云计算的安全架构与技术_第9节.ppt

How Cloud Computing Works Various providers let you create virtual servers Set up an account, perhaps just with a credit card You create virtual servers (virtualization) Choose the OS and software each instance will have It will run on a large server farm located somewhere You can instantiate more on a few minutes notice You can shut down instances in a minute or so They send you a bill for what you use * Any Nasty Details? How do I pick a provider? Am I locked in to a provider? Where do I put my data? What happens to my data when I shut down? How do I log in to my server? How do I keep others from logging in (security)? How do I get an IP address? * One Really Important Caveat Remember though These solution will not auto-scale themselves They are merely providing you with the platform You must manage the scaling as if you had them running in your own data cenetr * * Networking: ICF and ICW * Related Networking * TCP Port Number Purpose Notes 1024 Virtual Server Administration Web Site The port can be changed during the installation of Virtual Server. Administrators can also enable SSL within IIS (Internet Information Services). 5900 Virtual Machine Remote Control (VMRC) Server By default, the VMRC server is disabled. The port number can be modified using the Virtual Server Administration Web Site. 88 137 138 VMRC Kerberos Authentication These ports are used only when Kerberos is being used. 137 139 NetBIOS over TCP/IP This is only necessary if NetBIOS is being used for file transfers across the firewall. CPU Management CPU Resource Allocation Weight-Based Resource Allocation Ensures full resource usage Constraint-Based Resource Allocation Reserved capacity Maximum capacity More complicated, but finer-grained control * CPU Management Host CPU Options: Hyper-Threading Dual-Core / Multi-Core 64-Bit (Large Memory Support) Virtualization Support AMD’s Pacifica Intel’s VT Heat-Related Issues CPUs will automatically st