1 of 77

Lightning Round 4

Thursday Nov 7 1pm

2 of 77

Schedule:

Immo Noack-The ‘Open Clouds for Research Environments’(OCRE) project for the European research community
Bill Wrobleski-Cloudy in Happy Valley
Glenn Blackler/Kari Robertson-IAM in AWS-Jekyll and Hyde
Gerard Shockley-Providing a cloud service for students
Jeff Whitworth-Reinventing your IT Department for Cloud
Bill Allison-The Plug-n-Play University: Cloud Culture vs Service Management Culture

3 of 77

Immo Noack

Up Next: Bill Wrobleski

4 of 77

Open Clouds �for Research �Environments

Immo Noack

immo.noack@switch.ch

Ithaca, 07. November 2019

5 of 77

Open Clouds for Research Environments (EU project)

Purpose: Simplify the use of commercial cloud services in the European scientific community

Consortium consisting of

GÉANT - Preparation & implementation of the tender
CERN - High demand/user for clouds
RHEA Group - Expert knowledge in the field of Earth Observation
Trust-IT - Communication and publication of the service portfolio

6 of 77

GÉANT

NREN Association
Data-Network
EU Project

7 of 77

GÉANT

NREN Association
Data-Network
EU Project

8 of 77

Infrastructure as a Service (IaaS)
Pan-European tender
Results: framework agreements
Not winner takes all, but provide choice
4 year framework agreements
NRENs act as mediators

9 of 77

294 Institutions

9.8m Euros

18 Countries

10 of 77

What will be tendered?

Infrastructure-as-a-Service
Platform-as-a-Service (of the IaaS Provider)
Software-as-a-Service (of the IaaS Provider)

11 of 77

Desired result for commercial cloud

Compatibility with EU data protection regulations incl. GDPR
Ready-to-use-Contracts
Direct peering with GÉANT network
IdM- / SSO- Interfaces
Certifications
Reporting to GÉANT

12 of 77

Must have

Price advantages
Added value
AAI support
Network connection GÉANT
GDPR compliant
Data storage in EU/EWG

Nice to have

Waiver of transfer fees
Licensing

Necessary licenses included
Resale/joint use in research
alliances possible
BYOL support

13 of 77

Q1 & Q2 2019

Gather requirements from the research community
Input from cloud providers.
NREN preparation, through GÉANT cloud team.

Q2 & Q3 2019

NREN roles (ready in May) and formation and gathering of institution buyer groups (ready in July)

October 2019

Launch of OCRE Pan-European tender

Q1 2020

Tender completed, framework agreements signed.
Technical service validation via a multidisciplinary test validation benchmarking suite
Identity management & network connections
Services available for usage

2020 – 2021

Entry in European Open Science Cloud service catalogue
Consumption by individual institutions and buyer groups
Adoption funds piloting: 9 million euro, for individual researchers, individual institutions and buyer groups

14 of 77

2019

2020

2021

TENDER�execution

REQUIRE-MENTS

COMMUNITY CONSUMPTION

TENDER�preparation

15 of 77

Working for a better digital world

16 of 77

Bill Wrobleski

Up Next: Glenn Blackler/Kari Robertson

17 of 77

Cloudy in Happy Valley

Bill Wrobleski - AVP Infrastructure

18 of 77

Lots of cool cloudy things going on

Plant Village – David Hughes Ph.D.

Developed a service to democratize access to knowledge to improve farming in underserved countries around the world.

(2018 E&I Cloud Leadership Award Winner)

DNA Design Simulations – Howard Salis, Ph.D.

6000 researchers worldwide to share methods, data, and run compute intensive simulations

Wild Nature Institute – Derek E. Lee, Ph.D.

Study to understand births, deaths and the movement of more than 3,000 giraffes in East Africa

These serve as a glimpse of over 150+ projects and initiatives across Penn State that we know about.

19 of 77

20 of 77

Current State of Services

	AWS	Azure	Google Cloud
Enterprise Agreement	✓	✓	!
Business Associate Agreement (BAA) / HIPAA	x	✓	x
Enterprise IAM Integration	✓	!	!
Broker L1/L2 (Low/Moderate) Environments	✓	✓	x
Broker L3 (High) Enclaves	✓	✓	x
L3 Shared Infrastructure ATO	!	!	x
Enterprise Log Aggregation Service (Splunk)	✓	✓	x
Billing and Financial Processes	!	!	x
Direct Network Peering	!	✓	✓
Monitoring, Service Desk and Support Operations	!	!	x
Engagement / On-boarding into Cloud	!	!	x

√ = Complete / Active ! = Incomplete / Issues X = Not Started / Unavailable

21 of 77

22 of 77

”Known” cloud spend

SIMBA

$754k

23 of 77

Grants and credits

COE Landslide Alert System

$750k

24 of 77

Conclusion

Indiana Sucks

25 of 77

Glenn Blackler/Kari Robertson

Up Next: Gerard Shockley

26 of 77

IAM in AWS - Jekyll and Hyde!

Glenn Blackler | blacker@ucsc.edu

Kari Robertson | kari@ucsc.edu

27 of 77

Overview

IAM -> AWS | 2/2017

UC Santa Cruz IAM =

LDAP (OpenDJ)
Shibboleth
Grouper
PHP front-end
Active Directory

28 of 77

Jekyll!

Resiliency

New nodes whenever needed
Multi-AZ provides solid BC/DR
Easy to transition to new hardware
Easy cloning and backups

29 of 77

Hyde!

LDAP + AWS = Niche

Difficult to use auto-scaling due to replication
ELB limited capabilities

Does not detect problems?
NLB on the way

30 of 77

Jekyll!

Cost Savings

~50% cheaper
Proactively add/remove capacity
Quickly create non-production environments

31 of 77

Hyde!

Non-Production Stability

Investigating why systems don’t come up cleanly
Shared code environment

32 of 77

Jekyll!

Inspiring Staff

Excitement about working on new technology - innovation!
Motivated to make continuous service improvements
Encouraging staff to expand knowledge of full stack

33 of 77

Hyde!

Staffing Challenges

IAM + AWS = Steep learning curve
Desire to revisit architecture design

34 of 77

Jekyll!

Improved Security

More frequent patching with limited business involvement
Clearly defined security standards and best practices
No longer responsible for physical security

35 of 77

Hyde!

Cloud Governance

IAM needs to move at the same speed as organization
Adoption slow for new services due to Cloud Team capacity

36 of 77

Looking Forward

STAFF

SECURITY

EFFICIENCY

EVOLUTION

TECHNOLOGY

GOVERNANCE

37 of 77

Gerard Shockley

Up Next: Jeff Whitworth

38 of 77

Boston University �EA&SD Cloud Services Offerings��Providing a cloud service for students

Cloud Forum 2019

39 of 77

Agenda

Cloud Services for Students (Teaching and Learning)

Illustrate Intake Process and service provider selection
Free access to cloud services for their coursework

AWS – Serverless development, Machine Learning
Azure – Microsoft Windows access
Google Cloud Platform – Native Cloud AI