深度IaaS-CSDN博客

In my first article, I stated Infrastructure as a Service (IaaS) is a service provided by another entity that provides the hardware and hardware support while you maintain the virtual data-center on top of it. In this article we will look at what that means in detail.

在我的第一篇文章中，我说过基础架构即服务(IaaS)是由另一个实体提供的服务，该实体在您将虚拟数据中心维护在其之上的同时提供了硬件和硬件支持。在本文中，我们将详细研究这意味着什么。

共同特征 (Common Features)

Infrastructure as a Service is first and foremost a computing infrastructure. That means it is a complete package of all infrastructure components – server, storage, and networking. Providers typically also offer firewalls, load balancing, and other security and redundancy features as part of their offering, either as an additional benefit or as an option. Advanced features such as clustering are also typically available for an additional charge. One key feature that is built into most offerings is Disaster Recovery. Having multiple data-centers based on virtualization technologies makes Disaster Recovery a snap for these providers and only the smallest, most dubious providers do not have a good, tested DR plan for their (and your) data.

基础架构即服务首先是计算基础架构。这意味着它是所有基础架构组件(服务器，存储和网络)的完整软件包。提供商通常还会将防火墙，负载平衡以及其他安全性和冗余功能作为其产品的一部分提供，作为一项额外的好处或一项选择。集群等高级功能通常也需要额外付费。大多数产品中内置的一项关键功能是灾难恢复。拥有多个基于虚拟化技术的数据中心使Disaster Recovery成为这些提供商的轻而易举，只有最小，最可疑的提供商对其(以及您的)数据没有好的，经过测试的灾难恢复计划。

替代选择 (Alternative Options)

To achieve the economies of scale that makes such offerings possible for providers to still make a profit, these default offerings are provided in the form of a virtual machine. They are not your only option, however. Indeed, you can create a full cloud without ever virtualizing any of your machines at all. The costs would be astronomical, comparatively, but it is possible. The advantage of that, of course, is the same as any other cloud service: Standardized near-instant provisioning of resources with little or no IT involvement. Typically these would only be seen in private clouds, as the cost advantage public clouds provide are completely lost in physical-only clouds.

为了实现规模经济，使提供商仍然可以从中获得此类产品，这些默认产品以虚拟机的形式提供。但是，它们不是您唯一的选择。确实，您无需创建任何虚拟机就可以创建完整的云。相对而言，成本是天文数字，但它是可能的。当然，这样做的优势与任何其他云服务相同：几乎不需要IT参与或不需要IT参与的标准化近乎即时资源配置。通常，这些只能在私有云中看到，因为公共云提供的成本优势在仅物理云中完全消失了。

Which leads to another alternative – Dedicated Private Servers. Most providers can and do offer these dedicated servers if needed due to load or regulatory considerations. These are typically stand alone physical servers that are available only to the customer regardless of resource usage on that machine. As already meantioned, they generally defeat the cost advantages of cloud computing, but there are many instances where they are required regardless of cost. Still, if you have limited or no dedicated IT staff to maintain the system and/or you are already paying for other services this becomes a simple way to comply with the requirements and still keep your costs down.

这导致了另一种选择– 专用私有服务器 。出于负载或法规考虑，如果需要，大多数提供商都可以并且确实提供这些专用服务器。这些通常是独立的物理服务器，仅对客户可用，而与该计算机上的资源使用情况无关。如前所述，它们通常会打败云计算的成本优势，但是在许多情况下，无论成本如何，都需要使用它们。但是，如果您只有有限的IT员工或没有专门的IT员工来维护系统和/或已经在为其他服务付费，这将成为满足要求并降低成本的一种简单方法。

IaaS providers already have the hardware and data centers up and running, so it is fairly trivial for them to add a few machines for their own use or to expand their offerings. To that end, many IaaS providers are also Platform as a Service providers (PaaS) as well. That means if you are a programmer and your infrastructure needs are rather modest, PaaS services may be more suited to your needs. This route is often a cheaper and less time consuming route for programmers just looking for an application server for their codebase – but that is for another article.

IaaS提供商已经启动并运行了硬件和数据中心，因此对于他们来说，添加几台机器以供自己使用或扩展其产品范围是不容易的。为此，许多IaaS提供商也都是平台即服务提供商(PaaS)。这意味着如果您是一名程序员，而您的基础结构需求相当适中，则PaaS服务可能更适合您的需求。对于只为他们的代码库寻找应用服务器的程序员而言，这种途径通常是一种更便宜，更省时的途径，但这是另一篇文章。

黄金三镖客 (The Good, The Bad, and the Ugly)

The single biggest feature that makes public IaaS such a great deal for many companies is that you get the benefits of a full IT staff of experts in every aspect of computer infrastructure support without the headaches or headcount associated with that staff. Enforceable Service Level Agreements guaranteeing up-time availability, top notch equipment, and virtually unlimited compute resources are some other key advantages. Because resources are billed based on use, you only pay for what you use instead of paying for 24/7 access to cover peak demand. As an added bonus for the bean counters, these fees are charged out of your operational expenses instead of capital expenses making forecasting and budgeting easier and allowing them to move many of these costs from fixed costs to variable costs. I am not an accountant so I can’t go into any details, but suffice it to say – this is a good thing for most companies.

对许多公司来说，使公共IaaS如此重要的一个最大功能是，您可以获得计算机基础结构支持各个方面的专家级IT专业人员的全职帮助，而无需为此员工带来麻烦或人数。保证正常运行时间可用性，一流设备和几乎无限的计算资源的可执行服务水平协议是其他一些主要优势。由于资源是根据使用量计费的，因此您只需为使用的资源付费，而不是为满足高峰需求而按24/7的访问量付费。作为Bean柜台的额外奖励，这些费用从您的运营费用中扣除，而不是从资本费用中扣除，从而使预测和预算变得更加容易，并使他们可以将许多这些成本从固定成本转移到可变成本。我不是会计师，所以我无法透露任何细节，但是可以说–对大多数公司而言，这是一件好事。

Unfortunately, this does mean you need someone well versed in all these aspects to oversee them. An IT Cloud Manager role is absolutely necessary. They don’t need to know the details on implementing each type of solution, but they sure better know which solution is necessary, who the appropriate vendor(s) are, and what offerings are available to fill them. Otherwise key components might be missed and data integrity and availability may be lost. Even if they don’t get missed, you could be paying too much for unwanted, redundant, or unnecessary services due to lack of knowledge. Moreover, it becomes more important than ever that someone is watching technology – what is available, what is vulnerable, and how to cover new vulnerabilities, in addition to everyday duties of tracking SLA compliance and other routine tasks. A great provider will do this too, but due diligence requires the Cloud Manager do this as well.

不幸的是，这确实意味着您需要一个精通所有这些方面的人员来监督他们。 IT Cloud Manager角色是绝对必要的。他们不需要了解实施每种类型的解决方案的详细信息，但是他们肯定会更好地知道哪种解决方案是必需的，合适的供应商是谁，以及可以提供哪些解决方案。否则，可能会丢失关键组件，并且可能会丢失数据完整性和可用性。即使他们不会被错过，由于缺乏知识，您可能会为不必要，多余或不必要的服务支付过多的费用。而且，除了跟踪SLA遵从性和其他日常任务的日常职责外，人们正在关注技术变得比以往任何时候都更加重要-可用的技术，易受攻击的技术以及如何涵盖新的漏洞。优秀的提供商也会这样做，但是尽职调查需要Cloud Manager也这样做。

Another drawback of the cloud is the existing vulnerabilities in the offerings. No, it is not security, though that certainly is a big concern. The biggest vulnerability, particularly for IaaS, is the absolute dependence on network connectivity. It doesn’t matter if it is private cloud, public cloud, or some hybrid, all cloud activity is heavily dependent on the connection(s) to the provider. Network outages that provide inconveniences to traditional infrastructures bring operations to a grinding halt for cloud based services. Moreover, this reliance on the network almost always includes a hidden cost- higher bandwidth usage. So now you need more connectivity at a higher bandwidth creating the real downside of cloud computing, especially for ill designed IaaS solutions. (As an aside, many analysts suggest that cloud based offerings tend to be far more secure due to the increased emphasis on security concerns during the research and analysis phases of project implementation. One thorough discussion with references can be found here).

云的另一个缺点是产品中存在的漏洞。不，这不是安全性，尽管这当然是一个大问题。最大的漏洞，尤其是对于IaaS而言，是对网络连接的绝对依赖。无论是私有云，公共云还是某种混合云，所有云活动都很大程度上取决于与提供商的连接。网络中断给传统基础架构带来不便，使基于云的服务的运营陷入停顿。而且，对网络的这种依赖几乎总是包括隐藏的成本和更高的带宽使用率。因此，现在您需要更高带宽下的更多连接性，这将构成云计算的真正缺点，尤其是对于设计不良的IaaS解决方案而言。 (顺便说一句，许多分析师建议，由于在项目实施的研究和分析阶段对安全性问题的日益重视，基于云的产品往往更加安全。在此可以找到有关参考的详尽讨论)。

Finally there is the issue of data ownership. For example, what happens to your data when you no longer want to use a cloud service or provider. Because IaaS offerings are the foundation of your environment, or at least an extension of that foundation, anything residing there will need to be transferred off the providers offerings before you can decommission it’s use. This activity is common for IT personnel, but what if you don’t have that staff anymore? Who is responsible for the move and at what cost? Do you have to hire contractors or can something be worked out with the provider (new or old)? And what about the simple answer? Can’t you just move the entire virtual server? This is the true ugly state as it relates to IaaS. As it turns out, the answer may very well be no. There is a whole host of reasons stemming from who owns what data, the variety of licensed services available to the virtual machines as well as the software that runs on them, and even what virtualization solution was used, if any. One of the most basic examples involves the fact that IaaS providers often provide the OS and own that license, but you own the server application and any licensing involved. How do you go about transitioning that data?

最后是数据所有权问题。例如，当您不再想要使用云服务或提供商时，数据将发生什么。因为IaaS产品是您环境的基础，或者至少是该基础的扩展，所以在停止使用它之前，必须将任何驻留在其中的东西从提供商产品中转移出去。此活动对于IT人员来说很常见，但是如果您再也没有该人员了，该怎么办？谁负责此举，费用是多少？您是否需要雇用承包商或可以与提供者(新的或旧的)合作？那么简单的答案呢？您不能只移动整个虚拟服务器吗？这是与IaaS相关的真正的丑陋状态。事实证明，答案很可能不是。造成这种情况的原因很多，原因是谁拥有什么数据，虚拟机可用的各种许可服务以及在虚拟机上运行的软件，甚至使用了哪种虚拟化解决方案(如果有)。最基本的示例之一涉及以下事实：IaaS提供程序通常提供操作系统并拥有该许可证，但是您拥有服务器应用程序和所涉及的任何许可证。您如何过渡数据？

Another more insidious example to consider is what happens if you don’t pay, or there is a delay in payment? Do you get your infrastructure turned off, or can you keep using it for a certain amount of time? Does the virtual machine and data on it get destroyed when it is “turned off”? If so, how soon? I have seen many companies on the brink of closure. Some return from the brink to be true success stories. However, when the creditors come knocking and customers are late paying, if your infrastructure is turned off you might as well forget about recovery.

另一个比较阴险的例子是，如果您不付款，或者付款延迟，会发生什么？您是否关闭了基础架构，或者可以继续使用一段时间？ “关闭”虚拟机和虚拟机上的数据是否会销毁？如果是这样，多久？我已经看到许多公司濒临倒闭。有些人濒临倒闭，成为真正的成功故事。但是，当债权人敲门而客户拖欠付款时，如果您的基础架构被关闭，您可能会忘记恢复。

The easy answer to many of these situations, of course, is well negotiated contracts covering as many conceivable situations as possible. Do your homework and ensure you have your data available when and where you need it. Prepaying annually for a guaranteed minimum level of service you are going to use, may give extra leverage as a customer and ensure complete availability over the long term. Other options may make sense as well. Don’t forget to play the vendors off one another during negotiations as well, at least to the extent possible. If you use this tactic, vendors are often more flexible on non-monetary aspects so take advantage of that and use the negotiation table to get the required flexibility for their stated price rather than trying to reduce price for the services provided. After all, it is just two different sides of the same service – you still get more for the price. What other aspects have you seen that you need to be wary of? Post them here for all to take note….

当然，对这些情况中的许多问题的简单回答是经过精心谈判的合同，其中涵盖了尽可能多的可能情况。做功课，确保在需要的时间和地点都可以使用数据。每年预先付费以保证将要使用的最低服务水平，这可能会给客户带来额外的影响，并确保长期的完全可用性。其他选项也可能有意义。至少在可能的范围内，别忘了在谈判过程中互相打败供应商。如果您采用这种策略，则供应商通常在非货币方面更为灵活，因此请充分利用这一优势，并使用协商表为其声明的价格获得所需的灵活性，而不是尝试降低所提供服务的价格。毕竟，这只是同一服务的两个不同方面–您仍然可以从价格中获得更多。您还看到其他哪些方面需要警惕？将它们张贴在这里，以便所有人记录…。