Unlocking the Cloud Operating Model: People, Process, Tools
4 likes2,360 views
The document presents an overview of HashiCorp, founded in 2012, focusing on enabling a cloud operating model that streamlines the management of multi-cloud environments and infrastructure provisioning. It discusses various aspects such as cloud security, service discovery, and workload management using platforms like Terraform, Vault, and Consul. The emphasis is on creating a consistent workflow across different cloud providers while addressing security, compliance, and operational best practices.
Unlocking the Cloud Operating Model: People, Process, Tools
- 1. Unlocking the Cloud Operating Model
- 2. Company Overview Founded in 2012 by Mitchell Hashimoto and Armon Dadgar Enabling the Cloud Operating Model Provision, Secure, Connect, and Run any infrastructure for any application
- 4. The Transition to Cloud and Multi-Cloud Traditional Datacenter “Static” Modern Datacenter “Dynamic” Dedicated Infrastructure Private Cloud AWS Azure GCP ...+ + +
- 5. The Transition to Cloud and Multi-Cloud Traditional Datacenter “Static” Modern Datacenter “Dynamic” Dedicated Infrastructure Private Cloud AWS Azure GCP ...+ + + “Tickets-based” “Self service”
- 6. The Transition to Cloud and Multi-Cloud Traditional Datacenter “Static” Modern Datacenter “Dynamic” Dedicated Infrastructure Private Cloud AWS Azure GCP ...+ + + SYSTEMS OF RECORD SYSTEMS OF ENGAGEMENT “Tickets-based” “Self service”
- 7. Implications of the Cloud Operating Model STATIC DYNAMIC Dedicated servers Homogenous Capacity on-demand Heterogenous Provision
- 8. Implications of the Cloud Operating Model STATIC DYNAMIC Dedicated servers Homogenous Capacity on-demand Heterogenous High trust IP-based Low trust Identity-based Provision Secure
- 9. Implications of the Cloud Operating Model STATIC DYNAMIC Dedicated servers Homogenous Capacity on-demand Heterogenous High trust IP-based Low trust Identity-based Host-based Static IP Service-based Dynamic IP Provision Secure Connect
- 10. Implications of the Cloud Operating Model STATIC DYNAMIC Dedicated servers Homogenous Capacity on-demand Heterogenous High trust IP-based Low trust Identity-based Host-based Static IP Service-based Dynamic IP Dedicated Infrastructure Scheduled across the fleet Provision Secure Connect Run
- 11. The Cloud Landscape STATIC DYNAMIC vSphere vSphere EKS/ECS Lambda AKS/ACS Azure Functions GKE Cloud Functions Hardware Various Hardware Proprietary Istio IP: Hardware Identity: AD/LDAP vCenter Terraform CloudFormation Resource Manager Cloud Deployment Manager Dedicated Private Cloud AWS Azure GCP Identity: AWS IAM Identity: Azure AD Identity: GCP IAM Proprietary CloudMap AppMesh Provision Operations Secure Security Connect Networking Run Development
- 12. A Common Operating Model with the HashiCorp Suite Provision Operations Secure Security Connect Networking Run Development Private Cloud AWS Azure GCP
- 13. Private Cloud Cloud Provisioning with Terraform A common Cloud Operating Model AWS Azure GCP Provision Operations Secure Security Connect Networking Run Development
- 14. Cloud Provisioning with Terraform A common Cloud Operating Model Core + Provider Model ● Expose the unique services of each infrastructure platform, but provide a consistent workflow
- 15. Cloud Provisioning with Terraform A common Cloud Operating Model Core + Provider Model ● Expose the unique services of each infrastructure platform, but provide a consistent workflow ● 200+ Providers exist for any infrastructure or application element i. Enabled by the open source model of 1200+ contributors
- 16. Cloud Provisioning with Terraform A common Cloud Operating Model A single Terraform template contains the entire infrastructure topology ● Platform services AND the configuration of any dependancies i. eg. 4 AWS services plus k8s
- 17. Cloud Provisioning with Terraform A common Cloud Operating Model Self Service Provisioning Templates can be made available to any development team for self-provisioning Multi-Cloud Provisioning & Compliance Operations teams can enforce security & policy at provisioning time with Terraform Enterprise
- 18. Cloud Provisioning with Terraform A common Cloud Operating Model Before Developer or CI / CD System TF CLI TF Template
- 19. Cloud Provisioning with Terraform A common Cloud Operating Model Codified policies enforce security, compliance, and operational best practices across all cloud provisioning Before Developer or CI / CD System TF CLI TF Template After Developer or CI / CD System TF CLI TF Template TFE ■ Policy ■ Governance
- 20. Private Cloud Cloud Security with Vault A common Cloud Operating Model AWS Azure GCP Provision Operations Secure Security Connect Networking Run Development
- 21. Traditional Access Model A common Cloud Operating Model
- 22. Identity-based Security with Vault A common Cloud Operating Model
- 23. Identity-based Security with Vault A common Cloud Operating Model Identity of requester authenticated against any identity model prior to granting access
- 24. Identity-based Security with Vault A common Cloud Operating Model Identity of requester authenticated against any identity model prior to granting access Policies defined by the Security team and enforced at runtime.
- 25. Vault Use Cases A common Cloud Operating Model 1. Centralized Secrets Management 2. Encryption as a Service a. Encrypt all application traffic without app modification
- 26. Private Cloud Cloud Networking with Consul A common Cloud Operating Model AWS Azure GCP Provision Operations Secure Security Connect Networking Run Development
- 27. Traditional Networking A common Cloud Operating Model A. Provision load-balancers to create static IP B. Artifact deployed C. Firewall rule updated to allow traffic Average time to traffic ~ 6 weeks Load balancer sprawl ($$!) but also as single point of failure for each service
- 28. Networking with Consul A common Cloud Operating Model ● Service Registry enables Routing ○ From IP-Address to Name ○ Services register and discover each other. Consul server maintains the map of service location
- 29. Networking with Consul A common Cloud Operating Model ● Service Registry enables Routing ○ From IP-Address to Name ○ Services register and discover each other. Consul server maintains the map of service location ○ Consul enables routing directly to services
- 30. Networking with Consul A common Cloud Operating Model ● Service Registry enables Routing ● Service Segmentation for Security ○ Consul Connect enables service-to-service communication ○ Foundation of zero-trust model ■ “Service Mesh”
- 31. Networking with Consul A common Cloud Operating Model ● Service Registry enables Routing ● Service Segmentation for Security ○ Consul Connect enables service-to-service communication ○ Foundation of zero-trust model ■ “Service Mesh” A common service registry across heterogeneous environments is the basis for multi-cloud service networking
- 32. Private Cloud Cloud Deployment with Nomad A common Cloud Operating Model AWS Azure GCP Provision Operations Secure Security Connect Networking Run Development
- 33. Cloud Deployment with Nomad A common Cloud Operating Model ● Container Orchestration allows for deploying, managing and scaling of containerized apps ● Legacy Application ○ Orchestrates and automates legacy applications to improve resilience and efficiency ● Batch Workloads ○ GPU support to enable ML, AI, data science, and other intensive workloads in HPC clusters
- 34. Nomad Use Cases A common Cloud Operating Model Flexible Container & Workload Organization Deploy and manage any containerized, legacy, or batch application. Multi-Cloud Workload Management Safely manage workloads across regions and cloud providers Efficient Resource Utilization Increase resource utilization, reduce fleet sizes, and cut costs.
- 35. A Common Cloud Operating Model to Accelerate Application Delivery App ?
- 36. A Common Cloud Operating Model to Accelerate Application Delivery App Operations
- 37. A Common Cloud Operating Model to Accelerate Application Delivery App Operations Security
- 38. A Common Cloud Operating Model to Accelerate Application Delivery App Operations Security Networking
- 39. A Common Cloud Operating Model to Accelerate Application Delivery App Operations Security Networking Development App
- 40. A Common Cloud Operating Model to Accelerate Application Delivery App Operations Security Networking Development App GOVERNANCE POLICY
- 41. Open Source vs. Enterprise OPEN SOURCE OPEN SOURCE OPEN SOURCE Individuals Teams Pro Organizations Premium COLLABORATION COLLABORATION POLICY GOVERNANCE ORGANIZATIONAL COMPLEXITY