Topics


Blogs


Forums


Samples


Media


Labs


Resources

 




DevCentral > Weblogs > Lori MacVittie - Two Different Socks
 The Thing Private Clouds Can Do that Public Clouds Can’t
posted on Friday, October 09, 2009 3:11 AM

When an admin brags they can do some task with their eyes closed there may be hidden process inefficiencies that orchestration can uncover. But the orchestration in a public cloud is effectively done for you, with little opportunity to design based on your organization’s operational processes. Orchestration in a private cloud, however, is all up to you.

laundryLady I was doing the laundry a few weeks ago, folding the clothes before I took them upstairs and hung them up when I realized just what I was doing. What I had been doing for, well, a very long time now. The “process” of doing laundry had become so automatic that it was ritualized, a habit. I didn’t even notice that folding the clothes I was going to hang up anyway was terribly inefficient; a waste of the very limited time afforded to someone with a toddler.

Embarking on a private cloud initiative will, hopefully, illuminate something very similar with your operational processes: embedded inefficiencies. Until you have a reason to look at what has nearly become a ritualized task, you probably don’t even notice there’s anything “wrong” with the way you’re doing things. But when you have to examine it because you’re going to be codifying those processes through automation of tasks and hopefully, eventually, orchestration you might uncover some operational inefficiencies you could definitely do without. Inefficiencies that can free up time that you can spend doing other more innovative things, or at least things that might show some business value.

Only private cloud can really do this. Public cloud, with its mantra of relieving the burden of operational management and “you don’t need to worry about the details” does what it promises, but also effectively removes the visibility into the very processes in which costly operational inefficiencies are deeply buried. If I outsourced the laundry and they folded the clothes first, I’d never notice how inefficient it is. Only because I have to “do it myself” are such wastes of my limited time uncovered and subsequently eliminated.

Does it matter? It can, depending on the process being automated. For some tasks maybe it is irrelevant and doesn’t impact the total cost to deploy in the cloud at all. If it’s related to auto-scaling an application, redundancies and inefficiencies in the way application instances are launched or infrastructure adjusts to the new instance may introduce enough latency to be problematic. Despite the “magical” nature of auto-scaling it isn’t an instantaneous process. It takes time to boot up, start up, and hook up all the pieces of the application and its supporting infrastructure before its ready to be accessed. That time is highly dependent on the order of operations and the steps involved in completing each individual task.


VISIBILITY: MOSTLY CLOUDY

In the public cloud you don’t see the gears moving and thus you’ll never notice that one task is slower than the other and causes other processes to yield, waiting for some other part of the process to complete. And if you don’t notice that one is slower you can’t figure out why, and determine whether or not there’s something you can do about it. You can’t discover any inherent inefficiencies because you can’t see the big picture. You’re folding the clothes, not considering that one task is part of a “bigger” picture: doing the laundry.

Consider BitBucket’s recent experience with Amazon in struggling against a targeted DDoS attack that left its site unavailable for nearly a full day. It took nearly 8 hours for merely the acknowledgement that “something was wrong” and 16-17 hours after the attack began before it was discovered. In the meantime, the IT folks responsible at BitBucket were sitting around waiting while someone else tried to figure out what was causing their downtime. Now to be fair to Amazon it could possibly have taken anyone that long to ferret out a UDP-based DDoS attack.

Alright, no, no it probably wouldn’t. Network engineers would have seen the increase in traffic, alarms would have sounded, and after the logs showed a tremendous increase in UDP traffic someone would have done something, even if it was to cut off the traffic at the firewall. Processes and procedures would have been invoked that are designed to discover the source of the problem as quickly as possible, all leveraging the level of visibility you have into all aspects of your application, application network, and network operational state. It may not be perfect visibility, but it’s certainly clearer than that offered by most public clouds.

What happened inside Amazon? No one knows because no one has visibility into the processes and tools they use to manage, monitor,and troubleshoot these kinds of problems. No visibility? No insight into the process, no chance to improve it in any way. Private cloud gives you the visibility into the process because you have to implement it, you have to specify it, you have to figure it out on your own.

There’s a lot of things public cloud can do that private cloud can’t, but if one of your primary motivators for cloud is in automation and orchestration, in the reduction of costs through elimination of operational inefficiencies, it may be that having someone else take care of your laundry is not the right answer.

Follow me on TwitterView Lori's profile on SlideSharefriendfeedicon_facebook AddThis Feed Button Bookmark and Share

Related blogs & articles:



 
      

Feedback


10/9/2009 5:06 AM
Gravatar Nice post. Question is, will that visibility one day be available in a public cloud? It used to be, with web hosting, that you had no visibility into the operating system stack, i.e. no vmstat from the command line or the like. What if the real infrastructure itself (not just servers) gets deployed as a service? That is, what if there are multiple instances of the router or switch that get allocated resources (ports, VLANs) where an organization's IT staff can get that kind of visibility? Just musing. Again, good points. :)
JF

10/9/2009 5:48 AM
Gravatar Market forces (the strongest forces in the world) will quickly enough iron out (so to speak) these hidden inefficiencies and best of all [public] cloud users won't have to so much as think about them.

The Amazon FAIL was exactly that - a failure that quite probably won't happen again. And what do I have to do as a user to resolve it? Nothing.

Sam
Sam Johnston

10/9/2009 5:51 AM
Gravatar @Sam

I agree - for things in the cloud you'll automatically get the benefits of "lessons learned", as it were, a la Amazon or Google's recent problems.

But if you don't go "all in", public cloud's efficiency won't help your still-private processes get any better.

"And what do I have to do as a user to resolve it? Nothing."

I think it's important to also note: "What COULD I do as a user to resolve it? Nothing"

macvittie

10/9/2009 10:04 AM
Gravatar Is this post pointed at the wrong topic?

Shouldn't BitBucket have had multiple instances of its infrastructure in multiple availability zones? Shouldn't it have had some form of even static/read-only redundancy hosted elsewhere?

Knowing that there *isn't* the same visibility in AWS as on-premise infrastructure or private clouds, wouldn't that even further underscore the effort needed in solving availability gaps with architecture choices?
j

10/9/2009 11:22 AM
Gravatar @j

Wait, so because there's a lack of visibility into the processes BitBucket should spend more money setting up a redundant architecture?

I mean, I agree with need for redundancy and multiple-sites as assurance for availability, but as a "workaround" to a lack of visibility that seems quite an investment.

So in general yes, I agree, but it's not quite what I was getting at in the post. It was not trying to assign blame on either the part of Amazon or BitBucket but rather pointing out that the lack of visibility and ability to influence/modify inefficiencies and processes is one of the advantages private cloud has over public cloud as evidenced by BitBucket's lack of visibility into the Amazon process for dealing with the incident.

Lori
macvittie

10/9/2009 4:11 PM
Gravatar All great points...I would also say that by having a private cloud that can provide multi-tiered architecture with multiple networks to segment DMZs and Trust zones are also very useful in preventing those attacks. There are very few cloud solutions that give the ability to do this while offering a network layer 2 for improved performance and dedicated firewall options. By deploying a software based firewall on a server that is on the same network as your DB, APP, and Web you are setting your self up for greater risk. Any case great stuff in this article.
Jordan Braun

10/23/2009 5:39 AM
Gravatar Study Says Economics Not A Driving Factor in Cloud Computing Adoption
Lori MacVittie

12/3/2009 4:03 AM
Gravatar Cloud is the Gift That Keeps On Giving
Lori MacVittie
 Leave Feedback
Title  
Name  
Email
Url
Comments   
Please add 8 and 5 and type the answer here: