Topics


Blogs


Forums


Samples


Media


Labs


Resources

 




DevCentral > Weblogs > Lori MacVittie - Two Different Socks

infrastructure

There are 106 entries for the tag infrastructure

The Order of (Network) Operations

Thought those math rules you learned in 6thgrade were useless? Think again…some are more applicable to the architecture of your data center than you might think. Remember back when you were in the 6th grade, learning about the order of operations in math class? You might recall that you learned that the order in which mathematical operators were applied can have a significant impact on the result. That’s why we learned there’s an order of operations – a set of rules – that we need to follow in order to ensure that we always get the correct answer when performing...


posted @ Tuesday, March 09, 2010 3:41 AM | Feedback (0)

The Corollary to Hoff’s Law

“Security” concerns continue to top every cloud computing related survey. This could be because, well, CIOs and organizations in general are concerned about security. It could be because the broader question of control over the infrastructure – including security – is never proffered as a reason for reluctance to jump into the fray known as cloud computing. Forty-nine percent of survey respondents from enterprises and 51 percent from small and medium-size businesses cited security and privacy concerns as their top reason for not using cloud computing. – Survey: Security Concerns Hinder Cloud Computing Adoption, NetCentric...


posted @ Monday, March 08, 2010 5:07 AM | Feedback (0)

When Everything is a Threat Nothing is a Threat

The current threat level is … the same as it was yesterday, and the day before, and will be tomorrow. We’ve all been in the airport before and heard the announcement. “The current threat level is orange. Blah blah blah blah yada yada whatever.” At least that’s what I hear today because I’ve become immune to the fact that “orange” means there’s a threat. There’s always a threat, it seems, and the announcement simply conveys what appears to many of us to be the “status quo.” We have effectively been desensitized to a “higher” threat level as...


posted @ Friday, March 05, 2010 3:48 AM | Feedback (0)

The IP Address – Identity Disconnect

The advent of virtualization brought about awareness of the need to decouple applications from IP addresses. The same holds true on the client side – perhaps even more so than in the data center. I could quote The Prisoner, but that would be so cliché, wouldn’t it? Instead, let me ask a question: just which IP address am I? Am I the one associated with the gateway that proxies for my mobile phone web access? Or am I the one that’s currently assigned to my laptop – the one that will change tomorrow because today I am...


posted @ Thursday, March 04, 2010 3:54 AM | Feedback (1)

Square Infrastructure Pegs Don’t Fit in Round Network Holes

Ultimately a highly-scalable, high-performance architecture will rely on choosing the right form factor in the right places at the right time. Scale is not just about servers, and for corporate data centers and cloud computing providers looking to realize the benefits of rapid elasticity and on-demand provisioning scale simply must be one of the foundational premises upon which a dynamic data center is built. And that includes the infrastructure. This isn’t the first time I’ve touched upon this subject, but it’s a concept that needs to be reiterated – especially with so many pundits and analysts looking for the...


posted @ Monday, March 01, 2010 3:53 AM | Feedback (1)

Knowing is Half the Battle

There’s a difference between automation and orchestration, and knowing which one you’re really doing is half the battle in achieving a truly dynamic data center. Randy Heffner on CIO.Com wrote an excellent article on SOA and its value, “SOA: Think Business Transformation, Not Code Reuse.” The problem I had with the article was not in any way related to its advice, conclusions, or suggestions. The problem I had was that I kept thinking about how perfectly much of his article could be applied to data center orchestration, operational transformation, and automation. Simply replace “SOA” with “orchestration”, “software reuse”...


posted @ Monday, February 22, 2010 3:43 AM | Feedback (1)

What if users could specify their own SLAs?

More interesting, what if you had the means to actually try to meet them? On the surface, Infrastructure 2.0 seems to have very little value to the end-user. It is, after all, about collaboration at the infrastructure layer. It is under the covers, as it were, of the application blanket with which end-users actually interact. But it may end up that Infrastructure 2.0 will have a direct impact on the control the user has over the way in which applications are delivered. Which is to say they might one day have some. What this means is something...


posted @ Wednesday, February 17, 2010 3:43 AM | Feedback (0)

The Devil is in the Details

Or more apropos, it’s in the complex and intimate relationship between applications and their infrastructure. What’s the difference between a highly virtualized corporate data center and a cloud computing environment? There are probably many, but the most important distinction – and the one that earns the latter a “cloud computing” tag – is certainly that the former lacks a comprehensive orchestration system and was likely not architected using a rapid, infrastructure inclusive, scalability strategy. Mitch Garnaat, “The Elastician”, recently managed to sum up what should be every modern data center’s motto in a...


posted @ Monday, February 15, 2010 4:06 AM | Feedback (2)

Users use Applications. Applications use Clouds.

Preparing for the upcoming Cloud Connect conference several speakers and presenters have put forth the proposal that no one should attempt to define cloud yet again. After all, if you’re attending the conference (and you are attending, of course, aren’t you?) then you certainly have a firm understanding of what cloud computing is and what it can do. But most end-users and business stakeholders won’t be attending and don’t have a firm understanding of cloud computing. Even the technology pundits to whom these constituents turn to learn about the technology often fail to really “get” cloud computing, as evinced...


posted @ Friday, February 12, 2010 3:50 AM | Feedback (1)

That Whole Concept is Broken

Agreed that cloud vendors need to differentiate on services. Disagreed that cloud standards will not forward that cause and that virtualization platform makes a difference.    The battle for virtualization platform dominance rages on, but it will not be virtualization that makes or breaks a cloud computing offering; it will be the diversity – or lack thereof - of the services it offers. We need to stop focusing on virtualization as the be-all and end-all of cloud computing and start bending our efforts toward what really matters: the ability of providers to efficiently offer a broad set of...


posted @ Wednesday, February 10, 2010 4:35 AM | Feedback (8)

VM Sprawl is Bad but Network Sprawl is Badder

We worry about VM sprawl but what about device sprawl? Management of a multitude of network-deployed solutions can be as operationally inefficient as managing hundreds of virtual machines, and far more detrimental to the health and performance of your applications. Turning them all into virtual network appliances that might need scaling themselves? That’s even badder. But all you hardware fanbois best not smirk too much because the proliferation of hardware network devices is only slightly less badder than the potential problems arising from virtual network appliance sprawl. WAIT, WHY IS DEVICE SPRAWL BAD AGAIN?...


posted @ Friday, February 05, 2010 4:02 AM | Feedback (0)

The Question Shouldn’t Be Where are the Network Virtual Appliances but Where is the Architecture?

We seem on the verge of repeating the mistakes associated with failed SOA implementations: ignoring the larger issue of architecture. Everyone – from pundit to public – is asking the same question: “Where are the network virtual appliances?” But fewer people seem to be asking a question that needs to go hand-in-hand with that one: “Where are the architectural guidelines to support deployment of network virtual appliances?” SOA has been deemed by many to be a failure in part because it lacked true architectural guidance. Architects were simply unable – whether by lack of skills or training or...


posted @ Thursday, February 04, 2010 4:43 AM | Feedback (0)

A Fluid Network is the Result of Collaboration Not Virtualization

The benefits of automation and orchestration do not come solely from virtualization. Virtualization has benefits, there is no arguing that. But let’s not get carried away and attribute all the benefits associated with cloud computing and automation to one member of the “game changing” team: virtualization. I recently read one of the all-too-common end-of-year prediction blogs on virtualization and 2010 that managed to say with what I think was a straight face that virtualization of the network is what makes it “fluid”. From: 2010 Virtualization Predictions - The Year the Network Becomes Fluid and Virtual ...


posted @ Tuesday, January 19, 2010 3:08 AM | Feedback (0)

When Did Specialized Hardware Become a Dirty Word?

If you’re just trading “specialized” hardware for “dedicated” hardware you’re losing more than you’re gaining.  Apparently I have not gotten the memo detailing why specialized hardware is a Very Bad Thing(TM) . I’ve looked for it, I really have, but I cannot find it anywhere. What I did find was any number of random press releases announcing how “virtual version X” of some network or application infrastructure solution was now virtualized and hey, you don’t specialized hardware to run it. These random press releases neglect, I might add, to mention that there's very little difference between the requirement...


posted @ Monday, January 11, 2010 3:21 AM | Feedback (9)

Is Your Application Infrastructure Architecture Based on the Postal Service Delivery Model?

If it is, you might want to reconsider how you’re handling security, acceleration, and delivery of your applications before users “go postal” because of poor application performance. Sometimes wisdom comes from the most unexpected places. Take Jason Rahm’s status update on Facebook over the holidays. He’s got what is likely a common complaint regarding the delivery model of the US postal service: the inefficiency of where postage due is determined. Everyone has certainly had the experience of sending out a letter (you know, those paper things) and having it returned a week or more later...


posted @ Wednesday, January 06, 2010 3:19 AM | Feedback (1)

JSON versus XML: Your Choice Matters More Than You Think

Should the enterprise standardize on JSON or XML as their lingua franca for Web 2.0 integration? Or should they use both as best fits the application?The decision impacts more than just integration – it resounds across the entire infrastructure and impacts everything from security to performance to availability of those applications. One of the things a developer may or may not have control over when building enterprise applications is the format of the data used to communicate (integrate) with other applications. Increasingly services external to the enterprise are very Web 2.0 in that they provide HTTP-based APIs for...


posted @ Thursday, December 10, 2009 3:56 AM | Feedback (3)

Silos Belong on Farms Not in Clouds

Beware the danger of building out isolated network and application network infrastructures in the cloud lest we end up with silos from which it is difficult to escape.   While writing a separate post on the business value of public versus private cloud computing investments I specifically called out the fact that infrastructure – virtual or physical – provisioned in a cloud environment is applicable only to that cloud environment; it really can’t be shared within the enterprise architecture or other public cloud computing environments, for that matter. That led to considering the impact...


posted @ Tuesday, December 08, 2009 3:31 AM | Feedback (0)

Next-Generation Management of Data Centers Should be Modeled on Social Networking

Should the next generation management of network and application network devices look and act more like Facebook and Twitter? Infrastructure 2.0 could take us there. Y ou may think I’m kidding and certainly I make this proposal with some amount of humorous intent, but there is some value, I think, in applying the concepts of Web 2.0 and social networking to network management systems (NMS). There’s a reason it’s called social networking, after all. It’s modeled closely on networking and NMS is primarily about managing not just individual network and application network devices, but on managing...


posted @ Friday, December 04, 2009 4:34 AM | Feedback (0)

Cloud is the Gift That Keeps On Giving

Ultimately the CAPEX vs OPEX arguments over public and private cloud computing are irrelevant. Business-value is the only metric that really counts. B renda Michelson, Principal of Elemental Links, writes “elemental cloud computing” recently tweeted: “100k buys way more public, than private, cloud computing power” which started a short but inspiring conversation on the subject centering around the observation that “cloud is the gift that keeps on giving.” That’s alluding to the fact that the compute power purchased in “the cloud” is an annual expense, unlike private, cloud computing power which requires renewal at...


posted @ Thursday, December 03, 2009 4:03 AM | Feedback (7)

Grokking the Goodness of MapReduce and SPDY

Certainly no one would seriously argue that web applications are fast enough for everyone. SPDY is one suggested solution, but what if we combine MapReduce and SPDY? Could we develop an architectural solution that leverages the best of SPDY without requiring entire infrastructure changes to support a new protocol? More than a couple of people have mentioned Map/Reduce as a means to achieve workload-level distribution of applications in a cloud computing environment. I hadn’t looked into Map/Reduce but finally decided that if that many very smart people were thinking it was a solution, I should look into it....


posted @ Wednesday, December 02, 2009 3:14 AM | Feedback (0)

It’s DNSSEC Not DNSSUX

Whenever keys, certificates, and PKI enter into a security solution’s architecture the solution almost always becomes overly complex. DNSSEC is no exception, but it doesn’t have to be. DNS plays a role in every application on the Internet. It is the 411 of the Internet, essentially, without which the millions of users that don’t memorize the IP addresses associated with domain names would be utterly lost. But DNS is vulnerable to exploitation and has, in fact, been exploited in the past. Like any core infrastructure upon which we depend to conduct business, communicate, and generally entertain ourselves, it...


posted @ Wednesday, November 18, 2009 3:44 AM | Feedback (3)

Google SPDY Protocol Would Require Mass Change in Infrastructure

Google’s desire to speed up the web via a new protocol is laudable, but the SPDY protocol would require massive changes across networks to support ArsTechnica had an interesting article on one of Google’s latest projects, a new web protocol designed to replace HTTP called SPDY. SPDY uses a single SSL-encrypted session between a browser and a client, and then compresses all the request/response overhead. The requests, responses, and data are all put into frames that are multiplexed over the one connection. This makes it possible to send a higher-priority small file without...


posted @ Tuesday, November 17, 2009 4:20 AM | Feedback (2)

Is Vendor Lock-In Really a Bad Thing?

When you look at the success of some very proprietary solutions and the loyalty with which customers defend them, you have to wonder if vendor lock-in is really as bad a thing as we sometimes make it sound. The subtext in the discussions around data portability and interoperability in general in cloud computing is really about vendor lock-in. Those driving efforts to come up with solutions that allow customers to pack up their data and head to another provider are primarily concerned about the dangers of being locked-in to a single vendor solution. ...


posted @ Friday, November 13, 2009 3:47 AM | Feedback (7)

Virtualization Changes Application Deployment But Not Development

Cloud computing management functionality and standards are right now laser-focused on virtual machines, and most APIs include the ability to stop,start,launch,etc…at that level of the infrastructure. This is because the application is still insulated by its virtualized environment. The “depth” of management and standards efforts today stops at the hard shell of the virtualization layer and leaves the soft, chewy application center alone. This means nothing is really all that different for developers. But it could, and some might argue should, be different.   The development of a web-application for a cloud computing environment today is really...


posted @ Monday, November 09, 2009 3:57 AM | Feedback (3)

Maybe Ubuntu Enterprise Cloud Makes Cloud Computing Too Easy

With just a few clicks you, too, can create a cloud computing environment. But if you’re like a lot of organizations, you may not know what to do with it after that. The latest version of Ubuntu Server (9.10) includes the Ubuntu Enterprise Cloud (UEC), which is actually powered by Eucalyptus. The ability to deploy a “cloud” on any server running Ubuntu is really quite amazing, especially given the compatibility of Eucalyptus with Amazon and the plethora of application images available for nearly immediate deployment. It supports both a public and private option, and a hybrid model, and...


posted @ Tuesday, November 03, 2009 5:30 AM | Feedback (6)

IT Myths and Legends: No One Understands Our Legacy Software

There is a common myth that the reason legacy code continues to run in businesses around the world is that no one understands it; that IT and businesses are afraid to replace it because they don’t know what it does. Once again, living in the mainframe capital of the world (the insurance industry heavy midwest), I get to talk to IT folks who deal with legacy software and hardware all the time. Do not doubt that they know exactly what that legacy software does and how it works, and perhaps frightening to proponents of change and the...


posted @ Monday, October 26, 2009 4:09 AM | Feedback (3)

The Cloud Is Not A Synonym For Cloud Computing

“Where are you storing your data these days,” he asked casually after trying to come up with a better opening line but failing. “Ah, dahhling,” she drawled while gesturing in no particular direction with an almost deprecating wave of her hand. “The Cloud, where else?” Thanks to the nearly constant misapplication of the phrase “The Cloud” and the lack of agreement on a clear definition from technical quarters I must announce that “The Cloud” is no longer a synonym for “Cloud Computing”. It can’t be. Do not be misled into trying, it will only cause you...


posted @ Wednesday, October 21, 2009 3:12 AM | Feedback (2)

Dynamic Infrastructure Makes Static Connection Limitations Obsolete

One of the benefits of Infrastructure 2.0 is connectedness: the ability to collect and share pertinent data regarding the health and performance of applications and infrastructure services. Based on that data a dynamic infrastructure can adapt on-demand and make decisions that respect real capacity limits, not artificial ones. Randy Hayes writes “The CapCal Blog”, and describes CapCal as being about “measuring the performance and scalability of web apps using real, production level workloads.” In A Very Delicate Load Balancing Act he discusses the impact of load balancing configurations on the capacity and performance of applications. ...


posted @ Wednesday, October 14, 2009 4:20 AM | Feedback (0)

Paradox: When Cloud Is Both the Wrong and the Right Solution

Cloud offers an appealing “pay only for what you use” that makes it hard to resist. Paying on a per-usage hour basis sounds like a good deal, until you realize that your site is pretty much “always on” because of bots, miscreants, and users. In other words, you’re paying for 24x7x365 usage, baby, and that’s going to add up. Ironically, the answer to this problem is … cloud. Don and I occasionally discuss how much longer we should actually run applications on our own hardware. After all, the applications we’re running are generally pretty light-weight, and only see...


posted @ Tuesday, October 13, 2009 4:30 AM | Feedback (1)

Infrastructure 2.0 Is the Beginning of the Story, Not the End

The term “Infrastructure 2.0” seems to be as well understood as the term “cloud computing.” It means different things to different people, apparently, and depends heavily on the context and roles of those involved in the conversation. This shouldn’t be surprising; the term “Web 2.0” is also variable and often depends on the context of the conversation. The use of the versioning moniker is meant, in both cases however, to represent a fundamental shift in the way the technologies are leveraged by people. In the case of Web 2.0 it’s about the shift toward interactive, integrated web applications used to...


posted @ Thursday, October 08, 2009 4:36 AM | Feedback (4)

You’re Asking the Wrong Question About Virtual Appliances

A question I often hear is “Why don’t you just move load balancing/application delivery into a virtual appliance model?” My answer is almost always “That’s the wrong question.” The question that should be asked is “What are the potential impacts to the infrastructure and application?” Because the whole point of deploying an application delivery solution – virtual appliance or hardware – is about improving some facet of the infrastructure in order to better deliver your applications. So in order to determine whether using a virtual appliance is a good idea or not you have to ask what the impacts might...


posted @ Tuesday, October 06, 2009 3:43 AM | Feedback (9)

WILS: Automation versus Orchestration

Infrastructure 2.0 is not just about automation, but rather is about the orchestration of processes, which are actually two different things: the former is little more than advanced scripting, the latter requires participation and decision making on the part of the infrastructure involved.  Automation is the process of codifying – usually through a scripting language but not always – a specific task. This task usually has one goal, though it may have several steps that have to be performed to accomplish it. An example would be “bring this server down for maintenance.” This may require quiescing connections...


posted @ Thursday, September 10, 2009 9:45 AM | Feedback (1)

Impact of Load Balancing on SOAPy and RESTful Applications

A load balancing algorithm can make or break your application’s performance and availability It is a (wrong) belief that “users” of cloud computing and before that “users” of corporate data center infrastructure didn’t need to understand any of that infrastructure. Caution: proceed with infrastructure ignorance at the (very real) risk of your application’s performance and availability. Think I’m kidding? Stefan’s SOA & Enterprise Architecture Blog has a detailed and very explanatory post on Load Balancing Strategies for SOA Infrastructures that may change your  mind.  This post grew, apparently, out of some (perceived) bad behavior on...


posted @ Tuesday, September 08, 2009 4:11 AM | Feedback (1)

How to Build a Cloud Without Using Virtualization

Leveraging Java EE and dynamic infrastructure to enable a shared resource, on-demand scalable infrastructure – without server virtualization Many pundits and experts allude to architectures that are cloud-like in their ability to provide on-demand scalability but do not – I repeat do not – rely on virtualization, i.e. virtual machines. But rarely – if ever – is this possibility described. So everyone says it can be done, but no one wants to tell you how. Maybe that’s because it appears, on the surface, to not be cloud. And perhaps there’s truth to that appearance. It is more...


posted @ Wednesday, September 02, 2009 4:03 AM | Feedback (1)

Virtual Private Cloud (VPC) Makes Internal Cloud bursting Reality

How to leverage a “private virtual cloud” such as Amazon VPC with your own dynamic infrastructure A couple of blog posts on Amazon’s recent announcement of its VPC (Virtual Private Cloud) have made much of the fact that the resources available within Amazon’s cloud via VPC aren’t public. These same commentaries seem to believe that this makes the resources not very valuable. One author called it a “terrible” implementation because “users can’t expose clients to the internet and can’t assign them IP addresses.” I understand how some might reach that conclusion if they...


posted @ Monday, August 31, 2009 3:48 AM | Feedback (1)

WILS: Cloud Changes How But Not What

Cloud changes how we deliver applications but we’re still delivering applications With all the hype around cloud it’s easy to get caught up in deployment models and architectures and how much money it is/is not going to save us and, of course, with the cool factor that always surrounds such innovation. But when we get our heads too far up in the clouds we forget what we’re really doing: delivering applications. Whether it’s thin-client, fat-client, browser-based, client/server, three-tier, n-tier, traditional, .NET, Java EE, or cloud we are still all focused on the same goal: deliver an application. ...


posted @ Thursday, August 27, 2009 3:57 AM | Feedback (2)

Cloud Computing’s (not so) Best Kept Secret

Cloud providers know the secret to a successful cloud computing implementation is integration between the infrastructure and virtualization Ever notice that cloud providers are v e r y reluctant to reveal on what foundation their cloud computing architectures are laid? Most providers don’t want to share their “secret sauce” because, well, then everyone else could get into the game as well. While it is certainly true that the infrastructure – and specifically the application delivery infrastructure – you choose to lay the foundation for a cloud computing architecture can affect your ability to succeed and innovate...


posted @ Tuesday, August 25, 2009 10:17 AM | Feedback (0)

If You Focus on Products You’ll Miss the Cloud

The real power behind cloud is processes, and those don’t come out of a box VMworld, in case you’ve been out of touch, is approaching fairly quickly. As with any trade show/conference there’s likely to be a lot of announcements about this and that and oh, of course, that too. What is interesting about cloud computing and virtualization is that most of the really exciting announcements are not going to be about new products or new features. You heard me, they aren’t going to be about new products or features. The foundations for cloud...


posted @ Tuesday, August 25, 2009 3:41 AM | Feedback (1)

How do you get the benefits of shared resources in a private cloud?

I was recording a podcast last week on the subject of cloud with an emphasis on security and of course we talked in general about cloud and definitions. During the discussion the subject of “private cloud” computing was raised and one of the participants asked a very good question: Some of the core benefits of cloud computing come from shared resources. In a private cloud, where does the sharing of resources come from? I had to stop and think about that one for a second, because it’s not something I’ve really thought about before. But it was...


posted @ Monday, August 17, 2009 3:34 AM | Feedback (2)

Putting the Cloud Before the Horse

Without processes the cloud is not a cloud   So you’ve virtualized your application infrastructure using VMware or Microsoft or the “virtualization solution de jour.” You probably also virtualized the application access via an application delivery solution so you can provide scalability on-demand. You might have even virtualized your storage to make it more efficient. Basically, you’re all ready to go and operators are standing by … And therein lies the problem: operators are standing by. The on-demand piece of your little private cloud is almost entirely managed by human beings, which means...


posted @ Friday, August 14, 2009 3:17 AM | Feedback (3)

Dear Developer: Step Away from the Keyboard

When it comes to availability, coding a solution is just delaying the inevitable Jonathan Howell, in Five Things That Will Kill Your Site – an excellent read, by the way, for all web application developers – asserts that there are several ways to avoid web application death that do not require the implementation of “expensive redundant hardware with top of the line load balancers and an enterprise class SAN.” In general he’s got some good advice to which application developers should pay attention, but I had to disagree with his assertion that a solution to provide graceful degradation...


posted @ Tuesday, August 11, 2009 3:56 AM | Feedback (0)

Taking Down Twitter as easy as D.N.S.

If they can take down Twitter via DNS, they can take your site, too. Everyone is talking about the DoS (Denial of Service) attack on Twitter but most of them are missing what really happened. We’re so used to defending against HTTP-based DoS attacks that we’ve missed that it’s much easier to DoS a site based on the most critical piece of infrastructure on the Internet: DNS. If you really wanted to take out a site like Twitter or Facebook using an HTTP-based DoS it would take a whole lot of serious traffic because those sites are designed and architected...


posted @ Thursday, August 06, 2009 2:40 PM | Feedback (5)

Beware the Availability Rat Hole in the Cloud

Availability means more than the dread “d” word The focus on making servers unhackable to prevent service disruption (that’s such a politic way of saying the dread “d” word – downtime) is admirable but exposes the tendency of technical folks to go down rat holes when discussing application delivery challenges and specifically the challenge of assuring availability of applications and services. What generally seems to happen when we start talking about availability in the cloud is that we go down the rat hole of talking specifically about the cloud and not applications deployed...


posted @ Wednesday, July 22, 2009 2:57 AM | Feedback (2)

The End of 3-Teared Architectures

No, that isn’t a homophonic mistake. Dan directed my attention to an interesting article recently, “Are 3-tier web architecture models too rigid?” in which the author postulates that “maybe it is time to finally break out of  the old 3-tier web architecture box and retire the concept…” In addition to a great mention of F5 and an “application delivery tier” in web architecture models (the concept of which deserves its very own blog post), the author inadvertently, I think, brings to the fore one of the reasons SOA might have failed to dominate the world: service...


posted @ Monday, July 13, 2009 3:22 AM | Feedback (0)

Scalability Only One Half the Reliability Equation

Without availability scalability is irrelevant I really enjoyed Jeff Atwood’s recent blog on Scaling Up vs Scaling Out, which includes a fairly detailed comparison of the costs associated with each approach to scalability. I enjoyed it because not only did it take into consideration the cost of hardware, but also remembered to include the cost of software licensing. And of course there’s the fact that Jeff’s site is focused on development and coding, and this discussion  broadened the discussion into the realm of application networking – a demesne with which I am of course particularly fond. ...


posted @ Friday, July 10, 2009 3:38 AM | Feedback (0)

Governance: Service Catalogs and the Cloud

Can the inherent abstraction of virtualization succeed where SOA did not? My first read through a post on the Cloud Front Office led me to scoff disdainfully at the re-emergence of a concept central to a successful SOA implementation: the service catalog. Oh, we called it "registry" and then "registry/repository (reg/rep)" and finally "governance" but the concept behind it was exactly the same. Take a gander at the description of a cloud service catalog apparently growing out of discussions that began at Structure 09: Last week I attended Structure 09, one of the...


posted @ Thursday, July 02, 2009 3:39 AM | Feedback (4)

Forklifts, Rip and Replace, and Other IT Fairy Tales

I was chatting with my mother a couple weeks ago about cloud (she’s a used-to-be programmer turned project manager for a Fortune 500. Don’t look at me like that, I keep telling you it runs in the family) and one of the problems she lamented about was that folks don’t seem to understand how entrenched COBOL and the mainframe is in the organization. It’s so entrenched that given the choice between a client-server application and a COBOL application that did the same thing they chose the COBOL program because it was less expensive and they had the knowledge on staff...


posted @ Friday, June 26, 2009 2:50 AM | Feedback (2)

Your Cloud is Not a Precious Snowflake (But it Could Be)

 You can’t differentiate until you do something different Gartner analyst and cloud pundit Lydia Leong reminds us that without differentiation, all clouds look pretty much the same.  “These are traits that it doesn’t take a genius to think of. Most are known requirements established through a decade and a half of hosting industry experience. If you want to differentiate, you need to get beyond them.” [emphasis added] She lists traits common to most cloud providers: premium equipment, VMWare-based, private VLANs, private connectivity, and co-located dedicated gear but doesn’t really get into...


posted @ Thursday, June 18, 2009 2:40 AM | Feedback (2)

Infrastructure Matters: Challenges of Cloud-based Testing

An interesting thing happened on the way to testing that application from the cloud. We broke the innertubes! Pros and Cons of Application Testing in the Cloud A firm wanted to test their application and need 100 browser instances. In the old days it would have required 100 machines -- that would be a massive undertaking. Even with hardware virtualization, you would need 5 to 10 machines, and there would be some complex configuration issues. However, by putting it all in the cloud, they were able to sync up 100 virtual instances of the browsers and take them down over...


posted @ Wednesday, June 10, 2009 3:24 AM | Feedback (4)

Can You Teach an Old Developer New Tricks?

When SOA was declared dead there was a spate of articles and blogs on why the architecture “died.” Most pundits came to the conclusion that like many innovations it wasn’t the technology to blame but rather people. Architects lacked the skills to properly leverage SOA; business stakeholders failed to look at SOA as a strategic architecture, choosing instead to use it as a tactical integration-solving solution; network and systems’ administrators did not understand the unique characteristics and issues a well-designed SOA raised within the network and on systems; and developers were loathe to “reuse” and “share” services despite alternate...


posted @ Thursday, June 04, 2009 4:07 AM | Feedback (1)

The Secret of the Security Safety Dance

Attackers say, we can go where we want to; we can leave our code behind… There’s probably a raid going on right now in Naxxramas and the attackers are almost certainly doing the Safety Dance. They probably learned the Safety Dance the same way I learned about it; from someone well-versed in its intricate steps. See, if you don’t know the Safety Dance and you come up against Heigan the Unclean, well… he’s not called Heigan the Unclean for nothing. You will not survive. Not even if you happen to have a Holocaust Cloak at...


posted @ Wednesday, June 03, 2009 3:58 AM | Feedback (2)

Cloud outages don’t bother Stanley

Cloud may change the definition of “business critical” applications Google outages are rapidly becoming as passé as earthquakes to native Californians; unless it’s a really big one, no one really pays much attention. So it shouldn’t be surprising that Google’s latest “crash” (caused by some interesting routing problems, apparently) evinced an attitude of nonchalance from Stanley. Who is Stanley? I don’t know, except that he was quite vocal about the outage and his opinion that he was “not really bothered by it.” Google Crashes Again on Friday Stanley Was wrote: Wednesday May 27 from around 8pm till shortly after midnight, I...


posted @ Monday, June 01, 2009 5:32 AM | Feedback (0)

Beware Using Internal Encryption as an IT Security Blanket

It certainly sounds reasonable: networks are moving toward a perimeter-less model so the line between internal and external network is blurring. The introduction of cloud computing as overdraft protection (cloud-bursting) further blurs that perimeter such that it’s more a suggestion than a rule. That makes the idea of encrypting everything whether it’s on the internal or external network seem to be a reasonable one. Or does it? THE IMPACT ON OPERATIONS A recent post posits that PCI Standard or Not, Encrypting Internal Network Traffic is a Good Thing....


posted @ Thursday, May 28, 2009 4:02 AM | Feedback (3)

F5 and the Cloud

There’s apparently been a bit of confusion over what, exactly, F5 thinks of cloud computing as an organization based on a recent blog post. I thought I’ve been fairly clear on where F5 stands in terms of cloud computing but I may be suffering what’s known as the “curse of knowledge”, which means I am so deeply entrenched in F5’s view of cloud that I forget that other people don’t have the luxury of that knowledge. So I’d like to take this opportunity to clear up any misconceptions that may be floating around and just set the record...


posted @ Tuesday, May 26, 2009 4:09 AM | Feedback (0)

How to secure virtualized applications against the unknown

Risks with virtualization is same as it ever was but different Hoff makes a good point about cloud security last month in his “The Cloud is a Fickle Mistress: DDoS&M” which was, if I may quote, “it’s the oldies and goodies that will come back to haunt us.” In other words, it’s the well-known, well-understood protocol-based attacks of uncloud computing that will be problematic for cloud computing. Security in virtualized environments and “the cloud” is indeed the “same as it ever was.” And yet it’s different, too. COLLATERAL DAMAGE While it’s...


posted @ Tuesday, May 12, 2009 3:45 AM | Feedback (0)

The View from the Other Side of Interop

Everyone who is involved in networking, application networking, cloud computing, and virtualization knows about and is probably planning some kind of presence at Interop. It is “the” event for a variety of inter-related industries, all revolving around network-something. For six years I attended Interop, but as a member of the press. This time, I’m on the “other side” with a vendor, and the view is very different. At a minimum, there’s a lot more planning that goes into exhibiting at such an event. There’s booth layouts to review and decisions on what kind of information...


posted @ Friday, May 08, 2009 3:42 AM | Feedback (0)

Cloud computing is not Burger King. You can’t have it your way. Yet.

Don’t confuse computing services with infrastructure services. We aren’t there yet. The subtext to the cloud computing discussion is subtle, as is the wont of subtext. But it is clear that underlying all the concerns about cloud computing is a common theme: control. Whether we’re talking about reliability or security, it should be obvious if you’re reading between and beneath the lines that the biggest stumbling block to massive cloud adoption is the issue of control. There is a very real difference between on-demand computing and on-demand infrastructure. What the cloud provides now, and is described...


posted @ Thursday, May 07, 2009 3:11 AM | Feedback (4)

Five Key Questions Developers Need to Ask before Starting the Troubleshooting Process

Brother, can you give a developer a hand? As the topology of networks delivering applications becomes increasingly complex it becomes more and more difficult to troubleshoot problems, especially for developers tasked with figuring out why their “application broke” in production when it was working just fine thank you very much in “DEV” and “QA.” It is rare, after all, that the production environment – including all the moving parts – is duplicated in development and testing environments. It is already difficult enough for developers to track down problems due to the complex nature of application infrastructure...


posted @ Wednesday, May 06, 2009 4:17 AM | Feedback (1)

The Real Meaning of Cloud Security Revealed

Hint: It doesn’t actually have much to do with technology or products In case you hadn’t heard, a startup called Panda Security has introduced a cloud-based anti-virus offering. This set off a rift of articles and blogs discussing the solution itself and what it means and some who questioned whether ‘anti-virus’ even meant ‘security’ in the first place. But I’m not interested in that discussion except to say that folks need to be more careful about distinguish “cloud security” from “cloud-based security”. The former is about securing the cloud and its infrastructure, the latter about services hosted...


posted @ Monday, May 04, 2009 3:37 AM | Feedback (4)

No soup for you!

Automation isn’t some special brand of soup and there’s no “automation nazi” who can deny access to its benefits. The recent McKinsey report on cloud computing has pundits everywhere choking on their donuts and scrambling to dispute the report’s findings, which essentially end up saying “cloud ain’t cheaper.” I’m not going to rehash the arguments. I’m not going to analyze the report. But I am going to dig into a few comments on the report by Thorsten at RightScale who started off by saying: “Its claim that cloud computing (in the...


posted @ Wednesday, April 22, 2009 3:18 AM | Feedback (4)

OVF: A few layers short of a full stack

OVF (Open Virtualization Format) apparently just isn’t getting enough mindshare out there in the discussions of cloud computing that focus on portability and interoperability. The goal of OVF is to provide a portable, interoperable non-vendor specific meta-data that describes an application, its virtual container, and the attributes necessary to deploy it in a new environment with minimal human intervention. This will, allegedly, allow it to move seamlessly from cloud to cloud, drifting ever-so-gently and making the entire process appear effortless. Given that lofty goal, it’s no surprise that Jon Oltsik, senior analyst at the Enterprise Strategy Group, wonders...


posted @ Tuesday, April 21, 2009 2:58 AM | Feedback (4)

The Data Center Declaration of Independence

When in the course of deploying applications, it becomes necessary for administrators to dissolve the technical shackles which have connected them to products, and to assume among the powers of IT, the separate and equal station to which management entitles them, a decent respect for their valuable time requires that vendors should provide them with the means by which they may enact this separation. We hold these truths to be self-evident, that not all applications are created equal, that they are endowed by their developers with certain quirky behaviors, that among these are chattiness, vulnerabilities, and very large...


posted @ Wednesday, March 25, 2009 4:03 AM | Feedback (2)

So you say you want a revolution?

  Remember when…it was sprawl or nothing? Remember when…you had to choose between security and speed? Remember when…you had to choose between agility and performance? It’s time for a change; a change that brings freedom and choice to the data center and puts IT back in control of its own architectural destiny.    Technorati Tags: F5,revolution,data center,choice,change,freedom,agility,infrastructure,infrastructure 2.0,dynamic infrastructure,web,internet,video,blog Related articles by Zemanta Unified Ontology of Cloud Computing (johnmwillis.com) ...


posted @ Monday, March 23, 2009 3:27 AM | Feedback (0)

Computer Science: Cool versus Cash

The reasons behind an increasing enrollment rate in computer science programs say it isn’t coolness driving interest, it’s cash. But the reality of computer science is such that opportunistic degree chasers aren’t likely to make it through the program. Recently, infrastructure was declared “cool again”. And this week computer science majors got the “cool” nod as well. My immediate reaction to both “news” announcements was: When were they not cool? My second was, how in the world does a rise in enrollment equate to coolness? The fact that infrastructure is getting more attention and more college...


posted @ Thursday, March 19, 2009 3:21 AM | Feedback (1)

Not all application requests are created equal

ArsTechnica has an interesting little article on what Windows Azure is and is not. During the course of discussion with Steven Martin, Microsoft's senior director of Developer Platform Product Management, a fascinating – or disturbing in my opinion – statement was made: There is a distinction between the hosting world and the cloud world that Martin wanted to underline. Whereas hosting means simply the purchase of space under certain conditions (as opposed to buying the actual hardware), the cloud completely hides all issues of clustering and/or load balancing, and it offers an entirely virtualized...


posted @ Tuesday, March 17, 2009 4:34 AM | Feedback (1)

Windows Vista Performance Issue Illustrates Importance of Context

Decisions about routing at every layer require context A friend forwarded a blog post to me last week mainly because it contained a reference to F5, but upon reading it (a couple of times) I realized that this particular post contained some very interesting information that needed to be examined further. The details of the problems being experienced by the poster (which revolve around a globally load-balanced site that was for some reason not being distributed very equally) point to an interesting conundrum: just how much control over site decisions should a client have? Given the...


posted @ Thursday, March 12, 2009 4:11 AM | Feedback (5)

Cloud Fail: Who and How is more important than What and Where

According to the definition of cloud computing used by Avanade for a recently released and often cited study on the use of cloud computing, I could claim to be a cloud computing provider. And so could you. Basically, so could just about everyone who happens to run web-based applications accessed over the Internet. From the summary of the report: In the midst of widespread economic turmoil, this global survey of C-level executives and IT decision-makers shows a clear, collective mandate: use technology to cut the cost of doing business. ...


posted @ Tuesday, March 03, 2009 2:59 AM | Feedback (2)

Do you control your application network stack? You should.

Owning the stack is important to security, but it’s also integral to a lot of other application delivery functions. And in some cases, it’s downright necessary. Hoff rants with his usual finesse in a recent posting with which I could not agree more. Not only does he point out the wrongness of equating SaaS with “The Cloud”, but points out the importance of “owning the stack” to security. Those that have control/ownership over the entire stack naturally have the opportunity for much tighter control over the "security" of their offerings.  Why?  because they...


posted @ Wednesday, February 25, 2009 3:13 AM | Feedback (0)

Approaching cloud standards with end-user focus only is full of fail

If you’re looking at standardization and interoperability efforts only as they relate to providers or end-users then you’re not thinking long term nor are you really considering the potential of cloud computing and virtualization to revolutionize data center architectures. In a nutshell, if you equate “cloud” with “providers like Amazon and Google” then you don’t really get the big picture. While the ultimate goal of cloud specifications and standards is to enable interoperability and ease of migration for the end-user, approaching the creation of such standards from the point of view of the end-user will result in a...


posted @ Monday, February 23, 2009 4:06 AM | Feedback (4)

Dynamic Infrastructure: The Cloud within the Cloud

When folks are asked to define the cloud they invariably, somewhere in the definition, bring up the point that “users shouldn’t care” about the actual implementation. When asked to diagram a cloud environment we end up with two clouds: one representing the “big cloud” and one inside the cloud, representing the infrastructure we aren’t supposed to care about, usually with some pretty graphics representing applications being delivered out of the cloud over the Internet. But yet some of us need to care what’s obscured; the folks tasked with building out a cloud environment need to know what’s...


posted @ Wednesday, February 18, 2009 4:14 AM | Feedback (2)

If you aren’t asking “what if” now you’ll be asking “why me” later

One of the negatives of providing a solution is that it necessarily assumes there is a problem. That’s actually a fair assumption in the technology world, as problems seem to abound with no end in sight. What it also does, unfortunately, is lead to a culture within IT that is more tactical than strategic. Because IT is almost always trying to put out one fire or another, they rarely have time to think – and plan – ahead. Honestly, that’s the responsibility of directors and C-level executives, anyway. It’s their responsibility to look ahead not just months...


posted @ Thursday, February 12, 2009 3:41 AM | Feedback (0)

Interoperability between clouds requires more than just VM portability

The issue of application state and connection management is one often discussed in the context of cloud computing and virtualized architectures. That's because the stress placed on existing static infrastructure due to the potentially rapid rate of change associated with dynamic application provisioning is enormous and, as is often pointed out, existing "infrastructure 1.0" systems are generally incapable of reacting in a timely fashion to such changes occurring in real-time. The most basic of concerns continues to revolve around IP address management. This is a favorite topic of Greg Ness at Infrastructure 2.0 and has been subsequently addressed...


posted @ Tuesday, February 10, 2009 7:59 AM | Feedback (4)

Who owns application delivery meta-data in the cloud?

While the vast majority of folks are still debating what is or is not "cloud computing", there are already groups trying to get ahead of the curve by focusing on broader issues such as interoperability and portability. Indeed, by addressing the potential pitfalls associated with portability across cloud implements now rather than later, it is hoped that there won't be as many problems when it does finally become an issue. There is a very real danger, however, that cloud interoperability and portability specifications will fail to address the very real need to include all the relevant application and...


posted @ Friday, February 06, 2009 4:39 AM | Feedback (23)

The Great Client-Server Architecture Myth

The webification of applications over the years has led to the belief that client-server as an architecture is dying. But very few beliefs about architecture have been further from the truth. The belief that client-server was dying - or at least falling out of favor -  was primarily due to fact that early browser technology was used only as a presentation mechanism. The browser did not execute application logic, did not participate in application logic, and acted more or less like a television: smart enough to know how to display data but not smart enough to do anything...


posted @ Monday, February 02, 2009 4:38 AM | Feedback (3)

Load balancing is key to successful cloud-based (dynamic) architectures

Much of the dialogue today surrounding cloud computing and virtualization is still taking the 50,000 foot view. It's all conceptual; it's all about business value, justification, interoperability, and use cases. These are all good conversations that need to happen in order for cloud computing and virtualization-based architectures to mature, but as is often the case that leaves the folks tasked with building something right now a bit on their own. So let's ignore the high-level view for just a bit and talk reality. Many folks are being tasked, now, with designing or even implementing some form of a cloud...


posted @ Friday, January 23, 2009 4:51 AM | Feedback (2)

Twitter's API limit: Static control in a dynamic world

Twitter is, once again, feeling growing pains. This time the microblogging darling of the social networking world is proactively addressing the problem - by further rate limiting its APIs. Alex Payne, API Lead for Twitter, explained on the Twitter Developers mailing list: “Starting later this week we’ll be limiting those on the whitelist to 20,000 requests per hour. Yes, you read that right: twenty THOUSAND requests per hour. According to our logs, this accounts for all but the very largest consumers of our API. This is essentially a ...


posted @ Thursday, January 22, 2009 6:14 AM | Feedback (1)

The Dynamic Infrastructure Mashup

Infrastructure 2.0 is, at its core, about evolving to a new level of interconnectedness, one in which the underlying infrastructure becomes as flexible and adaptable as the applications and virtualization infrastructure it is responsible for managing and delivering. In order to be connected, however, you need a way in which disparate infrastructure components can communicate, either directly or via a third party (coordination | management | orchestration) server. That communication is almost certainly going to take (and in many cases has already taken) the form of service-enabled control planes. These "services" are necessary in order to provide the...


posted @ Tuesday, January 20, 2009 5:42 AM | Feedback (1)

Virtualization Gone Wild: Infrastructure as virtual appliances

It has been suggested more than once, by folks normally considered rational, that in a cloud computing implementation everything - and I mean everything - should be virtualized. Even the infrastructure. The hype surrounding virtualization has spread not just to applications and their virtual image deployment as a means to achieve dynamic horizontal scale but also to infrastructure, to routers and switches and security devices. Indeed, there are a good number of infrastructure vendors currently offering and others feverishly working on virtual appliance versions of hardware devices for deployment in cloud and virtual computing environments. Part...


posted @ Monday, January 12, 2009 4:29 AM | Feedback (7)

Infrastructure 2.0: Flexibility is Key to Dynamic Infrastructure

dy·nam·ic (adj) Characterized by continuous change, activity, or progress flex·i·ble (adj) Responsive to change; adaptable. Able to bend without breaking   Infrastructure 2.0 is, at its core, about not just the network but the entire infrastructure evolving to a new level of interconnectedness, one in which the underlying infrastructure devices become flexible and adaptable; capable of responding to the continuous change in the next generation data center without breaking. The demands placed upon infrastructure by virtualization, consolidation, and the cloud require that networks grow out of their static configuration models and adopt a more...


posted @ Tuesday, January 06, 2009 6:56 AM | Feedback (3)

How VM sprawl will drive the urgency of the network evolution

VM sprawl is predicted to be one of the outcomes of early adoption and excitement over virtualization. Just as IT struggled to manage the explosion of PCs and servers across the enterprise, it is predicted that now it will need to find a way to manage the explosion of virtual machines as they pop up all over the enterprise with surprising alacrity. Part of the difficulty in managing new technology is the rogue deployment of X. Whether that's physical or virtual servers is irrelevant, the challenges associated with managing what are essentially unmanaged applications and servers deployed outside...


posted @ Friday, December 19, 2008 7:10 AM | Feedback (1)

The Secret Knowledge of Developers that Network Administrators Want

When an application is deployed into a high-availability production environment there are a number of interesting infrastructure related things need to happen. The application delivery controller (ADC) needs to be configured, DNS entries updated, storage allocated, and all the other associated network infrastructure must be prepared to handle the delivery of the new application.  We have a BIG-IP. Do I have to talk to the network guys?? ...


posted @ Tuesday, December 16, 2008 5:55 AM | Feedback (3)

Putting the network back in social networking

A while back Joe blogged about some Twitter integration he'd done around monitoring of BIG-IP. He's  got a PERL proxy that monitors the BIG-IP and sends out notifications and alerts to a specified Twitter account. But I wanted something more interactive, something more social. I wanted to be able to send a tweet to my BIG-IP and have it respond; a BIG-IP Twitter bot, if you will. So Friday I finally decided it was time to do it. I set up a Twitter account for my BIG-IP and started coding. Luckily, the Twitter API is pretty straight-forward and...


posted @ Monday, December 15, 2008 6:03 AM | Feedback (3)

9 ways to use network-side scripting to architect faster, scalable, more secure applications

You may recall a recent overview on network-side scripting that described a few uses of this technology integrated with application delivery controllers. With thousands of examples of the uses of network-side scripting it's hard to choose just one to adequately represent its potential. Luckily, we don't have to stick to just one. Viva la Internet! Based on the technical session the great network-side scripting guru Colin and I ran at SD Best Practices in October, I've pulled nine ways to use network-side scripting that can enhance the scalability, security, and performance of web applications into a presentation for...


posted @ Thursday, December 11, 2008 4:04 AM | Feedback (4)

Managing Virtual Infrastructure Requires an Application Centric Approach

Thanks to a tweet from @Archimedius, I found an insightful blog post from cloud computing provider startup Kaavo that essentially makes the case for a move to application-centric management rather than the traditional infrastructure-centric systems on which we've always relied. We need to have an application centric approach for deploying, managing, and monitoring applications.  A software which can provisions optimal virtual servers, network, storage (storage, CPU, bandwidth, Memory, alt.) resources on-demand and provide automation and ease of use to application owners to easily and securely run and maintain their applications will be critical for the...


posted @ Monday, December 01, 2008 2:59 AM | Feedback (4)

Cloud Computing: Vertical Scalability is Still Your Problem

Horizontal scalability achieved through the implementation of a load balancing solution is easy. It's vertical scalability that's always been and remains difficult to achieve, and it's even more important in a cloud computing or virtualized environment because now it can hurt you where it counts: the bottom line. Horizontal scalability is the ability of an application to be scaled up to meet demand through replication and the distribution of requests across a pool or farm of servers. It's the traditional load balanced model, and it's an integral component of cloud computing environments. Vertical scalability is the ability of...


posted @ Tuesday, November 25, 2008 3:29 AM | Feedback (5)

Infrastructure 2.0: The Diseconomy of Scale Virus

The diseconomy of scale so adversely affecting the IP address management space isn't limited to network infrastructure; it's crawling up the stack steadily and infecting all layers of the data center like some kind of unstoppable infrastructure management virus. That is why, even with the simple act of managing an enterprise network’s IP addresses, which is critical to the availability and proper functioning of the network, actually goes up as IP addresses are added.  As TCP/IP continues to spread and take productivity to new heights, management costs are already escalating. -- Greg Ness, "What Are the Barriers to...


posted @ Monday, November 24, 2008 3:47 AM | Feedback (4)

As a Service: The many faces of the cloud

Last month I happened across this amusing, and ironic, poem describing the dichotomy that exists in trying to define cloud computing. Go ahead and read it, I'll wait, it's worth the time. Seriously. I am not going to define cloud computing again. I've done that already and the point of this discussion is not what is cloud computing but rather how the cloud is beginning to separate into distinct models, each serving a different set of needs. The common theme between these models is "as a service". Some "thing" traditionally relegated to the local IT data center is...


posted @ Thursday, November 20, 2008 3:12 AM | Feedback (1)

Cloud Computing: Is your cloud sticky? It should be.

Load balancing an application should, by now, be a fairly routine scaling exercise. But too often when an application is moved into a load balanced architecture it breaks. The reason? Application sessions are often specific to an application server instance. The solution? Persistence, also known as sticky connections. The use of sessions on application servers to add state to web (HTTP) applications is a common practice. In fact, it's one of the greatest "hacks" in the history of the web. It's an excellent solution to the problem of using a stateless application protocol to build applications for which...


posted @ Wednesday, November 19, 2008 3:40 AM | Feedback (2)

A client is still a client even when it's on the space station

While I was at SD Best Practices in Boston last month I got to talk to a lot of engineers, developers, and architects about their environments and about what F5 does for application delivery. One of the developers glibly told me he wasn't sure we could help him out because his environment was the international space station. Yeah, how cool is that? Now that's cloud computing. Another architect, who turned out to be a friend of a friend who I've conversed with but never met in person said the same thing, but...


posted @ Friday, November 14, 2008 3:08 AM | Feedback (0)

Cloud Computing: What's stopping service-oriented clouds?

Whenever there is a shift in architectural thinking about technology, such as is happening right now with cloud computing and virtualization, we start thinking forward, past the now, and into the future about how that technology might be leveraged. We start looking at the impact to architecture from the top of the stack to the bottom. For a company that's focused on application delivery, that means taking a good hard look at how that new technology might impact the architecture of applications. It's been suggested that perhaps, just maybe, we'll see service-oriented clouds; that the concepts of SOA...


posted @ Wednesday, November 12, 2008 8:52 AM | Feedback (2)

Why you should not use clustering to scale an application

It is often the case that application server clustering and load-balancing are mistakenly believed to be the same thing. They are not. While server clustering does provide rudimentary load-balancing functionality, it does a better job of providing basic fail-over and availability assurance than it does load-balancing. In fact, load balancing has effectively been overtaken by application delivery, which builds on load balancing but is much, much more than that today. Clustering essentially turns one instance of an application server into a controlling node, a proxy of sorts, through which requests are funneled and then distributed amongst several...


posted @ Tuesday, November 11, 2008 7:05 AM | Feedback (0)

Cloud Computing: The Last Definition You'll Ever Need

The VirtualDC has asked the same question that's been roaming about in every technophile's head since the beginning of the cloud computing craze: what defines a cloud? We've chatted internally about this very question, which led to Alan's questions in a recent blog post. Lori and others have suggested that the cloud comes down to how a service is delivered rather than what is delivered, and I’m fine with that as a long term definition or categorization. I don’t think it’s narrow enough, though, to answer the question “Is Gmail a cloud service?” because...


posted @ Wednesday, November 05, 2008 6:53 AM | Feedback (6)

Understanding network-side scripting

We all understand the lines in the sand (or the architectural diagram) that separate client-side scripting from server-side scripting. It's very clear that client-side scripting, e.g. JavaScript, VBScript, ActionScript, executes on the client while server-side scripting, e.g. PHP, ASP, executes on the server. But what about network-side scripting? "There is no such thing!" might be the first response to this question, but I beg to disagree. Programmable proxies, a la F5's BIG-IP Local Traffic Manager, that provide a scripting language such as iRules, are simultaneously client-side and server-side, with the best definition to describe their placement in architectures being network-side...


posted @ Friday, October 31, 2008 5:26 AM | Feedback (9)

Cloud Computing and Infrastructure 2.0

Not every infrastructure vendor needs new capabilities to support cloud computing and infrastructure 2.0.  Greg Ness of Infoblox has an excellent article on "The Next Tech Boom: Infrastructure 2.0" that is showing up everywhere. That's because it raises some interesting questions and points out some real problems that will be need to be addressed as we move further into cloud computing and virtualized environments. What is really interesting, however, is the fact that some infrastructure vendors are already there and have been for quite some time. One thing Greg mentions that's not quite accurate (at least...


posted @ Friday, October 17, 2008 3:58 AM | Feedback (8)

Automating scalability and high availability services

There are a lot of SOA governance solutions out there that fall into two distinct categories of purpose: one is to catalog services and associated security policies and the other is to provide run-time management for services, including enforcement of security and performance-focused policies. Vendors providing a full "SOA Stack" of functionality across the service lifecycle (design, development, testing, production) often integrate their disparate product sets for a more automated (and thus manageable) SOA infrastructure. But very few integrate those same products and functionality with the underlying network and application delivery infrastructure required to provide high-availability and scalability...


posted @ Wednesday, October 15, 2008 5:37 AM | Feedback (0)

Cloud computing conundrum causing confusion

It seems that every time a new technology breaks through the surface a hundred "experts", vendors, and standards-bodies appear like moths to a flame attempting to define the term such that only "they" have the answer, the solution, the standard, or the product.  When my son mentioned a research paper he wrote on cloud computing (which you still haven't sent me, by the way) he did so while disagreeing with a previous post of mine on the subject. He was quite vehement that grid computing did not equal cloud computing, and seemed almost shocked that I would dare...


posted @ Monday, September 29, 2008 11:07 AM | Feedback (0)

4 things you can do in your code now to make it more scalable later

No one likes to hear that they need to rewrite or re-architect an application because it doesn't scale. I'm sure no one at Twitter thought that they'd need to be overhauling their architecture because it gained popularity as quickly as it did. Many developers, especially in the enterprise space, don't worry about the kind of scalability that sites like Twitter or LinkedIn need to concern themselves with, but...


posted @ Friday, September 19, 2008 5:09 AM | Feedback (2)

Are you (and your infrastructure) ready for virtualization?

We're virtually there! Figuratively speaking, of course. VMWorld kicks off Monday night, and F5 is just putting the finishing touches on everything we've got to bring along to the show (yes, that means trinkets, too). What the heck are we doing at a virtualization show? Pshaw. We've been in the business of network and server virtualization for ... well, forever. Hey, 12 years is forever in this industry, isn't it? We'll be doing a cool demo with BIG-IP GTM in the B-Hive demo, where we'll demonstrate global load sharing between virtual data centers, and Trace|3...


posted @ Wednesday, September 10, 2008 4:18 AM | Feedback (0)

SOA What?

David Bressler of Progress Software, who acquired SOA vendor Actional in January 2006 wrote a very thought provoking post on marketing that really ended up being a post about SOA and where Progress fits into the "SOA continuum". He raises some questions, and problems, with SOA and product categories that ties in nicely with an excellent blog post on the subject Todd Biske wrote a while back containing some concepts that he presented at Burton's Catalyst 2006. One of the confusing things about any market is the wide variety of names used to describe the products and solutions that...


posted @ Monday, August 25, 2008 7:40 AM | Feedback (1)

Saving the world, one server at a time

Green IT is a fairly well hyped topic at the moment. While the term may be seen as hype, there are tangible benefits to employing green tactics within IT. Even research firm Gartner sees it as one of the hyped technologies organizations can use now to see real benefits. Jackie Fenn, vice-president and Gartner Fellow on green IT via The Standard  Another set of technologies that's benefit to companies now is green IT, which is valuable in more ways than one, Fenn said. "The happy...


posted @ Friday, August 15, 2008 5:32 AM | Feedback (0)

Redefining SOA

We all know that SOA stands for Service Oriented Architecture, right? Gaurav Sharma over at Infosys-Oracle has another definition of SOA and it really fits well with both the business and IT goals surrounding SOA. Gaurav redefines SOA as Scalable, Open, and Adaptable, and then walks through how Oracle solutions fit this definition. This actually makes a lot of sense, because open and adaptable are inexorably tied to SOA as an architectural methodology. SOA is built on open standards like SOAP, WSDL, and XML and its meta-data driven execution style is highly adaptable, making it flexible or, in...


posted @ Thursday, August 07, 2008 5:20 AM | Feedback (0)

One Size Does Not Fit All

Outside of the technology world a lot of products are billed as "one size fits all". Anyone who's purchased such a product generally knows, no, no they don't. They're close, but never a truly good fit. Inside the technology world we know better. Software and solutions are never a "one size fits all" proposition, that's why so many business software solutions are "customizable": ERP (enterprise resource planning), CRM (customer relationship management), workflow, automation, and portals. Just about every software solution you can purchase these days takes a customizable approach to actually meeting the needs of the business. ...


posted @ Monday, July 28, 2008 6:46 AM | Feedback (0)

Architecting for Speed

              I'm going to give you an engine low to the ground.               An extra-big oil pan that'll cut the wind underneath you.               That'll give you more horsepower.               I'll give you a fuel line that'll hold an extra gallon of gas.               I'll shave half an inch off you and shape you like a bullet.               When I get you primed, painted and weighed... ...


posted @ Friday, July 25, 2008 11:30 AM | Feedback (0)

Does your virtualization strategy create an SEP field?

There is a lot of hype around all types of virtualization today, with one of the primary drivers often cited being a reduction in management costs. I was pondering whether or not that hype was true, given the amount of work that goes into setting up not only the virtual image, but the infrastructure necessary to properly deliver the images and the applications they contain. We've been using imaging technology for a long time, especially in lab and testing environments. It made sense then because a lot of work goes into setting up a server and...


posted @ Monday, July 21, 2008 4:33 AM | Feedback (0)

Recession Proofing Your Application Infrastructure

Cisco CEO John Chambers recently announced that the slowdown in corporate IT spending will continue until 2009. NEW YORK (Fortune) -- Cisco chief John Chambers has some bad news for the technology sector: He no longer expects the recent slowdown in tech spending to pick up until next year at the earliest. IT is still spending dollars, but not as freely as in past years. In a constrained budgetary environment, IT now has to ask the question, "What's going to give me the best bang for my buck?" ...


posted @ Tuesday, July 15, 2008 5:16 AM | Feedback (0)

When Your Site Gets Slashdotted, Don't Get Farked

Anxiety's attacking me, and my air is getting thin.I'm in trouble for the things I havent got to yet.I'm chomping at the bit, and my palms are getting wet, sweating bullets. --Megadeth, "Sweating Bullets" If you can relate to the kind of stress and anxiety sung about by Megadeth - and it's coming from the workplace - you aren't alone. Last fall InformationWeek ran a short story based on a survey they conducted and concluded that "two out of three IT managers say they're kept awake at night worrying about work, and 75% admit ongoing anxiety about application performance concerns."...


posted @ Wednesday, April 16, 2008 6:19 AM | Feedback (0)