user agents such as Mobile fones
- Asynchronous Messaging
- Connect different protocols
- LDAP + OpenID
- SAML + OpenID
- WS-* + OpenID
Very similar to OAuth
John Thorburn from Citrix Iberia – System Engineer / Technical Director
Ingredients of the Cloud
- Abstraction of Infrastructure
- Service Oriented
- Elasticity / Dynamism
- Utility Model of resource consumption
Citrix C3 Focus on IaaS – Infrastructure-as-a-Service
Components of IaaS
- Security
- NetScaler VPX
- Repeaters
- Access Gateway
- Virtualization
- Abstraction
- Foundations
- NetScaler MPX
- Branch Repeater
- Access Gateway
Xen Server 5.5
Newly released
- Distributed Virtual Switch for Xen Server
What works today?
- C3 Labs in Amazon AWS
- C3 Blueprints
- Cloud Demo
- iPhone Cloud Bust
http://community.citrix.com/c3labs
Also in the 2nd part of 2009 Xen Client will be release. http://www.citrix.com/projectindependence
Robin Daniels – SalesForce.com
Cloud Delivers lower TCO
The Cloud Offers Fast Return on Investment
End Customer View: Just Plug in and Success
- This is what we should try to achieve when making Cloud Solutions
Behind the Scenes
- ISO 27001 Real-Time Security
- Application Security
- ISO 27001
- SSL Encryption
- Identity Confirmation
- SAS 70 type II, SysTrust certified
- Network Security
- Fault tolerant, multi-tenant firewall
- Intrusion Detection
“SalesForce.com’s constant availability and reliable uptiime have been critically important to us” Double-Click
- Proven Real-Time Scalability
- Fast Deployment and Real-Time Scalability
- Proven by large companies like
- Symantec => 25.800 Subscribers
- Cisco => 20.000 Subscribers
- Proven Real-Time Transparent System Status
- Live System Status
- Security Best Practices
- Historical Performance
- Proven Real-Time Integration
- Leverage Your Existing Investments
- FaceBook
- Google
- Amazon
- Force.Com
- Native Oracle & SAP Connectors
- Proven Real-Time Data Exchange
- Setup any Connection
- Share any Process
- “Easy to share Data with Other Companies, and Avoid Costs of integrations”
Benefits
- Rapid Implementations
- Fast Business Results
- Average
- Implements successfully in 1-2 weeks
- ROI in 2 to 5 months
SalesForce
- 95% Customer Satisfaction
- 77% Referral Rate
Conclusion
- Fast ROI
- No Capital Expenditures, Use Now
- Low Cost
- Subscription Model, Pay as You Go
- Simplicity
- Ease of use
- Build and deploy apps instantly
- Build Once
- Deploy Instantly, Globally
Carla Pinheiro from Clarke, Modet & Co.
Clarke, Modet & Co is a Consultancy company in Intellectual Property management.
What’s the public main concern?
According to a report of the Pew Internet and American life Project:
- What happens if the company is sold?
- What about data switching from one company to another?
Is Cloud Computing a Trap?
For Richard Stallman from Free Software Development, Cloud Computing is evil and will make proprietary technologies to grab more customers and entrap them.
Cloud computing is a trap, warns GNU founder Technology
Stallman- Cloud computing is 'stupidity' Business Tech - CNET News
Stallman calls cloud computing stupid
Richard Stallman vs Cloud Computing
Legal Issues
- Regulation?
- Cloud Service Delivering model is not entirely new nor is unregulated.
- There’s an extensive pre-existing framework of regulations which applies to IT, software and e-Commerce.
- Global?
- Although cloud services appear to be global, it is still going to be subject to national regulations
- Where and for how long?
- Various regulators will be interested too know where and for how long is going to be the location of customer data
- Privacy
- Quality?
- in some cases, few legal assurances given by service-providers reflect that lower price and little support or maintenance.
- Some of those terms and conditions may not stand up to EU customers and contract law.
- Protection of Privacy
- In certain jurisdictions, data which customers might believe to be secure could, in fact, be subject to disclosure thought. example: England and US
- Reproduction Fate Sharing
- On customer’s bad behavior may affect the reputation of the cloud as a whole
- Risk Mitigation
- Users of cloud services should insist on SLA terms
- Privileged User access
- Who has specialized access to data and about the hiring and management of such administrators
- Regulatory Compliance
- Make sure a vendor is willing to undergo external audits and/or security certifications
- Data Location
- ask provider if he will commit to storing and processing data in specific jurisdictions, and whether they will make a contractual commitment on the subject
- Data Segregation
- make sure that encryption is available at all stages
- Recovery
- find out what will happen to data in case of a disaster. Do they offer complete restoration and, if so, how long that would take
Conclusions
The cloud computing trend is likely to lkead to new business models and contract arrangements between IT providers and their customers
Don’t forget that a cloud on the ground is called fog… (trademark)
Robin Daniels – SalesForce
The Cloud Computing Model
- Multi-Tenant: No capital Expenditure
- One application shared by several customers, and that makes cost lower
- Pay as you go: Low Operating Expenditure
- Elastic: Scales with You
- This days it’s even more necessary because businesses are seasonal and so what we need is that the applications are the same way in Costs and also Scalability
The Real-Time Cloud
- Force.com Cloud Infrastructure
- ISO 270001 Certified Security
- > 99,9 % Proven reliability
- Proven Real-Time Scalability
- < 300ms Real-time Query Optimizer
- Trust – Real-Time Transparent System Status
- Real-time Upgrades
- > 100M API calls/day
- Real-Time Sandbox Enhancements
- Force.com Cloud Platform
- Real-time mobile Deployment
- Integrated Content library
- Real-Time Analysis
- Granular Security and Sharing
- Force.com Applications
Criteria of IT Project evaluation
- Time to Value
- Cloud Computing is faster in two ways
- Initial Project Rollout time (80% faster)
- Design
- Development
- Testing
- Training
- Deployment
- Application Agility increases in 72%
- Change Requests
- Upgrades
- Additional users
- New functionality
- Capital Expenses
- On-Premise Development requires Significant Upfront costs
- Hardware
- Facilities
- Storage
- License Fees
- Stack Integration
- Cloud doesn’t require upfront costs
- Operational Costs
- Technical Resources
- Two ways to save your developers time
- Leverage the business to expand teams
- Business users can create applications
- Rapid prototyping
- Better centralized governance
- Make existing technical resources more productive
- Provide more investigation and enhancements
Force.Com is Cloud Computing for the Enterprise
- 1.600+ Developers Sites
- Force.Com sites will be made available later this month
- Customers
- City Bank
- Electronic Arts
- 14 applications in Force.com
- Starbucks
Luis Martins, Architect Advisor from Microsoft Portugal
Buzz Words
- Cloud Computing
- Cloud Services
- IaaS – Infrastructure as a Services
- PaaS – Platform as a Service
Microsoft’s Strategy in this case is “Software + Services” that can be more prepared here http://www.davidchappell.com/blog/2008/06/what-is-software-services.html by David Chappell and in this whitepaper paper.
Why do we need the Cloud Computing?
Increase happiness by easing the IT problems
Sample:
Think about an Expense Reporting processing system in the Cloud
Challenges Building Applications
- How can I handle peak loads?
- How do I provide high availability?
- What are the upfront investment capital needed?
Platform Choices
- On-Premises Servers
- Hosted Servers
- Cloud Platform
- We need an OS for the cloud
What’s in the Cloud OS?
- Creates a layer on top of the Cloud computing elements used
- Increase the Utility Computing
- 24/7 availability
- High availability
- Peak Loads
Windows Azure
- Utility Computing
- Think of several computers with Virtual Machines inside of each one (This is called Fabric)
- Applications
- Will be place across several machines in the fabric
- Fabric controller is responsible for the management of the fabric and if some machine fails just calls another one
- Defining your service
- What are the components(roles) ?
- How do they interact?
- At what scale?
- Basically:
- LB
- Load Balancer in order to have the availability being managed and balanced to all the available machines that support our application
- Web Role
- Application that will be on the cloud that will be made available
- Worker Role
- Windows Azure is made to Scale out
- Stateless compute + durable Storage = Scalable Application
- Data Centers Microsoft
- 5 known data centers
- 4 in the US
- 1 in Ireland
- more to come, after the regulatory and legal problems that exist now with Cloud Computing have been solved
- Something like 20.000 machines in there
- All our data are placed on 3 different fault domains that will make almost impossible to lose data
- What’s being used with this structure
- Live ID
- Live Messenger
- Live Search
- Live Meeting (in the next version)
- Storage
- Window Azure Storage
- Durable Storage
- Blob
- Table
- Queue
- Used to create asynchronous processing
- REST API available
Promises of Azure
- Microsoft runs your application
- Don’t think about management costs
- Grow the server as we need
Azure Vision
- Windows Azure
- SQL Services
- Services
- Familiar SQL Server relational Database model
- Support for existing APIs and tools
- .NET Services
- Services
- Service Bus
- Access Control
- Workflow Services
- Live Services
- Services
- Directory
- Identity
- Storage
- Communications & Presence
- Search & Geospatial
- Live Mesh is the center of this Live Services vision
- SharePoint Services
- Dynamics CRM Services
Azure Services Platform Roadmap
- Fall 2008
- First CTP – Developer CTP for Services SDKs and Tools
- Spring 2009
- Updated CTPS
- Enabled Full trust & Fast CGI
- Geo-localization
- Summer 2009
- Making the business model available
- Winter 2009
How can we start?
- Download SDKs and Tools
- Get Invitation code
- Review the hands-on labs and videos
http://www.azure.com
Professor Pedro Veiga from FCCN
- FCCN is shifting from Computing to Network computing like Grid Computing and Cloud Computing also
- Something like 100 servers and each with 8 to 10 cores each
- This will be announced to be available for another institutions
- Challenges
- Carbon footprint
- Deal with an heterogeneous world
- Oss
- Grid Computing
- Cloud Computing
- and other paradigms
- Security
- Very important when thinking about the cloud
Today and tomorrow it will take place in ISEP at Porto the first edition of Cloud Computing Conference organized by IPP and will have several international speakers since this is an International event, and the agenda is very interesting and has like Nat Sakimura NRI Japan and OpenID Foundation, that is an expert on Identity, as well as other companies that are in the cloud like Microsoft, Amazon, Sun Microsystems, IBM, Salesforce, Citrix, Wyse, Switch, Ozona, EMC, 3Com. There are also some other companies that are present showing their experiences like InfoAnchorage, WeBreakStuff and a very interesting company that will talk about the Data Protection and Confidentiality from a legal prespective, and this is important because this is a very important element when talking about the cloud. Also IPP and FCCN that is a Portuguese institution of IT.
Check the agenda here and the speakers list here.
I’ll try to make live blogging of the interesting sessions, and also the ones that I’ll attend.
Joe Stegman – Group Program Manager
Silverlight 3.0 Tooling
- Visual Studio 2008 Tools for Beta and RTM
- Include improved XAP Compression
- 10-30% decrease in XAP size
- Interactive designer
- In next Visual Studio release
- See Visual Studio 2010 session for details
- Expression Blend 3 Preview
- Final Release “later this year”
- See Blend session for details
H.264/AAC/MP4
- Silverlight 3 supports H.264/AAC/MP4
- Industry standard format:
- Hardware decoders on most devices
- YouTube, iPhone, Flash supported format
- Base format for QuickTime and iTunes
- Silverlight 3 H.264 vs VC1
- DRM (only available for VC1)
- Windows Media Server (only available for VC1)
GPU Acceleration
- Opt-in feature on Silverlight 3 plug-in
- Enabled final surface draw with the GPU
- Opt-in feature per Element
- Use GPU to blend/composite multiple Elements
- Use GPU to stretch elements
- Works in-browser and in full-screen mode
- Where can we see this?
- Performance is highly enhanced
Prespective 3D
- Prespective 3D
- Put a 2D objects in 3D space
- Threat a 2D object as if it was in a 3D space
- Not really 3D
- Example:
<Border>
<Border.Projection>
<PlaneProjection x:Name=”p3”/>
</Border.Projection>
<MediaElement Source=”Robots.wmv” Stretch=”Uniform” Width=”480”/>
</Border>
- X,Y,Z rotation and X,Y,Z rotation point
- Enabled the rotation of the 2D element on 3D Space based on the position or by placing the rotation on a specific point
- Properties for the Projection Element, that in this case is PlaneProjection:
- Rotation
- RotationX
- RotationY
- RotationZ
- Rotation Point (changes the center of rotation)
- Support Local/Global X,Y and Z offsets
- Works not just with media but also with any other objects without losing the functionality
Animation Easing
Making animations easier and less mechanic, and based on the known standards this was placed inside the platform.
- Added stock animation easing functions
- CircleEase, SineEase, BackEase
- ExponentialEase, PowerEase
- QuadraticEase, CubicEase
- QuarticEase, QuinticEase
- ElasticEase, BounceEase
- Simplifies creation of new easing functions
- Inside the Animation we now have a EasingFunction Property that defines the used EasingFunctions
<DoubleAnimations … >
<ExponentialEase EasingMode=”EaseOut” Exponent=”10”/>
</DoubkeAnumation
Save File Dialog
- For security reasons there is never informations about the file localization and so on, just the Stream for the file and no more than that.
- As the SaveFileDialog and OpenFileDialog that is used in Windows Forms we can filter the extension that we allow used in the SaveFileDialog
Effects and Pixel Shaders (version 2.0)
- A complete set of effects that have been placed inside the framework and that can be easily used
BlurEffect blur = new BlurEffect();
blur.Radius = 8;
this.LayoutRoot.Effect = blur;
- Effects
- Impact the visual behavior and not functional behaviour
- Silverlight 3 supports Blug and Drop Shadow
- Silverlight 3 supports custom “Effects”
- Custom “effects” are implemented as “shaders”
- Shaders typically authored using HLSL
- Compiled into byte code using DX SDK utility
- Silverlight 3 consumes the byte code
- This shaders are also compatible with any Browser and Operation System
- Shaders allow developers to modify each pixel on a UI element before the pixel in rendered
- Shader = a per-pixel function or operation
- Due to security issues right now it’s not GPU accelerated
Pixel APIs
- Two Parts
- Dynamic bitmap generation
- Read/write pixel in a bitmap
- Render a visual tree (elements) to a bitmap
- Scenarios:
- Dynamic image generation (example: RT graphs)
- Image Editing and effects
- Clone Visuals
- Examples: reflections, drag effect
Raw Audio/Video APIs
- Similar to Pixel APIs but for audio/video
- Scenarios
- Dynamic sound generation
- Custom audio/video decoders
- Imagine doing effects on top of Video, like Drag and Drop, easily
Note: Silverlight Media doesn’t support an Alpha Key in the Video itself, and so we can use the Chroma Key to use with Shaders.
Local Messaging
- Cross plug-in Silverlight communication
- Multiple plug-ins on the same page
- Multiple plug-ins on different browsers tabs
- Multiple plug-ins in difference browsers
- Implementation
- Shared Memory
- Exposed as “named pipes”
- String based messages
- Secure because they are:
- By Default
- Can only talk to other plug-ins that came from the same domain
- Based on an Handle
- Can be extended by the developer
- Scenarios
- Mixed HTML and Silverlight Architecture
UI Framework Improvements
- Merged Resource Dictionaries
- BasedOn Styles
- Styles can be “cleared” (changed in runtime) – This means that we can re-arrange every style on runtime and do something like skinning
- Multi-select ListBox
- Listening to “handled” routed events
- New VSM “Invalid States”
- Supported in TextBox, CheckBox, ComboBox, ListBox, RadioButton
- Provides elements like TextBox validation error definition
Other Improvements
- SystemColors
- If we are in High-Contrast Mode this rather that what happens in Silverlight 2.0 will not only inform us of that, but also use the System Colors in order to present elements in the correct form
- SaveFileDialog
- Text Improvements
- ClearType Text (Post Beta)
- CaretBrush
- Flag to optimizing for animating text
- Makes smooth animations to text
- Glyphs support for system fonts
- Important for East Asian Scenarios
- Image Refinements
- Possibility to bypass the cache
- Several other
New SDK Controls
Other Big Additions
- Business Solutions
- Navigation Framework
- Data Control Additions
- SEO (Search Engine Optimization) Support
- N-Tier data Support ( .NET RIA Services)
- Web Services Stack Improvements
- Binary XML, SOAP Faults, Credentials
- Silverlight Toolkit
“Out-of-Browser”
- Silverlight runs “Out of the Browser” (still sandboxed)
- Now new surface area, just the same restrictions as the normal Silverlight in the Browser
- Built into the core Silverlight runtime
- Enabled per “application”
- User Gesture to take “out of the browser”
- Right click support
- Custom Button in the application
- New networking API’s
- Connected
- Disconnected
- Changed State
- Offline APIs
- Launch state (Imported to detect if it was launched Online or Offline)
- Update APIs (Update Management like the Normal Web Application, or in other words, automatically)
- Installation to “Out of the Browser"
- Install button can be changed and defined entirely by the developer
- Change the Manifest and define the Deployment.ApplicationIdentity Part
- This can only be programmatically, but this has to be based on a user Gesture like a click or something else, and just by calling:
- Application.Current.Detach();
- Application.Current.RunningOffline will inform if the application is running Offline
- The Icon of the Installation Box is customizable
Backward Compatibility with Silverlight 2.0 is granted in Silverlight 3.0.
This is an extremely important version for Silverlight and to be used as a real LOB Application technologies because it provides the same approach to Web and Desktop applications.
Improvements in Isolated Storage Performance.
Local Communications between InBrowser and Out-Of-Browser applications are also possible.
More Posts
Next page »