Managing IT networks requires a broad set of competencies in a growing number of technologies and products. It therefore makes sense that these competencies are centralized in larger data centers providing cloud services to a number of smaller enterprises for which IT is not a core competency.

Larger data centers also means larger installations with higher-speed interfaces as well as an obligation to maintain service availability. This requires extensive test and management capabilities to ensure service “up-time”. However, will test and management of cloud services differ from how they are performed today? What are the special challengers that cloud service providers face in this regard?

Challenges of testing and managing cloud services

The first and fundamental challenge of providing cloud services is service availability. If enterprise customers are to adopt cloud services rather than maintaining local installations, they must be convinced that they can access the services and data that they need whenever they need them without experiencing undue delays. The cloud service must look and feel as if it is local despite the fact that it is hosted remotely.

This leads to the second challenge of service assurance. How can the cloud service provider assure timely delivery and even service availability when it does not control the data communication connection between the cloud service and the enterprise customer? Does the data communication provider have the monitoring infrastructure in place to assure Service Level Agreements (SLA)? Does the cloud service provider have the monitoring infrastructure in place to assure the services provided?

The final challenge is service efficiency. Efficiency in all its aspects from cost, space and power efficiency to efficient and scalable delivery of services using virtualization, efficient servers and high-speed interfaces. In this regard, the accompanying monitoring infrastructure must also follow the same principles.

Testing to meet cloud service challenges

From a testing perspective, there are a number of layers one can address:

·         The Wide Area Network (WAN) providing data communication services between the enterprise customer and the cloud service – fundamental to service assurance and testing of end-to-end service availability

·         The data center infrastructure comprising servers and data communication between servers (LAN), where service availability and uptime of this equipment is key as well as efficient use of resources to ensure service efficiency

·         The monitoring infrastructure in the data center that is the basis for service assurance which itself needs to efficient

·         The individual servers and monitoring appliances that are based on servers that must also follow efficiency and availability principles to assure overall service efficiency and service availability

Testing end-to-end

The first test that can be performed is testing end-to-end availability. At a basic level, this involves testing connectivity, but can also involve some specific testing relevant for cloud services, such as latency measurement. Several commercial systems exist for testing latency in a WAN environment. These are most often used by financial institutions to determine the time it takes to execute financial transactions with remote stock exchanges, but can also be used by cloud service providers to test the latency of the connection to enterprise customers.

This solution requires the installation at the enterprise of a network appliance for monitoring latency, which could also be used to test connectivity. Such an appliance could also be used for troubleshooting and SLA monitoring.

Typically the cloud service provider does not own the WAN data communication infrastructure. However, using network monitoring and analysis appliances at both the data center and the enterprise, it is possible to measure the performance of the WAN in providing the data communication service required. The choice of WAN data communication provider should also be driven by the ability of this provider to offer performance data in support of agreed SLAs. In other words, this provider should have the monitoring and analysis infrastructure in place to assure services.

From reaction to service assurance

Network monitoring and analysis of the data center infrastructure is also crucial as cloud service providers need to rely less on troubleshooting and more on service assurance strategies. In typical IT network deployments, a reactive strategy is preferred whereby issues are dealt with in a troubleshooting manner as they arise. For enterprise LAN environments, this can be acceptable in many cases, as some downtime can be tolerated. However, for cloud service providers, downtime is a disaster. If customers are not confident in the cloud service provider’s ability to assure service availability, they will be quick to find alternatives or even revert to a local installation.

A service assurance strategy involves constant monitoring of the performance of the network and services so that issues can be identified before they arise. Network and application performance monitoring tools are available from a number of vendors for precisely this purpose.

The power of virtualization

One of the technology innovations of particular use to cloud service providers is virtualization. The ability to consolidate multiple cloud services onto as few physical servers as possible provides tremendous efficiency benefits by lower cost, space and power consumption. In addition, the ability to move virtual machines supporting cloud services from one physical server to another allows efficient use of resources in matching time-of-day demand, as well as allowing fast reaction to detected performance issues.

One of the consequences of this consolidation is the need for higher speed interfaces as more data needs to be delivered to each server. This, in turn requires that the data communication infrastructure is dimensioned to provide this data, which in turn demands that the network monitoring infrastructure can keep up with the data rates without losing data. This is far from a given, so cloud service providers need to pay particular attention to the throughput performance of network monitoring and analysis appliances to ensure that they can keep up also in the future.

Within the virtualized servers themselves, there are also emerging solutions to assist in monitoring performance. Just as network and application performance monitoring appliances are available to monitor the physical infrastructure, there are now available virtualized versions of these applications for monitoring virtual applications and communication between virtual machines.

There are also virtual test applications that allow a number of virtual ports to be defined that can be used for load-testing in a cloud environment. This is extremely useful for testing whether a large number of users can access a service without having to deploy a large test network. An ideal tool for cloud service providers.

Bringing virtualization to network monitoring and analysis

While virtualization has been used to improve service efficiency, the network monitoring and analysis infrastructure is still dominated by single server implementations. In many cases, this is because the network monitoring and analysis appliance requires all the processing power it can get. However, there are opportunities to consolidate appliances, especially as servers and server CPUs increase performance on a yearly basis.

Solutions are now available to allow multiple network monitoring and analysis applications to be hosted on the same physical server. If all the applications are based on the same operating system, intelligent network adapters have the ability to ensure that data is shared between these applications, which often need to analyze the same data at the same time, but for different purposes.

However, for situations where the applications are based on different operating systems, virtualization can be used to consolidate them onto a single physical server. Demonstrations have shown that up to 32 applications can thus be consolidated using virtualization.

By pursuing opportunities for consolidation of network monitoring and analysis appliances, cloud service providers can further improve service efficiency.

From passive hosting to active provision of services

Testing of cloud services, or more specifically, service assurance, availability and efficiency, will separate the amateurs from the professionals in the cloud service arena. The days of passively hosting virtual machines on a best effort basis are gone. Assuring the availability of services using efficient infrastructure and active network monitoring and analysis will ensure that enterprise customers will never look back once they have moved to the cloud.

[This article written and contributed by Dan Joe Barry of Napatech] 

I realize that many swear by Google Apps, but I prefer Microsoft Office. It is what I am used to. It is what I am comfortable with. It is the ‘standard’ that the world recognizes and runs on. Don’t believe me? Try making a Google Docs or OpenOffice that is completely separate from and incompatible with Microsoft Office and see how well it does.

Still, there is something to be said for the universal access of a cloud-based solution like Google Apps, and most small and medium businesses don’t have the budget or IT personnel required to implement a complete Microsoft communications and productivity suite. Until now.

Office 365 provides small business customers (up to 50 users) with Exchange Online, SharePoint Online, and Lync Online, as well as access to the suite of Office Web apps for only $6 per user per month. Check out the Office 365 beta and see if the service is right for your communications and productivity needs.

Whether you’re developing software and applications for the cloud, or managing the cloud infrastructure and servers the software and applications will run on, it helps to have specific knowledge and skills related to the cloud.

A post from Microsoft’s TechNet site explains, “Cloud technology creates new opportunities and job roles, but it also impacts current ones. Over the next year, we will introduce new certifications on Microsoft cloud services and will update many of our current certifications to include cloud-related skills. We’ll provide training for these cloud computing offerings through Official Microsoft Learning Products, including Microsoft Press books, Microsoft Official Courses, and Official Microsoft E-Learning.”

Stay tuned. I will share more information on Microsoft cloud certifications as it becomes available.

A blog post citing statements from Swedish security software developer Lavasoft, makers of Adaware, claims that 2010 will see a shift in attacks and malware techniques to adapt to the improved security of Windows 7. The post stresses that Microsoft will continue to be the focal point of most malware due to its overwhelming presence, but that rising use of Ubuntu and Mac OS X could lead to an increase in attacks targeting those OS’s as well.

I would argue that Ubuntu and Mac OS X are still far from being worth a malware developer’s time. The combined total market share of all Mac OS X versions, and all versions of Linux- including Ubuntu- combined is about six percent. Linux makes up only one percent of the OS market, so no matter how much Ubuntu may seem to be gaining, its share is still irrelevant.

It is sort of a no-brainer that attackers will seek to crack Windows 7′s armor. That is hardly a revelation. I expect there will be a success or two on that front and we’ll see some malware targeted specifically at Windows 7. With more cloud-based services, and the ubuquitous nature of Web browsing across all operating systems and all platforms- desktops, laptops, netbooks, mobile phones, etc.- attackers will pay extra attention to Web-based exploits.

One option for SMB’s is to basically outsource the maintenance of the security infrastructure while retaining administrative control over the actual implementation of security. Companies contract outside resources for a variety of services from janitorial duties to physical security of office facilities. Why not contract network security as well?

The evolution of the Internet has given rise to the concept of “cloud computing”. Put simply, cloud computing means that the software is centrally located and managed somewhere out there on the Internet, affectionately known as the cloud.

Panda Security offers Panda Managed Office Protection which basically provides a cloud-based, managed security infrastructure that lets Panda handle the expense and the grunt work of keeping the servers online and up to date, while enabling customers to manage security policies and administer the implementation of security through a web-based console.

I had an opportunity to test out PMOP and I was pretty impressed. There are two things in particular that really stand out in my opinion: peer-to-peer updating, and Collective Intelligence scanning.

Administrators can configure the endpoints to acquire updates from other endpoints on the network in a peer-to-peer framework rather than having every client update from a single source or bogging down the available network bandwidth by having all of the endpoints download the updates directly from Panda. For SMB’s with a limited bandwidth pipeline to the Internet this feature can ensure that security updates don’t cripple the network.

With Collective Intelligence the majority of the malware scanning is done in the cloud on the Collective Intelligence servers. That reduces the resource consumption and performance impact on the endpoint systems, and also provides virtually limitless resources to analyze malware samples and develop signatures on the fly.

I think PMOP may be just what many SMB’s are looking for. PMOP is a sort of hybrid solution between a locally installed enterprise security solution and a fully managed security service. It provides a cost-effective solution for SMB’s to get enterprise-class security without relinquishing complete control of security to a third-party.