A New Era of Hybrid Computing Jim Porell IBM Distinguished Engineer - retired Consultant and Business Partner

Size: px

Start display at page:

Download "A New Era of Hybrid Computing Jim Porell IBM Distinguished Engineer - retired Consultant and Business Partner"

Darren Hall
6 years ago
Views:

1 A New Era of Hybrid Computing Jim Porell IBM Distinguished Engineer - retired Consultant and Business Partner jim.porell@vicominfinity.com Cell:

2 Trademarks The following are trademarks of the International Business Machines Corporation in the United States and/or other countries. CICS* DB2* Enterprise Storage Server* IBM* IBM eserver IBM logo* IMS OMEGAMON* Parallel Sysplex* System Storage System z System z9 TotalStorage* WebSphere* z/os* z/vse zseries* * Registered trademarks of IBM Corporation The following are trademarks or registered trademarks of other companies. Intel is a trademark of Intel Corporation in the United States, other countries, or both. Java and all Java-related trademarks and logos are trademarks of Sun Microsystems, Inc., in the United States and other countries Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Microsoft, Windows and Windows NT are registered trademarks of Microsoft Corporation. Red Hat, the Red Hat "Shadow Man" logo, and all Red Hat-based trademarks and logos are trademarks or registered trademarks of Red Hat, Inc., in the United States and other countries. * All other products may be trademarks or registered trademarks of their respective companies. Notes: Performance is in Internal Throughput Rate (ITR) ratio based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput improvements equivalent to the performance ratios stated here. IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms apply. All customer examples cited or described in this presentation are presented as illustrations of the manner in which some customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics will vary depending on individual customer configurations and conditions. This publication was produced in the United States. IBM may not offer the products, services or features discussed in this document in other countries, and the information may be subject to change without notice. Consult your local IBM business contact for information on the product or services available in your area. All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Information about non-ibm products is obtained from the manufacturers of those products or their published announcements. IBM has not tested those products and cannot confirm the performance, compatibility, or any other claims related to non-ibm products. Questions on the capabilities of non-ibm products should be addressed to the suppliers of those products. Prices subject to change without notice. Contact your IBM representative or Business Partner for the most current pricing in your geography James Porell Consulting

3 Agenda! New model of hybrid computing " Systems of Record and System of Engagement " One model with three examples! Banking customer example! Cyber Security Awareness! Hybrid management! Summary! Customer examples (as time permits) " Manufacturing " Healthcare " Military! Additional references James Porell Consulting

4 New Model of Hybrid Computing! Move the application to the data! System of Record (large database with transactional access) " This is still the primary ingest mechanism! System of Engagement is the new access method " Social, multimedia, multiple data sources! Data can be presented on a need to know basis " Only what user is allowed to see " May not know that some data will even exist! Don t move data to the end user " Show them the results via distributed presentation " Limits data loss/theft at the end user level " It can be moved closer via managed replica s or proxy servers James Porell Consulting

5 New Model of Hybrid Computing! The System (operating system and database) becomes responsible for security of the data The security administrator and database administrator can collaborate to define and implement the compartments for data isolation Applications wouldn t need to modify database calls to include WHERE security processing logic as the System will handle that This can reduce development costs as mistakes may be eliminated! Communications architecture is critical success " VPN and IPSec is critical! Shared authentication is mandatory " Registration and enrollment, audit, access control James Porell Consulting

6 One Model Simplest Form Input device System of Record Insert Update Analytics System of Engagement Output device James Porell Consulting

7 One Model Multiple location deployment Input device System(s) of Engagement Managed Replica Proxy VDI System of Record Insert Update Analytics Outsourced or Branch Office PCs, Call Centers Developer Desktops Remote / Laptop Users James Porell Consulting

8 Medical Example Hospital Medical Devices Xray CTScan MRI Personnel Managed Replica Proxy VDI Medical Professionals Data Center System of Record Insert Update Analytics Patients James Porell Consulting

9 Intelligence Community Agency Data Gathering Sigint Elint Humint Managed Replica Proxy VDI Analysts Data Center System of Record Insert Update Analytics James Porell Consulting

10 James Porell Consulting

11 Service Systems & Databases Loan Applic. Bank Teller Risk Analysis Authentication Server Credit Card Processing Connectors MQ Application Architecture: A Large Enterprise Connectors Application Server Websphere Service Service Service EJB Message Servlet Personalization End User Hosted Client Devices Device Apps. Banking Portal Service Platform Desktop Framework Bill Payment Database General Ledger Current Accounts Currency Exchange SQLJ Batch Programs James Porell Consulting SQLJ RMI/IIOP Service Platform Database Bill Payment EJBs WAS Batch Process Temp data to Electronic Data Warehouse XML over HTTP(S) Desktop Framework Services Middleware Services

12 Typical multi-system Design: Numerous Mgmt Domains Loan Applic. t Bank Teller Mg Risk Analysis Authentication Mg Server t Credit Card Processing t Bill Payment Mg Database t General Ledger Current Accounts Currency Exchange Mg Mg t t Mg Mg t Mg t Mg t Connectors MQ SQLJ Mg t Batch Programs Connectors James Porell Consulting Application Server Websphere Service Service Service SQLJ RMI/IIOP Mg t Service Platform Database Mg t EJB Mg t Bill Payment EJBs Message Servlet WAS Batch Process Temp data to Electronic Data Warehouse Mgt Authentication Alert processing Firewalls Virtual Private Networks Network Bandwidth Encryption of data Audit Records/Reports Provisioning Users/Work Disaster Recovery plans Storage Management Data Transformations Application Deployment

13 Collaborative Design to minimize mgmt domains Loan Applic. Bank Teller Risk Analysis Authentication Server Credit Card Processing Mgt Connectors Mgt MQ Mgt Connectors Application Server Websphere Service Service Service EJB Mgt Message Servlet Personalization Mgt Devices Device Apps. Banking Portal Service Platform Desktop Framework Bill Payment Database General Ledger Current Accounts Currency Exchange SQLJ Batch Programs Mgt SQLJ RMI/IIOP Service Platform Database WAS Bill Payment EJBs Mgt Batch Process Temp data to Electronic Data Warehouse XML over HTTP(S) Desktop Framework Services Middleware Services Potential advantages of consolidating your application and data serving " Security Fewer points of intrusion " Resilience Fewer Points of Failure " Performance Avoid Network Latency " Operations Fewer parts to manage " Environmentals Less Hardware " Capacity Management On Demand additions/deletions " Utilization Efficient use of resources " Scalability " Auditability Batch and Transaction Processing Consistent identity " Simplification Problem Determination/diagnosis " Transaction Integrity Automatic recovery/rollback With IFL With zaap James Porell Consulting

14 Cyber Security Awareness! Trust " Smart Authentication, fraud prevention! Collaborate " Intra system/server and Business Partners, share data vs. transfer! Automate " Updates to filters: IDS/IPS, firewall, /malware, DNS! Investigate " Analytics, proactive! Discovery/Vulnerability testing " Find holes, identify digital certificates James Porell Consulting

15 Removable media User Device processing Data in Flight Network Devices Data in Flight User Device processing Removable media Data At Rest Subscription security service providers Data At Rest " Filter " Collaborate " Protect Data " Log " Monitor and Report " Analyze James Porell Consulting

16 Client Consolidation - CCON James Porell Consulting

Will the End to End solution be protected and resilient?

Trojan Horse Misuse Transactions, Applications, Data Remote / Laptop Users Shared

Security is delivered via People, Process and Technology You might have the

going to be attacked. You may even be breached.

17 Will the End to End solution be protected and resilient? Outsourced or Branch Office PCs, Call Centers Developer Desktops Theft Loss Virus Trojan Horse Misuse Transactions, Applications, Data Remote / Laptop Users Shared Storage Puts corporate and agency data at risk. Are you managing end to end? Security is delivered via People, Process and Technology You might have the greatest technology, but Uneducated users and poor processes will get you You are going to be attacked. You may even be breached. You cannot defend against everything. Can you recover? And how quickly? So think about this as insurance and risk mitigation James Porell Consulting

Target Customer: Breaking down organizational barriers Risk across organizations Desktops, Thin Client, mobile" Windows, Linux, VDI mgt" Unix" Mainframe"

Share processing capacity; fewer processors"! Controlling access from the desktop to network resources"! Removing Enterprise data from!

DVR-like capability to watch for fraud! But:! and provide forensics"! Device can be lost/stolen/! But:! misused!! Many servers may be required!

Similar to desktop/vdi mgt +:"! Fewer management servers"! Add IDAA/Neteeza for desktop analytics but also for z/os analytics "!

18 Target Customer: Breaking down organizational barriers Risk across organizations Desktops, Thin Client, mobile" Windows, Linux, VDI mgt" Unix" Mainframe" Reduced risk when managed end to end Desktop to Thin Client! Thin Client to Trusted Thin Client!! Reduce deskside support 90%"! Military grade security"! Share processing capacity; fewer processors"! Controlling access from the desktop to network resources"! Removing Enterprise data from! Up to 8:1 desktop consolidation" local user device"! Reduces network cabling,! Standardize on software and electricity, noise" central change management"! DVR-like capability to watch for fraud! But:! and provide forensics"! Device can be lost/stolen/! But:! misused!! Many servers may be required!! Multiple desktops may be! Disaster recovery adds complexity! required!! Inconsistent security across depts! X86 vs Enterprise Server VDI mgt! Similar to desktop/vdi mgt +:"! Fewer management servers"! Add IDAA/Neteeza for desktop analytics but also for z/os analytics "! Desktops that access mainframe apps and data have direct interconnect"! Reduces intranet bandwidth"! Coordinated DR and security for end to end workloads! Typical x86 VDI STASH Value add System z Value add James Porell Consulting

19 Coast Guard Secure Thin Client Deployment Thin Client Desktop (MLS) Nettop Presentation Presentation Presentation Presentation Value to Coast Guard! Reduce opportunity for insiders to make copy of information! Access to different Program Domains! Patch mgt is now a centralized service function by IT staff vs a dependency for all end users to manage! Security audit and compliance can be managed from the central security server! Business Resilience of the Desktop environment now is similar to the server perspective! Environmental costs are dramatically lower Well kept secret in production since 1H James Porell Consulting

20 Information Security Awareness Manage Servers & Devices! Filters! Collaborate! Smart Authentication! SECURITY! Protect Data! Identity Management! Discovery/Test/Vulnerabilities! Logging! Application Development! Analyze! Monitor & Report! James Porell Consulting

21 Other operational attributes and examples! Disaster Recovery/Business Reslience! Application Development! Test and QA James Porell Consulting

22 Future State! an agile, resilient architecture! We can help with any future state! Not taking sides " We can influence the deployment model! We could virtualize and save them millions in the short term James Porell Consulting

IT Management Trends are changing Silo-ed operations Scale Out Application Growth Global Business Responsibilities Governance Risk and Compliance Business Continuity Privacy Agility Lean and Green 23

23 IT Management Trends are changing Silo-ed operations Scale Out Application Growth Global Business Responsibilities Governance Risk and Compliance Business Continuity Privacy Agility Lean and Green 23 X86, RISC IT Operations Mainframe IT operations Application Architects Next Gen Applications 2014 James Porell Consulting People, Space, Licenses Global IT operations Mainframe IT Operations Bladecenter Virtual Clients IT Operations Mainframe Application Sandbox Application Architects

24 Global IT Opportunities Business resilience The vault Business Process Integration Infrastructure Simplification Virtualization System z Server consolidation help fail over (Disaster Recover) other servers data Enterprise data protected; simplifying Compliance Leveraging web services for application and database access Manpower, energy, floor space savings Many server images in a single machine System x and Bladecenter Client consolidation Faster/cheaper recovery for desktop systems Enterprise data protected; simplifying Compliance Leveraging web services for multi channel transformation and applications Manpower, energy, floor space savings Many client images in a single machine Appl Development Target Deployment platform Target Development platform The mainframe and Bladecenter are weapons, use them wisely Cultivating growth opportunities James Porell Consulting

25 An endorsement? Not unique to cloud computing And why associate with layoffs? James Porell Consulting

26 Some reference information! Jim Porell s Blog " Discussions of hybrid computing " Write up of Common model examples " Why younger IT professionals would hate the mainframe of 1990 And how they should view it today! Each of the blog entries point to many other web links for additional information! Contact me at: jporell@vicominfinity.com " James Porell Consulting

27 Additional customer examples The following customer examples show: " End to end solution components " Collaborative nature of solution management " Operational attributes of hybrid computing James Porell Consulting

28 REQUIREMENT: Commercial use of DB2 Labeled Security Data shared between people/ organizations with different "need to know" Original View: Suppliers could see each other s data " They could collude and cheat the manufacturer on price " Or lower their prices to compete against each other Supplier 1 Supplier 2 Supplier 3 Original View z/os Manufacturing System Supplier Data All Suppliers see all info Implementing Labeled Security: Additional security information gathered from suppliers during sign on Result is suppliers could only see their data Supplier 1 MLS View Unique + Userid Manufacturing employees see all data No applications were changed Supplier 2 Supplier 3 z/os Manufacturing System Suppliers only see their data Single DB James Porell Consulting

29 Healthcare customer s Strategy! Core Competency = Healthcare! Customers " Individuals (Ultimately, the patient owns the record) " Medical professionals! Interoperability " Private medical facilities " Commercial providers " New generation of patient driven health records & applications James Porell Consulting

30 Single Hospital Hospital Medical Devices Xray CTScan MRI Personnel Medical Professionals System of Record Insert Update Analytics Patients James Porell Consulting

31 Single Hospital with shared processing Hospital Medical Devices Xray CTScan MRI Personnel Managed Replica Proxy VDI Medical Professionals Data Center System of Record Insert Update Analytics Patients New Patient centric health applications James Porell Consulting

32 Multiple Hospitals with shared processing Hospital Medical Devices Xray CTScan MRI Personnel Managed Replica Proxy VDI Medical Professionals New Patient centric health applications James Porell Consulting Patients Data Center System of System of Record System of Insert Record System of Update Insert Record System of Analytics Update Insert Record System of Update Insert Record Record Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Analytics Analytics Update Insert Analytics Update Insert Analytics Update Analytics System of System of Record System of Insert Record System of Update Insert Record Record Analytics Update Insert Analytics Update Insert Analytics Update Analytics

33 Multiple Hospitals begin migration to common record Hospital Medical Devices Xray CTScan MRI Personnel Managed Replica Proxy VDI Medical Professionals New Patient centric health applications Patients Data Center System of System of System of Virtual Virtual Virtual Hospital Virtual Hospital Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Virtual Hospital Record Insert Record System of Update Insert Record Record Analytics Update Insert Analytics Update Insert Analytics Update Analytics System of System of Record System of Insert Record System of Update Insert Record System of Analytics Update Insert Record System of Update Insert Record Record Analytics Analytics Update Insert Analytics Update Insert Analytics Update Analytics James Porell Consulting

Multi-tier Secure Mobile Environment Systems of Engagement Systems of

Tactical Ruggedized Analytics Various Smartphones Tablets Web Application

Authentication Crypto Back-end access services Caching of back-end

34 Multi-tier Secure Mobile Environment Systems of Engagement Systems of Record Client Tier Devices Middle Tier Server Back-end Data & Services Tactical Ruggedized Analytics Various Smartphones Tablets Web Application Server Mobile Application Runtime Server Security components Authentication Crypto Back-end access services Caching of back-end services Databases and Data sources Transactional services DB2 Oracle James Porell Consulting

35 Plane Self contained Real time mission Plane Self contained Real time mission Plane Self contained Real time mission Ground Station(s) Base for collaboration Partner Collaboration (need to know) James Porell Consulting

36 Combat Group Self contained Real time mission Combat Group Self contained Real time mission Combat Group Self contained Real time mission JICO Base for collaboration Partner Collaboration (need to know) James Porell Consulting

37 Plane Self contained Real time mission Plane Self contained Real time mission Proxy Security DB Plane cert Plane cert Plane cert Plane Self contained Real time mission Proxy Security DB Plane cert Plane cert Plane cert Proxy Security DB Plane cert Plane cert Plane cert James Porell Consulting Federated Identities Master Security DB Plane cert Plane cert Plane cert Ground Station(s) Base for collaboration

38 Ground Station(s) Base for collaboration Master Security DB Plane cert Plane cert Plane cert Partner Cert Partner Cert Partner Cert Partner Collaboration (need to know) Federated Identities Partner Collaboration (need to know) Proxy Security DB Partner cert Partner cert Partner cert Proxy Security DB Partner cert Partner cert Partner cert Proxy Security DB Partner cert Partner cert Partner cert Proxy Security DB Partner cert Partner cert Partner cert James Porell Consulting

39 Analyze Analytics Services Plane Self contained Real time mission Proxy Mission DBs Collection Collection. Collection Capture Data... Data Collection (Update) The Plane is a standalone miniature of the Ground Station Enough real time processing for mission Constantly synching with Ground System High Single level security Ground Station Base for collaboration Master Security DB Plane cert Plane cert Plane cert Partner Cert Partner Cert Partner Cert Master Mission DBs Collection Collection. Collection Schema: Need to know Data Analytics Services Connection Broker Browse Data (Read) Analyze Data (Read) Thin Client Desktop (MLS) Partner Collaboration (need to know)... Partner Collaboration (need to know) James Porell Consulting

40 One Ground Station can be made of many servers as a single entity Each physical server is a miniature of the cluster Locally shared synchronously with integrity Cluster Server Connection Broker 1000 s Applications Analytics Services Ground Station Master Security DB... Master Mission DBs Cluster Server Connection Broker 1000 s Applications Analytics Services Shared Everything Single network view Workload balancing High availability Capacity on/off demand Analyze Data (Read) Browse Data (Read) Thin Client Desktop (MLS) Partner Collaboration (need to know)... Partner Collaboration (need to know) James Porell Consulting

41 Cluster Server Connection Broker Ground Station 1000 s Applications. Analytics Services Master Security DB.. Master Mission DBs Cluster Server Connection Broker 1000 s Applications Analytics Services Overall Mission is aggregation of Ground Station clones Each Ground Station is a miniature of the Mission Locally shared asynchronously with integrity Can present itself as a single virtual network Additional High Availability Disaster Recovery cloning Can be 1000 s of miles apart Mission Orders Data Collection (Update) Cluster Server Connection Broker... Ground Station 1000 s Applications. Analytics Services Master Security DB.. Master Mission DBs Cluster Server Connection Broker 1000 s Applications Analytics Services Browse Data (Read) Analyze Data (Read) Thin Client Desktop (MLS) Partner Collaboration (need to know) Partner Collaboration (need to know) James Porell Consulting

42 James Porell Consulting

zenterprise Platform Performance Management: Overview

zenterprise Platform Performance Management: Overview Hiren Shah hiren@us.ibm.com 8/4/2010 Trademarks The following are trademarks of the International Business Machines Corporation in the United States