NORFOLK, VA | JANUARY 23, 2020 | HILTON NORFOLK THE MAIN
NORFOLK, VA | JANUARY 23, 2020 | HILTON NORFOLK THE - - PowerPoint PPT Presentation
NORFOLK, VA | JANUARY 23, 2020 | HILTON NORFOLK THE - - PowerPoint PPT Presentation
NORFOLK, VA | JANUARY 23, 2020 | HILTON NORFOLK THE MAIN Generation Cloud Summit Norfolk, VA Welcome Claudia Hosky Publisher, FedInsider LinkedIn: linkedin.com/in/claudiahosky Email: Claudia@hosky.com Find more training
Welcome
Claudia Hosky
Publisher, FedInsider
LinkedIn: linkedin.com/in/claudiahosky Email: Claudia@hosky.com
Generation Cloud Summit – Norfolk, VA
Find more training events and webinars at www.FedInsider.com
Letting Go of Legacy Generation Cloud Summit – Norfolk, VA
Scot Susi
Senior Director of Federal, Nutanix
Letting Go of Legacy:
Modernizing Your Infrastructure for the Cloud Era
G E N E R A T I O N C L O U D S U M M I T 2 0 2 0
Infrastructure, the invisible resource
How Invisible Infrastructure Works
IT Complexity Is Hurting Government
Infrastructure
Time consuming to provision Multiple points of failure
Process
Difficult to scale and upgrade Large upfront CapEx
People
Little time for innovation Requires IT specialists
| 6
Buy Deploy Manage
Troubleshoot
Upgrade Scale
Repackaging Legacy Doesn’t Work
Storage Services Virtualization App App
Storage Controller Storage Controller Storage Controller Storage Controller
Server Server
Storage Controller Storage Controller
…Nor Compiling Specialized Point Solutions
Solving IT Requires a Fundamental Redesign
Predictable capacity growth with consumption-based pricing No specialized skills required to operate Provisioning in hours, not days or weeks
Secure Scale-out Agile Simple
Full stack security development lifecycle
Introducing a Web-Scale Approach
Design Goals
- Fractional consumption and predictable scale
- No single point of failure
- Distributed everything
- Always-on systems
- Extensive automation and rich analytics
Fundamental Assumptions
- Commodity x86 servers: fail-fast systems
- No special purpose appliances
- All intelligence and services in software
- Linear, predictable scale-out
Re-Platforming IT
Virtualization App App
Fiber Channel Switch Fiber Channel Switch Storage Controller Storage Controller Storage Controller Storage Controller Storage Controller Storage Controller
Virtualization App App
Integrated compute, storage, virtualization, network, and security
Compute Compute
intelligent tiering, VM-centric management and more…
✓ Locality ✓ Tiering ✓ DR ✓ Resilience ✓ Snapshots ✓ Clones ✓ Compression ✓ Deduplication
| 15
What if you could start using your new infrastructure
- n the same day it
arrived at your datacenter?
| 16
What if you never had to buy or upgrade management infrastructure again? Traditional Virtualized Infrastructure
Sizing Provisioning HA? Day 2 Ops Upgrades Scalability
| 17
What if you could plan your next infrastructure deployment in a single meeting?
| 18
What if you never had to come into the office on evenings and weekends to update your systems ever again? Traditional Virtualized Infrastructure
1. vMotion VMs to other cluster nodes 2. Place Node in Maintenance Mode 3. Download Patches 4. Apply Patches 5. Restart Host 6. Take Node Out of Maintenance Mode 7. vMotion VMs back 8. Repeat…
| 21
What if upgrades really were that simple?
| 22
What if everything you needed was simply built into the platform?
Powering All Workloads and Use-Cases
VDI Enterprise Applications Collaboration, Messaging, & UC Remote and Branch Office Dev/Test Mission-Critical Workloads Big Data
Drivers:
- Large Big Data projects (Splunk 9TB/day ingest) supporting Cyber and Tax Fraud
- Lack of agility with an aging infrastructure
- Security concerns about the virtualization team having root access to their environment
(separating operations from security) Reasons Nutanix was selected:
- Automation of Self Contained “Invisible Infrastructure”
- Agility to quickly deploy, provision, and scale out (Lego building blocks)
- Simplicity of pre-STIG’d infrastructure and hypervisor (AHV)
- Self-Healing Resilience
Customer Outcomes:
- Deployed 3PBs of Storage Capacity (70 Nodes) in 7 hours
- Fully standardized on Nutanix AHV for multiple mixed workloads (Splunk, Server Virt, VDI, virtualized FWs,
IDSs, & Packet Capture)
- Nutanix is now the foundation for their Private Cloud - accelerating hybrid cloud adoption
- The customer is now a Service Provider (IaaS and PaaS) to all Cyber teams across the agency
Federal Customer Story - Cyber
End User Computing / VDI Database Business Critical Apps General Compute / Dev & Test ROBO / Edge Computing Cloud Native
Operations & Automation Business Continuity Storage Consolidation Network and Cloud Security
The Platform for Your Journey to Cloud
Hyper-Converged Infrastructure (HCI)
| 26
Analytics & Big Data
Questions?
T I T L E O F P R E S E N T A T I O N | C O N F I D E N T I A L | 27
The Cloud: A Defensive Perspective Generation Cloud Summit – Norfolk, VA
Captain Harold T. Cole
Commanding Officer, Navy Cyber Defense Operations Command
29
Watch the Video: https://www.public.navy.mil/fltfor/ncdoc/Documents/SLDP-Video_1280_v9_Unclass.mp4
The Cloud: A Defensive Perspective Generation Cloud Summit – Norfolk, VA
Captain Harold T. Cole
Commanding Officer, Navy Cyber Defense Operations Command
Hybrid Cloud – Legacy Applications and The City of Norfolk Generation Cloud Summit – Norfolk, VA
Henri Baez
Network Security Engineer Supervisor, City of Norfolk
Hybrid Cloud
Legacy Applications – Cloud
AND
By: Henri Baez
Norfolk - 2019 Digital Cities Winner
2016 2017 2018 2019
10th place 3rd place 5th place 1st place
So, what is cloud computing?
- 1. Universal network access
- 2. Resource pooling
- 3. Rapid elasticity
- 4. Measured service
- 5. Self-service
5
Characteristics
3
Service Models
3
Delivery Models
- 1. Public Cloud
- 2. Private Cloud
- 3. Hybrid Cloud
- 1. Infrastructure as a Service (IaaS)
- 2. Platform as a Service (PaaS)
- 3. Software as a Service (SaaS)
The term Cloud computing is generally used to describe data centers available to many users over the Internet. Cloud computing is the on-demand availability of computer system resources, especially data storage and computing power, without direct active management by the user.
Traditional Model vs Hybrid Model
Traditional Model Hybrid Cloud Model Integration of Traditional and Hybrid
OpenData available Datasets
Traditional Model Hybrid Cloud Model Integration of Traditional and Hybrid
Private Cloud Public Cloud Hybrid Cloud Traditional IT
Cloud delivery models
Hybrid delivers benefits beyond only public or private cloud
Reduce costs and maximise existing IT investments. Business agility, scale quickly to respond to business events. Maintain control through application lifecycle. Maintain visibility of important workloads.
Shared Off-Premise Private Cloud On-Premise Traditional IT Hybrid Cloud
Flexibility & Resilience Regulated Workloads Production User Data Low-cost commodity Great for Test/Dev Anonymised Data Performance without commitment Excellent for Pre- Production/Test Anonymised Data Enterprise class Regulated Workloads Production User Data
Cloud service models (1 of 2) - Sample
Saas PaaS IaaS
Google Apps, Yahoo!Mail, Zoho, Hotmail, SalesForce Amazon Elastic Beanstalk, VMware Microsoft Azure, Vmware . Cloud Foundry etc Amazon EC2, VMWare, Softlayer, Google Cloud Amazon Elastic Beanstalk, VMware
Networking Networking Networking Networking Storage Storage Storage Storage Servers Servers Servers Servers Virtualization Virtualization Virtualization Virtualization O/S O/S O/S O/S Middleware Middleware Middleware Middleware Runtime Runtime Runtime Runtime Data Data Data Data Applications Applications Applications Applications
Traditional On-Premises Infrastructure as a Service Platform as a Service Software as a Service Client Manages
Vendor Manages in Cloud
Vendor Manages in Cloud Vendor Manages in Cloud Client Manages Client Manages
Customization; higher costs; slower time to value Standardization; sold as lower costs; faster time to value
Cloud Service Models - Matrix
Pizza as a Service – Model
Advantages of Cloud migration (moving legacy apps to the Cloud)
- Extremely Scalable
- Reduced Costs
- Better Storage
- Automated Tasks
- Operational Flexibility
- Extensive Mobility
Cloud can scale operations to address marketplace dynamics and speed time to market
From a business perspective, Cloud uses near-real-time scaling to flexibly respond to planned and unplanned spikes
Reduction in operating costs The ability to keep pace with a growing customer base efficiently and cost-effectively Improved customer satisfaction reduction in setup time improvement in server provisioning time Minutes to provision servers, down from weeks or months
99% 99%
Disadvantages of Cloud Migration
Time and Cost of Cloud Migration Application synergy Cloud Security Data Sensitivity
% of Cloud Application Types for Organizations
Don’t forget to secure your cloud services
Support multifactor authentication Specify customers Own data uploaded Delete data immediately On account termination Encrypt data at rest Encrypt data with Customer-managed keys
Perception Vs Reality
Who are you sharing sensitive data wit ith?
62% Business partners 14% Personal email addresses 12% Anyone with a link 12% Other
Most used cloud services on enterprise
Maximize a Hybrid Cloud
Understand workloads and data on a macro scale, but with visibility on a micro scale. Be honest about service option costs. Empower customers with strategic data placement. Put AI and machine learning to work.
Mitigate Cloud Migration challenges
ALWAYS USE ENCRYPTED FILE SYSTEMS ENSURE REGULAR BACKUPS GET IN TOUCH WITH SKILLED CLOUD ENGINEERS PARTNER WITH ESTABLISHED VENDORS DECIDE WHICH APPLICATIONS NEED CLOUD MIGRATION CALCULATE THE COSTS DETERMINE THE RISKS INVOLVED
Security items to consider
Internet of Things - IoT Mobile device Management Mobile Protection Multi Factor Authentication Account Provisioning Data Loss Prevention
The Iinternet of Things (IoT) Revolution
Takeaway
- Audit AWS, Azure, Google Cloud
Platform or other IaaS/PaaS configurations.
- Understand which cloud services
hold most of our sensitive data.
- Lock down sharing, again where
- ur sensitive data lives.
- Happy Hybrid Clouding
Closing
Best of Both: Adopting a Hybrid, Cloud Smart Strategy Generation Cloud Summit – Norfolk, VA
Zach Vaughn
Senior Systems Engineering Manager, DoD, Nutanix
Best of Both: Adopting a Hybrid, Cloud Smart Strategy
J A N U A R Y 2 0 2 0 | C O N F I D E N T I A L
G E N E R A T I O N C L O U D S U M M I T | C O N F I D E N T I A L | 56
A L M O S T A N Y O N E C O N D U C T I N G A J O B I N T E R V I E W, E V E R
Tell me about a time you had to make an important decision without all of the relevant information
US Government Journey to Cloud
G E N E R A T I O N C L O U D S U M M I T | C O N F I D E N T I A L | 57
2007: Trusted Internet Connection (TIC) 2010: 25-Point Implementation Plan to Reform Federal Information Technology Management, 2011: Cloud-First Strategy 2012: National Defense Authorization Act (NDAA) – DoD-wide strategy to migrate to cloud computing 2017: Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure Executive Order (EO 13800) 2017: The White House IT Modernization Report in response to EO 13800 2018: Modernizing Government Technology (MGT) 2019: Cloud Smart
Public Cloud Reset IT Expectations
| 58
Rapid Time to Market
Deploy apps in minutes
Flexible IT Consumption
Get & pay for what you need
One-click Simplicity
No low-level infrastructure management
Continuous Innovation
New capabilities are available on a regular basis
G E N E R A T I O N C L O U D S U M M I T | C O N F I D E N T I A L
Why Not Public Cloud for All Workloads?
Predictable Workloads Elastic Workloads
Elastic Predictable
Balance Renting and Owning for Today’s Enterprise Workloads
Spin up and down resources on the public cloud Lower costs with private cloud infrastructure
Top Concerns for Public Cloud
| 60
Regulatory Concerns That do not permit hosting data outside of an org's geography Unpredictable Costs Overruns due to limitless resources and high egress charges From being able to deploy custom solutions to protect your apps and data Loss of Control Data Gravity & Legacy Apps Make migrations hard; plus fear of vendor lock- in where data resides
G E N E R A T I O N C L O U D S U M M I T | C O N F I D E N T I A L
Cloud-Based Workloads Are Returning On-Premises
Source: IDC’s Cloud and AI Adoption Survey, January 2018
85%
- f respondents are moving
50%
- f their apps on-premises in 2 years
premises in 2 years
Plus 4/5 Of All Workloads Are Still On- Premises
On-Premises
Public Cloud
| 61 G E N E R A T I O N C L O U D S U M M I T | C O N F I D E N T I A L
The odds of matching all six numbers to win the Powerball jackpot are 1 in 292,201,338. The odds of winning any prize are 1 in 25. One Powerball jackpot has been won in Virginia since the game first became available in the Commonwealth in 2010.
The odds of becoming a lightning victim in the U.S. in any
- ne year is 1 in 700,000.
The odds of being struck in your lifetime is 1 in 3,000.
Hope is not a Strategy
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
- Reproducibility: synthesizes workloads from scratch, shedding legacy and historical operations
- Portability: instantiates the same workload on multiple providers, thereby achieving cloud smart initiatives
- Consistency: facilitates testing and rollout of best practices, security patches, updates, and new facilities
- Automation: combines reproducible, consistent operations with workload portability. Automation constantly
improves the state of the business while also accelerating time to market, improving resource management efficiency.
| 66
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
What if you could achieve operational consistency while
- ptimizing
- rganizational
processes?
- Separate Monolithic Functions
| 67
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
What if you could rationalize an application once and deploy it anywhere?
- Ensure Portability
| 68
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
What if you could test the deployment of security patches, best practices and updates with a single click?
- Guarantee Consistency
| 69
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
What if you could standardize
- perations and
governance across private and public clouds?
- Achieve Total Visibility
Achieve Total Visibility
- Complete Visibility into multi-cloud spend
- Automated cost anomaly detection
| 70
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
What if you could reduce the cost of your public clouds by 50%?
- Right-Size Utilization
- Policy-driven automation to eliminate unused resources
- Intelligent Reserved Instance Recommendations
driven automation to eliminate unused resources
| 71
AVOID CLOUD SILOS, LOCK-IN & REDUCE RISK
What if you were able to detect security vulnerabilities in real-time and fix them in an automated way?
- Prioritize Security
- Easily Remediate security vulnerabilities with a single click
- Identify Security issues using 250+ automated checks
Prioritize Security
Easily Remediate security vulnerabilities with a single click
IT Organizations Need Hybrid Cloud
N U T A N I X S O L U T I O N F O R P R I V A T E C L O U D | C O N F I D E N T I A L
PUBLIC CLOUD
elastic | cloud-native
PRIVATE CLOUD
predictable | performance | low-latency regulatory compliance | greater control
| 72
Private Cloud is the Path to Hybrid
Deliver all apps, data, and services from YOUR cloud
Deploy your cloud in hours and scale capability in minutes Deliver any apps at any scale No vendor lock-in Get unified control from one simple UI Reduce MTTR with automated anomaly detection & resolution Adopt just-in-time infra-
- ptimization with built-in AI
Deliver one-click
- perations assisted by AI
Minimize time spent resolving IT tickets Cerate and publish apps and services Enable users to self-serve Achieve reduced TCO (along with other benefits as drivers) Maximize resources and optimize resource utilization Keep business running with built-in data/app protection, backup, and disaster discovery
Deliver IT-as-a-Service with APP Marketplace Ensure 24/7 performance, reliability, and security
P R I V A T E C L O U D S A L E S P L A Y B O O K | C O N F I D E N T I A L | 73
One Platform to Foster Innovation
| 74
Distributed Edge Public Cloud Private Cloud
Infrastructure Data
Application and Services Infrastructure Data Application and Services Infrastructure Data Application and Services
Enterprise Cloud Platform
Private
The Hybrid Cloud Experience
75
Public
(Rent)
Private
(Own or Rent)
Control Frictionless
Fractional IT Consumption One-click Simplicity Rapid Time to Market Balance Owning and Renting Data Integrity and Compliance Choice and Freedom from Lock-in
Enterprise Cloud Platform
Tailored SLAs for Every App Continuous Innovation
Nutanix Delivers Hybrid Cloud:
One Platform. Any App. Any Location
Seamless Hybrid Cloud Operations
NUTANIX CLOUD PLATFORM
Modernize your Infrastructure Secure your Environment Consolidate your Data Automate Operations Ensure Business Continuity PRIVATE CLOUD PUBLIC CLOUD
CISCO
*
*Under development.
aws Azure Google Cloud
End User Computing/ VDI Database Enterprise Apps Cloud Native ROBO & Edge Dev & Test Analytics
Wrap-Up Generation Cloud Summit – Norfolk, VA
Scot Susi
Senior Director of Federal, Nutanix
Find more training events and webinars at www.FedInsider.com
NORFOLK, VA | JANUARY 23, 2020 | HILTON NORFOLK THE MAIN