2009年11月26日木曜日

クラウドのID管理:その必要性は謳われながらもやっとMicrosoftがPDCでWindows Idenitity Foundationを発表=>

セキュリティのソリューションの重要な核を占めるユーザのID情報(パスワード等の情報)を数々のSaaSアプリケーション、もしくはクラウド環境上のアプリケーション上で統合管理する必要性は、SaaSアプリ、クラウド環境の選択が広がると共に大きくなってきている。
Microsoft以外にもQuest社や、Ping Identity等のベンダーが活動している。 
OpenIDというものも存在するが、もう少し企業向けのセキュリティ性の高いものが求められているのでは、と考える。

Microsoft adds identity to cloud

Releases Windows Identity Foundation, formerly the Geneva project
Security Identity Management Alert By Dave Kearns , Network World , 11/25/2009
Kearns

Everyone eyeing Azure, their candidate for cloud-based computing, can at least agree on one thing: Redmond is late to the party that's dominated by Salesforce.com, Google, Amazon and a host of others. How can they hope to differentiate themselves?

Microsoft's JG Chirapurath, director of marketing for the Identity and Security Division, knows exactly how, and he told me about it last week. Identity is the key differentiator.

Last spring ("Identity management is key to the proper operation of cloud computing,") I noted that some people were finally beginning to realize that identity had a part to play in cloud-based computing, but very little has been done. Until Microsoft's announcements last week at their Professional Developers Conference (PDC), that is.

The release of the identity framework puts Microsoft ahead of all of the other cloud-based solution providers (many of whom are still struggling to attempt to adapt OpenID, with its security problems, to their cloud scenarios).

In a related announcement, Quest Software noted the launch of its first set of software-as-a-service Windows management solutions. Called "Quest OnDemand" the services will be hosted on Windows Azure, securely managing IT environments by leveraging the Windows Identity Foundation (WIF) and Active Directory Federation Services (ADFS) 2.0. Quest's first modules are available in beta. They are:

* Quest Recovery Manager OnDemand for Active Directory -- provides backup and object-level recovery of Active Directory data. It is designed to enable flexible, scheduled backups without manual intervention, facilitating quick and scalable recovery of Active Directory data.

* Quest InTrust OnDemand -- securely collects, stores, reports and alerts on event data from Windows systems, helping organizations comply with external regulations, internal policies and security best practices.

Both products are expected to be generally available in Q1 2010 on a subscription basis without requiring on-premises deployment and maintenance.

Microsoft intends to be the winner in the cloud-based computing game, and the Windows Identity Foundation is their trump card.

Rackspace、Google、Microsoftのストレージサービス比較:予想通り、ストレージSaaSでは価格破壊が起きています。軍配は=>

一応、一番安いRackspace社に上げられているが、これ以上、簡易性、価格の安さで勝負するのは難しくなってきているのでは、と感じる。 
 
ビジネスモデルとしては、安い(もしくは無償の)ストレージを提供する一方、そのデータを使った付加価値サービス事業で儲けるようにしないと生き残れない、ということだと思う。

Analysis: Rackspace Beats Google, Microsoft At Hosted Storage

By Edward F. Moltzen, ChannelWeb
 

9:32 HM EST 4. 11. 25, 2009
Rackspace has very quietly outflanked giants Microsoft (NSDQ:MSFT) and Google (NSDQ:GOOG) in online storage and backup, giving the hosting and cloud computing upstart bragging rights as the market races toward the new IT model in 2010 and beyond.

Unveiled last week, Rackspace's Cloud Drive provides a quick, easy-to-deploy solution for "cloud-based" storage and file backup. Here are the basics: At a price of $4 per month, per user, Rackspace will offer a company or workgroup 10 GB of file storage per user. Using the interface of the Jungle Disk Workgroup Activity Manager (Jungle Disk is a Rackspace subsidiary), files can be managed and backups can be scheduled and tailored to a specific need. From a desktop or server, the files are copied onto Rackspace's storage infrastructure where they can be managed or retrieved.

Some takeaways from a look at Cloud Drive from the CRN Test Center:

It's simple to set up and deploy, taking about 15 minutes from signing up for the service and scheduling regular backups of specific folders on a PC.

The syncing and sharing features work for the most part. One overnight, scheduled backup failed with this message:

"Unknown SSL protocol error in connection to g4.gateway.jungledisk.com:443 [g4.gateway.jungledisk.com] Error Location: JungleHTTP.cpp:825 JungleHTTP::MakeRequest via JXRTransport.cpp:634 JDGatewayConnection::ExecuteAsyncThread"

A manual backup of the same folder was successful without rebooting the desktop, the server or the network. (It may have been other, overnight scheduled system activity that caused a conflict.) On two other nights, scheduled backups took place with no problems.

The Jungle Disk Workgroup Activity Monitor is a desktop application; it did require a system reboot to start. However, over the past week Rackspace launched a beta version of a Web interface to this service for file access. It appears to work fine.

Unlike other offerings, Rackspace provides security in the form of AES-256 encryption -- a smart move that may make the service more attractive to those with compliance concerns.

Overall, the experience using the Rackspace cloud-based storage and backup wasn't perfect, but it was good. Importantly, it's been delivered to market in a better fashion for smaller enterprises in a much more useful way than Google has arranged its online storage, which is delivered through its Picasa photo-album app and Gmail, or through Microsoft's lackluster Sky Drive. The ability to schedule backups and perform system restorations inside the Rackspace offering -- in addition to the company's functionality that allows employees to sync and share files across the network -- puts it to the head of the line over its two larger rivals in the cloud.

It should be noted that Google recently increased its storage offering to 20 GB of online capacity for $5 per year, shared between Picasa and Gmail, with as much as a full terabyte of storage available to those willing to pay $256 per year. But Google lacks the syncing, sharing and administrative functions of Rackspace.

Also know that Microsoft has made some improvements to Sky Drive since the product first launched, including the ability to share files with people accepted into a personal network. And, while Sky Drive offers a maximum of 25 GB of storage for free, it also lacks the automation tools provided by Rackspace. And Sky Drive still has a gawky and awkward design and Web-based layout.

Here's a quick Tale of the Tape:

Capacity and Price: Rackspace offers 10 GB of capacity that can be shared between colleagues for $4 per month per user; Google offers 8 to 10 GB for free or 20 GB for $5 for one year; Microsoft offers 25 GB for free on Sky Drive.

Automation: Rackspace's Jungle Disk offers scheduled backup to its cloud service; Google and Microsoft provide no automation tools.

Collaboration: Rackspace allows for syncing and collaboration among colleagues via its desktop console; Google storage is limited to sharing provided in Gmail or Picasa; Sky Drive allows for link and file sharing between users on a personal network.

Security: Google and Microsoft provide password-protected access to accounts; Rackspace provides password protection and AES-256 encryption.

Availability: One Rackspace scheduled backup failed over the course of several days; Gmail has experienced several high-profile outages this year; Sky Drive has been largely available with varying amounts of latency.

While not free, like Google's storage or Sky Drive, Rackspace's service provides nice automation and administration and management tools. Packaged with Rackspace's hosted e-mail offering, it puts the company right in the game with the industry giants and should be on the map for small businesses considering moving partially or slowly to a cloud-based IT model. It's not perfect, but marks a solid start for Rackspace as the industry stands at the threshold of the cloud era.

The bottom line: Free, online storage for the masses has been available for almost 15 years, since Yahoo (NSDQ:YHOO) introduced its now-defunct "Briefcase" service. Google and Microsoft continue to tweak and improve what they have in the market, but Rackspace has gone the extra distance to make its Cloud Drive offering not only user-friendly but business-friendly as well. Improvements to Cloud Drive should be expected over time, but for now it is outflanking two of its biggest rivals.

2009年11月25日水曜日

2010年、クラウド市場の予測:正直言ってあんまり驚くほどのことを書いていませんが、感謝祭も近いので、少し記事の質が落ちているようです。

しいて言えば、クラウドコンサルティングがはやる、ということ。 
クラウドも市民権を得ると、SI市場になるということですか。

2010 Cloud Computing Predictions: The Year of Realism

Contributed article by Ian Knox, Senior Director of Product Management at Skytap

2010 Cloud Computing Predictions: The Year of Realism

The buzz around cloud computing reached fever pitch this year, culminating in Gartner placing cloud computing at the peak of its hype cycle in July. We saw controversy around the Open Cloud Manifesto, the federal government getting into cloud computing with apps.gov, and almost every IT vendor trying to put a cloud spin on their marketing message (whether their offerings are cloud-like or not!).

However, hype aside, there is a widespread recognition that the operational and economic model of cloud computing will transform IT over the next few years. As we close 2009, which represented a year of uncertainty, reduced budgets and cautious recovery for most in the IT industry, I believe we are at the tipping point for widespread adoption of cloud services in 2010. With that background, here are Skytap's five cloud computing predictions for the upcoming year:

1. Hype Replaced by Pragmatic Adoption

Many enterprises see the potential of the cloud computing model, but have been trying to understand the proven use cases before taking the plunge. Fortunately, we've seen many early adopters lead the way this year and there is an emerging consensus around the top scenarios which take advantage of the scalable, multi-tenant and on-demand nature of cloud computing. These scenarios include: (1) Development and Test, (2) IT Protoyping and Proof-of-Concepts (POCs), (3) Scalable Web Hosting, (4) Email, (5) Collaboration, (6) Grid Computing/Scientific Calculations and (7) Virtual Training. In 2010 we'll see these scenarios become well-defined blueprints for enterprise adoption of cloud services.

2. Moving Beyond 'VMs On Demand' to Cloud Solutions

We now see a slew of companies that are offering 'Virtual Machines on Demand' for a few cents an hour. However, this still requires organizations to do much of the work to make these 'Infrastructure-as-a-Service' offerings available to their employees. Over the next year, we'll see vendors who offer cloud services as complete solutions win over basic infrastructure offerings. For instance, solutions that help integrate internal and external clouds, provide enterprise single sign-on and security, offer billing and chargeback mechanisms, enable business processes and workflow, and automate complex tasks will prove more valuable to enterprise customers than hosted virtual machines.

3. Emergence of Best Practices

If 2009 was the year of defining key cloud computing scenarios, 2010 will be the year of best practices. As more and more IT practitioners gain experience with cloud services, this knowledge will disseminate in the industry and best practices around security, networking, 'hybrid clouds', application architecture and IT policies will become widespread. This will also include best practices around negotiating service level agreements (SLAs) (both internal and external) and contracts.

4. Cloud Consolidation and Brokerage

As more and more enterprises adopt cloud solutions, we'll see vendors differentiate on support and services, enterprise integration and pricing models, performance and SLAs. In tandem with vendors differentiating their offerings, we'll start to see some consolidation in the industry as major vendors look to build out a portfolio of offerings that can be leveraged through their existing channels and sales organizations. Finally, it's likely that some early cloud service brokers will gain traction to shield enterprises from negotiating with multiple vendors around SLAs, security credentials and pricing.

5. The Rise of Cloud Consulting

Given the high interest in cloud computing and organizations looking for impartial advice in the face of a confusing vendor landscape, we'll see consulting practices built around the design and implementation of the major cloud scenarios. Initially, this will be driven by boutique consulting shops, but by the end of 2010 we'll see many of the major consulting players offer consulting practices and advice for adopting a cloud-based approach to IT.

As we move into "The Year of Realism," keep your eyes on these trends as they will no doubt shape the next phase of cloud computing.

About the Author

Ian Knox is Senior Director of Product Management at Skytap where he is responsible for all aspects of the company's product management, market positioning, demand generation and go-to-market strategy.

Springboard Research社によると、中国のSaaS市場は2010までに58%成長し、3年後には=>

従来のITサービスを超える規模になる。
理由は、SaaS導入の低い初期費用にある。

Chinese SaaS set for growth (19/11/2009)

A new report has predicted growth for the Chinese Software-as-a-Service (SaaS) sector.

Springboard Research has suggested an increase in revenues of 56 per cent for the industry by the end of 2010.

This would take money generated in the country from SaaS to $171 million (£102 million).

According to the study, growth in the sector will continue over the next three years and will outstrip that of traditional IT services.

Devin Wang, business analyst for emerging software at Springboard Research, said: "The appeal and growth of SaaS in China are based on the advantages of SaaS applications compared to traditional software such as lower upfront costs, easier maintenance and quick roll-outs."

He added that his firm envisages "aggressive demand" for SaaS in China over the coming months.

Earlier this week, Wael Mohamed, an industry expert, commented at a Sydney conference that SaaS solutions are "essential" for many companies, CRN.com reported.ADNFCR-1370-ID-19468633-ADNFCR

2009年11月23日月曜日

AT&TのSynaptic Compute as a Service、戦略はAmazon Web Service対抗ではなく、補完すること=>

とは言え、Amazon Web Serviceに完全に対抗した戦略。
違いはAmazon Web Serviceの不安要素である、信頼性を解消している、という点を強調し、"開発"はAWSで行い、"実運用"はAT&Tで行う、という事を提唱している事。
こういう戦略は非常に賢い、と正直に感じる。 
 
AT&Tはプライベートクラウド運用もサポートしており、エンタプライスのニーズをよく研究している、と評価できる。

AT&T Cloud Adds Compute As a Service

November 16th, 2009 : Rich Miller

AT&T continues to build out its suite of cloud computing services to offer features similar to Amazon Web Services. Today it is announcing Synaptic Compute As a Service, which offers processing power that can be used for "cloudbursting" of in-house apps or as a testing and development platform. The service can run as a public cloud, or as a private cloud on AT&T's infrastructure, connected to a customer data center by AT&T's network.

The new offering expands AT&T's cloud portfolio, which also includes AT&T Synaptic hosting – essentially a managed hosting offering using cloud technologies – and Synaptic Storage As a Service. With the storage and compute services, AT&T is hoping to leverage its familiar brand and network to win over enterprises seeking a comfort level with cloud computing.

"This will enable customers to create a provider-based private cloud accessed either via the public Internet or private connections, which many companies will already have with AT&T," said Steve Caniano, Vice President, Hosting and Cloud Services for AT&T. "We're looking to address the concerns customers have related to cloud computing. The model that folks like Amazon have introduced is of interest to a lot of customers. We're offering the same kind of value proposition to enterprises, but without the issues that scare them a little bit."

2009年11月21日土曜日

MS Azureの新しい3つのコードネーム:Sydney、Dallas、AppFabric =>

元々Azureのコンセプトには、Dynamic、SharePoint、.Net、Live等のアプリケーションコンポーネントが含まれていたが、今回はそれが取り除かれ、3つのコンポーネントが残った。
 
Project Sydney:
On-Premiseアプリケーションと、Azureクラウドアプリケーションを連携させるインフラ。  IPSec、IPV6に加え、Genevaと呼ばれるID管理のコンポーネントが採用される。
 
Dallas :
Data-as-a-Serviceモデル。クラウド上にデータを保管し、自由にアクセスできる仕掛け
 
ApFabric :
Dublin、Velocity、と呼ばれる開発プラットホームに加え、.Net開発環境をサポートする。

Three new codenames and how they fit into Microsoft's cloud vision

Posted by Mary Jo Foley @ 2:09 pm

Any Microsoft Professional Developers Conference (PDC) wouldn't be complete without a few new codenames. On November 17, Microsoft introduced three new ones that all are related to Microsoft's evolving cloud-computing vision and infrastructure.

During the Day One set of keynotes, Microsoft officials attempted to explain further how the company's three-screens-and-a-cloud vision will take shape in product and service form.

Last year, when it rolled out its first Windows Azure Community Technology Preview, Microsoft showed a "layer cake" type diagram which showed all of the various Azure layers and components as a comprehensive whole. (See last year's layer cake at right.)

This year, there was no diagram. The new message is that Microsoft's cloud is comprised of Windows Azure (the Red Dog operating system), SQL Azure and a new AppFabric development platform. That's it. Gone are the Live Services, .Net Services, SharePoint Services, and Dynamics CRM Services that wer all part of the original platform.

Did Microsoft decide its original vision was too ambitious? It seems more the case that it has decided some of the original pieces didn't belong as part of the core Azure platform, such as Live Services, which are now part of Windows/Windows Live. In other cases, Microsoft has repackaged other elements of its original platform in different ways (example: the slimmed-down .Net Services is now part of AppFabric).

In the midst of all this movement, Microsoft introduced the three new cloud-related codenames today. How do they fit into Microsoft's newly flattened cloud cake?

* Project Sydney: Technology that enables customers to connect securely their on-premises and cloud servers. Some of the underlying technologies that are enabling it include IPSec, IPV6 and Microsoft's Geneva federated-identity capability. It could be used for a variety of applications, such as allowing developers to fail over cloud apps to on-premises servers or to run an app that is structured to run on both on-premises and cloud servers, for example. Sydney is slated to go to beta early next year and go final in 2010.

* Dallas: Microsoft's "data-as-a-service" offering. Dallas is a new service built on top of SQL Azure that will provide users with access to free and paid collections of public and commercial data sets that they can use in developing applications. The datasets are available via Microsoft's PinPoint partner/ISV site. Dallas is hosted on Azure already and is available as of today as an invitation-only CTP. No word on when Microsoft is hoping to release the final version of the service.

* AppFabric: AppFabric is a collection of existing Azure developer components, including the "Dublin" app server, "Velocity" caching technology, and .Net Services (the service bus and access control services). The version of the Windows Server AppFabric on-premises version of the product is available for download today, with final availability slated for 2010. Community Technology Previews (CTPs) of the Windows Azure AppFabric version are slated to be available during 2010. No word on when the final Azure-based version will be out.

Microsoft made available last week a November release of its own Windows Azure SDK and related tools. The new releases include an update to Windows Azure Tools for Microsoft Visual Studio, which extends VS 2008 and VS2010 Beta 2 so they can create, configure, build, debug and run Web apps and services on Windows Azure.

Roger Jennings, a cloud computing expert and author of the Oakleaf Systems blog said that the November release of the Windows Azure SDK includes "something Azure devs have been asking for and needed to compete with AWS EC2 (Amazon Web Services' Elastic Cloud 2): Variable-size virtual machines (VMs). Using that featue, Azure developers may now specify the size of the virtual machine to which they wish to deploy a role instance, based on the role's resource requirements. The size of the VM determines the number of CPU cores, the memory capacity, and the local file system size allocated to a running instance, Jennings noted.

In a similar vein, Amazon quietly released on November 11 version 1.0 of its Amazon Web Services (AWS) software development kit for .Net. The SDK allows developers to "get started in minutes with a single, downloadable package complete with VIsual Studio project templates, the AWS .Net library, C# code samples and documentation," according to a note Amazon forwarded me over the weekend.

Googleの発表したChrome OS、完全クラウドオンリー=>

という事で、従来のOSとかなり異なる。
  • ネットワーク接続が前提、オフラインはGoogle Gearsを使う
  • オープンソースでありながら、Certification(認証)プロセスはかなり厳しい模様
  • ディスクはSolid Stateオンリー、ハードディスクはサポートしない模様(今日発売されているPCは殆どNG)
  • デバイスサポートについては不明
  • セキュリティについては何やらData Liberation Frontで定義している機能をベースにやっているらしい
等、かなり斬新なアプローチが見られる。

Crazy Google Kids at it Again with Chrome OS

Google kicked off the launch of its Chromium OS project today with a presentation on Chrome OS. The first thing you'll notice is that the name of Google's consumer product will be Chrome OS, while the open source project is named Chromium OS. My guess: Google will bless the usage of the Chrome OS name by granting trademark rights to those who comply with Google's standards. Google didn't say that, but that's what I would do.

The next thing I noticed is that Chrome OS will be completely "cloud-based". As in, no local data. As in, all web apps all the time. As in, it's only useful to the extent that there's an internet connection. This will likely prove to be a Google Rohrschach test. Those already predisposed to disliking anything Google does will find this horrifying. Those who think Google is the bee's knees will conclude that it's not completely evil and, indeed, is the next logical evolution of desktops-in-the-cloud technology. 

This is at first glance a radical change from what we've previously called an operating system.  At second glance, it really does make a lot of sense. I and several others have been trying to advocate the usage of open source software as a platform and delivery system for automated services over a network. Most companies in the commercial open source space have been, for reasons beyond my comprehension, slow to completely embrace this strategy. Now Google is taking this concept to the extreme. The question is, is it too extreme?

 The benefits are enormous - without all the overhead that most operating systems have to deal with, Chromium engineers are free to optimize to their heart's desire without breaking existing code. Users can tap into a wide array of web-based applications, whether on the internet or an intranet. Google claims that they will store all of your user data (cue rioting by privacy and standards advocates). This wasn't mentioned in the video, but Chris DiBona pointed out that this is why Google sponsors the Data Liberation Front, to assure users that their data is always accessible and can be moved out of (and into) Google products. Chrome OS also features some additional security measures that make it more difficult for someone to pwn a machine and then use it to access the data stored on Google's servers. There's a very clever trust mechanism that I'll link to if I can find a good description.

Of course, that doesn't - and shouldn't - mollify those of us worried about data privacy. Then again, most of us already entrust Google with much of our data. You can either not use Google products, or you can "trust but verify." Either way, the concern is understandable, and Google faces increasing opposition to data mongering with every data scraping product they make. 

The downsides to Chromium OS are both obvious and non-obvious. The above concerns of privacy and lock-in are obvious and are not new to followers of Google. Another obvious downside is that any Chrome OS machine is pretty much DOA when it comes to enterprise computing. The inability to run any legacy application is a non-starter for most organizations. Then again, Google isn't targeting that market, so perhaps it's not an issue - yet. And let's not forget that if you travel somewhere without a net connection, you're out of luck, unless you've set of Google Gears to create local copies. There was no word on whether the plan is to make that the default approach. 

Some perhaps less obvious downsides involve its certification policy. At one point in the presentation, there was some mention of Chrome OS only running on machines with solid state drives, which led me to wonder whether this was going to be a self-contained box, a la Apple. Soon afterwards, however, there was some discussion about working with hardware partners and certifying machines to run Chrome OS. Not mentioned was how tightly they would police the Chrome OS trademark. Yes, Chromium OS is an open source project, but we've seen in the past that enforcing trademarks too strictly can incite community rebellions. See, eg. Red Hat, Mozilla, Java, Twiki, et al. Personally, I can see the case for using a certification process and enforcing it with trademarks. Assuming this is the direction they go, one hopes they're smart about it. Communicated very clearly, however, was that Chrome OS will not run on most netbooks sold today, thus the need for a rigorous certification process.

There are also open questions as to how well Chrome OS will work with devices and peripherals. It remains to be seen how enthusiastic device manufacturers will be about supporting yet another platform. Based on today's presentation, it looks like Google will go with the approach of working with a select few hardware vendors. Given that these netbooks will be targeted at consumers, it remains to be seen how well they will be able to dictate the distribution channels for both the base netbooks as well as peripherals. One can easily envision someone buying a cheap consumer device and being disappointed that it won't work with their shiny new Chrome OS-based netbook.

For more on Chromium OS, see Chromium.org as well as today's blog announcement. 

Related Activities

Related Blog Posts



OStatic blogs / Thu, 19 Nov 2009 20:36:52 GMT

Sent from FeedDemon