- 1. Copyright 2009 Trend Micro Inc.DCS-ECCT Cloud Architecture
HighLevel Design1Jack Kuo/Alex Wang05/27/2013
2. Copyright 2009 Trend Micro Inc.AgendaDesign
ConsiderationsDesign GuidelinesDC Cloud High Level
ArchitectureGlobal Cloud High Level Architecture 3. Copyright 2009
Trend Micro Inc.Design ConsiderationsService AssuranceHigh
AvailabilitySecure Tenant segregation Data Center Scalability
through ModularInfrastructure 4. Copyright 2009 Trend Micro
Inc.Service AssuranceDifferentiated Service Requirements for
Differentservice types: Production (Critical),Development/Testing,
and Staging. Differentiated Service levels are fulfilled
withmodular POD designs, with Tier1 resourceguaranteed in critical
POD while Tier2 resourceallow cost reduction. Differentiated
Service profile is cost efficient inprivate cloud environment. 5.
Copyright 2009 Trend Micro Inc.High AvailabilityInfrastructure high
availability through datacenter,availability zone, POD, Cluster,
and physicalredundancy. Infrastructure is ready for manual or
automaticdisaster recovery plans.Public cloud can be an option for
disasterrecovery.Bursting traffic can be served by public cloud
toprevent over provision in private cloud. 6. Copyright 2009 Trend
Micro Inc.Secure Tenant SegregationSecure Tenant Segregation
through segregationof network, compute and storage.Segregate
tenants/services with PODs oravailability zones deployments.Could
infrastructure component outage will notimpact any service. Or only
impact singleservice.Secure Tenant Segregation did not
coverapplication dependency. For example, ERS canimpact HES in
application level. 7. Copyright 2009 Trend Micro Inc.Datacenter
Scalability throughModular InfrastructureElasticity can be scaled
with vertical scale inside aPOD or horizontally scale across
PODs,Availability Zones, and Datacenters.A modular design unit- POD
is the basic buildingblock.A POD contains its delectated
infrastructurenetwork, compute node, and storage node andcan share
VM networks within an availability zone.POD forms availability
zone, and thendatacenters.POD can be migrated and repurposed. 8.
Copyright 2009 Trend Micro Inc.Design GuidelinesLoosely Coupled,
Stateless, and fail-in-placecomputingHorizontal
ScalingParallelization 9. Copyright 2009 Trend Micro Inc.Loosely
Coupled, Stateless, andFail-in-Place ComputingOld Paradigms of web
services are moreimportant in cloud computing as Cloud is bynature
very dynamic.Application and infrastructure components need tobe
loosely coupled, stateless, and fail-in-placewith no impact to
service.Same paradigms applied to cloud platformhardware, the
hardware should be looselycoupled, stateless, and be ready to fail
with noimpact/minimal impact.Asynchronous tasks and messaging
system arethe two keys for Loosely Coupled Architecture. 10.
Copyright 2009 Trend Micro Inc.Loosely Coupled, Stateless,
andFail-in-Place ComputingCloud architecture is loosely coupled
withmanagement servers, compute nodes, storagenodes and DB nodes.
Management servers, compute nodes, storagenodes, are stateless. The
transaction traffic can beserved by any nodes in the Cloud.Any
cloud components are designed to be hitlessand be ready to
fail-in-place with no impact to theservice.Users submit
asynchronous Cloud jobs like createinstance with instant response
and performance.Background jobs runs in each components to
fulfillthe user requests. 11. Copyright 2009 Trend Micro
Inc.Horizontal scalingIt is more challenge to scale up (physical
limit)than scale out (logical limit).Cloud computing has its
advantages in horizontalscaling.The horizontal scaling capability
does not limit to asingle Cloud. It can be hybrid or even scaling
topublic Cloud.Data Physics ( time to move data/meta dataacross
Cloud) needs to be considered whenSurge computing to Public Cloud.
(Datareplication to public cloud before disaster mayintroduce cost)
12. Copyright 2009 Trend Micro Inc.ParallelizationParallelization
works hand in hand with HorizontalScaling.Parallelization cancel
the impact of the fail rate ofeach component to increase
availability andperformance.Application client intelligence, load
balancer, andglobal server load balancer, are technologies
toachieve parallelization. Among the above three, application
clientintelligence has lowest CAPEX and OPEX of theservice
availability, so it is most preferred by theimplement
Parallelization.However, the most common easy way
forparallelization is hardware/software load balancer. 13.
Copyright 2009 Trend Micro Inc. Hosts Servers onto which guest VM
services will beprovisioned Primary Storage VM storage Cluster A
grouping of hosts and their associated storage Pod Collection of
clusters Network Logical network associated with service offerings
Secondary Storage Template, snapshot and ISO storage Zone
Collection of pods, network offerings and secondarystorage
Management Server Farm (mgmts. + DBs) Responsible for all
management and provisioningtasksCore CloudStack
ComponentsZoneCloudStack
PodClusterHostHostNetworkPrimaryStorageVMVMCloudStack
PodClusterSecondaryStorage 14. Copyright 2009 Trend Micro Inc.DCS
OpenCloud High Level ArchitectureL3 SwitchL3 SwitchComputingNode
1...ComputingNode 8StorageServer 1StorageServer 4SecondaryStorage
1...SecondaryStorage 4.ComputingNode 1ComputingNode
8SecondaryManagementServerMySQL DBClusterCluster1
Cluster2...StorageServer 1...StorageServer 4SecondaryStorage
1...SecondaryStorage 4Service 1 Service NAvailability Zone 1DCS
GeVLANInternetservice usersInternal CloudAdmins/CustomersISP
Borderrouters..Availability Zone 4ISPDistributionSwitchL3 SwitchL3
SwitchComputingNode 1...ComputingNode 8ManagementServerMySQL
DBClusterStorageServer 1StorageServer 4SecondaryStorage
1...SecondaryStorage 4.ComputingNode 1ComputingNode 8Cluster1
Cluster2...StorageServer 1...StorageServer 4SecondaryStorage
1...SecondaryStorage 4Service 1 Service NBGPBGPL4 SwitchL4 Switch
L4 SwitchL4 SwitchFirewall FirewallFirewall FirewallPOD1 POD4 15.
Copyright 2009 Trend Micro Inc.CloudStack Regional
ArchitectureManagement server deployment required tohave very low
latency to DB servers withinthe same region. It is recommended
todeploy multiple separate managementservers when crossing multiple
crossregions. 16. Copyright 2009 Trend Micro Inc.Global Cloud High
Level
ArchitectureL3SwitchL3SwitchComputingNode1...ComputingNode8StorageServer1StorageServer4SecondaryStorage
1...SecondaryStorage 4.ComputingNode1ComputingNode8Cluster1
Cluster2...StorageServer1...StorageServer4SecondaryStorage
1...SecondaryStorage 4Service1
ServiceNISPDistributionRouterL3SwitchL3SwitchComputingNode1...ComputingNode8StorageServer1StorageServer4SecondaryStorage
1...SecondaryStorage
4.ComputingNode1ComputingNode8SecondaryManagementServerMySQL
DBClusterCLuster1
Cluster2...StorageServer1...StorageServer4SecondaryStorage
1...SecondaryStorage 4Service1
ServiceNL3SwitchL3SwitchComputingNode1...ComputingNode8StorageServer1StorageServer4SecondaryStorage
1...SecondaryStorage 4.ComputingNode1ComputingNode8Cluster1
Cluster2...StorageServer1...StorageServer4SecondaryStorage
1...SecondaryStorage 4Service1
ServiceNISPDistributionRouterL3SwitchL3SwitchComputingNode1...ComputingNode8StorageServer1StorageServer4SecondaryStorage
1...SecondaryStorage
4.ComputingNode1ComputingNode8SecondaryManagementServerMySQL
DBClusterCluster1
Cluster2...StorageServer1...StorageServer4SecondaryStorage
1...SecondaryStorage 4Service1
ServiceNL3SwitchL3SwitchComputingNode1...ComputingNode8StorageServer1StorageServer4SecondaryStorage
1...SecondaryStorage
4.ComputingNode1ComputingNode8SecondaryManagementServerMySQL
DBClusterCluster1
Cluster2...StorageServer1...StorageServer4SecondaryStorage
1...SecondaryStorage 4Service1
ServiceNISPDistributionrouterL3SwitchL3SwitchComputingNode1...ComputingNode8ManagementServerMySQL
DBClusterStorageServer1StorageServer4SecondaryStorage
1...SecondaryStorage 4.ComputingNode1ComputingNode8Cluster1
Cluster2...StorageServer1...StorageServer4SecondaryStorage
1...SecondaryStorage 4Service1 ServiceNAvailabilityZone
1ISPBorderRouter..AvailabilityZone
4DCSGeVLANInternetserviceusersInternalCloudAdmins/CustomersAvailabilityZone
1 ISPBorderRouter..AvailabilityZone 4 AvailabilityZone 1
ISPBorderRouter..AvailabilityZone 4SJC1IAD1MUC1L4Switch L4Switch
L4Switch L4Switch L4Switch L4Switch L4Switch L4Switch L4Switch
L4Switch L4Switch L4SwitchFirewall Firewall Firewall Firewall
Firewall Firewall Firewall Firewall Firewall Firewall Firewall
FirewallPOD1 POD4 POD1 POD4 POD1 POD4MySQL
DBClusterManagementServerManagementServerMySQL DBCluster
