Is it a private cloud or a public cloud?
As any small company and they will say public.
Ask any large one and they will say private.
Any cloud of any use that is. Of course everyone will agree that Web 2.0 startups can’t run on anything but a public cloud – purely for the cost. Smart (?) businesses will agree that for them there can only be a private cloud – the risks are otherwise too high.
Now I won’t dive down the mineshaft and rant on about where actual business risks lie, and that frequently it’s not about over-protecting IT areas. What I do want to do is say just a little about virtual private clouds.
Imagine: We all wake up tomorrow and Barnes & Noble (the bookstore for those not in the US) buy Amazon. Unlikely of course, but hang in there for a moment.
Now, has Barnes & Noble just moved a significant part of their business (the new part) onto a public cloud? Or has the public cloud (EC2/S3) now become a private cloud, and will everyone have to get off it?
No. It remains as it was, Amazon run their services on a public cloud, although a virtual private part of it. Just like every single datacentre of every single company. Your datacentre is (virtually) walled off from the rest of the internet, but it is most deinfinitely connected.
So you already have a virtual private datacentre, and if you’re virtualising within it, you have a virtual private cloud as well.
So what is stopping large businesses move to a real virtual private cloud? Here are 4 reasons:
- Fear for the data. Fear of losing the data, having it stolen.
- Fear for the service disruption. You don’t control the servers – you can lose the service.
- Fear of the unknown. There are more than 50 definitions of what a cloud is, so who knows what you’re actually getting?
- Fear of lock-in. Once you are on cloud A, you can’t easily go to cloud B should you chose.
Let’s debunk these 1 by 1.
1) Fear of losing data. Aside from the physical security, your data is as protected as it is in your datacentre. You control the firewalling, certificates, user-id’s and passwords. The reality is it’s just as safe on most clouds as it is in your own hands – unless you’ve disconnected your servers from the network. Anything you have now (DMZ’s, double-firewalls etc.) can be built on the cloud, so get over the fear.
2) Fear of service disruption. Bad sys admin is bad sys admin. Poor database management remains poor database management. So what happens in your datacentre is what happens on the cloud – with one exception – the layer below the OS. And here the cloud promises – and delivers – exceptional abilities to replicate servers, quickly commission replacements, and ingeneral make your service disruption a whole lot shorter. If loadbalancers go down and break, you have a new one installed and comissioned in under 5 minutes. Fear is the wrong word: Optimism about shorter service disruptions is what you should have.
3) Fear of the unknown. Large vendors are desperately trying to pull parts of your datacentres into theirs. They have been for years, calling it co-location (where in reality you are generally 1 firewall away from the sysadmin that is managing another companies systems – in the same building – from the same machine). Now they are also calling it ‘cloud’ but are doing so by spreading some FUD about the risks/uncertainties of using the public cloud for private purposes. Getting over this fear is most difficult – you need good advice that you trust. Unfortunately this will not be forthcoming from most IT vendors in the short-term, who are still looking for a traditional lock-in scenario.
4) Fear of lock-in. Talking about lock – you might think cloud will lock you into a particular cloud-vendor. At the moment; it will. But it locks you in about as much as you are locked into your current datacentre supplier (presuming it’s on their premises). Moving anything to another vendor is a real pain – and cost. But with the cloud this gets easier – if not for the simple reason of no longer having to move the physical hardware. But things are getting even better – with Eucalyptus and Ubuntu teaming up, there is now a second ‘Amazon’ compliant protocol around, and it seems like there will soon be a de-facto cloud standard. This means that soon (maybe even in 2009) you will start seeing the ability to move your instances from one cloud to another (that is across vendors), whilst maintaining connectivity and services.
Whilst not comprehensive, the list has most of the fears I run into when talking to companies on a daily basis. I hope you agree with the content. If not, let me know by posting a comment.
Pauwl Lunow