Government of Canada (GC)
Cloud Computing: Information Technology
Shared Services (ITSS) Roadmap
Government of Canada (GC)
Cloud Computing: Information Technology
Shared Services (ITSS) Roadmap
Jirka Danek, Chief Technology Officer
Information Technology Services Branch
Public Works and Government Services Canada
April 2010
Agenda
GC IT Services Governance Structure
Accomplishments to Date
Cloud Concepts
GC IT Services Governance Structure
Dept
Dept’’ll IM/IT IM/IT
Steering Committee Steering Committee Executive Executive Committee Committee Strategic Review Strategic Review Committee Committee
Product & Services Executive Committee (PSEC) ITSS Council GC CIO IT Shared Services MB (ITSSMB) IT Security A.P.
Aligned with GC Profile of IT Services TBS Enterprise
Governance
Stakeholder Engagement PWGSC
Governance
ITS Operational Governance DCS W.G. DCE W.G. Telecomm W.G. IT Security W.G.
IT Common & Shared Services
• CIO leads policy renewal, stakeholder
Demand requirements and enterprise
Transformation Executive Committee IT Security W.G.IT Security W.G. Telecomm W.G.Telecomm W.G. DCE W.G.DCEW.G. DCS W.G.DCS W.G. Business Intake Review Board (BIRB) Product Portfolio Review Committee (PPRC) Telecomm A.P. DCE A.P. DCS A.P. CIMB Heads of IT Small Dep’ts / Agencies CIO Council ADM Security & Identity
Accomplishments to Date
Obtained agreement on Language and
Definitions for Cloud Computing
Received ITSS Management Board
endorsement of GC Cloud Computing
Roadmap
A Working Definition of Cloud Computing
Cloud computing is a model for enabling convenient, on-
demand network access to a shared pool of configurable
computing resources (e.g. servers, storage, applications,
and services) that can be rapidly provisioned and released
with minimal management effort or service provider
interaction.
This cloud model promotes availability and is composed of
five essential
characteristics,
three
service models
, and
four
deployment models
.
5 Essential Cloud Characteristics
1
•On-demand self-service •Ubiquitous network access •Resource pooling
-Location independence -Homogeneity
•Rapid elasticity •Measured service
3 Cloud Computing – Service Models
Access & Peering Networks
Ubiquitous Network Connectivity
Infrastructure as a Service (IaaS)
Cloud Services
Ubiquitous Network Connectivity Software as a Service (SaaS) Platform as a Service (PaaS)
SOA/Web Services Based Virtualized Applications
Web, Applications & Database Hosting
Virtual Computing &
Storage *
*
* DCS Scope
Cloud Computing – Client Options
Ubiquitous Network Connectivity IaaS Provider Network SaaS PaaS IaaS PaaS SaaS Client Network Client Infrastructure Client Platform
Client Application SaaS
Service Provider Owned Client Owned Client Content
Client Content and Application Hosted on a Service Provider Platform as a Service
4 Cloud Deployment Models
PRIVATE CLOUD
Operated solely for an organization.
PRIVATE CLOUD
Operated solely for an organization.
COMMUNITY CLOUD
Shared by several organizations and supports a specific community that has shared concerns
COMMUNITY CLOUD
Shared by several organizations and supports a specific community that has shared concerns
PUBLIC CLOUD
Made available to the general public or a large
industry group and is owned by an organization
selling cloud services.
PUBLIC CLOUD
Made available to the general public or a large
industry group and is owned by an organization
selling cloud services.
HYBRID CLOUD
Composition of two or more clouds (private, community, or public) that remain unique entities
but are bound together by standardized or proprietary technology that enables data and
application portability
HYBRID CLOUD
Composition of two or more clouds (private, community, or public) that remain unique entities
but are bound together by standardized or proprietary technology that enables data and
Business Case for GC Cloud Computing
Current GC
Infrastructure
To-Be GC
Infrastructure
•Purpose built servers racked for
each application
•Underutilized capacity (e.g. 15%)
•Long lead times for provisioning
(i.e. weeks to months)
•Sub-optimal use of data centre
space, power and cooling
•Costly
•Standardized virtual servers for
different types of applications
•Optimum utilization (e.g. 80%)
•Rapid provisioning (i.e. minutes to
days)
•Reduced use of space, power and
cooling
GC Cloud Architecture – Logical
GENS – Government Enterprise Network Services: consolidation of all telecom services within the GC.
SCNet – Secure Channel Network: secure, government-wide telecommunications network for connecting systems within the GC. SMS – Shared Metropolitan Area Network Service (SMS): provision of high speed network connectivity to GC organizations.
Security Domains
Software as a Service
ITSS Security Domain
Facility Services Infrastructure as a Service Platform as a Service RCMP DFAIT Client Y MSFT Mid-Range Appln Hosting Mainframe Appln Hosting
Other Gov’t Dept Security Domains External Provider Security Domain Brokered Services Hosted Services RDIMS VCS Email GEDS 2.0 Infrastructure Components Hosted Database Network Services Firewall Services Anti-Virus Services VPN Services Property Management Services Personnel Security Clearance Program Health Canada Infrastructure Canada Client X Managed Storage Web Hosting
Security Domains and Interface Points (SDIPs)
IaaS
Security
Domain
PaaS
Security
Domain
ITSS Community Cloud Service Offering – Choice for CIOs
Departmental Environment
Private Cloud
Common Messaging
Platform
Next Service Adopter
Directory Domino R8 Microsoft Free / Busy Mobile Integration PWGSC Private Cloud
Common Supporting Services
SCNet
ITSS Community Cloud
PAY, Pension, CampusDirect,
GEDS, GC Intranet, Jobs, Canada.gc.ca, etc.
Servers
Enabling the ITSS Community Cloud
High Speed Network Connectivity
Data Center Infrastructure & Application Virtualization
Authorization &
Authentication Services
Directory
Services
Cloud
Provisioning Services
Cloud Provisioning Services
IaaS
Security Services
Partitions/ VMs Virtual Machines Virtual Storage Virtual FirewallsPaaS
SaaS
Mainframe Solutions Mid Range Solutions Database Solutions Desktop Platform Solutions Shared Document Management Shared Corporate Applications Shared Collaboration Services Shared Travel Application Virtual LANs Virtual CircuitsComplete
In Progress
Roadmap to Community Cloud Computing
Short Term
Long Term
SaaS
•
Internal Collab (GEDS 2.0,
GCPedia, GCConnex, GCForum,
VPCS)
•
Virtual Office / VOIP / Collaboration v2
•
Federated ID Management and
Directories
PaaS
•
Commoditized Web Hosting
•
Cloud Based Application and
Database Hosting
•
On-Demand / Self-Serve
•
Process Automation
IaaS
•
•
Virtual Storage Service
Virtual Computing Service
•
On-Demand / Self-Serve
•
Departmental Private Cloud Peering
•
Public Cloud Peering
•
Process Automation
Network
•
SCNet Contract Extension
•
SMS Extension East-West
•
Internet Secure Perimeter
GC ITSS Enterprise Collaboration – Gov2.0
Shared access cards
GC Open Collaboration
Social Networking GCPedia Wiki GC Forums CommonGC Directory Dept’l Directories
Common Login Credentials
Compensation Web Application and other GC enterprise applications Presence Chat Notification Workspaces Conferencing Wiki Tags Discussions
