O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Cloud Computing Design Patterns

Cloud Computing Design Patterns

1 review
by Thomas Erl, Robert Cope, Amin Naserpour
Publisher: Prentice Hall
Release Date: June 2015
ISBN: 9780133858624
View table of contents
Start reading

Book Description

“This book continues the very high standard we have come to expect from ServiceTech Press. The book provides well-explained vendor-agnostic patterns to the challenges of providing or using cloud solutions from PaaS to SaaS. The book is not only a great patterns reference, but also worth reading from cover to cover as the patterns are thought-provoking, drawing out points that you should consider and ask of a potential vendor if you’re adopting a cloud solution.”
--Phil Wilkins, Enterprise Integration Architect, Specsavers

“Thomas Erl’s text provides a unique and comprehensive perspective on cloud design patterns that is clearly and concisely explained for the technical professional and layman alike. It is an informative, knowledgeable, and powerful insight that may guide cloud experts in achieving extraordinary results based on extraordinary expertise identified in this text. I will use this text as a resource in future cloud designs and architectural considerations.”
--Dr. Nancy M. Landreville, CEO/CISO, NML Computer Consulting

The Definitive Guide to Cloud Architecture and Design
Best-selling service technology author Thomas Erl has brought together the de facto catalog of design patterns for modern cloud-based architecture and solution design. More than two years in development, this book’s 100+ patterns illustrate proven solutions to common cloud challenges and requirements. Its patterns are supported by rich, visual documentation, including 300+ diagrams.

The authors address topics covering scalability, elasticity, reliability, resiliency, recovery, data management, storage, virtualization, monitoring, provisioning, administration, and much more. Readers will further find detailed coverage of cloud security, from networking and storage safeguards to identity systems, trust assurance, and auditing.

This book’s unprecedented technical depth makes it a must-have resource for every cloud technology architect, solution designer, developer, administrator, and manager.

Topic Areas

  • Enabling ubiquitous, on-demand, scalable network access to shared pools of configurable IT resources

  • Optimizing multitenant environments to efficiently serve multiple unpredictable consumers

  • Using elasticity best practices to scale IT resources transparently and automatically

  • Ensuring runtime reliability, operational resiliency, and automated recovery from any failure

  • Establishing resilient cloud architectures that act as pillars for enterprise cloud solutions

  • Rapidly provisioning cloud storage devices, resources, and data with minimal management effort

  • Enabling customers to configure and operate custom virtual networks in SaaS, PaaS, or IaaS environments

  • Efficiently provisioning resources, monitoring runtimes, and handling day-to-day administration

  • Implementing best-practice security controls for cloud service architectures and cloud storage

  • Securing on-premise Internet access, external cloud connections, and scaled VMs

  • Protecting cloud services against denial-of-service attacks and traffic hijacking

  • Establishing cloud authentication gateways, federated cloud authentication, and cloud key management

  • Providing trust attestation services to customers

  • Monitoring and independently auditing cloud security

  • Solving complex cloud design problems with compound super-patterns

    •

    Table of Contents

    1. About This eBook
    2. Title Page
    3. Copyright Page
    4. Praise for This Book
    5. Dedication Page
    6. Contents at a Glance
    7. Contents
    8. Acknowledgments
    9. Chapter 1. Introduction
      1. Objective of This Book
      2. What This Book Does Not Cover
      3. Who This Book Is For
      4. Origin of This Book
      5. Recommended Reading
      6. How This Book Is Organized
        1. Chapter 3: Sharing, Scaling and Elasticity Patterns
        2. Chapter 4: Reliability, Resiliency and Recovery Patterns
        3. Chapter 5: Data Management and Storage Device Patterns
        4. Chapter 6: Virtual Server and Hypervisor Connectivity and Management Patterns
        5. Chapter 7: Monitoring, Provisioning and Administration Patterns
        6. Chapter 8: Cloud Service and Storage Security Patterns
        7. Chapter 9: Network Security, Identity & Access Management and Trust Assurance Patterns
        8. Chapter 10: Common Compound Patterns
        9. Appendix A: Cloud Computing Mechanisms Glossary
        10. Appendix B: Alphabetical Design Patterns Reference
      7. Additional Information
        1. Symbol Legend
        2. Pattern Documentation Conventions
        3. Updates, Errata, and Resources (www.servicetechbooks.com)
        4. Cloud Computing Design Patterns (www.cloudpatterns.org)
        5. What Is Cloud? (www.whatiscloud.com)
        6. Referenced Specifications (www.servicetechspecs.com)
        7. The Service Technology Magazine (www.servicetechmag.com)
        8. CloudSchool.com™ Certified Cloud (CCP) Professional (www.cloudschool.com)
        9. Social Media and Notification
    10. Chapter 2. Understanding Design Patterns
      1. About Pattern Profiles
        1. Requirement
        2. Icon
        3. Problem
        4. Solution
        5. Application
        6. Mechanisms
      2. About Compound Patterns
      3. Design Pattern Notation
        1. Capitalization
        2. Page Number References
      4. Measures of Design Pattern Application
      5. Working with This Catalog
    11. Chapter 3. Sharing, Scaling and Elasticity Patterns
      1. Shared Resources
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Workload Distribution
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Dynamic Scalability
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Service Load Balancing
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Elastic Resource Capacity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. Elastic Network Capacity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Elastic Disk Provisioning
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Load Balanced Virtual Server Instances
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Load Balanced Virtual Switches
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Service State Management
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Storage Workload Management
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      12. Dynamic Data Normalization
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      13. Cross-Storage Device Vertical Tiering
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      14. Intra-Storage Device Vertical Data Tiering
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      15. Memory Over-Committing
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      16. NIC Teaming
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      17. Broad Access
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    12. Chapter 4. Reliability, Resiliency and Recovery Patterns
      1. Resource Pooling
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Resource Reservation
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Hypervisor Clustering
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Redundant Storage
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Dynamic Failure Detection and Recovery
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. Multipath Resource Access
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Redundant Physical Connection for Virtual Servers
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Synchronized Operating State
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Zero Downtime
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Storage Maintenance Window
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Virtual Server Auto Crash Recovery
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      12. Non-Disruptive Service Relocation
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    13. Chapter 5. Data Management and Storage Device Patterns
      1. Direct I/O Access
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Direct LUN Access
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Single Root I/O Virtualization
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Cloud Storage Data at Rest Encryption
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Cloud Storage Data Lifecycle Management
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. Cloud Storage Data Management
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Cloud Storage Data Placement Compliance Check
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Cloud Storage Device Masking
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Cloud Storage Device Path Masking
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Cloud Storage Device Performance Enforcement
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Virtual Disk Splitting
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      12. Sub-LUN Tiering
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      13. RAID-Based Data Placement
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      14. IP Storage Isolation
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    14. Chapter 6. Virtual Server and Hypervisor Connectivity and Management Patterns
      1. Virtual Server Folder Migration
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Persistent Virtual Network Configuration
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Virtual Server Connectivity Isolation
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Virtual Switch Isolation
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Virtual Server NAT Connectivity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. External Virtual Server Accessibility
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Cross-Hypervisor Workload Mobility
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Virtual Server-to-Host Affinity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Virtual Server-to-Host Anti-Affinity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Virtual Server-to-Host Connectivity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Virtual Server-to-Virtual Server Affinity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      12. Virtual Server-to-Virtual Server Anti-Affinity
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      13. Stateless Hypervisor
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    15. Chapter 7. Monitoring, Provisioning and Administration Patterns
      1. Usage Monitoring
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Pay-as-You-Go
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Realtime Resource Availability
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Rapid Provisioning
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Platform Provisioning
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. Bare-Metal Provisioning
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Automated Administration
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Centralized Remote Administration
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Resource Management
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Self-Provisioning
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Power Consumption Reduction
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    16. Chapter 8. Cloud Service and Storage Security Patterns
      1. Trusted Platform BIOS
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Geotagging
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Hypervisor Protection
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Cloud VM Platform Encryption
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Trusted Cloud Resource Pools
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. Secure Cloud Interfaces and APIs
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Cloud Resource Access Control
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Detecting and Mitigating User-Installed VMs
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Mobile BYOD Security
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Cloud Data Breach Protection
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Permanent Data Loss Protection
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      12. In-Transit Cloud Data Encryption
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    17. Chapter 9. Network Security, Identity & Access Management and Trust Assurance Patterns
      1. Secure On-Premise Internet Access
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      2. Secure External Cloud Connection
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      3. Secure Connection for Scaled VMs
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      4. Cloud Denial-of-Service Protection
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      5. Cloud Traffic Hijacking Protection
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      6. Automatically Defined Perimeter
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      7. Cloud Authentication Gateway
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      8. Federated Cloud Authentication
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      9. Cloud Key Management
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      10. Trust Attestation Service
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      11. Collaborative Monitoring and Logging
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      12. Independent Cloud Auditing
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
      13. Threat Intelligence Processing
        1. Problem
        2. Solution
        3. Application
        4. Mechanisms
    18. Chapter 10. Common Compound Patterns
      1. “Compound Pattern” vs. “Composite Pattern”
      2. Compound Pattern Members
      3. Joint Application vs. Coexistent Application
      4. Private Cloud
      5. Public Cloud
      6. Software-as-a-Service (SaaS)
      7. Platform-as-a-Service (PaaS)
      8. Infrastructure-as-a-Service (IaaS)
      9. Elastic Environment
      10. Multitenant Environment
      11. Resilient Environment
      12. Cloud Bursting
      13. Burst Out to Private Cloud
      14. Burst Out to Public Cloud
      15. Burst In
      16. Secure Burst Out to Private Cloud/Public Cloud
      17. Cloud Balancing
      18. Cloud Authentication
      19. Resource Workload Management
      20. Isolated Trust Boundary
    19. Appendix A. Cloud Computing Mechanisms Glossary
      1. Application Delivery Controller (ADC)
      2. Attestation Service
      3. Attribute Authority
      4. Attribute-Based Access Control (ABAC) System
      5. Audit Monitor
      6. Authentication Gateway Service (AGS)
      7. Automated Scaling Listener
      8. Automatically Defined Perimeter (ADP) Controller
      9. Billing Management System
      10. Certificate
      11. Certificate Authority (CA)
      12. Certificate Revocation List (CRL)
      13. Certificate Trust Store
      14. Certificate Validation Service (CVS)
      15. Cloud Consumer Gateway (CCG)
      16. Cloud Storage Data Placement Auditor
      17. Cloud Storage Device
      18. Cloud Storage Device Performance Monitor
      19. Cloud Storage Management Portal
      20. Cloud Usage Monitor
      21. Cloud Workload Scheduler
      22. Cloud-based Security Groups
      23. Cryptographic Key Management System (CKMS)
      24. Digital Signature
      25. Domain Name Service (DNS)
      26. Encryption
      27. Endpoint Threat Detection and Response (ETDR)
      28. Enterprise Mobility Management (EMM) System
      29. Failover System
      30. Geotag
      31. Hardened Virtual Server Image
      32. Hardware-Based VM Discovery System
      33. Hardware Security Module (HSM)
      34. Honeypot
      35. Host-Based Security System (HBSS)
      36. Hypervisor
      37. Identity and Access Management (IAM)
      38. Intrusion Detection and Prevention System (IDPS)
      39. Live VM Migration
      40. Load Balancer
      41. Logical Network Perimeter
      42. LUN Masking
      43. Malware Hash
      44. Multi-Device Broker
      45. Network Forensics Monitor
      46. Orchestration Engine
      47. Pay-Per-Use Monitor
      48. Physical Uplink
      49. Platform Trust Policy
      50. Public Key Infrastructure (PKI)
      51. RAID-level Idenfitier
      52. Ready-Made Environment
      53. Remote Administration System
      54. Resource Cluster
      55. Resource Management System
      56. Resource Replication
      57. Sandbox
      58. Secure Token Service (STS)
      59. Security Information and Event Management (SIEM) System
      60. Single Sign-On (SSO)
      61. SLA Management System
      62. SLA Monitor
      63. State Management Database
      64. Storage Path Masking
      65. Sub-LUN Migration
      66. Threat Intelligence System
      67. Traffic Filter
      68. Traffic Monitor
      69. Trusted Platform Module (TPM)
      70. Virtual Appliance
      71. Virtual CPU (vCPU)
      72. Virtual Disk (vDisk)
      73. Virtual Firewall
      74. Virtual Infrastructure Manager (VIM)
      75. Virtual Network
      76. Virtual Private Cloud (VPC)
      77. Virtual Private Network (VPN)
      78. Virtual RAM (vRAM)
      79. Virtual Server
      80. Virtual Server Snapshot
      81. Virtual Server State Manager
      82. Virtual Switch
      83. Virtualization Agent
      84. Virtualization Monitor
      85. VPN Cloud Hub
    20. Appendix B. Alphabetical Design Patterns Reference
    21. About the Authors
      1. Thomas Erl
      2. Robert Cope
      3. Amin Naserpour
    22. Index