Monday, March 21, 2011

Practical Computing in the Cloud (ported from old site)

Cloud computing is the current hot topic in IT.  Providers are pushing it, vendors are pushing it, consultants are pushing it.  About the only people who don't get it are at Corp HQ... and the users.

In a nutshell...

Pros:
  • 7/24 monitoring is available
  • Server management is available
  • Network management is available
  • Server redundancy is available
  • 7/24 management is available
  • Network redundancy is available
  • Business Continuity is less risky
  • VOIP is more pragmatic across multiple sites
  • Backups can be easier to accomplish and more secure
  • Security is centralized
  • Compliance is easier (HIPPA, SOX)
Cons:
  • Loss of Total Control of Administration
  • Security across the corporate WAN
  • Loss of Control of Cost
  • A Good Business Continuity Plan is Mandatory
The explanation (point by point) starting with the Pros...
  • Monitoring - As opposed to having to hire and schedule operators and admins to be available 7/24/365, the hosting provider will usually provide an option to monitor the network and servers.  All good.  However, this doesn't mean that you can get rid of your admins.  You still need people who know how everything is put together so that when that critical business function breaks (the one you spend $100,000+ each year on for development), there are people available who know how to troubleshoot the problem quickly using procedures that they defined for recovery, so your downtime is minimized.  Monitoring does not imply management or recovery.
  • Server Management - Good as far as it goes.  Need patches installed?  As long as they work perfectly, no problem.  But throw in application, device, driver incompatibilities along with the occasional bug, and you can quickly find yourself addressing a two stage process (to test systems first before production), or else dealing with how to roll back patches on a machine that can be anywhere in the US, and is not available via the network anymore.
  • Network Management - A very good idea, if done by your IP Provider or possibly one of their recommended 3rd party partners.  This will generally keep accidents from happening.
  • Server Redundancy is available - Several OSs now support remote clustering - where different cluster members are at different locations.  This is a step up from traditional clustering solutions in that each member server is in a different geographical area.  Issues are syncing due to latency, and updating the servers. 
  • 7/24 Management is available - Provided you can set up good inter corporate communications, get a workable schedule put together and competent remote support, this is a major benefit.  No longer do you have to employ staffers for 3 shifts to ensure up-time.  Lower payroll costs but higher MRC.
  • Network Redundancy is available -  No longer do you have to provide multiple network connections to the datacenter as your (nationwide) provider can provide that as a matter of course (but you still have to put it in the contract).  However, you still have to address the issue of whether to set up redundant connections for each work site (decision for the COO and CFO).
  • Business Continuity is less risky - What this means is that you have more resources available in case of an emergency.  In fact, Sungard can even provide you with a temp office space with equipment per contract, which can be upgraded if necessary.  While there are others that can provide the office space option, most are limited geographically or by the number of users that they can support that way.  There are numerous providers that can provide simple server hosting space.  The problem is maintaining sufficient staff in your business so that they can keep everything in sync and up to date.
  • VOIP is more pragmatic across multiple sites - VOIP should always be part of any cloud solution for a multiple site entity.  Employ an MPLS network with firewall and VPN in the cloud.  Use the same network/security for VOIP.  This can expand the use of VOIP to your entire sales force anywhere wireless access is available via a softphone program on the users computer or laptop.  Reduces the cell phone minute charges for your traveling employees, particularly for international users.
  • Backups can be easier to accomplish and more secure - With an MPLS cloud based network backbone, and using data compression/encryption, backups can be done to your hosted backup servers/SANS from all connected business sites (provided they have adequate bandwidth).  The issue here is error recovery and the need for redundant network connections to ensure that the backups get done on time.
  • Security is centralized - You no longer need a firewall at every site, just a good router that supports MPLS.  This means having a single firewall guy on staff as opposed to one per site.  And now all he does is tell the provider how to set up the firewall, so he will be awake in the morning and into the office on time (usually).
  • Compliance is easier (HIPPA, SOX) - Recent interpretations with HIPPA and SOX state that for compliance, a company must be able to provide document discovery for the last 3 years, and verify that regular complete backups of pertinent data are performed.  A cloud solution can simplify the need to provide proper business continuity techniques (backups, auditing, reporting), by simplifying the backup procedure, providing independent verification for auditing and standardize all aspects of reporting.   This is done by reducing the staff required at each site to manage these tasks.  This tasking is now done by your providers management group, using management tool suites.  Again you have the expense, but it is centralized, contracted, and outsourced.  Giving you a legally defensible position if the need arises.
And now the Cons...

  • Loss of Total Control of Administration - With all the outsourcing and geographical distribution in the Cloud solution, good management is essential, especially with the contractual agreements.  All envolved parties need to fully comprehend what they are purchasing (COO, CTO, CIO, CSO, CFO) and be in agreement that is meets their corporate needs.
  • Security across the corporate WAN - Now you can support a mobile workforce... and that is the problem.  Whether it be bots, pornography, viruses, or an e-mail from cousin Sady with the latest baby pictures, the security issues you face now will require much more forethought and planning.  With cloud computing, Security must always be foremost in everyone's mind.  With everyone/thing connected, one compromised smartphone can lead to the pillaging of the entire environment if appropriate defenses are not in place.
  • Loss of Control of Cost - By outsourcing the cloud environment management and monitoring tasking, you are now at the mercy of your providers limitations.  While you may be able to negotiate a good initial contract, expect the costs to go up once your provider has you locked in.  Changing providers will be prohibitively expensive.  Be wary also as to the financial stability of the selected providers and the equipment and software vendors they employ in your solution.
  • A Good Business Continuity Plan is Mandatory - With the disbursement of the the corporate datacenter into the cloud, you have greatly increased the complexity of your environment in exchange for better flexibility, reliability and redundancy.  With the implementation of a cloud solution, you have to face the need for a verifiable Business Continuity plan.  A good plan is thorough, detailed and exacting in its procedures.  It is also updated as often as any element of the environment.  This can be as often as every week.  As you may gather, this is a costly undertaking.  Unfortunately, it is essential for corporate viability.  Many larger companies will not do business with companies that do not have the capability to address a systematic failure within 24 hours and who can prove that they can do so.
All in all a cloud solution is in every business's future.  Just remember that with this solution you need expert guidance in every facet, and you will still have to maintain in-house expertise to maintain that environment.

No comments:

Post a Comment