Disasters & Disaster Recovery in the Cloud
May 10, 2010 Cloud Computing, Fault Tolerance, Papers
This past weekend, Amazon EC2 experienced a power outage that brought down servers for about seven hours. Amazon has experienced a number of outages over the last few years–not surprising given the size of their operations. However, this makes it clear how important disaster recovery and high availability will be as more services are deployed into the cloud, and also suggests that achieving the highest level of reliability may require utilizing redundant services from multiple cloud providers.
This is something I’ve been thinking about quite a bit lately, and in fact just a few days ago I was happy to learn that our paper, Disaster Recovery as a Cloud Service: Economic Benefits & Deployment Challenges, has been accepted into this year’s Workshop on Hot Topics in Cloud Computing (HotCloud 2010). In our paper, we survey why we think cloud computing platforms are going to become increasingly popular for providing cheap disaster recovery services.
Clouds can be used to provide a variety of backup mechanisms ranging from cold replicas that are periodically synchronized up to hot standbys that are always in sync and can take over as soon as a failure is detected. In practice, we think that a middle class of warm replicas is where the cloud can provide the greatest benefit. A warm replica could be implemented as an EC2 VM that is not aways running, but whose disk (an EBS volume) is kept regularly up to date by a replication manager VM. This replication manager can handle synchronizing the disk state for a large number of applications, but the customer will not have to pay for the active VM costs of those applications until a failure actually occurs and the VMs are booted up.
Check the paper for all the details, including a cost analysis of providing DR for various application types.
Hot Cloud 2009
Jun 15, 2009 Cloud Computing, Conferences
Here are my notes on some of the interesting talks at Hot Cloud 2009. The full list of talks and papers are available at the hot cloud site. There were interesting talks on a variety of topics, but my notes here focus mostly on cloud platforms and work around resource provisioning from the first half of the day.
Open Cirrus Cloud Computing Testbed: Federated Data Centers for Open Source Systems and Services Research
Roy Campbell, Indranil Gupta, Michael Heath, and Steven Y. Ko, University of Illinois at Urbana-Champaign; Michael Kozuch, Intel Research; Marcel Kunze, KIT, Germany; Thomas Kwan, Yahoo!; Kevin Lai, HP Labs; Hing Yan Lee, IDA, Singapore; Martha Lyons and Dejan Milojicic, HP Labs; David O’Hallaron, Intel Research; Yeng Chai Soh, IDA, Singapore
This is a very large (more than 10K nodes spread across 9 sites) testbed being setup by HP and others to study large scale cloud computing problems. They are focusing on computation provisioning issues, and can provide users with either full physical or virtual resources.
Nebulas: Using Distributed Voluntary Resources to Build Clouds
Abhishek Chandra and Jon Weissman, University of Minnesota
The idea here is to explore the potential for creating peer-to-peer style cloud computing platforms that uses resources provided by volunteers similar to something like SETI @home. I like this idea a lot, but there have been many attempts at making things like volunteer based network file systems which never quite took off, and this seems even harder. The difficulty will be determining what the basic platform that people are given access to is like (ie. can you run any app you want within some VM, or is it a specific platform you must develop your app against to make it work), and how do you make the resources shared by users not impact their own application performance. People are pretty willing to share network bandwidth and disk space, but that is because those are generally over provisioned resources. CPU is over-provisioned in a different way — most of the time desktop users use only a fraction of the power provided by their system, but when they do decied to go do something computation intensive, they expect it to respond quickly. This also reminds me of the “transparent memory contribution” work done by Jim Cipar when he was still at UMass, since it had to deal with similar issues of volunteering resources in as transparent a way as possible.
The Case for Enterprise-Ready Virtual Private Clouds
Timothy Wood and Prashant Shenoy, University of Massachusetts Amherst; Alexandre Gerber, K.K. Ramakrishnan, and Jacobus Van der Merwe, AT&T Labs—Research
I thought this paper was really great, but maybe I’m biased since I wrote it. I’ve written a separate blog post about my own work, but the gist is that current cloud computing platforms are insufficient for enterprise users, and we propose using network virtualization techniques to make seamless and secure connections between the cloud resources and enterprise sites.
ElasTraS: An Elastic Transactional Data Store in the Cloud
Sudipto Das, Divyakant Agrawal, and Amr El Abbadi, University of California, Santa Barbara
The idea here is that databases currently don’t scale well into the cloud. Instead people are using simpler (but more easily scaled) key-value stores to keep track of data in the cloud. This doesn’t work well because key stores don’t provide the transaction and consistency features of real databases. They propose Elastras – a scalable, trasactional data store based around the idea of partitioned databases. It wasn’t clear how difficult the problem of determining how to partition data is in the first place, as it tends to be application specific.
Reflective Control for an Elastic Cloud Application: An Automated Experiment Workbench
Azbayar Demberel, Jeff Chase, and Shivnath Babu, Duke University
The idea of reflection is to make an application change its behavior based on the available resources. This could be based on energy or computation resources. This lets you opportunistically exploit surplus resources, and to defer work during congestion. An example of a reflective application is a digital experiment (generally has large data sets, can be partitioned, does not have strong time requirements). Seems to me like this is useful for any batch processing style application. The work focuses on figuring out how to determine the utility of running different experiments depending on what resources are available, which may be very difficult since the experiment design space can be huge. It seems to me that the idea of reflective applications is useful even at a more basic level to both let applications be aware of what resources are available and for service providers to know what applications desire.
Colocation Games and Their Application to Distributed Resource Management
Jorge Londoño, Azer Bestavros, and Shang-Hua Teng, Boston University
This paper explores the placement problem within data centers using game theory techniques. In general they find that a Nash Equilibrium will not be reached, but that in a restricted environments it will always converge. I’ll be interested to look through their results more carefully to better understand how the potential for multiplexing resources in these environments can be reduced based on the self-interests of users.
Virtual Putty: Reshaping the Physical Footprint of Virtual Machines
Jason Sonnek and Abhishek Chandra, University of Minnesota
The idea here is that the physical footprint required by a VM can vary depending on its environment. For example, VMs colocated together may be able to share memory, or may require much fewer network resources if they can put on the same LAN. To exploit this, you need to estimate the “virtual” footprint of a VM that captures how its physical requirements can change depending on its environment. The first challenge here is to efficiently capture this model — you will only be able to get a significant benefit from this kind of technique if it is being applied across a very large number of VMs (my memory sharing work suggests this as well). Second is the issue of determining how to deal with applications changing over time – memory and network communication patterns may change over time, so how often do you need to recompute the footprint?
Statistical Machine Learning Makes Automatic Control Practical for Internet Datacenters
Peter Bodík, Rean Griffith, Charles Sutton, Armando Fox, Michael Jordan, and David Patterson, University of California, Berkeley
The goal here is to model application performance and automate management online. Models are based on data gathered from the system as it is running, allowing it to be adapted as more data is produced. Has some automated techniques to detect phase shifts in application type that will require a new model. The problem with these systems is always a question of how well they can deal with data that is outside of their training data. One of this system’s benefits is supposed to be that it doesn’t rely on training data produced from experimental setups, and instead builds the model on the fly as data is gathered. Bbut of course that may mean that the models are only really applicable for “normal” operating conditions, and that it will not be able to make reasonable predictions for what will happen after a load spike.
Other Hot Cloud Reports
I’ll add any other hot cloud blogs or reports as I find them (or comment below).
- NetworkWorld 5 Cool Cloud Computing Research Projects – sadly does not mention me… ;]
Hot Cloud 2009: The Case for Enterprise Ready Virtual Private Clouds
Jun 15, 2009 Cloud Computing, Papers
The work I presented at Hot Cloud was about what enterprise customers need from cloud computing platforms, and how we can go about building enterprise clouds that are more secure, transparent, and flexible.
You can find a copy of our paper here, and my slides here. Or you can get a summary of our ideas below.
Here are the three key features we feel are lacking from existing cloud platforms:
Security: Enterprises need strong security guarantees about the isolation of both the computation and network resources they are getting from the cloud. Existing systems rely on firewall rules for security that must be configured on a per-VM basis. While firewalls are a very powerful form of access control, they are incredibly fine grain and need to be carefully configured. This is a especially a problem in highly dynamic (ie. cloud) environments where new VMs are often being created or moved between servers.
Transparency: Another problem with cloud computing is that the resources it gives you are completely separated from the systems an enterprise is already running within its data centers. This makes it difficult to deploy applications since you can’t get the abstraction of having your cloud resources seamlessly connected to your existing LANs within the enterprise.
Resource Flexibility: There are two issues here. First, existing cloud platforms grant users very limited control over the network resources connected to their VMs. This means, for example, that it is impossible to do something like reserve a high bandwidth link between a pair of VMs, and certainly not between a VM and the enterprise site that is going to be accessing it. Secondly, cloud platforms are not as flexible as they should be: if you replicate a VM to increase the processing power of an application you need to deal with these security and transparency issues all over again.
To help provide these three features, we propose the idea of a Virtual Private Cloud, that uses VPNs to securely connect groups of VMs within a cloud data center back to the enterprise sites that will use them. VPNs make it so that the cloud resources are only accessible by other members of the same VPN. This is a much coarser grain access control mechanism than firewalls, but it is much cleaner and we use MPLS based VPNs that have the benefit of being both highly scalable for enterprises that may run many hundreds or thousands of VMs, and that require no endhost configuration on the VMs — the VPN is entirely setup at the routers at the cloud and enterprise sites. Finally, there is the option of using layer 2 VPNs (a Virtual Private LAN Service) to bridge the cloud computing data center and enterprise networks, giving the abstraction that cloud resources are seamlessly connected to the enterprise’s own LAN.
We are building a system that will implement this sort of system, and are exploring how it can be used to simplify VM migration over the WAN and for providing high availability services capable of seamlessly failing an application over from one cloud data center to another.
The End of Desktops (and all your applications)
May 7, 2009 Cloud Computing
I have to agree with Google’s Eric Schmidt about the importance of cloud services on the future of everyday computing. Desktop style applications that run entirely on your own computer don’t have much life left because 1) people will have too many different devices, so keeping them all synced with local storage is a pain, 2) it’s easier for application developers to maintain a single online version of an app instead of dealing with pushing out updates and bug fixes to users, 3) forcing users to go online to get an app prevents piracy, 4) applications can get as much or as little computation and storage power as they need from the cloud, 5) etc. Sadly, I think it might be #3 that is the real motivation in the end for many companies.
Cloud based services are also better for the environment. If the average everyday computer can be reduced down to a basic thin client for accessing remote cloud services, that reduces the cost and energy usage of home devices. The applications running in the cloud can in turn exploit massive degrees of multiplexing to reduce their own energy costs. As it stands today, most peple’s computers are far more powerful than they really need to be, and they spend a lot of time sitting around idle. You might as well give consumers devices that are as simple as possible. Make them so simple that they don’t crash all the time. Make it so they don’t require technically adept family members to service them a few times a year. Then people will spend less time being frustrated by their computers, and more time able to use the applications running on them.