Sunday, July 12, 2009

Windows Azure and Cloud Computing Posts for 7/6/2009+

Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

Update 7/11/2009 and 7/12/2009: Additions, IsMyServerUp Azure app 
• Update 7/9/2009: Additions, Azure pricing forecast, Google outage explanation; 7/10/2009: SQL Azure Database CTP in August, SocketShifter App 
• Update 7/7 and 7/8/2009: Additions, Microsoft SQL Azure Database, Google Chrome OS


(Off-topic, but couldn't resist linking this Oakland Travel Video --rj)

Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

To use these links, click the post title to display the single article you want to navigate.

Azure Blob, Table and Queue Services

<Return to section navigation list> 

• Simon Munro announces the availability on CodePlex of his CatFax demo Azure app for moving SQL data to and from the cloud using SQL CLR, Azure WCF and Azure Storage. Simon offers a detailed description of the app in his Catfax – SQL CLR, WCF and Windows Azure post of 7/8/2009.

Jamie Thomson’s illustrated LINQPad and Azure post of 7/6/2009 shows you how to use LINQPad to query Azure tables using LINQ.

My Direct Access to Windows Live SkyDrive Files Has Weird Inconsistencies post of 7/5/2009 described problems I encountered when using SkyDrive as a data source for the Azure Blob Test Harness described here and in Targeting Azure Storage, my cover story for Visual Studio Magazine’s July 2009 issue.

SQL Azure Database (SAD)

<Return to section navigation list> 

•• David Robinson’s SQL Azure - Same great platform, just a better aligned name post of 7/9/2009 to the SQL Azure Team blog confirms my statement in Jeff Schwartz’s The Latest Name for SQL Services Is a Cosmetic Change post of the same date that the new name for SDS is only rebranding.

The real news is in Dave’s last paragraph:

The next few months are going to be exciting. On the technology front, we are getting ready for our next CTP in August. You can, however, get started today with SQL Express. The team has been working closely with some early adopters and the feedback has been overwhelming positive. Thank you for being so patient, the wait is almost over. Over the next day or two, we will be pushing additional details regarding SQL Azure, including posting our first round of SQL Azure Database documentation to MSDN (once it’s posted, I will post a link to it here). [Emphasis added.]

I’ve asked in a comment to Dave’s post what "get started today with SQL Express” means. I’ll update this item when I get an answer.

SunnyJC leaked to the Data Platform Insider blog that Microsoft SQL Services is now Microsoft SQL Azure and and SQL Data Services will become Microsoft SQL Azure Database. The link appeared on 7/8/2009 at about 9:30 AM PDT in the blog’s Atom feed but the post wasn’t accessible at 10:30 AM, so here’s the full text:

You are hearing it here first: Microsoft is updating the branding for SQL Services and SQL Data Services. Effective immediately, SQL Services will be called Microsoft SQL Azure, and SQL Data Services will be Microsoft SQL Azure Database. This name change doesn’t reflect a change in the products themselves; we will still be providing a powerful relational database foundation to the Azure Services Platform. By standardizing our naming conventions, we’re demonstrating the tight integration between the components of the services platform. More intuitive names also help to reinforce the relationships between our on-premises and cloud solutions. Ultimately, the goal is to drive simplicity and clarity for customers as they consider on-premises and cloud computing approaches for solving their IT needs.

There will be more news and updates related to our Software + Services strategy next week at Microsoft’s Worldwide Partner Conference in New Orleans. For those of you not attending in person, all the news and information can be found at: http://www.digitalwpc.com/. Check back often starting next Monday, July 13, for daily updates.

Mary Jo Foley seems to have scooped the trade press with her Microsoft updates more of its hosted services infrastructure post of 10:35 a.m. PDT.

The SQL Data Services team’s TSQL Support in SQL Data Services post of 7/8/2009 describes the T-SQL restrictions imposed by SQL Server 2008’s implementation for Windows Azure as a hosted multi-tenant system. The post covers restrictions to DDL, DML and manageability features. (The team apparently didn’t have the word or the authority to use the new name.)

Jason Massie (a.k.a. @StatisticsIO) reports on 7/6/2009 that this New SQL Server on Vsphere Whitepaper demonstates: 

SQL runs good on Vsphere and does so mostly out of the box with little SQL Server specific tweaking. I hope to see some production apps running on Vsphere soon and will compare the real world results with the lab results. I am pretty hopeful a Vsphere\SQL Server combination is a good one. The ESX 3.5\SQL Server whitepaper did not show physical vs. virtual numbers so one would assume that they were not stellar.

The whitepaper should be of interest to potential SDS users.

Hany Michael’s vSphere in a Box: A “Virtual Private Cloud” Blueprint post to 7/6/2009 might interest folks who read the preceding whitepaper.

.NET Services: Access Control, Service Bus and Workflow

 <Return to section navigation list>

Wictor Wilén’s Use Windows Azure as your SharePoint Records Center post of 7/10/2009 describes how to create a Web Cloud Service called AzureRecordsCenter, generate an IRecordsRepositorySoap.cs file containing the correct interface for the records management web service, and add a new Web Service named OfficialFile.asmx that implements four methods:

Wictor provides detailed instructions for deploying and using the AzureRecordsCenter project.

Matias Woloski shows how to use SocketShifter (see below) to connect via RDP to a remote SQL Server instance in his .NET Service Bus – Remote Desktop over Firewalls! post of 7/10/2009:

• Dana Gardner’s Don’t use an ESB unless you absolutely, positively need one, Mule CTO warns post of 7/8/2009 begins:

“To ESB or not to ESB,” that is the question Ross Mason, MuleSource CTO, raises in a his blog this week.

It would be heresy among marketers at many vendors, but the Mule CTO is actively discouraging architects and developers from using an enterprise service bus (ESB), including his company’s open-source version, unless they are sure they really need one. It would be heresy among marketers at many vendors, but the Mule CTO is actively discouraging architects and developers from using an enterprise service bus (ESB), including his company’s open-source version, unless they are sure they really need one. …

• Nuno Filipe Godinho posted Windows Azure Service Platform: July CTP Breaking Changes Announcement on 7/6/2009:

“(…)Queues and Routers data will NOT be persisted and restored after the maintenance. Users will need to back up their data if they wish to restore them after the July 2009 CTP release. Please see below for detail.

As previously announced, the existing Workflow Service will be removed from .NET Services in the July 2009 CTP release. Any solutions that currently rely on the Workflow Services will have to be modified on or before 7/7/2009 9am PST in order to continue functioning smoothly. Existing solution Workflow Service metadata such as Workflow Type will also be deleted and cannot be retrieved after the July 2009 CTP release. (…)”

Here’s the .NET Services Team’s full post 7/7/2009: Microsoft .NET Services July 2009 CTP Release.

Clemens VastersSocketShifter - Network virtualization over the .NET Service Bus post of 7/6/2009 suggests:

Anyone using the .NET Service Bus should take a good look at the SocketShifter project started by Rob Blackwell and Richard Prodger from AWS in the UK. AWS stands for Active Web Solutions, not for the "other" AWS. The full project is up on Codeplex.

What makes SocketShifter significant is that it takes the network abstraction of SOAP, WS-Addressing, and the Service Bus full circle and layers the very bottom of that stack - plain TCP connections - as a virtualization on top of the the stack. In other words: SocketShifter allows you to create full-fidelity, bi-directional socket connections through the .NET Service Bus.

We've created something very similar to SocketShifter last year (we're using it for a few internal purposes), but haven't made it public so far. I'm glad that the AWS folks built this, so that you get to play with it.

Live Windows Azure Apps, Tools and Test Harnesses

<Return to section navigation list> 

Burak Sarica’s Is My Server Up Azure Web site monitoring application tests a list of  server names and URLS every 15 minutes to determine if they are live. Burak’s http://twitter.com/ismyserverup account DMs your Twitter account if the account is down, so you must follow ismyserverup to receive alarms.

Jim Nakashima’s The Windows Azure CGI Web Role Template Explained post of 7/11/2009 explains why you should be interested in using Visual Studio when building a FastCGI application that runs on Windows Azure and then shows you how to use the template to configure, run in the Development Fabric, and prepare for deploying WebRoles written in PHP, IronPython or IronRuby.

Wally B. McClure (a.k.a. @wbm) offers TimedTweet, an Azure-hosted service at http://timedtweet.cloudapp.net/. It lets you create a user account, then write Tweets to be sent to Twitter at the time you specify, I think.

Right, Wally?

Update: By email, Wally says:

I’ve been working on some features that will allow companies to better manage their twitter interactions. You’ll probably see some new features over the next couple of weeks.

Microsoft announced that the beta version of its Hohm home-energy SaaS, which runs on Windows Azure, is available for user signup today. I was surprised to find that Pacific Gas & Electric Co. (a.k.a. PG&E Corp), the northern California utility (monopoly) wasn’t an electricity or natural gas provider for Hohm. In fact, the manual entry form rejected my attempt to enter its name.

David Lemphers shows you how “to run commands in the VM environment, kind of like a remote console, so [you can] see what [is] happening” by running diagnostics in the VM in his Looking Inside Windows Azure! post of 7/6/2009.

Jamie Thomson’s illustrated LINQPad and Azure post of 7/6/2009 shows you how to use LINQPad to query Azure tables using LINQ (copied from the Azure Blob, Table and Queue Services section.)

Azure Infrastructure

<Return to section navigation list> 

Michael Stiefel “is back to talk about the realities of Cloud Computing including offerings from Amazon, Google, and Microsoft Azure” in .NET Rocks Show #459, Michael Stiefel on Cloud Computing, of 6/30/2009.

According to Carl and Richard:

Michael Stiefel, principal of Reliable Software, Inc., is a consultant on software architecture and development and the alignment of information technology with business goals. He is currently a member of the OASIS Technical Committee developing a core SOA Reference Model. He is a Visiting Scholar at Massachusetts Institute of Technology in the Science, Technology and Society Program where his research and teaching focus is the teaching of engineering to high school and undergraduate students. …

•• Barbara Darrow works the Ouija board in her Microsoft Azure to undercut Amazon Web Services pricing post of 7/9/2009 with a forecast of a 10% discount on AWS pricing. Barbara writes:

If Microsoft Azure services cost 10% less than comparable Amazon Web Services, the company could win converts to its camp despite its late start.

Microsoft has told some big customers that the 10% differential is part of a broad pricing plan for the services. Another source said Microsoft used both AWS and services like Go Daddy as reference points for price comparisons on the business and consumer side. "They talked about coming in at 5% or 10% below what's already out there," he said.

According to one corporate IT manager, Microsoft, for purposes of the price comparison, used the less expensive AWS Linux compute and storage services as the baseline. …

I believe it will take more than a 10% price break for Microsoft to entice AWS users to move to Azure. What’s missing is a competitive pricing analysis for the Google App Engine. Another open issue is how Azure’s SLA terms compare with AWS and GAE.

•• John Willis offers “Cloud Wars,” A love letter to the cloud computing community, in this 7/10/2009 video (0:03:36) which targets the usual suspects [a.k.a. “thought leaders”] in the cloud computing community.

David Lemphers explains Azure’s ship room, which essentially is a regular meeting (we hold ours twice a week for an hour) where everyone involved in shipping the next release (in our case, billing) attends to triage bugs from the previous release, and discuss blocking issues for the upcoming release, in his Windows Azure Project Attire! (as in clothes) post of 7/9/2009.

David is a Senior Program Manager on the Windows Azure team

•• Randy Bias’ Cloud Futures Pt. 4: The Culling post of 7/9/2009 likens the coming natural selection of cloud-computing keepers with the “smoking crater” implosion of Internet startup ISPs and data centers (e.g., Exodus Communications). Randy writes:

… We’ve barely come out of the initial hype cycle (or perhaps we’re still deep in it) and there are quite a few small players in the space.  More importantly, there are many small players looking to enter.  At some point forcing functions will cause a major culling of the hosting and cloud computing industries, at least at the Infrastructure-as-a-Service (IaaS) layer, which is most susceptible to commodity pricing pressure.

I suspect the forcing functions will be twofold:

  1. The telcos and large players will ‘wake up’ and use commercial products like VMware’s vCloud, Citrix Cloud Center (C3), VMops, or EUCALYPTUS to drive wide adoption
  2. Serious consolidation will take place

Fights for market share will drive pricing pressure which will drive consolidation.  During the consolidation process large and small businesses alike will see both opportunity and failure.  If it’s anything like the original commercial Internet consolidation there will be a ‘great culling’ of all of the current and new players.  Only the strong or savvy will survive.

Following are Randy’s earlier members of this series:

My bet is on the Azure Services Platform as a keeper if the team gets its SLA(s) and pricing right and doesn’t have significant downtime between now and Azure’s release to Web (RTW).

Joe McKendrick’s Services that scale: the 'intercloud' emerges post of 7/7/2009 begins:

When clouds go global and services are shared across multiple time zones, perhaps that heralds the emergence of a new structure. Some have taken to calling this global confederation of services the “intercloud.”

Shades of the Internet, the network of networks. In a new post, Lori MacVittie provides a description of the intercloud:

“The intercloud is the natural evolution of global application delivery. The intercloud is about delivering applications (services) from one of many locations based on a variety of parameters that will be, one assumes, user/organization defined. Some of those parameters could be traditional ones: application availability, performance, or user-location. Others could be more business-focused and based on such tangibles as cost of processing.” …

• Greg Ness questions whether there are Storms Ahead for Cloud Computing Start-Ups, Well-Entrenched Players? in this 7/7/2009 post to SeekingAlpha.com, which begins:

I moderated a Cisco panel last week at Cisco Live! and it was readily apparent that enterprise cloud still required plenty of work from vendors and enterprise IT. No one was ready to endorse either a centralized or decentralized architecture (a move to the powerful intercloud); perhaps it’s because the network isn’t ready for infrastructure 2.0 demands.

• David Linthicum’s The Five Basic Characteristics of SOA post of 7/7/2009 contrasts Gartner’s "9 ways to measure SOA success” with his five “that are more specific to SOA.”

    1. The ability to alter schemas without affecting services and/or processes.
    2. The ability to alter services and/or processes, without altering schemas.
    3. The ability to create and alter core business processes using a configuration rather than a programming approach.
    4. The ability to leverage processes and services from outside of the enterprise, such as from a cloud computing provider.
    5. The ability to expose processes and services from inside of the enterprise.

• Nuno Filipe Godinho Notes from the Windows Azure by David Chappell in ArCast.TV post of 7/7/2009 outlines David Chappell’s video presentation, Channel9’s ARCast.TV - Windows Azure, A conversation with David Chappell video (00:14:08) posted 6/29/2009 and listed in last week’s post.

• James Urquhart’s Three debates that will benefit cloud computing post of 7/7/2009:

These are probably the three most important examples of how disagreement is driving technology road maps industrywide. Some of these disagreements are clearly self-serving--established systems vendors protecting their markets while enthusiastic entrepreneurs attempt to redefine the markets outright. Some are just different ways of seeing the same subject, but with profound effects on the choices made by vendors and individuals on each side of the debate:

  1. Consumer and small/midsize business versus enterprise
  2. Public cloud versus private cloud
  3. Open source versus proprietary

His post expands on the three debates and says this (inter alia) about #3:

Folks like Microsoft and VMWare, however, would beg to differ and are working furiously to prove to the market that their value add is worth the cost of their software. The argument is that these companies can pay for innovation and for a partner ecosystem that drives new business and have the customer relationships to work through long-term cloud deployment issues.

• Mary Jo Foley adds some background to the PHP for Azure story (see below) in her Microsoft's Azure interoperability pieces start to fall into place post of 7/7/2009. Her update of 7/8/2009 includes links to an update to the Java SDK for Azure and a July update for the Ruby SDK, both of 7/7/2009.

• Rob Bagby’s Hosting a PHP Application in Windows Azure post of 7/7/2009 begins:

At MIX ‘09 we (Microsoft) announced support for FastCGI in Windows Azure.  FastCGI allows us to host applications like PHP both safely and performantly (warning – performantly is not a real word).  In this post, I will begin with a very brief overview of what Windows Azure is and why you might consider hosting your PHP apps on Windows Azure.  I will then provide you with a couple of resources that you can use to easily publish your PHP application to Windows Azure, including a link to a screencast I created that illustrates just how to publish a PHP application to Windows Azure.

• Maarten Balliauw announces the PHP SDK for Windows Azure - Milestone 2 release on 7/6/2009:

I’m proud to announce our second milestone for the PHP SDK for Windows Azure project that Microsoft and RealDolmen started back in May. Next to our regular releases on CodePlex, we’ll also be shipping a Zend Framework version of the PHP SDK for Windows Azure. Announcements on this will be made later.

The current milestone is focused on Windows Azure Table Storage, enabling you to use all features this service offers from any PHP application, be it hosted in-premise or on Windows Azure.

Get it while it’s hot: PHP SDK for Windows Azure CTP2 - PHPAzure CTP2 (0.2.0)

Detailed API documentation is provided in the download package, while more descriptive guidance is available on the project site.

His post continues with “a small example on the new Table Storage support in the PHP SDK for Windows Azure.”

Mary Jo Foley asks Azure pricing: How low will Microsoft go? in this 7/6/2009 post to “All About Microsoft.” Mary Jo writes:

Microsoft is planning to share details about its pricing and licensing plans for its Azure cloud environment at its Worldwide Partner Conference in mid-July. That’s what we know.

What we don’t know about its Azure pricing and licensing plans would fill a book. But there are a few hints and some educated speculation circulating regarding Microsoft’s expected directions here.

She goes on to discuss Azure’s role in the upcoming Windows Partners Conference and passes on a couple of quotes from me.

Chris Hay echoes Mary Jo’s comments about Azure pricing in his Azure Pricing post of 7/4/2009 and announces that he’s writing an Azure in Action book for Manning (with Brian Prince.) Chris also speculates about a possible Azure “Developer’s Edition.”

Kevin McLaughlin targets Five Burning Questions About Windows Azure in his 7/6/2009 post related to the forthcoming Worldwide Partner Conference:

Following are five questions about Windows Azure around which Microsoft channel partners are looking for Microsoft to provide some long-awaited clarity:

  1. How Much Will Azure Cost?
  2. What Will The Azure Service Level Agreement Look Like?
  3. How Will Microsoft Guarantee Adoption?
  4. Will Microsoft Allow Private Azure Clouds?
  5. Will Ray Ozzie Make A Surprise Appearance At WPC?

I chimed in with a comment for #2.

Magnus Mårtensson says Class Libraries do not work in Windows Azure using Visual Studio 2010 and suggests a workaround in his 6/24/2009 post:

If you create a class library and add a reference to it from an Azure Web Role or Azure Worker Role you get an error. Here’s how to get around it.

The problem is that the class library template for Visual Studio 2010 creates a .csproj file with too few configuration settings. In Visual Studio 2008 the default target platform is AnyCPU. In Visual Studio 2010 it’s x86 and the configuration for AnyCPU is not included. It seems to me this is an error in Visual Studio 2010 Beta 1.

Merle K. Evans’ 3-page Cloud Computing: The 'Next Big Thing' in IT; But is it right for your organization? whitepaper for Intel’s ConnectedDigest begins:

Research firm IDC predicts that the worldwide cloud services market segment will be worth about US$43 billion by 2012. Respected Fortune 500 companies are already taking advantage of this compelling trend. Eye-popping cost savings are a driving force, but not the only issue IT execs need to consider.

"Cloud computing is emerging as 'the next big thing' in both enterprise and consumer computing," says Jake Smith, who spearheads Intel's enterprise cloud computing team. "It's exciting because it represents a convergence of proven technologies that have existed for many years. We've all been looking forward to this, because everything is coming together at just the right time."

And includes a link to a 16-page January 2009 Developing an Enterprise Cloud Computing Strategy whitepaper by Intel’s Hong Li, Jeff Sedayao, Jay Hahn-Steichen, Ed Jimison, Catherine Spence, and Sudip Chahal.

Cloud Security and Governance

<Return to section navigation list>

••• Elinor Mills reports Prosecutor: Cloud computing is security's frontier in this 7/10/2009 post for CNet News. The prosecutor in question is Matthew Parrella, an assistant U.S. attorney based in San Jose, Calif. who spoke at Symantec's Norton Cyber Crime Day:

… Looking ahead five years, "I'm thinking the attack is going to be on cloud computing centers," said Parrella, chief of the computer hacking and intellectual property unit at the U.S. Attorney's Office.

The immediate threat will be attacks to steal data from the servers they are stored on, either remotely or by an insider or someone who gains access to the data center, he said. Later on it's likely any stolen data could be pirated, he said. …

Eric Chabrow’s Sophisticated Cyber Assault Confused Network Managers post of 7/10/2009 reports:

… Starting over the Independence Day weekend and continuing into the week, hackers targeted government and business websites in the United States and South Korea, causing varying degrees of disruption of service. Among federal government websites reportedly assaulted: the White House, National Security Agency, Departments of Defense, Homeland Security, State and Transportation and Treasury; Federal Trade Commission and the Secret Service. Among business sites said to have been attacked: the New York Stock Exchange, NASDAQ and The Washington Post. …

Reuven Cohen claims A Federal CloudBursting & Cyber Defense Contingency Plan is needed in this 7/10/2009 post based on the cyber assault believed by many to have been instigated by the North Korean government (see above.)

• Nick Shelness writes in his Microsoft Online: Security Concerns post of 7/8/2009 to the Ferris Research Blog:

Ferris recently had a briefing from Microsoft on the security of its Business Process Online Services (BPOS) — e.g., Exchange Online, SharePoint Online, etc. This presentation turned out to be of more interest to Ferris for its subtext than for the specifics it contained.

The subtext was that Microsoft was encountering concern (pushback?) from organizations about both the security of data held in Microsoft Online services, and the security of the services themselves. Stated another way, organizations appear to want to apply the same analysis to cloud-delivered services that they apply to on-premise-delivered services. We cannot believe that these concerns are unique to Microsoft, and are therefore an issue that will have to be addressed by all providers of cloud-based services and associated cloud-based data storage. …

Chris Hoff (a.k.a. @Beaker) claims These Apocalyptic Assessments Of Cloud Security Readiness Are Irrelevant… on 7/7/2009:

Is the Cloud Secure?  That’s  a silly question.  Is the Cloud “secure enough” is really the question that should be asked, and of course,  the answer is entirely contextual.

And cites James Urquhart’s Three debates that will benefit cloud computing post of 7/7/2009 (see the Azure Infrastructure section.) He follows with another irrelevant assessments:

Cloud will reach a critical mass wherein the technology and operational models mature to a good-enough point, enough time passes without a significant number of material breaches or outages that disrupt confidence and then it becomes “accepted.”  Security, based upon how, where, why and when we invest will always play catch-up.  How much depends on how good a job we do to push the agenda.

Satyajit Grover, Xiaozhu Kang, Michael Kounavis and Frank Berry describe “New technologies that show the economy of using general-purpose hardware for high-volume HTTPS traffic” in this Intel white paper, Encrypting the Internet, of 7/1/2009 for Dr. Dobbs Journal. Section 2 The Advanced Encryption Standard and the RSA Algorithm, describes in detail how AES and RSA work in the SSL/TLS environment.

Steven Wallin asks Terabytes Missing From The National Archives: Would the Cloud Be Safer? in this 7/6/2009 post to ReadWriteWeb. Steve concludes:

At this point, it might be ludicrous for anyone to put their most sensitve data in the cloud as a security measure. But the dire straits at the National Archives should stand as a warning for those who think traditional data security measures are without vulnerability.

Not as ludicrous as letting employees walk out with hard drives and servers.

Philip Richardson of Microsoft chimes in on the same topic with his It’s Hard to Steal a Cloud post of 7/6/2009:

As this short article on ReadWriteWeb puts it: “It’s Hard to Steal A Cloud”. The US National Archives has lost some hard drives and would like them back. It’s important to remember a couple of things: a) lost != stolen and b) stolen usually == copied.

Sure the Cloud takes away the need for worrying about a lot of physical devices (physical security, transport, power, storage conditions etc). However it does place additional focus on Authorization to the Cloud Data. This set of apocryphal credentials are now the ‘keys to the kingdom’ – as opposed to root domain access and/or physical data center access. At lot of organizations as they move to the Cloud and going to have to get very serious about how they store and distribute these credentials.

It’s important for enterprises to look at the Cloud from an ‘emotionless’ position. The ridiculous superstition of ‘on premise is more secure’ needs to be replaced with more mature analysis of short, medium and long term threats (and cost modeling).

Cloud Computing Events

<Return to section navigation list>

••• Moved for emphasis: Microsoft’s Worldwide Partner Conference features 16 Azure-tagged sessions, including:

  1. AP005 Extend Your Application to the Azure Cloud with S+S SQL Data Services Azure Database
  2. SS001 Software-Plus-Services: Bringing it all together across MS Online Services, Partner Hosted and Windows Azure.
  3. SS003 Lap around Windows Azure, Business Edition
  4. AP002 Partnering with the Azure Services
  5. SS006 The Azure Services Platform Partner Model and Pricing
  6. SS001R Software-Plus-Services: Bringing it all together across MS Online Services, Partner Hosted and Windows Azure.
  7. SS008 Leveraging the Cloud: How ISVs Can Use New Microsoft Programs to Move into the Software-Plus-Services World
  8. US007 US Public Sector: Cloud Computing - the Government Perspective
  9. CI011 Building the Foundation for a Cloud Computing Infrastructure

Also of note:

Microsoft To Announce Cloud Infrastructure Program at WPC:

On July 13, Microsoft will announce the Cloud Computing Infrastructure Initiative’s Hosted Partner Network Program and outline further details on the Enterprise Dynamic Datacenter Toolkit (DDTK). 

On July 14, be sure to attend the “Building the Foundation for a Cloud Computing Infrastructure” breakout session to get an overview of Microsoft’s end-to-end cloud strategy and the business opportunities involving the private cloud infrastructure:

Get an overview of Microsoft's cloud computing infrastructure strategy and how it can help customers lower costs while improving agility within their datacenters. We share the architecture and demo both the Dynamic Datacenter Toolkit for Hosters (available now!) that enables hosting Partners to offer managed servers in a hosted environment, and the Dynamic Datacenter Toolkit for Enterprises (available Q4 CY 2009) that enables building the foundation for a Private cloud.

Update 7/8/2009: Follow the action at the WPC09 Press Room and @WPC09 on Twitter.

••• Kevin Jackson’s GovIT Expo Highlights Cloud Computing post of 7/11/2009 announces his appointment by SYS-CON to be the Technical Chair of the 1st Annual Government IT Conference & Expo. Kevin writes:

This event is a 1-day deep dive into how cloud computing is changing the way that Federal agencies leverage, procure and utilize IT. GovITExpo, which is being held October 6, 2009 in Washington, DC, builds on the success of SYS-CON's Cloud Computing Expo.

 

When: 10/6/2009 
Where: Washington, DC (venue TBD) 

Ruv Cohen reports that registration is open for the CloudCamp Toronto July 22nd, 2009:

CloudCamp is an unconference where attendees can exchange ideas, knowledge and information in a creative and supporting environment, advancing the current state of cloud computing and related technologies. As an informal, member-supported gathering, we rely entirely on volunteers to help with meeting content, speakers, meeting locations, equipment and membership recruitment. We also have corporate sponsors that provide financial assistance with venues, food, drink, software, services and other valuable donations.

When: 7/22/2009, 5:00 PM to 9:00 PM EDT 
Where: Toronto Marriott Downtown Eaton Centre, 525 Bay Street, Toronto, Ontario M5G 2L2
Canada

The Santa Clara Valley Chapter of the IEEE Computer Society announces that the IEEE-NATEA Joint Conference Handheld Devices - New Technology Challenges - New Promises at the 10th IEEE/NATEA Annual Conference on New Frontiers in Computing Technology to be held 7/18/2009 at Stanford University will cover the following topics:

  • Handheld system and display hardware evolution
  • Increased use of Cloud Computing resources due to handheld devices
  • Secure handheld communications
  • Infrastructure developments important to handheld growth
  • Understanding the psychological and social elements of the handheld revolution
  • Killer applications for handhelds

Click here to register with the North America Taiwanese Engineers Association (NATEA).

When: 7/18/2009, 9:00 AM to 4:30 PM PDT 
Where: Braun Auditorium of the Mudd (Seeley G) Chemistry Building at Stanford University, 333 Campus Drive, Stanford, CA.

• Stephanie Balaouras of Forrester Research will present a "Transforming IT Infrastructure And Operations In 2010" Webinar on Thursday, July 16 at 11 a.m. EDT. During this 1-hour session, Principal Analyst Stephanie Balaouras will address topics such as:

  • How consolidation of data centers, servers, and storage networks will continue to drive down costs
  • How virtualization is changing IT management, processes, and roles in IT operations
  • How ITIL process adoption and IT automation will improve the quality of IT service delivery
  • How Web services, cloud services, and outsourcing will eliminate costs completely

Click to Register now for this session.

When: 7/16/2009, 9:00 AM PDT 
Where: The Internet (WebEx registration)

• Joe McKendrick and Jeff Papows will conduct on 7/13/2009:

A semi-informal, interactive discussion on capitalizing on the SOA-Web Oriented Architecture (WOA)-Cloud phenomenon. The Webcast, titled “Floating Governance to the Cloud through Web Oriented Architectures and ‘As a Service’ Environments,” will commence at 2:00 p.m. Eastern Time.

According to this 7/7/2009 post: Webcast: SOAs, WOAs, and the clouds they create.

When: 7/13/2009, 11:00 AM PDT 
Where: The Internet (WebEx registration)

Other Cloud Computing Platforms and Services

<Return to section navigation list> 

••• Anil Dash delivers a lengthy essay on Google’s metamorphosis in his Google's Microsoft Moment post of 7/9/2009, which begins:

I'm not sure Google's new Chrome OS announcement is that big a deal, or that the eventual product that gets released will actually have that much impact, but it's a useful milestone in marking Google's evolution towards becoming an older company with a distinctly different culture than they used to have.

This is, for lack of a better term, Google's "Microsoft Moment". This is the point when the difference between their internal conception of the company starts to diverge just a bit too far from the public perception of the company, and even starts to diverge from reality. At this inflection point, the reasons for doing new things at Google start to change. [Anil’s emphasis.] …

••• Gregor Hohpe’s Hooking Stuff Together - Programming the Cloud InfoQ presentation of 7/8/2009 explains Google’s approach to connected systems:

This talk describes the constraints of connected systems design and presents common design patterns to address some of the challenges developers will face as they spend more time connecting services and components instead of developing new ones. Along the way he asks: Is coupling really so bad? Why is REST popular? Do we need distributed transactions?

Gregor is a software architect with Google, Inc.

••• Padmasree Warrior recapped the Cisco Point of View on Cloud Computing in this 7/8/2009 post to The Platform blog that summarizes her keynote address to the Cisco Live conference. The post includes links to a video archive and a private cloud demo.

Padmasree is CTO of Cisco Systems.

•• John Treadway reports he was struck with the “coherence and clarity of their cloud computing vision as compared to HP or IBM” in his Unisys – A Clear Vision for the Cloud post of 7/10/2009:

Unisys’ strategy bridges public, private and hybrid cloud models, and includes well-differentiated infrastructure, platform and software as a service offerings (IaaS, PaaS, and SaaS). Further, they wrap this all in a set of comprehensive service offerings that they can deliver globally. It’s a big vision, and if they can pull it off it should make them one of the more interesting providers out there. One of their key differentiators is Unisys Stealth (described [in John’s post]).

•• Chris Beckman’s Information regarding 2 July 2009 outage post of 7/8/2009 post to the Google App Engine Forum seeks to explain the circumstances of the 12-hour (6:45 AM to 12:35 PM) GAE outage on 7/2/2009:

The App Engine outage was due to complete unavailability of the
datacenter's persistence layer, GFS, for approximately three hours.
The GFS failure was abrupt for reasons described below, and as a
consequence the data belonging to App Engine applications remained
resident on GFS servers and was unreachable during this period. Since
needed application data was completely unreachable for a longer than
expected time period, we could not follow the usual procedure of
serving of App Engine applications from an alternate datacenter,
because doing so would have resulted in inconsistent or unavailable
data for applications.

The root cause of the outage was a bug in the GFS Master server caused
by another client in the datacenter sending it an improperly formed
filehandle which had not been safely sanitized on the server side, and
thus caused a stack overflow on the Master when processed.

The inability to “follow the usual procedure of serving of App Engine applications from an alternate datacenter, because doing so would have resulted in inconsistent or unavailable
data for applications” is an inexcusable single point of failure. Inability to autorecover from what sounds like a readily anticipated stack overflow is another indication of a serious engineering oversight.

•• Anthony Ha reports Microsoft VP says Google’s playing defense with Chrome OS in this 7/10/2009 post to the Deals&More blog:

… I spoke to [Microsoft Vice President of Developer and Platform Evangelism] Abu-Hadba at a dinner in San Francisco to promote tomorrow’s launch of Silverlight 3, the latest version of Microsoft’s platform for web media and applications. Some of his remarks about Chrome consisted of entertaining bluster: “I love competition.” But he also had thoughts about why Google is trying to muscle into the operating system business. And no, he said, it’s not because Google wants to make computing simpler and faster (as Google executives claim), nor is it part of a grand plan to undo Microsoft’s dominance (as VentureBeat writer Dean Takahashi speculated). …

“Most of what Google does is defensive,” Abu-Hadba said.

•• M. Koenig and C. Burns authored Google Chrome OS: Opening a New Front in the Browser Wars on 7/9/2009 as a Saugatuck Research Alert (free site registration required). Their dispassionate and detailed analysis of Chrome OS is a welcome relief from the breathless reportage of some “social sites.”

What surprises me is the missing Google App Engine in this Saugatuck table that compares the Microsoft and Google Stacks [color emphasis added]:

Layer

Microsoft

Google

Office Productivity & Collaboration

Office, Office Live and Sharepoint

Google Apps, Gmail, Google Wave

Browser

Internet Explorer

Google Chrome

Desktop OS

WindowsVista and Windows &

Google Chrome OS

Mobile OS

Windows Mobile

Google Android

Server OS

Windows Server

Google ???

Cloud OS

Microsoft Azure

Google ???

If the Saugatuck authors include Gmail in the Googstack, certainly Microsoft Exchange belongs in the MsftStack. I assume that Windows & = Windows 7 (as the result of a spurious Caps key press.)

I agree wholeheartedly with the authors’ Market Impact conclusion.

•• Rob Enderle’s ITBusinessEdge blog entry of 7/9/2009 says it all: Google's Tarnished Chrome: The Making of a Disaster. Rob concludes:

Google has caught Microsoft napping in this new battleground but now that it has awakened the Redmond Giant to the threat, it has to execute sharply or this Giant and other competitors will feast on its dying carcass. It isn’t looking good. Google appears unfocused, uncoordinated, it has no apparent marketing or PR skills, and it will likely be over a year before the finished product can even enter the market. All this time it will probably be bleeding search market share as Microsoft and others take advantage of Google’s lack of focus and Microsoft prepares its second strike response.

I continue to see this related to an education system that seems to teach that going through the motions is the same thing as accomplishing the task, and the historic problem of managers being better at setting expectations than they are at setting appropriate goals and achieving them. There is a way to do this right. Google is not currently on that path.

The San Francisco Business Times reported on 7/8/2009 Oracle stops $300M Utah project:

Database giant Oracle Corp. has stopped work on a $313 million data center in Utah.

The Salt Lake Tribune reported Tuesday that Oracle (NASDAQ: ORCL) quietly stopped construction on the center, in West Jordan, near the Salt Lake City Municipal Airport, three months ago. The halt is linked to Oracle’s planned acquisition of Sun Microsystems (NASDAQ: JAVA), the paper said.

Oracle sold $4.5 billion in debt this week to raise cash for that acquisition.

Construction started last summer on what Oracle called “Project Sequoia.” It was meant as a showcase “green data center” with “dramatically lower energy consumption,” Oracle said at the time.

• Reuven Cohen writes in his CloudNet & The Case for Enterprise-Ready Virtual Private Clouds post of 7/8/2009:

AT&T Labs and the University of Massachusetts Amherst have published a paper called "The Case for Enterprise-Ready Virtual Private Clouds" that continues on my vision for a Virtual Private Cloud (VPC). And they even gave me some credit in the paper [see reference 5] -- sort of.

To recap, over a year ago I described the opportunity for what I called a Virtual Private Cloud or a method for partitioning a public computing utility such as EC2 into quarantined virtual infrastructure. A VPC may encapsulate multiple local and remote resources to appear as a single homogeneous computing environment bridging the ability to securely utilize remote resources as part of an seamless global compute infrastructure.

• Sundar Pichai’s Introducing the Google Chrome OS vaporware post of 7/7/2009 describes a forthcoming “new project that's a natural extension of Google Chrome — the Google Chrome Operating System. It's our attempt to re-think what operating systems should be.”

Google Chrome OS is an open source, lightweight operating system that will initially be targeted at netbooks. Later this year we will open-source its code, and netbooks running Google Chrome OS will be available for consumers in the second half of 2010.

My question, which many others share, is why not Android Heavy, despite the lack of Android’s success as a phone OS so far? My reaction is similar to Dennis Howlett’s in his Google ChromeOS: have people given leave of their senses? post of 7/8/2009. Dennis mentions that Krishnan Subramanian at Cloud Ave lends a more level headed view:

Instead of doing their own OS, they could have rallied behind one of the Linux distros, say Damn Small Linux, and helped them get traction among the hardware vendors. This is a move by Google to deflect the high handed tactics by Microsoft in the netbook market but it appears to me like a redundant one. I feel that they should have supported one of the existing distros. However, if they had taken that route, there is no way they could have pushed the Google Chrome browser (and their services) tightly integrated with the Linux distro. In short, it is a desperate attempt by Google to stop Microsoft in the netbook game and, also, push the Google Chrome browser to the masses at a point in time when IE’s market share is going downhill.

Mary Jo Foley expresses her doubts in Will Google's Chrome OS look rusty by late 2010?and Bob Warfield says Google Chrome OS is an Obvious Response to Bing on 7/8/2009. I agree.

• Geva Perry praises Twilio in his What's Really Exciting About Cloud Computing post of 7/7/2009:

Twilio is a remarkably simple concept, but very difficult to implement in an elegant way, as the Twilio folks have done. It is a cloud platform that enables developers with basic web programming skills to develop complex voice applications.

Under the hood -- but completely transparent to the developer or the end user -- Twilio is hosted on Amazon EC2, uses a multi-tenant architecture and has implemented a fully functional telephony infrastructure based on the open source framework Asterisk.

• Dan Woods asks “Will the company need to clean up its applications to change the face of cloud computing?” in his Questioning Oracle's Cloud article of 7/7/2009 for Forbes.com:

When Larry Ellison announced last month that Oracle was going to embrace cloud computing, he put forth ideas that expand on the current models. With the Sun acquisition and the rest of its formidable portfolio, Oracle has all the pieces of the puzzle to do something revolutionary. The key question: Will Oracle have to clean up its fragmented collection of applications to achieve its vision?

• Krishnan Subramanian recommends Rethinking The Cloud: From Client/Server To P2P in this 7/7/2009 post:

A way to minimize the downtimes is to do a complete reboot of the way we think about Cloud Computing and architect it using P2P technologies.

I’m not sanguine about the prospects of a P2P enterprise cloud offering.

Glen Brunette updated his original Sun Microsystems presentation with Immutable Service Container Technical on 6/26/2009. His Immutable Service Containers Updates post of 7/7/2009 lists these three updates:

    • A new Immutable Service Container presentation (ODP, PDF) that provides a technical overview of the ISC approach, design goals, and the OpenSolaris implementation available today.
    • An updated Private Virtual Network architecture page highlighting additional network topologies that implement different network isolation strategies. These are a few of the models that are being considered for future ISC Construction Kit updates.
    • An updated Autonomic security architecture page that provides a number of use cases showing ISCs as an essential building block for these kinds of architectures.

Rob Lemos explains Why my company [ShareThis] uses Amazon’s EC2 cloud in this detailed post to the CIO.com site of 7/6/2009, which begins:

Running an Internet startup remains a tricky business, says link -- sharing service ShareThis. During the past two years, more than 110,000 sites have added the ShareThis embedded link, allowing readers to forward articles or videos to their friends. The popularity has made the company's data requirements enormous: it handles up to 12,000 requests a second and 130 million page views every day.

Dana Gardner interviews John Bennett, worldwide solution manager for Data Center Transformation Solutions at Hewlett-Packard (HP) in his HP Combines Consolidation, Modernization, and Virtualization post of 7/6/2009.

Jay Kuri writes in his Cloud servers for your Perl app - Amazon's EC2 vs Mosso post of 7/6/2009:

There is very little in the way of direct comparison between EC2 and Mosso's Cloud servers and while the information about each is available, it takes some digging to get the real scoop.

In todays article, we will dig into both Amazon's EC2 and Mosso's Cloud-Servers with an eye toward the differences that will really matter to you as you try to decide which virtual server cluster upon which to deploy your Perl or Catalyst application.

His discussion of how IO allocation differences between EC2 and Mosso affect My SQL query performance and Elastic Block Storage should be of interest of potential SQL Data Services users.

Stephen Lawson reports for IDG News Service on 6/30/2009 that Cisco won't take on Amazon in cloud:

Cisco's CTO says the company will set itself apart by helping enterprises move resources among internal and external clouds instead of becoming a pay-as-you-go cloud provider.

The company sees virtualization as the next major computing model and its own Unified Computing System (UCS) as the first step toward a fully virtualized data center, CTO Padmasree Warrior said in a briefing Monday during the Cisco Live user conference in San Francisco. The company's presence in both enterprise and service provider networks makes it the ideal partner for companies adopting cloud computing, because they want to gain cloud benefits like scalability and disaster recovery without pushing out control of all their infrastructure, she said.

<Return to section navigation list>

Saturday, July 11, 2009

LINQ and Entity Framework Posts for 7/6/2009+

Note: This post is updated daily or more frequently, depending on the availability of new articles.

Entity Framework and Entity Data Model (EF/EDM)

Gunnar Piepman explains Entity Framework 4.0: How to use POCOs in this 7/11/2009 post:

Entity Framework 4.0 will provide us with POCO support. That’s good because Entity Framework supports more inheritance mapping strategies than LINQ To SQL but currently it doesn’t support POCOs. To try out Visual Studio 2010 and ASP.NET 4.0 new features I started writing simple photo gallery web application. Today I got my first simple POCOs work with Entity Framework 4.0. As a first thing let’s see my two classes – Album and Photo. …

James Newton-King’s ADO.NET Entity Framework support accidently added to Json.NET post of 7/10/2009 starts with:

I sat down today resolved to finally add support for serializing ADO.NET Entities objects… and instead I came away surprised to find that it already worked. My initial “Lets prove it breaks first and then fix it” test passed first time and it wasn’t until I debugged through the test that I was convinced NUnit wasn’t the one that was broken.

James made his test with an Entity Data Model of Folder and File entities.

Tony Sneed lists the Top Ten New Features in Entity Framework 4.0 in this 7/9/2009 post.

Beth Massi explains Implementing Validation in WPF on Entity Framework Entities in this detailed 7/7/2009 post:

I’ve blogged before about implementing validation on LINQ to SQL classes as well as how to customize the display of error messages in WPF. In this post I want to show how you can use these same techniques to validate entities coming from the Entity Framework (EF). Like LINQ to SQL classes, Entity Framework entities are implemented as partial classes so that you can extend them with your own code on top of the code that the designers generate for you. You can extend EF entities in a similar way as LINQ to SQL classes.

Rowan Miller writes in his Entity Framework (EF) – Events post of 6/28/2009:

In this post we are going to take a look at some of the events that are raised by various parts of the Microsoft ADO.NET Entity Framework (EF). I’m using the recently released Beta 1 of Visual Studio 2010 / .Net Framework 4.0 for this demo but most of the information also applies to the first version of EF released in .Net Framework 3.5 SP1. 

Thanks to Diego Vega for the heads up.

Chris Cluss explains How to use HierarchyID in LinqToSQL or Entity-Framework // MSSQL Server 2008 in this 5/31/2009 post that I missed earlier.

LINQ to SQL

Deepak Kapoor shows you how to Insert Master Detail Data With LINQ To SQL in this 7/8/2009 post.

Waqas Ahmed explains Data Access with ADO.NET 3.5 – LINQ to SQL in this 7/4/2009 post.

Chris Cluss explains How to use HierarchyID in LinqToSQL or Entity-Framework // MSSQL Server 2008 in this 5/31/2009 post that I missed earlier. Repeated from the “Entity Framework” section.

LINQ to Objects, LINQ to XML, et al.

Jonathan Aneja describes techniques for Dynamic Searching using LINQ - Dataset + Joins in this 7/10/2009 post:

About two years ago I posted some code that shows how to dynamically construct LINQ queries at runtime.  On average there's a couple questions per month about trying it in some edge case, and usually the support already exists within the API.  Recently though someone posted a question that has to do with Datasets and Joins that raised some interesting issues. …

Eric White explains Document-Centric Transforms using LINQ to XML in this 7/9/2009 post:

When thought of in a certain way, XML documents come in two flavors – data-centric and document-centric. Further, there are two types of document-centric documents. This post presents my thoughts about approaches to various types of document-centric transformations – data-centric to document-centric, document-centric to data-centric, and document-centric to document-centric. Then, I’ll tie my thoughts back to Open XML transformations.

ADO.NET Data Services (Astoria)

Nuno Filipe Godinho writes in his Data Services – Can be ADO.NET or SQL – What’s the difference post of 7/7/2009:

Just a while ago I was talking about Data Services and suddenly a confusion between ADO.NET Data Services and SQL Data Services took place, because we were talking about different Data Services, and so in order to try to clarify the differences I remembered to write this post.

Nuno’s wrote his post before SQL Data Services was rechristened SQL Azure Database.

ASP.NET Dynamic Data (DD)

Steve Naughton’s Dynamic Data Custom Field Template – Values List post of 7/9/2009 begins:

Here I have created a simple FieldTemplate for a recent project to allow you to give the user a predefined set of text values to choose from without a FK field relationship. An example of this could be a field with optional values of ‘Y’, ‘N’, ‘N/A’ or ‘Y’, ‘N’, ‘Other’ etc.

And continues with sample code to implement the Values List feature.

Miscellaneous (WPF, WCF, MVC, Silverlight, etc.)

Scott Guthrie celebrates Silverlight 3 Released on 7/10/2009, along with Visual Studio Tools for Silverlight 3 and Expression Studio 3.

Sunday, July 05, 2009

Direct Access to Windows Live SkyDrive Files Has Weird Inconsistencies

This blog has used Windows Live SkyDrive for more than a year to insert Web-based *.png images into posts I write with Windows Live Writer. I’ve encountered no significant problems with specifying the direct access ID to files in a public folder, which appears in the address text box when you click an image selected from a folder:

http://ctxk6g.bay.livefilestore.com/y1pRnSAIcAbA_8-uD_TluQ4JjfYUWcZGmBzWMqbaIcEgzIZLl7zryEBLqeCD3En-ZFSf9EzapAsvIQByMfW6tMjiA/AzureBlob2048.bmp

or right-click the file icon for other than an image or *.txt file and choose Copy Shortcut:

http://ctxk6g.bay.livefilestore.com/y1pCZzp7VIoXNE4cIDWbNuzRGU5pvpt7-km3A2wOrvla5m5ut_BUIUfwXQ8tlTiJcWoriOW5gz2eAFue-G0ga4aHA/AzureBlob2048.zip?download

I migrated image handling from a Flickr Professional account to GooglePages image storage because Flickr sent me a message that direct access to image files was a violation of its Terms of Service. GooglePages storage was inconvenient, so I moved storage and delivery to SkyDrive. SkyDrive’s Terms of Use had no restriction on direct file access that I could find. (The Terms of Use page appears to apply to most, if not all, Windows Live applications.)

Microsoft doesn’t offer a SkyDrive SDK.

Problems Accessing SkyDrive Files from a Windows Azure Service

My Windows Azure Blob Test Harness relies on *.bmp and *.zip files in a public SkyDrive folder as a data source for creating and displaying blobs. In this case, the user selects the file to upload to an Azure Blob from a list box:

Shortly after making the project available from Windows Azure in early 2009, I began to encounter HTTP 404 errors when attempting to add blobs from the second or third and higher items in the list. 

Following is part of the <asp:ListItem …> code in the Default.aspx page that shows some of the changes to the original direct access IDs that occurred overnight from 7/4/2009 to 7/5/2009 and cause 404 errors:

 

The items appear in the sequence in which I added them to the BlobFiles folder(s). Click here for a text file of the full ListItems (before and after).

What’s interesting about the unannounced changes to direct access IDs is the pattern of changed IDs:

  1. I can find no evidence that SkyDrive has changed the IDs of any files added to posts with Windows Live Writer.
  2. In some cases, changes occur to the second and later files added to the folder.
  3. Lately, changes occur to the third and later files added to the folder.

I’m in the process of testing other free storage solutions, such as DropBox and Box.net, which offer 2GB and 1GB free storage, respectively. Tests with DropBox indicate it doesn’t have SkyDrive’s 50MB file size limitation and solves the recent problem with failure to display a File Download Dialog for *.zip files from SkyDrive:

The last seven items (four BMPs and three ZIPs) are tests from DropBox storage into Development Storage; note the different Content Type values. This version is moving into Windows Azure production now.

An advantage of SkyDrive is its probable storage location—Microsoft’s US Northwest datacenter (Quincy, WA)—and thus good download performance to my Azure service. Tests show that DropBox is significantly slower than SkyDrive when upload blob files to Azure Blob Services.

Windows Azure Blob Test Harness Project is Live!

My Azure Blob Test Harness currently is live at http://oakleaf2.cloudapp.net/default.aspx. This project complements the Azure Table Test Harness that’s been at http://oakleaf.cloudapp.net/default.aspx since 12/9/2008. The new test harness lets you create blobs from bitmaps and *.zip files stored in my Windows Live SkyDrive account. The files range in size from 73 kB to 36.9 MB. Alternatively, you can generate blobs from files stored in your PC’s file system. See the later “Source Code” section for download details.

Update 7/4 and 7/5/2009: Five of the seven blob files became inaccessible overnight due to URL changes. The AzureBlob2048.bmp file’s URL didn’t change (yet). A new folder with the same set of files is being tested now for stability. The IDs for the new files have 10 more characters than the last version in their URLs. The same five files became inaccessible overnight; the IDs for the new files have 10 fewer characters than their predecessors.

The Blob source datastore has been moved from SkyDrive to DropBox (see my Direct Access to Windows Live SkyDrive Files Has Weird Inconsistencies post of 7/5/2009.)

Update 7/3/2009: Six of the seven blob files became inaccessible again because because Windows Live SkyDrive changed the ID this time by altering GUID characters. For example: <asp:ListItem Value=http://fjhpug.bay.livefilestore.com/y1pV6_PqKqBZvm_ohhfxNT7ffl0n8S0udQvP_f4Lj4PXFpJXEMnduOEUNy3z5ZthO7U1a-P7ItHCjne4x3F05GtDA/AzureBlob2048.bmp>
AzureBlob2048.bmp, Bitmap from SkyDrive, 2048 px, BMP, 9.2 MB</asp:ListItem>

Became: <asp:ListItem Value="http://fjhpug.bay.livefilestore.com/y1pPi2jUgioJlt7KDVLTtraZRf3dhByvzhulr22a_Enyl9OIB30ft8cfjU8PHS5W8QywMiGIjivbvEk9wypmDyCyA/AzureBlob2048.bmp">
AzureBlob2048.bmp, Bitmap from SkyDrive, 2048 px, BMP, 9.2 MB</asp:ListItem>

I also added a “Help” hyperlink control with this post as it’s NavigateURL target.

Update 5/6/2009: Six of the seven blob files became inaccessible to the project this week because Windows Live SkyDrive changed the ID by adding characters. (Not nice.) I fixed and updated the project today for inclusion as the sample project in my “Targeting Azure Storage” “Master Azure’s Cloud Storage for Blobs” feature article for the June or July issue of Visual Studio Magazine. The article will include a link to download the source code.

My “Retire Your Data Center” Article about Azure’s Table Storage is VSM’s February 2009 Cover Story. For more details about that sample project and how to use Azure Table Data Services, see my Windows Azure Test Harness Is Live! post of 12/9/2008 and Azure Storage Services Test Harness: Table Services 1 – Introduction and Overview of 11/18/2009.

Source Code: The Get Code Download Link includes listings that are missing from the article’s online version and print edition but currently doesn’t include the article’s source code. I’ve temporarily made the source code, AzureBlobTestHarness.zip, available from my SkyDrive account until the article’s link is updated. Click here to download the current source code.

Credits: The local file upload feature is based on Jim Nakashima's DownloadSite code that’s described in his Windows Azure Walkthrough: Simple Blob Storage Sample post of 10/29/2008. GZip and Deflate code is based on Rick Strahl's HttpWebRequest and GZip Http Responses post of 6/29/2007.

Uploading from a File Stored on Windows Live SkyDrive

The default operating mode is to upload one of three AzureBlob####.bmp or four AzureBlob ####.zip files from Windows Live SkyDrive. (#### is the horizontal size of the image in pixels.)

Accept the default 1024 (x 768) pixel bitmap and click the Create Blob button (once) to add the blob to the list in ISO-8601 UTC DateTime order.

Select the SkyDrive file from which to create the blob in the dropdown list, which adds the file alias to the Link Name text box, and then click the Create Blob button (once) to create the blob. Please be patient when creating very large blobs. The process can take more than two minutes for a 37-MB blob.

Note: The 8192-px bitmap exceeds SkyDrive’s 50-MB maximum file size limit, so it isn’t included in the preceding list.

Click the appropriate cell of the Link column to open bitmaps in a new browser window (see below) or .zip files in a File Download dialog.

Deletion is prevented when the GridView contains three rows or fewer.

Blob additions and deletions generate log entries as described in my Fighting the Azure Blob Storage Blues post of 1/2/2009. Exceptions generate entries with the x-ms-request-id response header value to aid the Azure team when troubleshooting issues.

Uploading from the Client’s File System to a Blob

Alternatively, you can upload files of most MIME types from your local machine to Azure blobs. Clear the SkyDrive check box and click the FileUploadControl’s Browse button to open the Choose File to Upload dialog. Select a file and click Open to add its well-formed path to the File Path\Name text box.

Type a file alias in the Link Name text box and click Create Blob.

Here’s a screen capture of an entry for a blob containing a small .png file.

Please post questions or suggestions for improvements as comments.

If you’re interested in the sample StorageClient class library’s support for creating, modifying, and deleting blobs with .NET code instead of RESTful HTTP Request and Response messages, check out my Azure Storage Services - StorageClient Library: Blob Storage API Class Reference post of 1/6/2009.

Final source code will be available from a future the June 2009 issue of Visual Studio Magazine.

Saturday, July 04, 2009

Windows Azure and Cloud Computing Posts for 6/29/2009+

Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

Update 7/4 and 7/5/2009: Additions and updates
• Update 7/2 and 7/3/2009: Additions and updates

Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

To use these links, click the post title to display the single article you want to navigate.

Azure Blob, Table and Queue Services

<Return to section navigation list> 

My Direct Access to Windows Live SkyDrive Files Has Weird Inconsistencies post reports that I’ve given up using SkyDrive as the data source for my Azure Blob Test Harness and have moved to DropBox as the data source.

• Eric Lai’s No to SQL? Anti-database movement gains steam article of 7/1/2009 for ComputerWorld covers the NoSQL” Group’s 6/11/2009 meetup in San Francisco and asks “But can enterprises take open-source alternatives Hadoop, Voldemort seriously?” He concentrates on open-source key-value stores that compete with proprietary Amazon SimpleDB, Google AppEngine’s data store, and Azure Table Services.

Eric writes:

Facebook, for instance, created its Cassandra data store in-house to replace its use of MySQL. According to a presentation by Facebook engineer Avinash Lakshman (PDF document), Cassandra can write 50GB of data in 0.12 milliseconds, more than 2,500 times faster than MySQL. [Emphasis added.]

As pointed out in a comment to the article, “50GB” refers to the size of the database, not the size of the written data:

Graphic from Cassandra: Structured Storage System over a P2P Network
by Avinash Lakshman and Prashant Malik

• Justin & Jason offer on 7/1/2009 a techZING! 8 – Dude, Where’s My Database?! podcast described as:

Justin & Jason talk to Jonathan Ellis about how Facebook’s open sourced Cassandra Project took lessons learned from Amazon’s Dynamo and Google’s BigTable to tackle the difficult problem of building a highly scalable, always available, distributed data store. We also discuss how to join, get taken seriously and get commit access within an established and large open source project such as Cassandra.

• MG Siegler’s report of AppEngine’s “elevated Datastore latency and error-rates, as well as elevated serving error-rates” in his Google App Engine Broken For 4 Hours And Counting post of 7/2/2009 to TechCrunch is an interesting aside to the preceding item.

Brett’s last message (as of 11:30 AM PDT) in Google’s Google App Engine Downtime Notify thread reads:

Read-only mode continues. Elevated latency and error-rates persist for Datastore reads. Memcache writes have been reenabled to better soak read-only load. Our engineering teams are looking into the root cause of the problem. Will post more information as soon as it's available.

Update: Datastore writes were still disabled as of 12:05 PM PDT, making this a six-hour outage.

My Targeting Azure Storage cover story for Visual Studio Magazine’s July 2009 issue carries a “Learn how to store and retrieve binary large objects in the cloud with Azure's RESTful Storage API” deck.

Update 7/3/2009: You can download the article’s sample code from my SkyDrive account until the article’s Get Code Download target is updated. Click here. the Get Code Download link or run the sample blob project online at http://oakleaf2.cloudapp.net/. Problems with “not found” errors on SkyDrive have been fixed. See the updated Windows Azure Blob Test Harness Project is Live! post for details.

SQL Data Services (SDS)

<Return to section navigation list> 

• Eric Lai’s No to SQL? Anti-database movement gains steam article of 7/1/2009 for ComputerWorld covers the NoSQL” Group’s 6/11/2009 meetup in San Francisco. Despite the reported scalability of key-value stores, Microsoft elected to re-implement SQL Data Services as a fully-relational implementation of “SQL Server in the cloud.” (See the Azure Blob, Table and Queue Services for more detail.)

.NET Services: Access Control, Service Bus and Workflow

 <Return to section navigation list>

My OakLeaf Systems Azure Table Services Test Harness with Windows® Live ID™ Authentication is available to all for testing as on 7/1/2009. You’ll need a Windows Live ID to open the Table Services Test Harness page:

For more details about the project, see my Problems Deploying a WebRole with Windows Live ID Authentication to the Azure Cloud post update 7/1/2009.

The .NET Services Team posted .NET Services July 2009 CTP Breaking Changes Announcement and Scheduled Maintenance on 6/30/2009. The July CTP will be posted on 7/2/2009. You must take the following action if you’ve implemented .NET Services’ queues, routers, or workflows:

Queues and Routers data will NOT be persisted and restored after the maintenance. Users will need to back up their data if they wish to restore them after the July 2009 CTP release. Please see below for detail.

As previously announced, the existing Workflow Service will be removed from .NET Services in the July 2009 CTP release. Any solutions that currently rely on the Workflow Services will have to be modified on or before 7/7/2009 9am PST in order to continue functioning smoothly. Existing solution Workflow Service metadata such as Workflow Type will also be deleted and cannot be retrieved after the July 2009 CTP release.

Vittorio Bertocci (a.k.a. Vibro) says I made you a token… but I eated it: or how to debug authentication issues in ASP.NET with SecurityTokenVisualizerControl in this 6/29/2009 post:

… Just drag the SecurityTokenVisualizerControl (STVC) on your page, you’ll obtain a fairly comprehensive view of what’s going on in your identity context in nice tabular format, collapsible in a tiny icon so that it does not interfere too much with the rest of the page. The STVC contains code that you would otherwise write yourself in 1, and at the same time it almost as exhaustive as if you’d explore the current context using 2: all this without leaving the browser. …

Matias Woloski briefly reviews the tool in his Drink the red token – debug your claims-aware apps post of 6/30/2009.

Vibro’s [VIDEO] Identity & Cloud Services post of 6/30/2009 is the video of his other session at the Belgian TechDays:

This session was part of the Architecture track, hence I took a mildly different, more abstract approach: I position Cloud computing as a trend (storytelling the famous parallel between last century’s electrification of the US and what may happen with Cloud services as we move toward a utility model), then talk about identity in general (same slides as the other session, slightly different angle) getting deeper in the underlying architectural patterns. Finally, I play a bit with the Access Control Service, using our MMC and a simple example for describing its inner workings.

Live Windows Azure Apps, Tools and Test Harnesses

<Return to section navigation list> 

• Magnus’s Windows Azure + Managed Extensibility Framework (MEF) = true post of 7/3/2009 is the first of a series of three about using MEF Preview 5 with .NET 3.5 under the MSPL license to:

[C]reate a Windows Azure project template that:

  • enables testability
  • abstracts away storage
  • is extensible and easy to evolve during development

This post is the first step – making the Windows Azure template and the Windowz Azure SDK testable!

My OakLeaf Systems Azure Table Services Test Harness with Windows® Live ID™ Authentication is available to all for testing as on 7/1/2009. See the .NET Services: Access Control, Service Bus and Workflow section for more details. The blob data source has moved from SkyDrive to DropBox.

My Problems Deploying a WebRole with Windows Live ID Authentication to the Azure Cloud post of 6/29/2009 describes an issue with the StorageAccountInfo.GetConfigurationSetting() method not conforming to what IntelliSense says: “Gets a configuration setting from application settings in the Web.config or App.config file. When running in a hosted environment, configuration settings are read from .cscfg files.”

My tests show that the last sentence isn’t true and Microsoft’s Yi-Lun Luo confirms it in my How to Solve Problem Deploying a WebRole with Windows Live ID Authentication to the Azure Cloud? question of 6/29/2009 in the Windows Azure forum. When running in a hosted environment, configuration settings are read from the Web.config file if the ServiceConfiguration.cscfg file doesn’t contain the requested setting value.

Lynn Kiesling writes in her Hohm, and cloud computing post of 6/29/2009:

Last week I wrote about Microsoft’s Hohm energy management product announcement. Yesterday at earth2tech, Katie Fehrenbacher elaborated on the cloud computing angle, and how Microsoft’s Azure cloud computing service might change energy data storage, computing, and business models. Microsoft, Google, and others are all exploring cloud computing, for good reason.

Mary Jo Foley’s Microsoft seeks a name for its new Office Web Apps suite post of 6/30/2009 describes Microsoft’s forthcoming Office Web Applications suite, which consists of “Web-hosted Word, PowerPoint, Excel and OneNote apps that it is expected to release to a wider group of testers in mid-July, as part of the Office 2010 Community Technology Preview.”

I assume that Windows Azure will host “Microsoft Ensemble” (or whatever name they choose).

Azure Infrastructure

<Return to section navigation list> 

•• Lydia Leong chimes in on Independence Day with an analysis of Cloud computing adoption surveys:

A recent [US$1,995] Forrester survey apparently indicates that that one out of four large companies plan to use an external provider soon, or have already done so. (The Cloud Storage Strategy blog has a good round-up linking to the original report, a summary of the key points, and various commentators.)

She continues:

Gartner’s own [US$ 2,495] survey on this topic has just been published. It’s titled, “User Survey Analysis: Economic Pressures Drive Cost-Oriented Outsourcing, Worldwide, 2008-2009“. Among its many components is a breakdown of current and planned use of alternative delivery models (which include things like SaaS and IT infrastructure utilities) over the next 24 months. We show even higher current and planned adoption numbers than Forrester, with IaaS leading the pack in terms of current and near-term adoption, and very healthy numbers for SaaS as well.

“Lydia Leong is an analyst at Gartner, where she covers Web hosting, colocation, content delivery networks, cloud computing, and other Internet infrastructure services.”

M. West, C. Burns and B. Guptill coauthored Saugatuck Research’s User Cloud Infrastructure Expectations: Mainstream IT by 2011? research report of 7/1/2009:

Inspired by a broad lack of market understanding of the realities of Cloud Computing, Saugatuck recently conducted a web survey of user IT and business executives with research partner BusinessWeek Research Services. …

Reading more requires site registration here.

Sol E. Solomon reports Survey: Cloud computing hits big time in this 6/30/2009 article for ZDNet Asia:

The adoption of cloud computing is on the rise, with 50 percent of Global 2000 companies already deploying the infrastructure or are planning to do so within a year, a new study found.

In the survey of 104 Global 2000 companies conducted by AppLabs, 30 percent of respondents were already using the cloud, while 20 percent said they were looking to move their applications onto it within the next 12 months.

Sol’s post is considerably more upbeat than Saugatuck’s research report.

• Krishnan Subramanian writes in his Network Effects Will Lead to SaaS Vendor Lockin? post of 7/3/2009:

As people in US enter the long weekend of July 4th (independence day), we have something to ponder about the independence of SaaS users. Alistair Croll, writing on GigaOm, points us to the possibility of SaaS vendor lock-in as a result of network effects.

This is an interesting take worth pondering over this weekend. I thought I will throw in few questions on this topic and see if I can get some response.

• PRNewsWire reports CSC to Resell Cloud-Based Microsoft Online Services in this 7/1/2009 press release:

By providing enterprise clients with the Business Productivity Online Suite and CSC Trusted Cloud Services, CSC will offer a compelling choice of private cloud customer-managed and public cloud services combined with Microsoft Online Services. CSC, a Microsoft Gold Certified partner, is one of the industry's leading consulting, systems integration and outsourcing providers and is one of a few Business Productivity Online Suite resellers. Working together globally, CSC and Microsoft Corp. expect to migrate millions of users to the Business Productivity Online Suite.

CSC will integrate Microsoft Online Services into its Trusted Cloud Services portfolio, which includes enterprise-class Cloud Orchestration Services, Trusted Cloud Services and World Class Consulting Capabilities.

• David Chappell is interviewed in Channel9’s ARCast.TV - Windows Azure, A conversation with David Chappell video (00:14:08) posted 6/29/2009. The abstract says:

What's the latest on Windows Azure and Microsoft's cloud platform? David Chappell discusses his perspective on this fast-changing area with Bob Familiar.

But the interview occurred in May at Tech*Ed 2009 North America, which is a bit early to call “the latest.”

Dana Blankenhorn posits With clouds license arguments become fog in this 7/2/2009 post and claims “When you are using a cloud software licenses don’t matter much.” Users paying for Windows 2003 Server and SQL Server 2005 Standard Edition instances on Amazon EC2 probably won’t agree with Dana’s conclusion. (see the Pricing section of Amazon Elastic Compute Cloud running Microsoft Windows Server and SQL Server.)

James Hamilton’s Microsoft Bringing 35 Megawatts on-line post of 6/30/2009 provides more detail and links about the Chicago data center.

Mary Jo Foley reports Microsoft to turn on Chicago, Dublin datacenters in July in this 6/29/2009 post to her “All About Microsoft” column. Mary Jo says:

… In January of this year, Microsoft reportedly was scaling back on its Chicago facility, as part of its overall cost-cutting moves. But according to a June 29 post to the ms datacenters blog, the Chicago facility will go live on July 20 and Dublin on July 1. …

Michael Stiefel’s Cloud Computing interview of 6/29/2009 on .NET Rocks talks “about the realities of Cloud Computing including offerings from Amazon, Google, and Microsoft Azure.”

John Treadway posits Evolve or Perish - Cloud Computing and Enterprise Software in this 6/29/2009 post, which presents a potential adoption curve for cloud computing and claims:

The lesson of Salesforce.com and RightNow in the SFA/CRM space should be extended to the rest of enterprise software.

Lydia Leong often hears “I’m thinking about using Amazon, IBM, or Rackspace…” in her role as a Gartner analyst. Her 6/29/2009 post mulls:

… Customers say things like, “I’ve got an e-commerce website that uses the following list of technologies. I get a lot more traffic around Mother’s Day and Christmas. Also, I run marketing campaigns, but I’m never sure how much additional traffic an advertisement will drive to my site.”

If you’re currently soaking in the cloud hype, you might quickly jump on that to say, “A perfect case for cloud!” and it could be, but then you get into other questions. Is maximum cost savings the most important budgetary aspect, or is predictability of the bill more important? When he has traffic spikes, are they gradual, giving him hours (or even days) to build up the necessary capacity, or are they sudden, requiring provisioning in close to real time as possible? …

David Linthicum sees “deja vu all over again” in his Bucking the Cloud Computing Hype post of 6/29/2009. He recalls:

Years ago I was running a large software development shop when the "offshoring" movement became all that and a bag of chips. I felt extreme pressure to fire some of my staff in the US and cut a deal with the dozens of outsourcing firms that were calling me daily. I was asked about offshoring so many times that it was clear to me that the pressure was on. …

… In many respects, similar things are going on today within the world of traditional enterprises when it comes to cloud computing. Many IT managers are being asked to move to the clouds, but when they take a close look at the business and technology issues, it's clear to some that the options are not currently right for them. …

Ed Sim’s Enterprise-Based Applications in the Cloud Are Next post of 6/29/2009, a “VC Viewpoint on Cloud Computing” ledes with:

One thing is pretty clear to me from an investment perspective. I am not going to invest in the next hot cloud computing infrastructure service that will compete against Amazon, Rackspace, Microsoft, and every other large tech vendor in the world. This is suicide and far from capital efficient. …

He concludes:

… As I dig deeper into some of these companies, it is clear to me that software purpose-built from the ground up to live in a cloud has a huge advantage since it is hard to retrofit off-the-shelf software to leverage all of the benefits offered by Amazon, Rackspace, and the like. Secondly, many of the better companies have built some slick tools and services to solve difficult problems like how to make customers feel like they have their own privated, dedicated systems while still keeping costs low.  Finally, from a go-to-market perspective, a number of the companies I have spoken with have not gotten the question of whether or not they could scale as they quickly point to their backend provider and move to the next objection. So, if you have an application targeted at the SMB market that is taking advantage of cloud economics, please feel free to contact me.

Ed writes the "Beyond VC" Blog.

Andrea DiMaio applies on 6/29/2009 the If You Torture The Data Enough, They Will Confess Anything test to Casey Coleman’s latest post, in which “she mentioned Vivek Kundra’s vision of government ‘open by default’, i.e. data from federal agencies should be published and publicly available, unless privacy and security considerations prevent from doing so.

Cloud Security and Governance

<Return to section navigation list>

 Sumner Lemon’s RSA's Coviello: Cloud computing not secure enough of 7/3/2009 begins:

Cloud-based services are being rolled out without enough attention being paid to securing these services and the information they handle. That was the finding of a recent study commissioned by RSA Security.

While the report's findings are alarming, there is still time for providers of these services to address the problem, said Art Coviello, executive vice president at EMC and president of RSA Security. The key is to look at security as an integral part of the service and not as an add-on feature, he said.

And continues with a detailed Q & A session.

Erika Morphy begins her The Cloud's Growing SLA Ecosystem post of 7/3/2009 with:

It hasn't taken long for cloud computing to ramp up for prime time. Now that many companies have gotten over their initial reservations and are flocking to the cloud model, the question of what can and should go into a service level agreement is front and center.

It’s ironic that she continues:

It's been four months since Google … announced it would … guarantee 99.9 percent system accessibility for users of its Google Apps Premier Edition -- a cloud-based productivity suite of business-oriented messaging and collaboration apps, including integration capabilities and support.

After Google’s Datastore suffered a ~6-hour outage on 7/2/2009. 99.9% accessibility over a month allows only 30 * 24 * .001 = 0.72 hours = 43.2 minutes of downtime. (See the Azure Blob, Table and Queue Services section for more outage details.)

SearchSecurityChannel.com’s PCI compliance guide: A resource for solution providers of 6/29/2009 is a compilation of “PCI DSS-related content to be used as a PCI resource to keep you up to date and better equipped to help your customers become compliant.”

Craig Balding’s Vulnerability Scanning and Clouds: An Attempt to Move the Dialog On… post of 6/28/2009 deals with Terms of Service issues over network scans:

Much has been said about public IaaS providers that expressly forbid customers from running network scans against their cloud hosted infrastructure.  Failure to comply with the Terms of Service can result in account suspension or termination (ouch!).  This post is my attempt to suggest a way forward.  I welcome your feedback…

As has been noted before, a blanket ban on legitimate scanning activity by customers of their own infrastructure (whether outsourced or not) undermines security assurance processes and can make regulatory compliance impossible; e.g. PCI DSS mandates network vulnerability scanning as a control. … [Emphasis Craig’s.]

Cloud Computing Events

<Return to section navigation list>

•• David Pallmann’s Azure User Group Meeting in San Diego 7/09/09 on MEBAs and SaaS post of 7/5/2009 says:

The topic for this month's Azure User Group meeting is Multi-Enterprise Business Applications (MEBAs), a new class of applications the cloud is ideally suited for. We'll also look at SaaS considerations and weigh single-tenant vs. multi-tenant approaches. Hope to see you there!

When: 7/9/2009 6:00 PM PDT 
Where: AMN Healthcare, 12400 High Bluff Dr #100, San Diego, CA 92130

•• Lauren Twele reports Forrester Enterprise Cloud Webcast on July 23rd! in a LinkedIn Discussion on the Cloud Computing Interoperability Forum:

With the rapid rise in adoption of SaaS and the Cloud enterprises are wondering how the cloud affects IT’s role, how it will change IT infrastructures and how to integrate internal IT with externally provided cloud services. Understanding the key issues, challenges and trends surrounding cloud computing will enable businesses to devise a strategy for integrating their enterprise with the Cloud.

The Webinar will cover:

  • Explanation of cloud computing and how it relates to SaaS
  • The key issues, challenges, and surprises with cloud computing for enterprises
  • How does cloud offerings such as compute, storage, or platform-as-a-service fits into your future
  • Recommendations to integrate internal IT with externally provided cloud services 
  • Security and risk barriers to cloud adoption and how to overcome [them]

Register here.

When: 7/23/2009 10:00 AM PDT 
Where: Internet Webinar

VIBEvents presents the online Cloud Adoption Arena virtual event from London on 10/20 to 10/21/2009. The organizers describe the event as:

VIBevents are delighted to be launching the industry’s first international virtual cloud adoption event which will bring together the leading CIOs, IT Directors and Cloud Experts to share insights on overcoming the risks and reaping the rewards of migrating to the cloud.

The expert speaker line up at the Cloud Adoption Arena will guide you through everything you need to know to fully understand the opportunities of cloud computing for your business. Attending this event will enable you to overcome uncertainty, mitigate risk and successfully add capacity and service on demand…. All from the comfort of your own computer!
With end-user case studies and conference tracks designed specifically for Start-ups, SME’S, Enterprises and the Public Sector; this virtual event must not be missed.

When: 10/20 to 10/21/2009 
Where: The Internet (virtually from London UK) 

• Kevin Jackson’s OMG Cloud Standards Summit post of 7/2/2009 reports that the Object Management Group will hold a Standards in Government & NGO's Workshop on 7/13 to 7/15/ 2009 at the Westin Arlington Gateway, Arlington, VA. The Cloud Computing Standards Summit on 7/13/2009 will focus on cloud computing standards for government clouds. Check Kevin’s post for the list of “usual suspect” participants.

When: 7/13 to 7/15/2009 
Where: Westin Arlington Gateway, Arlington, VA USA

• SYS-CON has extended the deadline for submitting papers to its 4th International Cloud Computing Conference & Expo to be held 11/2 to 11/4/2009 in Santa Clara, CA, according to this Call for Papers Deadline July 15th, 2009 post.

When: 11/2 to 11/4/2009 
Where: Santa Clara Convention Center, Santa Clara, CA USA

Maarten Balliauw, Kurt Claeys and Yves Goeleven are starting Azure User Group Belgium (or AZUG.BE):

AZUG.BE is a Belgian user group with focus on development and architecture of the Microsoft Azure Services Platform. Azure is a cloud hosted development platform for internet oriented applications aimed at high scalability and based on .NET technology.

azuglogo

Our goal is to share knowledge and experiences with the .NET community in development and architecture in the Azure Services Platform and the .NET Services technology. As new programming skills and a new architectural approach are needed we are inviting you to become member of this user group to prepare you for building this new style of applications. …

First public meeting is planned in September 2009.

Other Cloud Computing Platforms and Services

<Return to section navigation list> 

• John from CloudBzz claims Unisys [has] A Clear Vision for the Cloud in this 7/2/2009 post:

Following Unisys’ announcement on Wednesday regarding their cloud computing strategy (Unisys Moves to Break Through Barriers to Adoption of Cloud Computing) I had the opportunity to speak with Rich Marcello, president of Unisys Systems & Technology, and Sam Gross, VP of Unisys Global IT Outsourcing Solutions. What struck me was the coherence and clarity of their cloud computing vision as compared to HP or IBM. …

• Reuven Cohen’s IBM Cloud Computing Use Cases Group Releases Draft White Paper post of 7/2/2009 begins:

IBM's experiment with group authorship for Cloud Computing interoperability is starting to pay off. Earlier today, Doug Tidwell posted the first draft of a Cloud Computing Use Cases White Paper produced extensively via a new Google group created to help define the various use case requires. The white paper was also released under a Creative Commons License with the intention of remixing for use within other white papers and marketing materials.

In an email by Tidwell he said everything in the paper comes from the comments posted on the Google group. But also admits there are several areas that need a lot more discussion.

The introduction of the whitepaper states that it utilizes existing customer based scenarios with the goal of highlighting the capabilities and requirements that need to be standardized in a Cloud environment to ensure interoperability, ease of integration and also portability. It strives to ensure that cloud computing evolves as an open environment, minimizing vendor lock-in and increasing customer choice.

• John Foley analyzes the The Canonical-Eucalyptus Private Cloud Combo for InformationWeek on 7/2/2009:

A few months ago, Canonical and Eucalyptus Systems aligned their product development to create an integrated cloud-software-on-Ubuntu-Linux stack. The startups are now collaborating on service and support, giving IT departments a new option for creating internal cloud computing environments.

The annual cost to support up to five physical servers and 25 virtual Ubuntu servers is $4,750 for standard support (8 hours per day) and $17,500 for around-the-clock support. Beyond that, additional support is available for one physical server and ten virtual servers for $1,250 (8 hours/day) or $3,000 (24x7).

It remains to be seen if the preceding pricing is competitive.

• Ashley Tate’s Simple Savant - C# Interface to Amazon SimpleDB post of 3/18/2009 describes his “application that stores all structured data using Amazon's SimpleDB service.”

When I started creating the overall architecture I searched for recommendations on designing applications specifically for SimpleDB or similar services. I didn't find many tips, but I did find lots of complaints about the disadvantages of SimpleDB when compared to mature RDBS products. I also discovered the available .NET interfaces to SimpleDB were fairly low-level and didn't put much effort into overcoming these inherent deficiencies.

His New Simple Savant Release of 4/16/2009 “brings the library up to date with the latest Amazon SimpleDB features and also completes the baseline feature set.”

The new release adds support for:

Sorry I missed this project when Ashley first announced it.

• Sean Michael Kerner reports “New commercial initiatives for cloud services will see both Red Hat and Ubuntu ramping up their competition” in his Linux Vendors Head to the Cloud in Search of Cash post of 7/2/2009:

This week, two of the largest Linux vendors each announced new initiatives to provide commercial services for cloud customers.

Red Hat (NYSE: RHT) is launching a new cloud certification program, while Canonical, the lead commercial vendor behind Ubuntu Linux, is launching paid support services for its cloud offerings.

Both efforts have the potential to help the Linux vendors generate revenues from the cloud as enterprise adoption of cloud technologies mount.

• Geva Perry’s Ruby Developers: The Cloud Generation post of 6/20/2009 notes the yearly increase in use of Ruby and observes:

… To cloud computing there is a special significance in the increased adoption of Ruby, because Ruby developers are the cloud generation. …

In a similar fashion, the Ruby community is essentially skipping traditionally on-premise installed software. The dominant model for RoR application deployment is cloud, with platforms such as Slicehost (now part of Rackspace Cloud), Engine Yard and Heroku. Cloud services such as New Relic, FiveRuns and Scout provide the de facto standard monitoring and management frameworks, and cloud-based GitHub is the standard code version and developer collaboration tool for the RoR generation. …

In the 2009 RailsConf, the two dominant vendors were Heroku and Engine Yard. Unlike some perceive these companies, they are not merely Rails hosting services -- they are the application platforms for Ruby, and they are on the cloud. …

Unisys announces its entry into the cloud computing fray with its Unisys & Cloud Computing: Breaking Through Barriers to Adoption press release of 7/1/2009 that claims its:

New strategy combines innovative security with suite of solutions to expand options for delivery of services in the cloud

Unisys Corporation (NYSE: UIS) yesterday moved to overcome CIOs’ concerns about security of data in the cloud, cited by organizations and industry analysts as the top impediment to adopting cloud computing for business needs.

and offers "The Perfect Storm for Enterprise-Class Clouds” whitepaper for download.

Timothy Prickett Morgan’s Unisys to build its own stealthy cloud post of 7/1/2009 to The Register continues with “And it wants to build yours, too:”

Unisys may have not taken over the world as either a system maker or an outsourcer, but it's a player in both markets and it doesn't want the move to cloud computing to leave it behind.

That's why Unisys is dedicating an 800-person consulting team - about three percent of its 27,700-person global workforce - to a cloud-computing consulting practice. And the company is going to hang out its shingle as cloud utility as well as offering to run hybrid clouds that are a mix of internal clouds running at companies and the Unisys Secure Cloud.

Rob Barry reports Salesforce unfazed by Oracle competition in cloud computing in this 7/1/2009 post to SearchCloudComputing.com:

"We think we can be very competitive against Salesforce.com," [Larry] Ellison said in a widely reported conversation. "Virtually every time we compete with them on large deals and with large customers, we win and, in some cases, replace them."

Bruce Francis, Salesforce.com's VP of corporate strategy, calmly dismisses such assertions.

"I think that Oracle is saying, 'It's the end of software' is great for cloud computing," Francis said. "Every time Oracle says cloud computing is the way to go, it brings us more deals."

Dana Gardner’s Oracle closes in on 'any'-ware with debut of middleware behemoth 11g suites family post of 7/1/2009 to ZDNet’s BriefingsDirect blog describes Larry Ellison’s new SOA offering:

After nearly a 20-month gestation period, Oracle today announced the arrival this month of the next generation of its sprawling middleware family, the long-anticipated Oracle Fusion Middleware 11g.

Billed as a “complete, integrated, and hot-pluggable” middleware set of suites, the new software infrastructure offerings, which the Redwood Shores, Calif. computer giant previewed in November 2007, bolsters functionality, integration and business intelligence (BI) benefits across its vast product portfolio, including new capabilities for Oracle SOA Suite, WebLogic Suite, Web Center Suite, and opening debut for Identity Management as a suite.

Stacey Higginbotham reports for GigaOm from Cisco Live on 6/30/2009: Cisco Launches Services, Shows Off Its Hit List:

Cisco today outlined its plans for delivering IT services over the web (aka cloud services), and as part of a conference call, showed off a great slide that illustrates exactly how many companies this former networking gear maker wants to take on. If I were to boil it all down, I’d say the company’s cloud strategy relies heavily on its hardware to make its WebEx-branded collaboration software run economically. Padmasree Warrior, Cisco’s CTO, said the company sees the cloud as having four layers, with the bottommost layer being the hardware infrastructure provided by Cisco’s new servers. The top three are the more traditional infrastructure-as-a-service offerings, platforms as a service and software as a service. …

Ignacio M. Llorente describes a “New Discussion Group on Enhancing Grid and HPC with Cloud Computing” in his High Performance and Grid Computing in the Cloud post of 6/30/2009.

Jo Maitland reports Google opens up on App Engine in this 6/29/2009 post to SearchCloudComputing.com:

Google launched App Engine in April 2008 for Web developers to build applications and host them on its internal infrastructure. It claims there are thousands of developers using the service, which competes with Amazon AWS and Microsoft Azure.

Does this mean Google wants to be in the software development game or the web hosting business? What's the company's vision for App Engine, and where does it fit in the cloud computing landscape? SearchCloudComputing.com caught up with Mike Repass, product manager for Google App Engine, during a recent trip to California.

Jo continues with a Q&A session:

Google App Engine product manager Mike Repass discusses competition with Microsoft Azure and Amazon Web Services, along with Google's vision for its cloud development platform.

Rich Miller’s Andreessen-backed Startup Targets Cloud post of 6/29/2009 reports:

A new cloud computing startup funded and advised by Marc Andreessen and Ben Horowitz plans to help enterprise companies deploy and manage applications in the cloud. webappVM is a Redwood City company building a “self-monitoring application cloud” for web applications that will provide enterprise-style app management capabilities to public and private clouds. The company is backed Shasta Ventures and Sierra Ventures as well as Andreessen and Horowitz, who recently raised $300 million to fund early-stage investments. …

Krishnan Subramanian questions if Sun [is] Rethinking Its Cloud Strategy? in this 6/29/2009 post about the affect on Sun’s plans for Open Federated Clouds after Oracle completes its acquisition. Krishnan concludes:

… I could see why Sun is interested in the Private Cloud market but I feel that any such move has the potential to hit them bad on a long term. A public Cloud, as envisioned by Sun, will be good for the marketplace and this dilly dallying doesn't bode well. Even though they deny that this shift has anything to do with Oracle, it is hard to believe it knowing what Larry thinks about the idea of Cloud Computing. I just hope that Sun will come forward and talk to the community about their Cloud Computing strategy.

William Herley asks Will Larry Ellison eat his words on cloud computing? in his 6/29/2009 post to InfoWorld’s Cloud Computing section: “Analysts are speculating that Oracle's chief is reconsidering cloud computing, but I suspect it's just more of his infamous bash-to-embrace technique.”

Jason Carolan and Steve Gaede authored Sun Microsystems’ Cloud Computing Infrastructure and Architecture white paper dated 6/29/2009:

Understanding the various models and the on-demand, self-service, pay-by-use nature of cloud computing is important for any enterprise interested in exploring this new aspect of computing. The white paper not only explains the general concepts of the public, private and hybrid clouds, it also provides examples of organizations who have chosen one type of model or another and how it was implemented to meet their particular needs.

<Return to section navigation list> 

LINQ and Entity Framework Posts for 6/29/2009+

Note: This post is updated with a frequency that depends on the availability of new articles.

Entity Framework and Entity Data Model (EF/EDM)

Danny Simmons continues his DPMud series with D3: Building Great Software is a Battle, Don’t Leave Any Assets on the Sidelines of 6/30/2009. His list of assets is:

  • Analysis Tools
  • Check Constraints in the DB
  • Unit Testing Your Brains Out

Matthieu Mezil says T4 for View Generation is “easier to use than EdmGen” and “it allows you to use embedded metadata artifacts” in this 6/29/2009 post, which includes extensive source code.

Julie Lerman reports Oracle Woos Microsoft OracleClient users in this 6/29/2009 post:

Although Oracle has long had an area of it’s website dedicated to it’s .NET provider, ODP.NET, they have recently added a page specifically for users of Microsoft’s soon-to-be deprecated System.Data.OracleClient:    ODP.NET for Microsoft OracleClient

No mention of EF support yet, not even in the new features list for the ODP.NET 11g Beta (11.1.0.7.10).  I’ll be watching Oracle’s .NET evangelist, Christian Shay’s, blog for more details.

I reported in my Entity Framework Beta 3 Available for Download post of 12/6/2007 that:

Christian Shay, Product Manager in the .NET and Windows group at Oracle left this comment to my Future LINQ to SQL Support for Multiple Databases? post on May 31, 2007:

I think Oracle is keeping their level of support secret. But, a clue has just been revealed and apparently, more will be known at TechEd. Oracle is co-presenting a talk called "ADO.NET Entity Framework: Provider Model and Integration with Third-Party Databases" Check it out: http://cshay.blogspot.com/2007_05_01_archive.html.

EF support by Oracle appears to have died immediately after Christian posted his comment.

See also my Entity Framework Updates post of 6/2/2007.

Elisa Flasko’s Entity Framework Provider for Synergy DBMS post of 7/1/2009 links to Synergy.de’s announcement page about the release: Synergex Announces the Release of the Synergy/DE Data Provider for .NET of 6/19/2009. 

LINQ to SQL

Rob Conery announced SubSonic 3.0 is Released on 7/3/2009. What’s new in v3.0:

And:

LinqMaster shows you How to Create T-SQL CASE Statements With LINQ To SQL in this 6/29/2009 post.

LINQ to Objects, LINQ to XML, et al.

Deborah Kurata attacks the VB’s line continuation character in VS1008 with LINQ to XML literals in the XML Literals: Simplifying Strings post of 7/3/2009 to her new Deborah’s Developer MindScape blog.

Her LINQ: Defining a List of Integers post of the same date simplifies the process with, for instance, Enumerable.Range(1, 9).ToList(). XML Literals: Creating an XML File of 7/2/2009 explains how to do it.

Jim Wooley’s Iterators OR Excuse me waiter theres a goto in my C sharp post of 6/29/2009 begins:

At Codestock '09, I gave my LINQ Internals talk and had a number of people express shock when I showed the underlying implementation of their beloved iterators when looking at the code through Reflector. Let's look first at the C# that we wrote. This is similar to the implementation of LINQ to Object's Where method as shown in the sequence.cs file that's part of the C# Samples.

Eric White’s Querying LINQ to XML Nodes in Reverse Document Order with Better Performance post of 6/24/2009 begins:

Occasionally I need to query LINQ to XML nodes in reverse document order. I’m currently writing some LINQ to XML queries over Open XML documents where I need to select paragraph nodes based on content in the immediately preceding paragraph. However, nodes in LINQ to XML are forward-linked only. We can see evidence of this in the XNode.NodesBeforeSelf and XElement.ElementsBeforeSelf methods – these methods return collections of nodes in document order, not reverse document order. This was by design – LINQ to XML was designed to provide great performance for the vast majority of scenarios with the minimum memory footprint possible. The need to process nodes in reverse document order is rare, so the designers of LINQ to XML decided that it was more important to reduce memory footprint than to allow for good performance in the few scenarios that require processing in reverse document order, and of course it was a good decision. But the need does exist.

ADO.NET Data Services (Astoria)

No significant new Astoria posts as of 7/4/2009.

ASP.NET Dynamic Data (DD)

Peter Blum’s How Dynamic Data changes how you build web forms detailed post of 7/1/2009 describes how DD enables Separation of Concerns:

ASP.NET Dynamic Data emphasizes “separation of concerns” where business logic is separated from the web form. In addition, the web controls showing and validating data are shared by all web forms, providing a consistent user interface. It internally handles database interaction, so you don’t have to write code to create, read, update, or delete records (often known as “CRUD”).

Scott Hanselman called Peter’s post “fantastic” in a recent Tweet.

Miscellaneous (WPF, WCF, MVC, Silverlight, etc.)

David Ebbo’s T4MVC 2.2 update: Routing, Forms, DI container, fixes post of 6/30/2009 is a continuation of these previous MVC with T4 Templates posts:

  • A new and improved ASP.NET MVC T4 template
  • The MVC T4 template is now up on CodePlex
  •  

    Wednesday, July 01, 2009

    Problems Deploying a WebRole with Windows Live ID Authentication to the Azure Cloud

    • Update 6/30/2009: Microsoft’s Yi-Lun Luo has provided a detailed response to my How to Solve Problem Deploying a WebRole with Windows Live ID Authentication to the Azure Cloud? question of 6/29/2009 in the Windows Azure forum. See the Update 6/30/2009 section at the end of this post for the solution.

    Update 7/1/2009: The OakLeaf Systems Azure Table Services Test Harness with Windows® Live ID™ Authentication is available to all for testing.

    The Windows Live ID Web SDK includes sample code for Default.aspx and webauth_handler.aspx pages that you can use to implement Windows Live ID (WLID) authentication for Azure Hosted Services. My intention was to demonstrate WLID authentication by creating two WLID registrations for the project:

    1. A new Live Services: Existing APIs registration with a Return URL pointing to http://localhost:81/webauth-handler.aspx for the Development Fabric:

    2. The autogenerated registration (added when creating a new Hosted Service) with a Return URL pointing to http://oakleaf7.cloudapp.net/webauth-handler.aspx:

    Note: You can’t remove the Domain value from the autogenerated registration page.

    Separate registrations are required for the Development and Cloud Fabrics because you can’t change the domain of the Return URL in either of the two registrations. This is a serious PITA.

    The Default.aspx page’s DefaultPage class uses static WindowsLiveLogin wll = new WindowsLiveLogin(true); to specify the registration from wll_appid and wll_secret values in Web.config.  You can’t edit Web.config in the Azure Development Portal, so I use the StorageAccountInfo.GetConfigurationSetting() method because IntelliSense says that the method “Gets a configuration setting from application settings in the Web.config or App.config file. When running in a hosted environment, configuration settings are read from .cscfg files.

    Therefore, I created the following Web.config <appSettings> entries for the Development Fabric, which should work fine in the Development Fabric:

    And the following ServiceConfiguration.cscfg file with Development Fabric settings which must are replaced with the highlighted production values:

    As shown here:

    However, a problem with the StorageAccountInfo.GetConfigurationSetting() method causes the Hosted Service to import the wrong wll_appid and wll_secret values (for the Development Fabric registration), as demonstrated in the following sequence.

    1. Here’s the correct cloud landing page (http://oakleaf7.cloudapp.net/Default.aspx):

     

    2. Followed by the Windows Live ID sign-in page with the wrong (Development Fabric) app_id in the URL: https://login.live.com/ppsecure/post.srf?appid=0000000044018216&alg=wsignin1.0&appctx=&bk=1246308459

    3. And finally, the wrong MainPage.aspx URL with the TargetURL for the Developer Fabric:

    The only source of the wrong wll_appid value and http://localhost:81/webauth-handler.aspx URL is the Web.config file. The source code doesn’t contain these values.

    The project runs fine in the Development Fabric. MainForm.aspx is a minor modification of the OakLeaf Systems Azure Table Services Sample Project.

    My conclusion is that When running in a hosted environment, configuration settings are read from Web.config files. Looks to me like an epic FAIL in the May 2008 CTP.

    If anyone on the Azure team wants to take a look at this project and its problems, I’ll be happy to send the source code.

    • Update 6/30/2009 based on Yi-Lun Luo’s response to my How to Solve Problem Deploying a WebRole with Windows Live ID Authentication to the Azure Cloud? question of 6/29/2009 in the Windows Azure forum. The problems:

    1. Substituting the IDLoginStatus control for the WebAuth.htm control in the sample’s IFrame forces all settings to be read from Web.config rather than from Web.config in the Development Fabric and ServiceConfiguration.cscfg in the Azure Fabric.*
    2. If the ServiceConiguration.csfg file has a value for the requested setting, GetConfigurationSetting() will read it from the ServiceConiguration.csfg file regardless of the operating environment; if the value is missing, GetConfigurationSetting() will read it from the Web.config file.

    * As noted in problem #2, IntelliSense’s reported “Gets a configuration setting from application settings in the Web.config or App.config file. When running in a hosted environment, configuration settings are read from .cscfg files”  behavior isn’t correct.

    Returning to the original IFrame with the WebAuth.htm control solves the URL problem, but doesn’t solve a problem with processing the webauthtoken cookie by the MainForm.aspx page in the cloud.

    • Update 7/1/2009 for processing the webauthtoken cookie by the MainForm.aspx page in the cloud.

    The MainForm.aspx page isn’t protected from access by unauthenticated users without processing the webauth cookie with code similar to that in the webauth-handler.aspx page:

    Note: Logging instructions have been removed from the above example for brevity.

    If isLoggedIn = true, code processes remaining Table Storage Test Harness code behind MainPage.aspx. If not, the user is redirected to the Default.aspx page to log in. A user who has previously logged in and whose cookie hasn’t expired will see the logout page upon reentry.

    LINQ and Entity Framework Posts for 6/22/2009+

    Updated 7/1/2009: Damien Guard’s LINQ to SQL article of 6/24/2009
    • Updated 6/28/2009: Huagati LINQ to SQL Profiler, LINQ to SQL in Mono, other additions

    Note: This post is updated daily or more frequently, depending on the availability of new articles.

    Entity Framework and Entity Data Model (EF/EDM)

    Danny Simmons continues his DPMud series with the second release and the D3: Fun with Concurrency and Model First – Part 1 and D3: Fun with Concurrency and Model First – Part 2 posts of 6/27/2009:

    [The task is] to add a concurrency-token property to each of my entities and a simple test to verify that optimistic concurrency checks are working correctly.  Seems pretty simple right?  The model currently only has 4 entities, so how hard could it be?  Can you say “working all week on this one task”?  :-(

    Dot Net RulesBuilding an ASP.Net application with C# and Entity Framework post of 6/27/2009 offers a detailed, illustrated introduction to using EF v1 as a data layer for ASP.NET 3.5 projects.

    Lynn Eriksen discovers It was the EF providers. EntityDataSource off the hook in this 6/27/2009 post:

    The title says it all. It was the EF providers I was looking at that cause my issues when using ‘OrderBy’, ‘Skip’ and ‘Take’ together. It all has to do with how the expression trees are created when using ‘Take’. Let’s look at the two scenarios. …

    Wade Wegner’s Architecting Your Data Access Layer with the Entity Framework post of 6/26/2009 begins:

    I think we can all agree – and if not, please let me know why – that the Entity Framework provides some awesome capabilities – mapping your conceptual schema to your data schema, isolation from the relational database and database schema, change tracking and identity resolution, full query comprehension and optimization, and more.  Yet, despite these features, it is difficult to figure out how and where to include the Entity Framework in your application architecture.

    And goes on to describe a recent presentation with one of his fellow evangelists, Dave Bost:

    In preparation for this talk, I spent a lot of time looking at different strategies and architectures for using your data access layer (DAL) and the Entity Framework – or any O/RM tool, for that matter.  In the end, I settled on three approaches – certainly there are other patterns and approaches, but I found these to be the most relevant:

    1. Entity Framework as the DAL
    2. Full encapsulation of the Entity Framework
    3. Partial encapsulation of the Entity Framework

    Wade concludes with the slide deck he used for the presentation.

    Matthieu Mezil creates an interface for a T4 POCO template in his POCO T4 post of 6/26/2009:

    With EF4 features CTP1, we have a great POCO template which is divided in two tt files to allow us to have the entitiy POCO classes and the context in different projects.

    It’s very very cool.

    However, I think that it’s a shame not to have an interface for the context particularly to mock it.

    So he shows you how change the .Context.tt file to create an interface for the context.

    Julie Lerman’s Effective EF with Oracle post of 6/26/2009 covers DataDirect’s Oracle data provider with EF support:

    Now that DataDirect’s Beta of their Oracle Provider with EF support is available, Jonathan Bruce (from DD) is starting to write technical posts about how to use it.

    Yesterday he posted Effective EF with Oracle

    And today: Effective EF with Oracle (Stored Procedures with REF CURSORs)

    Pablo M. Cibraro (a.k.a. Cibrax) calls out A Bad Idea, EF Entities over WCF in this 6/25/2009 post:

    Do you want to see something very ugly?. Try to send a complete EF [v1] entity directly as a data contract over the wire with WCF.

    LINQ to SQL

    •• Damien Guard describes problems with Client-side properties and any remote LINQ provider because:

    [T]hese properties can’t be translated and sent to the server as they have been compiled into intermediate language (IL) and not LINQ expression trees that are required for translation by IQueryable implementations. …

    The solution in his 6/24/2009 post:

    What we came up (David [Fowler], Colin Meek and myself) is a provider-independent way of declaring properties just once so they can be used in both scenarios. Computed properties for LINQ to SQL, LINQ to Entities and anything else LINQ enabled with little effort and it works great on .NET 3.5 SP1 :)

    Thanks to Damien for the heads up via Twitter.

    Kristofer Andersson’s Profiling Linq-to-SQL applications detailed post of 6/24/2009 explains why “runtime profiling live production systems [with the Huagati LINQ to SQL Profiler] can sometimes reveal bottlenecks and/or room for improvements/optimization that would not show up during development/test/QA, or on dev/test systems” [see below.]

    • Huagati Systems announces the availability on 6/20/2009, v1.11 of the Huagati LINQ to SQL Profiler, which consists of two components:

    1. A royalty-free redistributable runtime extension library that adds query profiling functionality to Linq-to-SQL datacontexts. Basic profiling requires only two added method calls to existing code; BeginProfiling and EndProfiling, while more advanced options with pre-defined filters and custom filters are available for more complex profiling tasks.
    2. A non-redistributable profiler log viewer that allows developers, DBAs, product/program managers, and system administrators to browse the profiler logs, identify expensive queries, view the managed call stack that generated the query, see vital SQL Server I/O and timing statistics from the actual execution of the query etc.

    You can download v1.11 from here and receive a 45-day trial license here.

    Miguel de Icaza reports by Twitter on 6/28/2009: “Mono trunk now has LINQ to SQL, we will likely backport to 2.4 and will be in 2.6. These people of no faith.”

    LINQ to SQL continues to live. Good news!

    Naspinski reports he has posted his IQueryableSearch class to CodePlex in his IQueryableSearch is now up on CodePlex post of of 6/26/2009. He has described the class in this Universal IQueryable Search Usable by Linq-to-SQL and Linq-to-Entities post of 5/10/2009.

    John Opincar compares Stored Procedures Versus LINQ to SQL for Dynamic WHERE Clauses in his detailed post of 6/23/2009:

    I was recently discussing the best way to solve the “bad plan gets cached for super-complex WHERE clause with a large number of @column IS NULL OR T.Column = @column conjuncts” problem with colleagues at work. This is another variant of the age-old “stored procedures versus code-generated SQL” (including ORMs here) debate.

    LINQ to Objects, LINQ to XML, et al.

    Jim Wooley reports LINQ in Action XML samples added to LINQPad in this 6/28/2009 post:

    The beginning of this month, we released the samples from LINQ in Action for chapters 1-8 which covers LINQ to Objects, LINQ to SQL, and the new Language features. We're happy to announce that the next three chapters covering LINQ to XML are now available. That's over 70 new samples in VB and C# each. Follow the directions on the original announcement to download and use these samples.

    Jeff Craig’s Inclusively Take Elements using LINQ and Custom Extensions post of 6/26/2009 takes on this problem:

    I ran into an interesting LINQ problem recently, one which required me to extend LINQ in my own fashion. The problem was fairly simple. I’m trying to build a list of every day a course meets over the course of a term. I start by querying our Academic Calendar for every event in the calendar, then I skip all the events prior to the first day of class, taking all the events until the end of classes for the term. I couldn’t just take those two events, because different events in the middle of the term affect if courses are offered.

    Jim Wooley offers his itinerary of “speaking engagements” (presumably about LINQ) throughout the southeast in this 6/25/2009 post:

    Frans Bouma warns Linq: Beware of the 'Access to modified closure' demon in this 6/25/2009 post:

    If you're using Linq and Resharper, you've probably seen the warning Resharper shows when you use a foreach loop in which you use the loop variable in a Linq extension method (be it on IQueryable<T> or IEnumerable<T>). In case you don't know what it is or what damage it can do if you ignore the issue, I'll give you a database oriented query (so on IQueryable<T>, using LLBLGen Pro's Linq provider) which creates a dynamic Where clause based on input, the typical scenario you should be careful with when it comes to this particular problem.

    ADO.NET Data Services (Astoria)

    Stay tuned for Sunday’s updates.

    ASP.NET Dynamic Data (DD)

    Stay tuned for Sunday’s updates. 

    Miscellaneous (WPF, WCF, MVC, Silverlight, etc.)

    David Ebbo’s The MVC T4 template is now up on CodePlex, and it does change your code a bit post of 6/26/2009 reports:

    The MVC T4 template (now named T4MVC) is now available on CodePlex, as one of the downloads in the ASP.NET MVC v1.0 Source page.

    and proves his addition to T4-based code generation for MVC projects. His earlier Mind if my MVC T4 template changes your code a bit? post of 6/24/2009 begins:

    When working on my MVC T4 template, I was not able to use reflection to discover the Controllers and Actions, because the code that the template generates is itself in the same assembly as the controllers.  So that causes a bit of a chicken and egg problem.

    Instead, I had to get out of my element and learn something I was not familiar with: the Visual Studio File Code Model API.  It’s very different from using reflection, because instead of working at the assembly level, you work at the source file level.

    and A T4 based approach to creating ASP.NET MVC strongly typed helpers starts with:

    Earlier this week, I wrote a post on using a BuildProvider to create ActionLink helpers.  That approach was using CodeDom to generate the code, and there was quite some user interest in it (and Phil blogged it, which helped!).

    Then yesterday, I wrote a post on the Pros and Cons of using CodeDom vs T4 templates for source code generation.  They are drastically different approaches, and while both have their strengths, T4 has definitely been getting more buzz lately.

    The logical follow-up to those two posts is a discussion on using T4 templates to generate MVC strongly typed helpers.  The general idea here is to use the existing ASP.NET extensibility points (BuildProvider and ControlBuilder), but rely on T4 templates to produce code instead of CodeDom.  Hence, I called the helper library AspNetT4Bridge (I’m really good at naming things!).

    As far as I know, this is the first time that T4 templates are executed dynamically inside an ASP.NET application, so let’s view this as an experiment, which has really not been put to the test yet.  But it is certainly an exciting approach, so let’s see where it takes us!

    Sunday, June 28, 2009

    Windows Azure and Cloud Computing Posts for 6/22/2009+

    Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

    ••• Updates 6/27 – 6/28/2009: OGDI expansion, other additions and corrections
    Updates 6/25 – 6/26/2009: Microsoft presentations streamed at GigaOm’s Structure 09 (Cloud Computing Events), Mary Jo Foley’s “All About Azure” audio archive (Cloud Computing Events), Velocity 09 videos, Structure 09 summaries and additions 
    • Updates 6/23 – 6/24/2009: Additions, typos

    Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

    To use these links, click the post title to display the single article you want to navigate.

    Azure Blob, Table and Queue Services

    <Return to section navigation list> 

    Arnon Rotem-Gal-Oz expands on his CRUD is bad for REST thesis in this 6/24/2009 post to Dr. Dobbs CodeTalk. In brief, Arnon’s position is:

    [T]he main reason CRUD is wrong for REST is an architectural one. One of the base characteristics(*) of REST is using hypermedia to externalize the statemachine of the protocol (a.k.a. HATEOS– Hypertext as the engine of state). The URI to URI transition is what makes the protocol tick (the transaction implementation by Alexandros  discussed in the previous post shows a good example of following this principle). …

    Maarten Balliauw recommends storing MVC views in Azure blobs in his A view from the cloud (or: locate your ASP.NET MVC views on Windows Azure Blob Storage) post of 6/8/2009 (missed at the time.)

    Hosting and deploying ASP.NET MVC applications on Windows Azure works like a charm. However, if you have been reading my blog for a while, you might have seen that I don’t like the fact that my ASP.NET MVC views are stored in the deployed package as well… Why? If I want to change some text or I made a typo, I would have to re-deploy my entire application for this. Takes a while, application is down during deployment, … And all of that for a typo…

    Luckily, Windows Azure also provides blob storage, on which you can host any blob of data (or any file, if you don’t like saying “blob”). These blobs can easily be managed with a tool like Azure Blob Storage Explorer. Now let’s see if we can abuse blob storage for storing the views of an ASP.NET MVC web application, making it easier to modify the text and stuff. We’ll do this by creating a new VirtualPathProvider.

    Note that this approach can also be used to create a CMS based on ASP.NET MVC and Windows Azure.

    Bruno Terkaly continues his series on Azure tables with these three posts of 6/21 – 6/22/2009:

    Bruno is a Microsoft Developer Evangelist.

    SQL Data Services (SDS)

    <Return to section navigation list> 

    No significant new articles as of 6/23/2009 10:30 AM PDT

    .NET Services: Access Control, Service Bus and Workflow

     <Return to section navigation list>

    Brent Stineman’s .NET Services – Introduction to the Service Bus post of 6/26/2009 begins:

    Darned if this post hasn’t been rough to write. I don’t know if its my continued lack of caffeine (quit it about 10 days ago now), or the constant interruptions. At least the interruptions have been meaningful. But after 2 days of off and on again effort, this post is finally done.

    As some of you reading this may already been aware, I’ve spent much of my spare time the last several weeks diving into Microsoft’s .NET Services. I’m finally ready to start sharing what I’ve learned in what I hope is a much more easily digestible format. Nothing against all the official documents and videos that are out there. They’re all excellent information. The problem is that there’s simply too much of it. :)

    Brent’s summary of the three major .NET Services includes Workflow, the demise of which in Azure v1 I reported on earlier. Workflow won’t return to .NET Services until after .NET 4.0 RTMs.

    Vittorio Bertocci promotes a video from his Putting authentication in its place: claim-based identity, services and Geneva TechDays session in his [VIDEO] Putting authentication in its place: claim-based identity, services and Geneva post of 6/25/2009. Here’s the blurb:

    The code that takes care of authentication is traditionally one of the nastiest spot of every distributed application. The current situation derives from multiple causes, from tightly coupling with specific technologies to trusting non-experts to write security code. Microsoft has been among the thought leaders who proposed a strategic solution to the problem, the Identity MetaSystem and its claim based identities, achieving vast consensus across the industry. Come to this session to learn how you can finally put that vision in practice thanks to the new 'Geneva' products line.

    TechDays was held in Antwerp a few months ago.

    Dan Guberman describes Improved support for X.509 credential in Information Cards in this 6/23/2009 post to the CardSpaceBlog.

    The Beta 2 version of “Geneva” has many features that improve the deployment of Geneva platform for our enterprise customers, like the Group Policy-driven provisioning of Information Cards  or the administrative policy of card usage that we talked about in our previous blog posts.

    Another such feature is the enhanced support for X.509 certificate credentials in Information Cards.

    Using Information Cards backed by an X509 certificate provides the added benefit of increased security, and with “Geneva” Server Beta 2 it becomes very easy to provision such a card. Pretty much all that you need to do is to check the “Certificate” checkbox in the Information Card Properties dialog in Geneva Server (right-click on Information Card tab in the navigation pane, and select Properties from the context menu).

    However, there’s still no update to this caveat in Vittorio Bertocci’s Claims and Cloud: Pardon our Dust post of 4/1/2009:

    [F]or a variety of reasons, an application that takes advantage of the Geneva Framework will not work “as is” when hosted in Windows Azure, including Microsoft products that were written to use the Geneva Framework. You may have heard that the new full trust settings we announced for Windows Azure at MIX would make the above scenario work, however that’s not the case: there is more than full trust for enabling the complete range of possibilities offered by claims based access.

    My question about Geneva Beta 2 in a comment to this post remains unanswered.

    Live Windows Azure Apps, Tools and Test Harnesses

    <Return to section navigation list> 

    ••• Microsoft’s Open Government Data Initiative (OGDI) site has expanded with more Azure-hosted Washington, D.C data sets on the Data Page, and details on the OGDI API on the Developers page. According to the Home page:

    The Open Government Data Initiative (OGDI) is an initiative led by Microsoft Public Sector Developer Evangelism team. OGDI uses the Azure Services Platform to make it easier to publish and use a wide variety of public data from government agencies. OGDI is also a free, open source ‘starter kit’ (coming soon) with code that can be used to publish data on the Internet in a Web-friendly format with easy-to-use, open API's. OGDI-based web API’s can be accessed from a variety of client technologies such as Silverlight, Flash, JavaScript, PHP, Python, Ruby, mapping web sites, etc.

    Ben Riga finishes his five-part series about combining the Microsoft Web Platform with Dynamics CRM to quickly build and deploy self-service solutions hosted on Windows Azure with his Dynamics Duo: Silverlight and Jazz Hands post of 6/18/2009. Following are links to the entire saga:

    1. Dynamics Duo Rides Again
    2. Dynamics Duo: Everybody needs an Identity
    3. Dynamics Duo: Wide World Importers Code
    4. Dynamics Duo: Composition with Third-Party Web Services
    5. Dynamics Duo: Silverlight and Jazz Hands

    Keith posted Web-based mapping tool gets government data via API from OGDI: http://visualfusion.cloudapp.net to the Microsoft Public Sector Developer and Platform Evangelism Team Blog on 6/25/2009:

    Microsoft partner IDV Solutions has created a terrific mapping overlay tool that can get map data from any KML source.

    Since OGDI natively emits KML, its a great demonstration of web standards enabling open government data.  They’ve included DC data from OGDI, and some national data (parks, earthquakes), but you can easily add any KML data set just by entering a URL.

    Go to http://visualfusion.cloudapp.net to see it in action!

    Mary Jo Foley reports on 6/24/2009 Five reasons why Microsoft's Hohm is more than just another Web 2.0 service. Following are the first two (and Azure-related) reasons from Troy Balterberry, Microsoft’s Hohm product manager:

    1. Hohm is a hosted serice running on Azure, Microsoft’s cloud platform. There are relatively few Microsoft services that already are running fully on top of Azure. HealthVault is one; Live Mesh is another. The calculations upon which the Hohm service is built are “really complicated,” Balterberry said, and require historical modeling. By running on Azure, Hohm can be scaled up or down, depending on demand, to use lots of compute cycles during peak demand.

    2. Speaking of HealthVault, Hohm was patterned after it and uses the same security and privacy mechanisms that Microsoft’s health-information service uses. While energy consumption data doesn’t seem as in need of guarding that patient health data is, energy usage and pricing are information that is sensitive and to which access needs to be controlled, said Balterberry.

    Here’s the full Microsoft Hohm Helps Consumers Save Money and Energy press release.

    C. G. Lynch asks How Far Will Microsoft Go with Cloud? in this feature-length article of 6/23/2009 for InfoWorld:

    … To date, the majority of Microsoft's software has come paired with servers and hardware that IT departments run and manage in-house. Now, with online services, Microsoft can manage the software in its own data centers while employees at customer companies around the world access applications through a web browser.

    According to Microsoft executives, companies can realize huge cost savings by not hiring staff to manage Exchange servers or reallocate current IT staff to other areas-a refrain software as a service (SaaS) vendors have been pushing for years now.

    "IT is dominated by the people cost," says Bob Muglia, president of the Microsoft Server & Tools division. "It's the single largest expense in IT. By leveraging the scale online services can deliver, you can leverage costs and be leaner." …

    Ingersoll Rand was running the e-mail system in-house. It had also developed many custom apps on the Lotus Domino server, but the cost was taking its toll, Kalka says. After looking at the on-premise, traditional version of Exchange, Kalka says "the numbers didn't look much better."

    Then Microsoft approached him about online version of Exchange. Kalka saw the cheap per user price. Coupled with the fact he didn't need to manage hardware, he decided to sign up.

    "That big e-mail cost went away," he says. "We had e-mail servers all around the world. 95 percent are shut down or re-allocated for something else." …

    Lynch goes on to describe SharePoint in the cloud as a “Trickier Decision” and notes that “Microsoft will roll out a fully online version of Office later this year or early next, but it remains unclear how robust the offering will be in comparison to the installed version.”

    David Pallman’s "Joint Venture": New Azure Multi-Business Enterprise Application (MEBA) post of 6/21/2009 describes his:

    [L]atest Silverlight-Azure reference application which is called Joint Venture. Joint Venture provides a workspace for cross-business project teams. That is, teams made up of people from more than one business who are working on some kind of business collaboration. This is an example of a Multi-Enterprise Business Application (MEBA), an app used by multiple businesses who have a relationship with each other. The cloud is an ideal place for business collaboration, providing a neutral location that can be easily and universally accessed.

    David requests your Azure Developer Contest vote in his Vote for Me! post of the same date.

    Azure Infrastructure

    <Return to section navigation list> 

    ••• Chris Hoff (a.k.a. @Beaker) concludes in his Cloud Maturity: Just Like the iPhone, There’s An App For That… post of 6/27/2009:

    The thing I love about my iPhone is that it’s not a piece of technology I think about but rather, it’s the way interact with it to get what I want done.  It has its quirks, but it works…for millions of people.

    The point here is that Cloud is very much like the iPhone.  As Sir James (Urquhart) says “Cloud isn’t a technology, it’s an operational model.”  Just like the iPhone.

    Cloud is still relatively immature and it doesn’t have all the things I want or need yet (and probably never will) but it will get to the point where its maturity and the inclusion of capabilities (such as better security, interoperability, more openness, etc.) will smooth its adoption even further and I won’t feel like we’re settling anymore…until the next version shows up on shelves.

    But don’t worry, there’s an app for that.

    John Brodkin’s Survey casts doubt on cloud adoption article for NetworkWorld of 6/26/2009 summarizes Laura DiDio’s recent cloud-computing survey for ITIC:

    New survey results cast doubt on whether cloud computing adoption will ramp up in the next 12 months, with only 15% of corporate customers having adopted or considering adopting cloud technology over the next year.

    A survey of 300 corporations worldwide found that 38% are undecided or unsure about whether they will adopt cloud services, and another 47% said they are not considering implementing cloud in the next year. Security is the biggest roadblock.

    “An overwhelming 85% majority of corporate customers will not implement a private or public cloud computing infrastructure in 2009 because of fears that cloud providers may not be able to adequately secure sensitive corporate data,” writes Information Technology Intelligence Corp. principal analyst Laura DiDio in a new report.

    Laura’s survey conflicts directly with Harris Interactive’s Microsoft-sponsored analysis reported by Julie Bort (see below.)

    Stephen Lawson reports in his Cloud is Internet's next generation, HP executive says post of 6/25/2009 that Cloud-Services “CTO Russ Daniels says the cloud makes the Internet more than an infrastructure for automating business processes or letting people view information.”

    The International Supercomputing Conference (ISC) blog’s High Performance Cloud Computing Still an Oxymoron post of 6/25/2009 observes:

    There was general agreement [at ISC ‘09 in Hamburg, Germany] on the benefits of cloud computing: elastic capacity, pay-per-use model, platform abstraction, economies of scale, and built-in fault tolerance. Unfortunately -- and maybe significantly -- there didn't seem to be much consensus about whether the clouds would usurp traditional HPC infrastructure as the platform of choice.

    C. Burns and B. Guptill’s MIT Cloud Computing Forums: Executives Don’t Know What They Don’t Know research report of 6/24/2009 (site registration required) begins:

    CIOs and similar high-ranking user executives see promise in Cloud Computing and, for the most part, believe that they understand what it is, and how to benefit from it. But insights from a recent four-day series of events with CIOs around the US indicate that, in reality, there are multiple definitions of Cloud Computing - and relatively few executives can see the scope of its effects.

    From June 11 through June 18, Saugatuck Research VP Charlie Burns took part in four expert panel and networking reception events examining the realities of Cloud Computing, and their effects on user business and IT strategy, planning and management.

    And continues with an analyzes of “[d]iscussions during the events and private conversations with session attendees.”

    Lori MacVittie suggests Five questions you need to ask about load balancing and the cloud on 6/25/2009 and starts with:

    Horizontal scaling of applications is a fairly well understood process that involves (old skool) server virtualization of the network kind: making many servers (instances) look like one to the outside world. When you start adding instances to increase capacity for your application, load balancing necessarily gets involved as it’s the way in which horizontal scalability is implemented today. …

    Joe McKendrick reports in his Survey: Wall Street looks to cloud technology for its next bailout post of 6/25/2009:

    A new survey released by IBM and Securities Industry and Financial Markets Association (SIFMA) finds that IT budgets are tight on Wall Street, but things are loosening up, and there’s going to be plenty of demand for new technology initiatives in the near future as firms on the Street look to “transformational” solutions to help better manage risk.

    The survey of more than 350 Wall Street IT professionals found a “significant” increase in interest in new technologies and computing models, in particular cloud computing, as firms seek to overcome budgetary restrictions and skills shortages. Almost half of the respondents now see cloud computing as a disruptive force. …

    Gartner’s Lydia Leong asks on 6/26/2009 Does Procurement know what you care about? when sourcing cloud computing services:

    Increasingly, … procurement is self-educating via the Internet. I’ve been seeing this a bit in relationship to the cloud (although there, the big waves are being made by business leadership, especially the CEO and CFO, reading about cloud in the press and online, more so than Purchasing), and a whole lot in the CDN market, where things like Dan Rayburn’s blog posts on CDN pricing provide some open guidance on market pricing. Bereft of context, and armed with just enough knowledge to be dangerous, purchasing folks looking across a market for the cheapest place to source something, can arrive at incorrect conclusions about what IT is really trying to source, and misjudge how much negotiating leverage they’ll really have with a vendor.

    Derrick Harris analyzes cloud-based infrastructure in these recent weekly posts to the GigaOm PRO Beta network:

    Derrick is the Infrastructure Curator for the GigaOM Network.

    Toby Wolpe’s Gartner rejigs cloud definitions article of 6/24/2009 for ZDNet UK and Chris Talbot’s Gartner identifies ideal attributes of cloud computing post of 6/25/2009 for eChannelLine cover Darryl Plummer’s revamped definition of cloud computing. According to Chris, the five “ideal attributes” are, in brief:

    1. Service-based
    2. Scalable and elastic
    3. Shared
    4. Metered by use
    5. Uses Internet technology

    Chris provides more details of the five points, while Toby delivers more background.

    Daryl Plummer is a managing vice president and chief Gartner fellow.

    Mary Jo Foley’s “All about Azure” Webcast of 6/24/2009 and slides should be are available for download here, but the link doesn’t work. Will update if and when ZDNet fixes it. See the Cloud Computing Events section for more details.

    • Julie Bort reports on 6/24/2009 that Many companies say they will adopt cloud computing within two years based on a “Microsoft-sponsored [Harris Interactive] study on IT spending [which] shows green is out, efficiency is in and security is still painful.”

    One-third of 1,200 organizations (33%) plan to convert their application environments away from a traditional, client-server model to one based on virtualization and cloud computing over the next two years, according to a study commissioned by Microsoft and released today. The study sought to broadly determine global IT spending priorities.

    While the survey was far from comprehensive, it did uncover a few silver-lining facts. IT spending budgets will not be cut, with 98% saying they will generally maintain or increase their planned investment. Nearly 2/3 say the economy has created reason to invest more in one or more areas of technology. And of those, virtualization, security, systems management and cloud computing are the areas of choice. Specifically:

    • 42% plan increased investment in virtualization.
    • 36% plan increased investment in security.
    • 24% plan increased investment in systems management.
    • 16% plan increased investment in cloud computing.

    • Dana Gardner chimes in on the Harris Interactive report in his Virtualization and Cloud Computing Get IT Green Light post of 6/24/2009 subtitled “Cloud and upgraded computing future brightens despite overcast economy, Microsoft-sponsored survey finds.” Gardner concludes:

    The survey confirmed Microsoft’s in-house belief that IT budgets still have room for investment in infrastructure innovations, he said. The Redmond folks hope that will include convincing corporate IT departments, which pretty much skipped the Vista era, to finally move from Windows XP to Windows 7.

    More survey highlights are available at the Microsoft Core Infrastructure Optimization site.

    • James Hamilton describes his ISCA 2009 Keynote II: Internet-Scale Service Infrastructure Efficiency session in this 6/24/2009 post:

    I presented the keynote at the International Symposium on Computer Architecture 2009 yesterday. Kathy Yelick kicked off the conference with the other keynote on Monday: How to Waste a Parallel Computer.

    Thanks to ISCA Program Chair Luiz Borroso for the invitation and for organizing an amazingly successful conference. I’m just sorry I had to leave a day early to attend a customer event this morning. My slides: Internet-Scale Service Infrastructure Efficiency.

    Abstract: High-scale cloud services provide economies of scale of five to ten over small-scale deployments, and are becoming a large part of both enterprise information processing and consumer services. Even very large enterprise IT deployments have quite different cost drivers and optimizations points from internet-scale services. The former are people-dominated from a cost perspective whereas internet-scale service costs are driven by server hardware and infrastructure with people costs fading into the noise at less than 10%.

    In this talk we inventory where the infrastructure costs are in internet-scale services. We track power distribution from 115KV at the property line through all conversions into the data center tracking the losses to final delivery at semiconductor voltage levels. We track cooling and all the energy conversions from power dissipation through release to the environment outside of the building. Understanding where the costs and inefficiencies lie, we ll look more closely at cooling and overall mechanical system design, server hardware design, and software techniques including graceful degradation mode, power yield management, and resource consumption shaping.

    • Reuven Cohen complains about fixed software licensing fees for cloud deployment in his Examining Utility Software Licensing post of 6/24/2009. Ruv writes:

    Recently I read an article about a traditional enterprise grid computing company who is attempting to enter the nascent cloud computing market. Without naming names, I will say the technology is probably decent, what they seem to lack is any real insight into the cost advantages that cloud computing enables. What I'm getting at is the ability to scale your resources -- hardware and software alike as you need them only paying for what your need, when you need it. This is arguably one of the key advantages of cloud computing, be it a private or public cloud.

    My biggest issue with enterprise software companies applying traditional software licensing to cloud infrastructure software is that by charging $1,000 per year / per node, you are in a sense applying a static costing model to a dynamic environment which basically negates any of the costs advantages that cloud computing brings. It's almost like they're saying this how we've always done it, so why change? To put it another way, on one hand they're saying "reinvent your datacenter" yet on the other hand they saying" we don't need to reinvent how we bill you".

    Dmitry Sotnikov claims A VM running in EC2 is not SaaS in this 6/23/2009 post:

    Just because you have software packaged as a virtual machine and running in Amazon EC2 does not mean you have a “cloud” offering.

    As easy as it sounds in most cases when a vendor claims they have their software available as a service/cloud offering – it is just that: a virtual machine image (such as Amazon Machine Image – AMI) and maybe a hosting partner eager to host this virtual machine for you.

    Dmitri then goes on to analyze Lydia Leong’s US$95 “Software on Amazon’s Elastic Compute Cloud: How to Tell Hype From Reality Gartner report on the topic.

    Reuven Cohen’s MIT Technology Review Names Key Cloud Players post of 6/23/2009 provides a brief summary and the following links to articles in the July/August issue of the MIT Technology Review:

    10Gen is developing MongoDB, a database for the cloud that supports Ruby, Python, Java, C++, PHP, Perl, and server-side Javascript and has more features than key-value (Entity-Attribute-Value, EAV) databases.

    Here’s the MIT Cloud Stack:

    Robin Wauters reports Microsoft Poaches Former Yahoo Exec To Head Up Data Center Services in this 6/22/2009 TechCrunch post:

    Acquiring Yahoo, one employee at a time: Microsoft has recruited Kevin Timmons, former lead of Yahoo’s data center team, to head up its Data Center Services organization. Timmons was once director of Operations at GeoCities and worked his way up to VP of Operations at Yahoo, where he led the build-out of the company’s data centers and infrastructure.

    Robert L. Scheier’s Busting the nine myths of cloud computing post of 6/22/2009 for InfoWorld’s Cloud Computing column carries this deck:

    Vendor hype and IT self-delusion can quickly lead to disappointment. If you're considering a cloud strategy, don't get fooled by these false premises.

    and William Hurley asks Will lawyers ruin cloud computing?

    Looming legal battles over privacy, security, regulation, and intellectual property have the potential to steal cloud computing's thunder

    Brent Stineman asks is Cloud Computing [a] backlash against constraints? in this 6/22/2009 post:

    [He cannot] help but ponder if one motivation for moving to the cloud was this “need” to not be limited by existing infrastructure. How many folks will look to the cloud not because of cost, or features, but simply because the near endless resources it brings mean that they are no longer bound by the constraints imposed by their existing infrastructure. They can operate outside of enterprise infrastructure governance and budgeting.

    Lydia Leong recommends that cloud-compute vendors avoid Overpromising in this 6/22/2009 post:

    I’ve turned one of my earlier blog entries, Smoke-and-mirrors and cloud software into a full-blown research note: “Software on Amazon’s Elastic Compute Cloud: How to Tell Hype From Reality” (clients only). It’s a Q&A for your software vendor, if they suggest that you deploy their solution on EC2, or if you want to do so and you’re wondering what vendor support you’ll get if you do so. The information is specific to Amazon (since most client inquiries of this type involve Amazon), but somewhat applicable to other cloud compute service providers, too.

    More broadly, I’ve noticed an increasing tendency on the part of cloud compute vendors to over-promise. It’s not credible, and it leaves prospective customers scratching their heads and feeling like someone has tried to pull a fast one on them. Worse still, it could leave more gullible businesses going into implementations that ultimately fail. This is exactly what drives the Trough of Disillusionment of the hype cycle and hampers productive mainstream adoption. …

    Ben Kepes summarizes the first session of the Enterprise 2.0 2009 conference by Alistair Croll in his Cloud Computing – A Real World Guide post of 6/22/2009. Croll is co-author of Complete Web Monitoring and a principal analyst for Bitcurrent.

    Reuven Cohen says “On second thoughts, ‘Multiverse’ does little to describe how each of those clouds interact” in his The Cloud Computing Metaverse post of 6/21/2009:

    In describing my theory on the Cloud Multiverse, I may have missed the few obvious implications of using the prefix "multi" or consisting of more than one part or entity. Although the Cloud Multiverse thesis suggests there will be more then one internet based platform or cloud to choose from. It does little to describe how each of those clouds interact. For this we need another way to describe how each of these virtualized interconnected environments interact with one another.

    In place of "multi" I suggest we use the prefix "Meta" (from Greek: μετά = "after", "beyond", "with", "adjacent", "self").

    Michelle Munson explains Avoiding Latency in the Cloud in this 6/20/2009 post to the GigaOM blog for the Structure Conference. Michelle begins:

    The cloud promises to change the way businesses, governments and consumers access, use and move data. For many organizations, a big selling point in cloud infrastructure services is migrating massive data sets to relieve internal storage requirements, leverage vast computing power, reduce or contain their data center footprint, and free up IT resources for strategic business initiatives. As we move critical and non-critical data to the cloud, reliable, secure and fast access to that information is crucial. But given bandwidth and distance constraints, how do we move and manage that data to and from the cloud, and between different cloud services, in a cost-efficient, scalable manner?

    Apprenda, Inc.’s SaaSGrid PaaS offering sounds a bit like Azure:

    SaaSGrid℠ is a comprehensive Platform as a Service (PaaS) offering that drastically reduces time-to-market, allows organizations to build complex and powerful SaaS applications and affords them the ability to easily manage their SaaS business. SaaSGrid focuses on reducing the barrier to entry for SaaS by smashing significant technical hurdles like multi-tenancy and by providing "out of the box" application services like monetization and billing, while supplying ongoing value with an arsenal of management tools to manage a SaaS business and associated application maintenance.

    Build real enterprise SaaS applications with technologies you already know. SaaSGrid applications are written using Microsoft .NET languages and the simple yet powerful SaaSGrid API. There is no need to learn new programming languages or flashy online 'drag and drop editors' that impose artificial limitations on your business. In fact, with SaaSGrid, the web-based enterprise apps you've already built using .NET are probably closer to SaaS-enabled than you think. SaaSGrid allows you to take advantage of your existing assets and knowledge, and extend them with massive SaaS-focused value. [Emphasis Apprenda’s.]

    I’d certainly like to see a point-by-point comparison with Azure WebRoles and .NET Services.

    Cloud Security and Governance

    <Return to section navigation list>

    •• Aliya Sternstein’s Microsoft: Legacy systems not a barrier to [government] cloud computing article of 6/26/2009 for NextGov quotes Susie Adams, Microsoft’s chief technology officer for federal civilian agencies:

    "It's an evolution of the industry." And transitioning does not require overhauling all computer programs and hardware. "The first entree from a transparency perspective is to put publicly available data into the cloud. That's the least risky," Adams said.

    To ensure Microsoft remains a player in the growing cloud market, company officials are developing software that is interoperable, or able to exchange information among multiple systems and services. "It's all about choices," she said. "It's going to be a hybrid world.”

    •• Greg Papadopoulos is quoted in TechPulse360’s Public Computing Clouds Could Be More Secure That Private Ones post of 6/26/2009:

    “Most public clouds are run in a more secure manner than the networks enterprises maintain on their own. Not all private companies maintain the same discipline,” he said Thursday at the Structure 09 conference in San Francisco.

    This is a common refrain that few CTOs, CIOs or CISOs appear to believe. Greg is CTO and Executive Vice President of Research and Development at Sun Microsystems.

    Reuven Cohen’s IBM Solves Cryptographic Cloud Security post of 6/25/2009 comments on IBM’s purported discovery of “a method to fully process encrypted data without knowing its content. If true, this could greatly further data privacy and strengthen cloud computing security.” Ruv quote’s IBM’s press release:

    An IBM researcher has solved a thorny mathematical problem that has confounded scientists since the invention of public-key encryption several decades ago. The breakthrough, called "privacy homomorphism," or "fully homomorphic encryption," makes possible the deep and unlimited analysis of encrypted information -- data that has been intentionally scrambled -- without sacrificing confidentiality.

    And adds this caveat in an update:

    According to a Forbes article, Gentry's elegant solution has a catch: It requires immense computational effort. In the case of a Google search, for instance, performing the process with encrypted keywords would multiply the necessary computing time by around 1 trillion, Gentry estimates. But now that Gentry has broken the theoretical barrier to fully homomorphic encryption, the steps to make it practical won't be far behind, predicts professor Rivest. "There's a lot of engineering work to be done," he says. "But until now we've thought this might not be possible. Now we know it is." [Emphasis added.]

    Government Information Security Podcasts offers the Audit, Risk Trends: Insights from David Melnick of Deloitte podcast in this 6/22/2009 post:

    Audit and enterprise risk - they're inextricably linked. As cyber threats grow - from the inside and out - require organizations and their regulators to pay closer attention to technology and information security.

    What are some of the key audit and risk trends to track? David Melnick of Deloitte answers that question in an interview focusing on:

    • Top challenges for financial institutions and government agencies;
    • Successful strategies being deployed to mitigate threats;
    • Trends organizations should track as they eye 2010.

    Melnick is a principal in security and privacy services within the audit and enterprise risk services practice in the Los Angeles office of Deloitte and brings more than 17 years of experience designing, developing, managing and auditing large scale secure technology infrastructure. Melnick has authored several technology books and is a frequent speaker on the topics of security and electronic commerce.

    Cloud Computing Events

    <Return to section navigation list>

    •• O’Reilly Media offers videos of sessions from its Velocity 09 Web Performance and Operations Conference, held 6/22 - 6/24/2009 in San Jose California. Videos with cloud topics include:

    •• David Pallman will be “speaking at So Cal Code Camp this weekend in San Diego. [His] talk is on Azure Design Patterns, Saturday at 2:30:”

    This session will present Design Patterns for cloud computing on the Azure platform. Azure provides oodles of functionality that range from application hosting and storage to enterprise-grade security and workflow. Design patterns help you think about these capabilities in the right way and how they can be combined into composite applications. We'll cover design patterns for hosting, data, communication, synchronization, and security as well as composite application patterns that combine them. We'll be doing hands-on code demos of a number of composite applications, including a grid computing application. Azure Design Patterns Web Site.

    When: 6/27 and 6/28/2009 9:00 AM to 5:30 PM 
    Where: UCSD Extension Complex, 9600 N. Torrey Pines Rd., La Jolla, CA 92037

    •• Krishnan Subramanian summarizes the Structure 09 Panel - The Myth Of One Size Fits All Cloud, Structure 09 Panel - Building The Perfect Host for Web Apps and Structure 09 Panel: From Dataspaces To Databases panel discussions of 6/25/2009 from GigaOm’s Structure 09 conference.

    •• Brandon Watson reports that GigaOm’s Structure 09, Putting Cloud Computing to Work, will stream on 6/25/2009 the following panels with Microsoft representatives:

    • 11:05 AM: The Myth of the One-Size-Fits-All Cloud (Yousef Khoudi)
    • 1:30 PM: Toward Cloud Computing: Private Enterprise Clouds As A First Step (Brandon Watson)
    • 3:30 PM: Spinning the Web to the Cloud (Brian Goldfarb and Steve Yi)
    • 4:00 PM: On The Shoulders of Giants (Najam Ahmad)

    More details about the panels and presentations are here.

    Brandon says in his What Is Cloud Computing? post of 6/25/2009 from Structure 09 that “the word ‘cloud’ is catnip for nerds.” … “Next up on the zeitgeist watch?  Attaching the word “scale” to the name of your company.”

     John Willis reports that he “will be moderating next week’s Cloud Camp in Columbus Ohio next week Tuesday 6/30/09” in his Cloud Camp Columbus and The IBM Blue Cloud post of 6/24/2009:

    I will be giving two session[s] at the conference, “Introduction to Clouds” and “Clouds in the Enterprise”. In my “Clouds in the Enterprise” will cover IBM’s new “Blue Cloud/Cloudbursting” announcement. If you happen to be in the Columbus area next Tuesday you should come and learn more about Cloud Computing. If you have any questions please feel free to contact me. Also, I have reserved extra tickets for Tivoli users.

    When: 6/30/2009 5:00 PM to 8:30 PM 
    Where: TechColumbus, 1275 Kinnear Rd, Columbus, OH 43212

    Mary Jo Foley will “help sort out what Azure is (and what it isn’t) in a live Webcast on Wednesday, June 24 at 1:00 PM ET / 10:00 AM PT / 5:00 PM GMT” according to Jason Hiner. “This is a good opportunity to get up to speed on Azure before Microsoft launches it later this year.”

    Jason describes the content:

    ZDNet’s “All About Microsoft” blog editor Mary Jo Foley will offer an Azure primer. She’ll explain what Azure is — from the base operating system level, to the higher-level services layers, to the “user experience.” Foley will compare Azure to competing cloud platforms from Amazon, Google and other players. She will discuss how Microsoft is using and plans to use the platform itself. And Foley will differentiate between what we know about Azure from what many are anticipating from the platform.

    Even if you’re dragging your heels about moving your apps and data “to the cloud,” it’s not too soon to hear more about Microsoft’s cloud plans. This Webcast will provide a high-level overview of where Microsoft has been and where it’s going in the cloud/utility computing market.

    When: 6/24/2009 from 10:00 PM PDT
    Where: Internet (Webcast) You should be able to download the audio archive of the All About Azure Webcast from http://bit.ly/uSyYO and download slides here.

    Nandita of Microsoft’s Public Sector DPE Team announces Microsoft Developer Dinner Series for Partners Presenting: Microsoft Open Government Data Initiative – Cloud Computing, REST, AJAX, CSS, oh my! - June 24, 2009 - Reston, VA. Speakers will be:

      • Marc Schweigert, Developer Evangelist 
      • James Chittenden, User Experience Evangelist
      • Vlad Vinogradsky, Architect Evangelist

    To help public sector entities meet these demands, Microsoft announced the Open Government Data Initiative (OGDI) on May 7, 2009. OGDI provides an Internet-standards-based approach to house existing public government data in Microsoft’s cloud computing platform, called Windows Azure. The approach makes the data accessible in a programmatic manner that uses open, industry-standard protocols and application programming interfaces (APIs).

    Typically, federal, state and local government data is available via download from government Web sites, which requires citizen developers to host and maintain the data themselves. Through OGDI, Microsoft is highlighting the importance of programmatic access to government data (versus downloading the data).

    Register here.

    Here are the follow up links promised:

    When: 6/24/2009 from 6:00 PM to 8:00 PM PDT 
    Where: Microsoft Innovation & Technology Center, 12012 Sunset Hills Road Reston, VA 20190

    Wayne Erickson will present a Webinar, Making Sense of SaaS BI: The Pros and Cons of Moving BI to the Cloud, on 6/25/2009 at 9:00 AM PDT:

    Companies are adopting Software as a Service (SaaS) business intelligence (BI) solutions at a record pace as they upgrade from complex collections of spreadsheets and augment their existing BI deployments. Before your company jumps into the fray of deploying BI using the Cloud computing model, join industry expert Wayne Eckerson, Director of The Data Warehousing Institute (TDWI) Research, for straight talk about pitfalls to avoid and how to achieve a rapid Return on Investment (ROI).

    Register here.

    When: 6/25/2009 from 9:00 PM PDT 
    Where: Internet (Webinar)

    David Pallman announces the Next Orange County Azure User Group Meeting Thursday 6/25 on Silverlight and Azure in this 6/20/2009 post:

    The Orange County Azure User Group next meets on Thursday, June 25 at 6pm. The topic for this month's meeting is Silverlight and Azure. David Pallmann and Richard Fencel will both be presenting.

    In David's presentation, you'll learn how to create rich Silverlight applications that are Azure-hosted and take advantage of cloud services. We'll build an Azure-hosted Silverlight application from the ground up that utilizes web services and cloud storage.

    When: 6/25/2009 from 6:00 PM to 8:30 PM PDT 
    Where: QuckStart Intelligence, 16815 Von Karman Avenue, Suite 100, Irvine, CA 92606

    SOA World reports SOA & Cloud Computing To Intersect This Week at SOA World on 6/22 – 6/23/2009 “at The Roosevelt Hotel, the 15th International SOA World Conference & Expo.”

    When: 6/22 to 6/23/2009 
    Where: Roosevelt Hotel, New York

    Other Cloud Computing Platforms and Services

    <Return to section navigation list> 

    ••• John Foley lists 10 Essentials Of IBM's Cloud Computing Strategy in this 6/26/2009 post to InformationWeek’s Cloud Cloud Computing Destination. John writes:

    IBM recently made its most significant cloud computing announcement to date, which one executive compares to the launch of Big Blue's venerable System/360 mainframe 40 years ago. Following is my list of the top 10 things you need to know about IBM's emerging cloud strategy. …

    •• John WillisBig 4 Little 4 - Private Clouds post of 6/25/2009 offers brief opinions about what he considers the Big 4 in private clouds:

    and the Little 4:

    •• Ted Leung and Ashwin Rao contributed the Explaining the Allure of Cloud Computing post of 6/25/2009 to Sun Microsystems’ SystemNews, which summarizes a presentation to JavaOne. Topics covered (briefly) are:

    • Attractions of the Cloud
    • Problems of the Cloud
    • The Current Tool Landscape
    • Sun's Cloud Tools (Kenai, Zembly, O’Malley, and Speedway)

     John Foley’s Oracle Moves A 'Little Bit' Into Cloud Computing post of 6/24/2009 to InformationWeek’s Cloud Computing segment begins:

    Following his outburst against cloud computing last year, it appears that Larry Ellison has warmed up to the cloud computing model, if not the buzz phrase itself. Oracle's CEO yesterday said it's a goal to become the software industry's "number one on-demand application company."

    Ellison last year lambasted cloud computing, referring to the hype around it as "idiocy," "gibberish," and "crazy." As I pointed out at the time, however, Oracle was moving into cloud computing even as its leader railed against it. During a conference call yesterday with analysts to discuss Oracle's financial results, Ellison provided evidence that Oracle is indeed making progress on this front and has ambitious goals in the software-as-a-service market.

    "We think we can be the number one applications company, the number one on-premise application company, and the number one on-demand application company. That's our goal," he said. …

    Throughout all of this, Ellison didn't use the term cloud computing, referring instead to on-demand software. One analyst observed, "It sounds like you're getting into cloud computing." To which Ellison, the cloud antagonist, responded: "Little bit."

     John Treadway explains the architecture of Joyent - Yes Virginia, There Is A Hybrid Cloud in this 6/24/2009 post based on John’s conversation with James Duncan and Bryan Bogensberger of Joyent at #e2conf. John concludes:

    Effectively, your servers are “joined” to the cloud. This is my “marketecture” view from my conversation with James and Bryan, and what they end up releasing may look very different. But if what they say is true, they may be one of the first to have actually deployed a hybrid cloud intro production. That’s huge - like Santa Claus is Real kind of huge!

     Rich Miller reports on Yahoo’s new data center in Quincy, Wash that neighbors Microsoft’s in his oddly titled Yahoo’s Unstealths Its Data Center Efficiency post 0f 6/24/2009:

    When it comes to data center efficiency, Yahoo has maintained a lower profile than rivals Google and Microsoft. But the Yahoo team is building a compelling data center story of its own, with innovations in cooling design and energy efficiency ratings approaching the best that Google has achieved.

    Yahoo’s Adam Bechtel began telling the story yesterday at the O’Reilly Velocity 2009 conference in San Jose, Calif. Bechtel, the chief architect of Yahoo’s data center operations, shared details of a patented cold-aisle containment system that integrates an overhead cooling module, building the air conditioning units into the top of a “podule” of cabinets packed with servers. …

    Yeshim Dentz’s HP Introduces Cloud Consulting Services post of 6/23/2009 announces “[t]he new offerings, including the HP Cloud Discovery Workshop and HP Cloud Roadmap Service.”

    Shannon Williams posted Top 7 Requirements from Infrastructure Cloud Providers to the VMOps blog on 6/24/2009:

    Right now, a huge number of service providers are making plans to launch computing clouds, and I thought it would be interesting to outline some of the requirements I often hear from prospective cloud providers here. …

    1. Our clouds need to run on inexpensive storage.
    2. We want to build on an Open-Source Hypervisor.
    3. We need a  way to integrate with our Billing & Provisioning apps.
    4. We need to support both Windows and Linux VMs, and that means image based pricing.
    5. We want an API, but also a UI that makes admin simple for end-users.
    6. Cloud images need to be more reliable than dedicated servers.
    7. We want a turn-key solution, not something we have to maintain.

    The post includes details of the seven “requirements.” (Apparently, the original post was named “7 Challenges for the Would-Be Cloud Architect)

    Rich Miller reports on 6/23/2009 that Amazon Adds Cloud Data Center in Virginia:

    As Amazon’s cloud continues to grow, the company is investing in real-world brick-and-mortar data centers to provide additional capacity. The retail/infrastructure company recently leased a 110,000 square foot property in northern Virginia to expand its data center footprint.

    The additional space will help accommodate dramatic growth for Amazon Web Services, the suite of services that allow companies to run their applications on Amazon’s infrastructure and pay based on usage. More than 500,000 developers are now using AWS, and Amazon’s S3 storage now houses more than 50 billion objects.

    Jay Fry restarts the Cassatt Data Center Blog for CA with his A front row seat for the private cloud evolution: our top content post of 6/22/2009 which offers highlights of the blog’s past six months.

    David Linthicum claims IBM 'Clouds' Look Like Conventional IT in this 6/22/2009 post to Intelligent Enterprise:

    According to this e-Week report, and this report in the New York Times, IBM continues to form its cloud computing strategy, including the definition of some key products. …

    The issue here is that cloud computing is really about, well, cloud computing. Existing hardware and software vendors, including Microsoft, Cisco, HP, etc., and of course IBM, seem to find that thought a bit scary and continue to toss traditional hardware and software at the problem. …

    I don’t believe Microsoft is throwing the same hardware into its data center as Cisco, HP and IBM want to sell to private cloud wannabees.

    Following is IBM’s #CloudComputing Strategy Map #e2conf:

    IBM Smart Business Framework

    According to John Treadway, who posted the above slide on 6/22/2009:

    The diagram above below gives a bit of insight into where IBM is today and where they are heading. I posted this last week, but removed the diagram at IBM’s Request. Now I’m reposting it after seeing Sean Poulay from IBM presented the chart at the Enterprise 2.0 Conference in Boston.

    Glenn Brunette describes Sun’s Immutable Service Containers (ISC) in his Project Kenai (Beta) post of 6/22/2009:

    Immutable Service Containers (ISC) are an architectural deployment pattern used to describe a foundation for highly secure service delivery. ISCs are essentially a container into which a service or set of services is configured and deployed. First and foremost, ISCs are not based upon any one product or technology. In fact, an actual instantiation of an ISC can and often will differ based upon customer and application requirements. That said, each ISC embodies at its core the key principles inherent in the Sun Systemic Security framework including: self-preservation, defense in depth, least privilege, compartmentalization and proportionality.

    Ruven Cohen delivers his 2 cents worth about Sun’s ISC in his Autonomic Cloud Security post of 6/22/2009.

    Joe McKendrick asks on 6/22/2009 are Vendors being pushed into cloud, kicking and screaming?

    Lately, if you have listened to the pronouncements of vendors large and small, they all are enthusiastically embracing cloud computing as the next wave of software and service delivery.

    However, the Wall Street Journal’s Ben Worthen and Justin Scheck have a different take on all this happy cloud talk. The way they see it, the recent economic slump and tighter IT budgets have pushed many vendors into the cloud world, kicking and screaming.  Oracle, HP, IBM, Microsoft, and SAP all run the risk of seeing business move into a lower-margin space, with a longer timeframe to see revenues, they write.

    HP Software Chief Tom Hogan even offers an eye-opening comment, admitting to WSJ that the move from traditional to cloud software is “highly disruptive,” and that “shareholders don’t like it, and it’s a real conflict between business strategy and fiduciary duty.” …

    Ben Kepes summarizes in this 6/22/2009 post a recent panel discussion about Selecting Cloud Providers. Speakers were:

    • Tony Lucas, CEO, XCalibre
    • Simon West, Chief Marketing Officer, Terremark
    • Alex Barnett, Group Manager, Intuit Partner Platform and IDN, Intuit
    • Jason Hoffman, Founder and CTO, Joyent

    James Urquhart’s The new generation of cloud-development platforms post of 6/22/2009 begins:

    Software development "in the cloud" has been one of the really interesting developments to come out of the cloud computing market so far. While many early players, such as Zimky and Coghead died on the vine, there is a pretty robust Platform as a Service (or "PaaS") market out there today, with Google App Engine taking the most visible lead, and a pretty solid stable of Ruby on Rails-based hosting providers telling a compelling story of their own.

    Such success is driving some new players to seek the spotlight, however. I wanted to highlight two that I found most interesting. They are very different from one another, but those differences highlight the breadth of opportunity that remains in the PaaS market.

    And goes on to describe AppScale, AppEngine, and TIBCO Silver, but not Azure as PaaS players.

    <Return to section navigation list> 

    Tuesday, June 23, 2009

    LINQ and Entity Framework Posts for 6/15/2009+

    Note: This post is updated daily or more frequently, depending on the availability of new articles.

    ADO.NET Team Blog posts 0f 6/22/2009 for EF v2 CTP 1 will be repeated in the 6/22/2009+ issue.

    Entity Framework and Entity Data Model (EF/EDM)

    Carl Perry’s Announcing: Entity Framework Feature CTP 1 for the Net Framework 4.0 Beta 1 post of 6/22/2009 notes:

    We weren’t able to ship these capabilities in the .NET Framework 4.0 Beta 1 so we’ve decided to release them alongside the Beta.  This CTP is an early preview of these features and as such we’re looking for lots of feedback on these components.  This functionality is currently not scheduled to be part of the .NET Framework 4.0 and we expect to release another CTP of these features based on the feedback we get from you. [Emphasis added.]

    Following are CTP1’s new features:

    The following posts of 6/22/2009 provide walkthroughs of the new features:

    Julie Lerman comments on the ADO.NET Team’s deprecation of System.Data.OracleClient in her Oracle and ADO.NET- Microsoft: Deprecated; Oracle: quiet, DataDirect:Beta and DevArt:Released post of 6/21/2009.

    She writes in her EF4: Model-Defined Functions Level 1 & 2 post of the same date:

    Model Defined Functions are a great addition to EF4. It allows you to add functions directly into your model rather than having to place the additional logic into business classes. This not only allows the functions to be “just there”, but you can use them in queries, something that you cannot do with properties that are defined in the classes.

    Alex James shows you how to avoid superfluous queries and simplify use of EF in Tip 26 – How to avoid database queries using Stub Entities of 6/19/2009.

    Beth Massi writes in her WPF Data Binding Samples on Code Gallery post of 6/17/2009:

    One of the many samples released for Visual Studio 2010 Beta 1 that you should be aware of are examples of WPF data binding against Entity Data Models. You can find some easy to follow samples here: http://code.msdn.microsoft.com/WPFDatabinding

    This sample demonstrates how to create a WPF Forms solution that checks user input with validation code, demonstrates common controls such as DataGrid and ComboBox, and shows typical data manipulation including create, read, update, and delete. The sample solution is available in both Visual Basic and C# and is intended for use with Visual Studio 2010 Beta 1 and with the .NET Framework 3.5.  In the future, we will release a sample that performs with the .Net Framework 4.0 Beta.

    Simon Segal’s Entity Framework, Fluent Interfaces & Domain Specific Languages Part 2 of 6/16/2009 continues his tiny DSL series:

    In the first part of this series I looked at how you might go about building an (incredibly tiny) domain specific language for analysing data. The context I gave was a scenario where project managers were required to work with a continuous stream of data in the form of a known schema. This ‘known’ schema is most commonly used in moving and transforming data between various systems in a domain where the central or end target is a Document Management System. The ‘known’ schema is an agreed format that all systems in this particular industry use to extract and subsequently load. It is common to see the project managers struggling with tools like access to compose queries to analyse the data before or after these ETL processes and hence proposition of a DSL.

    Matthieu Mezil explains how to implement a “sub EntitySet” property in his SubObjectSet post of 6/16/2009. Matthieu writes:

    With EF, when you use TPH or TPC inheritance mapping scenarii, the EntitySet is on the base class.

    As I mentioned often in the past with EF v1, you can add a property in your context which returns the EntitySet.OfType<MySubType>().

    Ok it’s interesting but… In EF v1, the EntitySet is an ObjectQuery<T> property and our property also but in EF v2 the EntitySet is an ObjectSet<T>. This class implements the IObjectSet<T> interface which has three methods to add, attach and delete entities.

    One guy tells me that he wants to be able to use these methods directly on the “sub EntitySet” property.

    As you would expect, Matthieu provides the implementation.

    Faisal Mohamood explains Using Repository and Unit of Work patterns with Entity Framework 4.0 with EF v2 POCO in his detailed post of 6/16/2009. Here are links to his three previous POCO posts:

    In this post, Faisal “look[s] at how we might be able to take our example a bit further and use some of the common patterns such as Repository and Unit Of Work so that we can implement persistence specific concerns in our example.”

    Jonathan Carter writes in his Gaining some context into ASP.NET AJAX 4’s DataContext… post of 6/18/2009:

    The ASP.NET AJAX 4 release has some really cool features in it that can help lower the barrier of entry into developing client-side web applications (jQuery doesn’t hurt either). One of the more compelling new classes is the DataContext. Basically, the DataContext is an object that is capable of consuming a server-side resource that serves JSON data. In its most basic form, you simply give it the URI of a service and the operation name to execute and it handles making the underlying request. If you had an AJAX-enabled ASMX service like so (note: I’m using the Entity Framework)… [Emphasis added.]

    and continues with his How the DataContext can change your data and your life (well, sort of, but not really)… post of 6/19/2009.

    Himanshu Vasishth’s System.Data.OracleClient Update post of 6/15/2009 announces that Microsoft’s System.Data.OracleClient ADO.NET data provider will be deprecated in favor of third-party Oracle providers in the .NET Framework 4.0:

    We learned  that a significantly large portion of customers use our partners’  ADO.NET providers for Oracle;  with regularly updated support for Oracle releases and new features. In addition, many of the third party providers are able to consistently provide the same level of quality and support that customers have come to expect from Microsoft. This is strong testament of our partners support for our technologies and the strength of our partner ecosystem.  It is our assessment that even if we made significant investments in ADO.Net OracleClient to bring it at parity with our partners based providers, customers would not have a compelling reason to switch to ADO.Net OracleClient.

    Jaroslaw Kowalski explains Using EFProviderWrappers with precompiled views in this 6/15/2009 post, which notes that":

    Injecting a provider into provider chains involves changing SSDL file and that invalidates the hash.

    Jarek describes the workaround.

    Craig Lee is a member of the EF Tools team who recently started a blog. Following are his first two posts:

    Subscribed. Thanks to Alex James for the heads up.

    LINQ to SQL

    Damien Guard is the interviewee for HerdingCode - Episode 50: Damien Guard on LINQ to SQL, Entity Framework, and Fontography of 6/21/2009:

    This week the guys talk to Damien Guard, a developer working on LINQ to SQL and Entity Framework. After discussing data access for a while, they talk about the programming font Damien publishes, Envy Code R.

    The post includes a detailed topic list.

    Matt Warren posted the 15th chapter of his IQueryable saga, Building a LINQ IQueryable provider - Part XV (IQToolkit v0.15), on 6/16/2009. Matt says his new IQToolkit version offers these new features:

      • More Providers - MySQL and SQLite join the previous MS only line up.
      • Transactions - Use ADO transactions to control the isolation of your queries & updates.
      • Entity Providers - The provider concept is expanded to include tables of entities
      • Entity Sessions - The session concept adds identity caching, change tracking and deferred updates via SubmitChanges
      • Provider Factory - Create providers on the fly w/o knowing anything more than the database name and mapping.
      • Madness

    LINQ to Objects, LINQ to XML, et al.

    Jim Wooley writes in his Add Extension Methods in LinqPad post of 6/20/2009:

    As we already announced, the samples for chapters 1-8 of our LINQ in Action book are available through LINQPad. This includes the LINQ to Objects and LINQ to SQL. I've been working on the LINQ to XML chapters (9-11) and hope that we will add them to the download soon. In the process, I've needed to learn a bit about how LINQPad works under the covers in order to add specialized classes. …

    If you need to refer to external methods or add other classes, choose the Program option. This will add a Sub Main method and allow you to add additional methods. …

    ADO.NET Data Services (Astoria)

    No significant new posts as of 6/23/2009 9:00 AM PDT

    ASP.NET Dynamic Data (DD)

    No significant new posts as of 6/23/2009 9:00 AM PDT

    Miscellaneous (WPF, WCF, MVC, Silverlight, etc.)

    David Ebbo announced A new and improved ASP.NET MVC T4 template in his 6/17/2009 post:

    A couple weeks ago, I blogged about using a Build provider and CodeDom to generate strongly typed MVC helpers at runtime.  I followed up a few days later with another version that used T4 templates instead, making it easier to customize.

    And now I’m back with yet another post on this topic, but this time with a much simpler and improved approach!  The big difference is that I’m now doing the generation at design time instead of runtime.  As you will see, this has a lot of advantages.

    Update: current version is now 0.9.0006 (attached to his post as a zip file)

    Monday, June 22, 2009

    Windows Azure and Cloud Computing Posts for 6/15/2009+

    Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

    Updated 6/20 – 6/21/2009: Additions
    Updated 6/18 – 6/19/2009: Additions and correction of date typos
    • Updated 6/16 – 6/17/2009: Microsoft’s Allison Watson on Azure pricing; Robert Le Moine on Taking.NET Development to the Cloud and other additions

    Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

    To use these links, click the post title to display the single post you want to navigate.

    Azure Blob, Table and Queue Services

    <Return to section navigation list> 

    • Stefan Tilkov discusses REST and Transactions with Arnon Rotem-Gal-Oz’s observations about RETRO: A RESTful Transaction Model in this 6/17/2009 post.

    Brent Stineman’s A last word on Azure Queues (Performance) post of 6/14/2009 describes his downloadable Queue performance test app:

    Some time ago, someone came by the MSDN Windows Azure forums and asked a question regarding performance of Azure Queues. They didn’t just want to know something simple like call performance, but wanted to know more about throughput, from initial request until final response was received. So over the last month I managed to put together something that lets me create what I think is a fairly solid test sample. The solution involves a web role for initializing the test and monitoring the results, and a multi-threaded worker role that actually performs the test. Multiple worker roles could also have been used, but I wanted to create a sample that anyone in the CTP or using the local development fabric could easily execute. …

    Krishnan Subramanian describes Adobe’s new Tables app in his 6/15/2009 Adobe Releases Spreadsheet SaaS Application And Adds Premium Version post:

    Let me highlight some of the features of Tables as noted in their announcement

    • All users can add data simultaneously - solving one of the biggest problems with shared worksheets. All data is always in up-to-date for everyone.
    Presence - lets you know who else is working on the table and where they are working
    Private and common views - allows the team to work together, but see the information that is important each person. Private views let you see information that is important to you, without disturbing others working on the sheet.
    Filtering is real time so you can play with the data and adjust your filter in real time, without having to open a dialog box for every change.
    Sorting - quick, simple and always includes all of the data

    The most interesting feature for me is the idea of Private View and Common View. This feature really solves the problem encountered by people collaborating on spreadsheets online. Apart from these features, the functionality is very basic (well, that is the reason this product is still in the labs) and they have promised to add more features in the near future.

    SQL Data Services (SDS)

    <Return to section navigation list> 

    See The Fortworth .NET User Group’s June 2009 meeting will be Developing Applications Using [SQL] Data Services in the Cloud Computing Events section.

    .NET Services: Access Control, Service Bus and Workflow

     <Return to section navigation list>

    Vittorio Bertocci’sThe Id Element Weekly: Donovan Follette on making the shift from ADFS v1 to Geneva Server post of 5/12/2009 describes the Donovan Follette on making the shift from ADFS v1 to Geneva Server video segment on Channel9:

    In this week’s episode of the ID Element Vittorio interviews Donovan Follette… as the guest!

    Donovan is a senior technical evangelist and a host for this very show: he worked on identity since he joined Microsoft in 2005, and is a well known expert in the ADFS community. In this episode Vittorio talks with Donovan about the relationship between ADFS and Geneva Server: Donovan explains in details how to map the old terminology to the new concepts introduced in Geneva, focusing on differences and similarities in the two approaches, and in general equipping today’s  ADFS expert with everything he or she needs for hitting the ground running with Geneva Server.

    •• Matias Woloski describes the Claims-Driven Modifier control’s expressions for ClaimValue, Condition and Mapping, which the designer ordinarily sets for you (see below for more about the control).

    Vittorio Bertocci’s Use claims for driving your web UI… without even *seeing* a line of code post of 6/19/2009 describes the new ASP.NET Claims-Driven Modifier server control. Vibro says:

    While pretty much everybody can understand (& appreciate) the high level story about claims, it is not always easy to make it concrete for everybody. The developer who had to deal with code handling multiple credentials, or had to track down where a certain authorization decision happen, sees very clearly where and how claims can make his life easier: UI developers, however, may have found challenging to bridge the gap between understanding the general story and finding tangible ways in which claims make their work easier. Until now (at least i hope).

    We have put together a demo which shows an example of what you could build on top of the Geneva Framework infrastructure and further raise the lever of abstraction, to the point that a web developer is empowered to take advantage of the information unlocked by the claims with just few clicks. This touches on the theme of customization, which somehow gets less attention that authentication and authorization (for obvious reasons) but that deserves its place nonetheless. In any case, it’s not rocket science: it is a simple ASP.NET control that can modify the value of properties of other controls on the page, according to the value of the incoming claims. Despite its simplicity, it allows a surprising range of tricks :-) 

    The code of the demo is available on code gallery, at http://code.msdn.microsoft.com/ClaimsDrivenControl.

    • Matias Woloski talks about the authorization process in Identity thoughts #2: Level 2 Authorization.

    The authorization decision happens near the application or the service because it knows about the resource (each application has a different domain model).

    The following figure shows a very high level architecture of the components and its interactions:

    • Matias Woloski’s Identity thoughts #1: Analogy between a single app and a federated app post of 6/16/2009 offers a table that “shows an analogy of identity concepts between a single application and a federated application.”

    The single app has its own identity silo and the federated app relies on an STS (like Geneva Server). I find this analogy useful to explain how things differ from the non-federated non-claim-based world.

    Neil Kidd confirms that .NET Workflow Services will be missing from the RTM of Azure Services Platform v1 in his .NET Services workflow is moving to Fx 4‘s workflow engine, but … post of 6/16/2009.

    Neil works for Microsoft in the UK as an Architect in the Microsoft Technology Centre.

    • Manuel Meyer delivers an Introduction to Windows Azure Live Mesh/Live Framework Part 1 as the first in a series about Live Mesh, Live Services and the Live Framework.

    • Vittorio Bertocci is Announcing FabrikamShipping, in-depth semi-realistic sample for Geneva Framework in this 6/16/2009 post:

    Do you remember the PDC session in which Kim announced all the new wave of identity products, including Geneva?

    During that session I showed a pretty comprehensive demo, where  all the products & services worked together for enabling a fairly realistic end-to-end scenario. You have seen demos based on the same scenario at TechEd EU, TechDays and in many presentations from my colleagues in the various subsidiaries; finally, if you came at the Geneva booth at RSA chances are that you got an detailed walkthrough of it. Since people liked it so much, we thought it would have been nice to extract just the main web application from that scenario, and make it available to everyone in form of an in-depth example. You can find the code in a handy self-installing file on code gallery, at http://code.msdn.microsoft.com/FabrikamShipping (direct link here).

    Mary Jo Foley’s Too many .Nets, too little time? gets the word out that the .NET Services team is dropping .NET Workflow Services until .NET 4 releases, as I reported in last week’s post.

    Oren Melzer explains Silent Information Card Provisioning with Geneva Server in this 6/15/2009 post:

    One obstacle that administrators looking to deploy information cards in an enterprise will inevitably face is getting information cards to their users. Nobody wants to have to send an email to their users saying that in order to access a web service, they’ll need to go to an issuance website and download an information card. Things should just work. With that in mind, the “Geneva” Server and CardSpace teams created Silent Card Provisioning, a feature that uses Group Policy to deploy information cards to domain users automatically.

    Leon Welicki’s Sequential and Flowchart modeling styles post of 6/12/2009 begins:

    WF 4 ships with an activity palette that consists of many activities – some of these are control flow activities that represent the different modeling styles developers can use to model their business process. Sequence and Flowchart are a couple of modeling styles we ship in WF 4. In this post, we will present these modeling styles, learn what they are, when to use what, and highlight the main differences between them.

    Leon Welicki is a Program Manager on Microsoft’s Connected Framework Team

    DotNetBlogger posted Introduction to Workflow Tracking in .NET Framework 4.0 Beta1 on 6/11/2009.

    By now you must be aware of the significantly enhanced Windows Workflow Foundation (WF) scheduled to be released with .Net Framework 4.0. The road to WF 4.0 and .Net Framework 4.0 Beta1 documentation for WF can give you more details. Being a member of the team responsible for the development of the WF tracking feature, I am excited to discuss the components that constitute this feature. In a nutshell, tracking is a feature to gain visibility into the execution of a workflow. The WF tracking infrastructure instruments a workflow to emit records reflecting key events during the execution. For example, when a workflow instance starts or completes tracking records are emitted. Tracking can also extract business relevant data associated with the workflow variables. For example, if the workflow represents an order processing system the order id can be extracted along with the tracking record. In general, enabling WF tracking facilitates diagnostics or business analytics over a workflow execution. For people familiar with WF tracking in .Net 3.0 the tracking components are equivalent to the tracking service in WF 3. In WF 4.0 we have improved the performance and simplified the programming model for WF tracking feature.

    Here’s a high-level view:

    Nuno Filipe Godinho’s Interesting Incubation and Innovation Projects from Microsoft in the Cloud spectrum post of 6/15/2009 describes and links to the following Azure incubation projects, most of which are relatively new:

    Live Windows Azure Apps, Tools and Test Harnesses

    <Return to section navigation list> 

    Bruno Tekaly’s Azure – Rich Client(s) meets Azure Table Data. Smart Grid Sample – Step 01 post of 6/20/2009 starts a series that uses Azure Tables as the data source for an ASP.NET and a Silverlight rich client example:

    Azure – Rich Client(s) meets Azure Table Data. Smart Grid Sample – Step 02 explains the components to be used.

    Steve Marx posted an Update to The CIA Pickup Source on 6/19/2009 before leaving for his vacation in Moscow (Russia). Steve says:

    The new code is already live at www.theciapickup.com.  Please download the source again to pick up the changes, and keep the feedback coming!

    Be sure to watch Steve’s “What is Windows Azure?” (a Hand-Drawn Video) of 6/19/2009.

    • Robert Le Moine calls Taking.NET Development to the Cloud “a leap of faith” in this 6/17/2009 post that describes how his employer uses the Azure Services Platform as virtual laboratory for application development:

    Cloud computing platforms, such as Microsoft Azure, offer compelling advantages for building new scalable .NET applications. But can the Cloud be used for developing existing .NET applications? In this article, I'll explain how we've made the leap to Cloud-based development for our internal applications and the lessons we've learned along the way. Specifically, I'll describe our checklist for selecting a Cloud vendor and how we've used the virtualization capabilities of the Cloud to improve our agile development process. I'll also outline the quantifiable benefits we've seen, including saving $100,000 in capital expenditure and reducing our iteration cycle times by 25%.

    As the development team lead for Buildingi, a corporate real estate consultancy that specializes in back-office technology solutions to manage large portfolios, I'm responsible for building Web-based applications using Visual Studio, the Microsoft .NET Framework, and Silverlight. Last year we started looking at Cloud Computing to gain the advantages of a scalable, virtualized platform for software. …

    There are a few use cases where the Cloud is not recommended for testing (see below). These include tests that require specific x86 hardware (e.g., BIOS driver tests) and some types of performance and stress testing. If an application requires an onsite Web Service behind a firewall, this can usually be accessed using a VPN connection. …

    • West Monroe Partners created this Windows Azure and Silverlight Interactive Map (http://tasteofchicago09.cloudapp.net/Map.aspx) for the forthcoming Taste of Chicago festival scheduled for 6/26 – 7/5/2009 in Chicago’s Grant Park, Lakefront and Loop neighborhoods.

    The West Monroe Partners Launches New Interactive Map for Taste of Chicago press release of 6/16/2009 provides a lengthy description of the project:

    In addition to developing the interactive Taste of Chicago map, West Monroe Partners and Microsoft also partnered to create a hosting solution that could handle the web site's user load-including half a million views. The hosted Microsoft Windows Azure solution provides the equivalent capacity of 25 purchased servers, with no infrastructure investment required by the City of Chicago. [Link added.]

    • Dan Griffin’s Cloud Backup application “is a disaster recovery solution that allows you to export a Hyper-V virtual machine, archive it in Azure, and later restore it,” which he posted to CodePlex on 6/16/2009. Dan’s Cloud Backup whitepaper, CloudBackup.pdf, is a fully illustrated guide to using his solution.

    • Ben Riga and Girish Raja describes a self-service Dynamics CRM project hosted in Windows Azure (Dynamics CRM Online) in their Dynamics Duo Rides again Channel9 video of 6/15/2009:

    In this episode we walk through the demo in some detail.  The Wide World Importers Conference site we use here is the main site for a fictitious conference.  The self-service part of this is entirely hosted on Windows Azure.  As we walk through the registration process the information is retrieved and stored directly in Dynamics CRM Online.  Naturally, as we’ve said in the past, Dynamics CRM is great at managing both contact and transactional information.  We also look at how, by using 3rd party web services, we can compose new capabilities into our system.  In this case we show how to integrate an internet flight booking service into the attendee registration process and then store that complex flight booking information in the Dynamics CRM data store.  Finally we show how to use Silverlight to build a compelling user experience for a self-service portal.  This one is pretty slick.

    The project also uses SQL Data Services to store data.

    For more background and a video about Dynamics CRM and Azure, see Ben’s Self-Service Dynamics CRM solutions fly on Windows Azure post of 1/7/2009.

    See Brent Stineman’s A last word on Azure Queues (Performance) post of 6/14/2009, which describes his downloadable Queue performance test app. in the Azure Blob, Table and Queue Services section.

    Azure Infrastructure

    <Return to section navigation list> 

    ••• Reuven Cohen’s Hoff's Cloud Metastructure post of 6/20/2009 discusses @Beaker’s Metastructure concept for defining cloud infrastructure:

    Recently, Chris Hoff posted an interesting concept for simply defining the logical parts of a cloud computing stack. Part of his concept is something he is calling the "Metastructure" or "essentially infrastructure is comprised of all the compute, network and storage moving parts that we identify as infrastructure today. The protocols and mechanisms that provide the interface between the infrastructure layer and the applications and information above it".

    Actually I quite like the concept and the simplicity he uses to describe it. Hoff's variation is the practical implementation for a meta-abstraction layer that sits nicely between existing hardware and software stacks while enabling a bridge for future yet undiscovered / undeveloped technologies.. The idea of a Metastructure provides an extensible bridge between the legacy world of hardware based deployments and the new world of virtualized / unified computing. (You can see why Hoff is working at Cisco, he get's the core concepts of unified computing -- one API to rule them all)

    ••• Chris Hoff posted Incomplete Thought – Cloudanatomy: Infrastructure, Metastructure & Infostructure on 6/19/2009:

    I wanted to be able to take the work I did in developing a visual model to expose the component Cloud SPI layers into their requisite parts from an IT perspective and make it even easier to understand.

    Specifically, my goal was to produce another visual and some terminology that would allow me to take it up a level so I might describe Cloud to someone who has a grasp on familiar IT terminology, but do so in a visual way:

    Ron Schmelzer of ZapThink asks Who's Architecting the Cloud? in this 6/19/2009 post:

    Will the cloud succumb to the same short-sighted, market pressure that doomed the ASP model and still plagues SaaS approaches?

    As the hype cycle for the cloud computing continues to gather steam, an increasing number of end users are starting to see the silver lining, while others are simply lost in the fog. It is clear that the debate over the definition, business model, and benefits of cloud will continue for some time, but it is also clear that the sluggish economic environment is increasing the appeal of having someone else pay for the robust infrastructure needed to run one’s applications. Yet, all this talk of leveraging cloud capabilities, or perhaps even building one’s own cloud, whether for public or private consumption, introduces thorny problems. How can we make sure that the cloud will bring us closer to the heavenly vision of IT we search for rather than a fog that hides a complex mess? Who will make sure that the cloud vision isn’t just another reinterpretation of the Software-as-a-Service (SaaS), Application Service Provider (ASP), grid and utility computing model that provided some technical answers but didn’t simplify anything for the internal organization? Who is architecting this mess?

    Jonathan Feldman discusses whether single-provider clouds are a “single vulnerability” in his Of Cloud 9 and The Importance of Parachutes post of 6/19/2009 for InformationWeek Analytics:

    Back when I did a lot of security work, we used to joke around that single sign on should be called "single vulnerability". Maybe single provider cloud models should be called "single point of failure".

    Toodledo went down hard last week . I rely massively on Toodledo to organize my massively complicated work and family life. But I wasn't terribly upset because my data lives in more than one place. I wrote a draft of this blog on the Toodledo site, but I could have easily written it on the equipment that houses the synchronized copy of my notes. The site being down was annoying but not, as we say in the support business, without its workaround. …

    Multiple data centers replicating apps and data are the obvious workaround for “single vulnerability” syndrome.

    Charles Babcock says Cloud Standards Will Emerge From Current Haze in this 6/18/2009 post for InformationWeek’s Cloud Computing Destination:

    What standards do you follow if you're interested in getting started in cloud computing? The short answer is, there are few clearly defined standards in what remains a loosely defined area. Nevertheless, the main outline is clear. Follow the leaders and follow the Web.

    In an InformationWeek Webcast on The Cloud and Virtualization June 16, I tried to lay out a few of the standards that will dominate cloud computing. One assumption is that cloud computing will adopt the most efficient paradigms found on the Internet, say the massive and uniformly managed server farms of Google and Amazon.

    Dana Gardner’s latest DirectBriefing is EDS’s David Gee on the spectrum of cloud and outsourcing options unfolding before ID architect of 6/19/2009:

    HP's purchase last year of EDS came just as talk of cloud computing options ramped up. So how does long-time outsourcing pioneer EDS fit into a new cloud ecology?

    Is EDS, in fact, a cloud provider? And how will IT departments properly factor their decisions on what to keep on-premises in data centers versus placing assets and workloads on someone else's cloud infrastructure?

    •• Yves Goeleven’s Event driven architecture onto the Azure Services Platform article of 6/19/2009 for the Microsoft Benelux Architect Newsletter begins:

    In this article, I will guide you through this new environment and point out some of these design challenges that the cloud presents to us. I will also propose an architectural style, and some additional guidance, that can be used to overcome many of these challenges. Furthermore I'll give you an overview of the tools offered by the Azure cloud platform that can be used to implement such a system.

    Yves details three event-processing styles: Simple Event Processing, Stream Event Processing, and Complex Event Processing.

    Stream Event Processing

    •• Lori MacVittie analyzes Lydia Leong’s post (see below) in her Your Cloud is Not a Precious Snowflake (But it Could Be) post of 6/18/2009:

    She lists traits common to most cloud providers: premium equipment, VMWare-based, private VLANs, private connectivity, and co-located dedicated gear but doesn’t really get into what really is – or should be – the focus of cloud offerings: services. To be more specific, infrastructure services.

    A cloud provider of course wants a solid, reliable infrastructure. That’s why they tend to use the same set of “premium” equipment. But as Lydia points out differentiation requires services above and beyond simple hosting of applications in somebody else’s backyard.

    Lydia Leong distinguishes Job-based vs. request-based computing in this 6/18/2009 post to the Gartner Blog:

    Companies are adopting cloud systems infrastructure services in two different ways: job-based “batch processing”, non-interactive computing; and request-based, real-time-response, interactive computing. The two have distinct requirements, but much as in the olden days of time-sharing, they can potentially share the same infrastructure. …

    Observation: Most cloud compute services today target request-based computing, and this is the logical evolution of the hosting industry. However, a significant amount of large-enterprise immediate-term adoption is job-based computing.

    Dilemma for cloud providers: Optimize infrastructure with low-power low-cost processors for request-based computing? Or try to balance job-based and request-based compute in a way that maximizes efficient use of faster CPUs?

    • Krishnan Subramanian’s Nature’s Attack On Amazon And The Instance Vs Fabric Debate post of 6/17/2009 discusses the pros and cons of instance-based and fabric-based clouds:

    Last week, a lightning strike rendered part of Amazon EC2 belonging to a single zone cutoff from the real world. I don't want to go into whether it is an outage or not debate but towards a different kind of debate. Ever since Cloud Computing started gaining traction, we have a debate in the industry about whether the instance based setup is better or a fabric based one. I thought I will revisit this debate again in the light of the recent Amazon EC2 "it's not an outage" incident. Let me do a brief recap of the terminologies and, then, see how the debate shapes up in the aftermath of the "Amazon lightning incident". …

    • Vivek Kundra answers Cloud Computing: 10 Questions For Federal CIO Vivek Kundra from InformationWeek’s J. Nicholas Hoover. Background:

    Federal CIO Vivek Kundra is well known for innovative approaches to government IT. He introduced Google Apps to the city of Washington, D.C. when he was its CTO of back in 2007.

    He's brought with him to the federal government a philosophy that cloud computing could save money, facilitate faster procurement and deployment of technologies, and allow government agencies to concentrate more on strategic IT projects.

    InformationWeek sat down with him at his office last week to discuss his thoughts about cloud computing in government, and what it would take to make cloud technologies easier to adopt in the federal space.

    • Jim Metzler and Steve Taylor co-author The hype surrounding cloud computing, the first of two articles for NetworkWorld that compares the hype about cloud computing with that for Asynchronous Transfer Mode (ATM) a few years ago.

    • PRNewswire reports that “MSMS Connects With HealthVault to Make Health Management Easier and More Effective” in this Michigan State Medical Society Collaborates With Microsoft to Expand Health Care Technology in Michigan press release of 6/17/2009:

    The Michigan State Medical Society (MSMS) today announced a collaboration with Microsoft Corp., Compuware subsidiary Covisint and MedImpact Healthcare Systems, Inc., to be first in the nation to provide statewide connectivity of medical and pharmacy data for Michigan. Patients and physicians who use the medical society's electronic portal, MSMS Connect, will now have access to critical health care data in one location -- Microsoft HealthVault. This new collaboration expands MSMS' nation-leading effort to help implement electronic health care technology statewide. …

    When fully implemented into MSMS Connect, the addition of HealthVault will enable patients to store their individual health data, or their whole family's health record, in one location at no cost. Through HealthVault, which is built on a privacy- and security-enhanced foundation, patients will have complete control over their electronic health data and can give permission to their physicians and other health care providers to view it. Patients can access data from their physicians, health plans, and pharmacies, as well as upload information from medical devices that monitor a number of factors including heart rate, blood pressure and blood sugar.

    • Ina Fried’s Microsoft to announce Azure business plan next month post of 6/15/2009 quotes from an interview with Microsoft Corporate Vice President Allison Watson:

    [T]he company will get concrete about the financial details and say how partners can help sell Azure at Microsoft's Worldwide Partner Conference which runs July 13-16 in New Orleans.

    When Microsoft announced Azure, it said that all of the applications would be run from its data centers. However, Watson said the company is also looking at ways that partners can host cloud-based solutions.

    "We've had some interesting conversations," Watson said.

    Watson’s comments about enabling partners to host cloud-based solutions bodes well for potential on-site (private-cloud) Azure implementations, which would downplay cloud lock-in issues other than a choice of operating system. It’s a foregone conclusion that moving Azure projects to platforms other than Windows Server will be impossible.

    Azure watchers have expected details about the Service Level Agreement (SLA) for Azure, but none of the articles about the interview mention SLAs explicitly. However, its likely that Azure SLAs and pricing will be interdependent.

    Julie Bort chimes in with additional history of Microsoft pricing in her Long-awaited pricing details of Windows Azure expected soon post of 6/15/2009 to NetworkWorld’s Microsoft Subnet.

    • Bill Stempf offers comparative cost analyses in The Dollars and Sense of Cloud Computing of 6/16/2009, which claims “Cloud computing makes a lot of sense in this economic environment - Part 2:”

    This is about the money. Hate to say it, I really hate to say it, but what is going to make cloud computing take off is the financial - the economic realities of hardware, staff, and power consumption. Each of our money wizards has a perspective on this, and we will take them one at a time.

    Here’s a link to Part 1.

    • Rob England claims Cloud Computing Outlook [Is] Far From Sunny in this 6/16/2009 contrarian post to ServerWatch:

    Cloud computing is "buzz" concept of the year for 2009. It has its place, especially for high-risk/low-capital applications like startups or small business or web sites, but for enterprise computing and — especially for improving existing core applications — I have a more jaundiced view.

    As a concept, cloud computing is a pointer to the future, but there is much hype around the present. As James Maguire of Datamation put it recently: "As Cloud computing has emerged as a red hot trend, tech vendors of every stripe have painted the term 'Cloud' on their products, much like food brands all tout that they're 'low fat'."

    • ebizQ’s Cloud Computing discussion section seeks answers to Where is the Revenue Stream in Cloud Computing?

    This question comes from our cloud computing virtual conference, and asks: Where is the revenue stream in cloud computing? Who controls the money. If you are using services you are not responsible for, how will different providers receive their revenue?

    The replies as of 6/15/2009 make an interesting read.

     Marianne Kolbasuk McGee asks Is That A Cloud On Healthcare's Horizon? in her 6/16/2009 post to InformationWeek’s Cloud Computing Destination. Marianne reports:

    Cloud models are starting to provide an attractive option for large and influential regional medical centers to get lots of small, local, laggard doctor offices trading in their paper patient files for electronic medical records. Are there clouds in your forecast?

    Beth Israel Deaconess Medical Center (BIDMC), together with its Beth Israel Deaconess Physicians Organization (BIDPO), is just one of a handful of large and prestigious health care organizations in the country helping small doctor offices in their region (in this case, the Boston area) to deploy e-medical record systems.

    A cloud model allows these doctor offices to use software to manage their practices and patient data, but the servers are located remotely and supported by BIDMC and Concordant, a services provider. BIDMC is covering about 85% of the non-hardware expenses for the practices to deploy the eClinicalWorks software, and the doctor offices pay a monthly subscription fee of between $500 and $600 for support.

    A similar cloud plan is also being used by University Health System of Eastern Carolina to get small doctor practices in rural North Carolina using 21st century technology, says CIO Stuart James. "Most providers can't afford to hire IT people to keep these systems running," he says. "This keeps the costs down." …

    Greg Ness analyzes Nick Carr's Cloud-Network Disconnect in this 6/15/2009 post that carries “Virtualization and cloud computing are promising to change the way in which IT services are delivered” as its deck.

    Nicholas Carr told a recent audience at IDC Directions that "Cloud computing has become the center of investment and innovation."   While he is not a technologist, his sometimes shocking insight into the transformation of IT have been prescient, even if he doesn't sweat the details of how complex IT infrastructures can morph into the equivalent of today's public utilities.

    To his credit Carr has predicted the rise of the cloud computing press release, multiple cloud conferences and panels and even the SaaS repositioning exercise.  He also foresaw the rise in Amazon and Google cloud announcements, perhaps years ahead of profits and/or material revenue. …

    Tom Lounibos claims The Next BIG Cloud Service may be Reliability-as-a-Service in this 6/15/2009 post. Tom writes:

    Aggregators …, such as FaceBook and Apple, are taking notice of what they are publishing to their sites these days with a growing concern that their own brand will be affected by poor performance by association. This forces SaaS vendors to look beyond their own cool features and rethink how with whom they deploy their applications with.   Even the leading Managed Service Providers (Rackspace, Terramark, and Savvis) and emerging Cloud Platform  Providers (Amazon, IBM, and Force.com) are rushing to deliver newer Services to ensure their customer’s that they have the most reliable deployment environment for SaaS based applications.  Reliability matters more today then ever!

    David Linthicum’s Cloud Computing and SOA Convergence in Your Enterprise: A Step-by-Step Guide, Rough Cuts is a downloadable version of his book that was published May 6, 2009 by Addison-Wesley Professional as part of the Addison-Wesley Information Technology Series series. Here’s the description:

    This book is the bible for those looking to take advantage of the convergence of SOA and cloud computing, including detailed technical information about the trend, supporting technology and methods, and a step-by-step guide for doing your own self-evaluation, and, finally, reinventing your enterprise to become a connected, efficient money-making machine. This is an idea-shifting book that sets the stage for the way information technology is delivered. This is more than just a book that defines some technology; this book defines a class of technology, as well as approaches and strategies to make things work within your enterprise.

    Author David S. Linthicum has written the book in such a way that IT leaders, developers, and architects will find the information extremely useful. Many examples are included to make the information easier to understand, and ongoing support from the book’s Web site is included.  Prerequisites for this book are a basic understanding of Web services and cloud computing, and related development tools and technologies at a high level. However, the non-technical will find this book just as valuable as a means of understanding this revolution and how it affects your enterprise.

    You can read the TOC, but nothing else, at no charge.

    Mache Creeger describes his Cloud Computing: An Overview survey article for the Association for Computing Machinery (ACM) Queue magazine as a “summary of important cloud-computing issues distilled from ACM CTO Roundtables.” Topics include:

      • What is Cloud Computing?
      • CapEx vs. OpEx Tradeoff
      • Benefits
      • Use Cases
      • Distance Implications between Computation and Data
      • Data Security
      • Advice
      • Unanswered Questions

    I don’t usually include survey articles in my cloud posts, but publication by ACM Queue gives this article higher than average clout.

    Randy Bias continues his Cloud Futures posts with Cloud Futures Pt. 3: Focused Clouds of 6/15/2009. Randy classifies Focused Clouds in the following categories:

    and recommends “Focus, Focus, Focus.”

    Randy’s earlier articles are:

    James Hamilton’s PUE and Total Power Usage Efficiency (tPUE) post of 6/14/2009 begins:

    I like Power Usage Effectiveness as a course measure of infrastructure efficiency. Its gives us a way of speaking about the efficiency of the data center power distribution and mechanical equipment without having to qualify the discussion on the basis of server and storage used or utilization levels, or other issues not directly related to data center design. But, there are clear problems with the PUE metric. Any single metric that attempts reduce a complex system to a single number is going to both fail to model important details and it is going to be easy to game. PUE suffers from some of both nonetheless, I find it useful.

    In what follows, I give an overview of PUE, talk about some the issues I have with it as currently defined, and then propose some improvements in PUE measurement using a metric called tPUE.

    Cloud Security and Governance

    <Return to section navigation list>

    Hartford Financial Services Group, Inc.’s Cyberbuzz page contains links to current articles and podcasts about security and data risk; “data malpractice;” and Web 2.0 defamation lawsuits.

    According to NetworkWorld’s Tim Green in his Insurers keep an eye on cloud security threats article of 5/22/2009:

    The Hartford has a dedicated insurance offering called CyberChoice that pays off if failure of the IT infrastructure results in liability for loss of personal information, intellectual property and the like. The insurance pays for investigation of the failure and payment of the costs of notifying customers if there is a reportable breach.

    Passing the insurance company’s test of whether to insure a business is not easy, says Drew Bartkiewicz, vice president of technology and new media markets for The Hartford. Only a very few corporations – mostly Fortune 500 – even apply for the insurance, and of those who do, two thirds are turned away for coverage because they don’t live up to the requirements.

    Chris Hoff wants to See You At Structure09 and Cisco Live! according to his post of 6/18/2009:

    I managed to squeak out some additional time at the end of my first docking with the Mothership in San Jose next week such that I can attend Cisco Live!/Networkers the week after.  I’ll be at Live! up to closing on 7/1. …

    If you’re going to be there, let’s either organize a tweet-up (@beaker) or a blog-down…

    • Eric Chabrow’s NIST Issues Two Reports article of 6/16/2009 for GovInfoSecurity.com provides brief descriptions of:

    • David Linthicum “talks about how to use governance to make cloud computing work” in this  Governance and Cloud Computing podcast of 6/17/2009.

    • Ellen Messmer reports “Microsoft’s “IT Infrastructure Threat Modeling Guide” offers security advice” in her 6/15/2009 Microsoft's threat-modeling guide: Think like an attacker article for NetworkWorld:

    Microsoft offers up security advice on how to fend off attacks against corporate IT resources by looking at ways that attackers can undermine an organization in its “IT Infrastructure Threat Modeling Guide” published today.

    “Look at it from the perspective of an attacker,” says Russ McRee, senior security analyst for online services at Microsoft, the primary author of the 32-page guide that discusses the fundamentals and tactics of network defense. McRee said the “IT Infrastructure Threat Modeling Guide” is actually the outcome of a lot of thinking about the topic at Microsoft, which itself is using the guide as a reference.

    The guide is not about Microsoft products and in fact “needs to be agnostic so it can work for anyone,” says McRee. “An organization has to figure out what their threats are.”
    The guide offers ways that IT staff—especially those without formal security training—can analyze their own wired and wireless networks, model them for security purposes, in some cases along the lines of “trust boundaries and levels,” to determine where defenses should be. …

    • Craig Balding slams self-serving security audits of PaaS and IaaS vendors in his Stop the Madness! Cloud Onboarding Audits - An Open Question… post of 6/16/2009. Craig writes near the end of his detailed post:

    If you’re following along thus far, you’ll also see the possibility for trusted 3rd party auditors to digitally ’sign’ individual policy statements made by cloud providers they have audited. That signature could itself reflect the assurance level you need.  This in turn could help drive the nascent cyberinsurance market for cloud…assuming the auditor is open to counterclaims by the insurer ;-).

    Microsoft’s SAS 70 attestations and ISO/IEC 27001:2005 certifications by the British Standards Institution (BSi), as described in Charlie McNerney’s Securing Microsoft’s Cloud Infrastructure post of 5/27/2009, are a step in the right direction.

    Joe McKendrick coments on Dana Gardner’s BriefingDirect in his SOA, IT and cloud governance converge into 'total services governance' post of 6/17/2009.

    Dana Gardner’s latest BriefingDirect is Hurdles To Cloud Adoption Swirl Around Governance of 6/15/2009:

    Our panel of IT analysts discusses the emerging requirements for a new and larger definition of governance. It's more than IT governance, or service-oriented architecture (SOA) governance. The goal is really more about extended enterprise processes, resource consumption, and resource-allocation governance.

    In other words, "total services governance." Any meaningful move to cloud-computing adoption, certainly that which aligns and coexists with existing enterprise IT, will need to have such total governance in place. Already, we see a lot of evidence that the IT vendor community and the cloud providers themselves recognize the need for this pending market need and requirement for additional governance.

    Kevin Jackson reports on an interchange of Tweets with cloud security expert Chris Hoff (a.k.a. @Beaker) in this Maneuver Warfare in IT: A Cheerleading Pundit post of 6/15/2009. Chris has just taken a high-level job with Cisco.

    Success Factors’ announces SuccessFactors Leads Enterprise Cloud Security With Strategic Technology Partnership With WhiteHat Security and Imperva in this 6/15/2009 press release.

    Cloud Computing Events

    <Return to section navigation list>

    UKAzure Net announces The Cumulonimbus Event on 7/29/2009 at Microsoft’s London office:

    Our 2nd meeting has been booked!  Our first event was a fantastic success and we hope to emulate this with the next two speakers. 

    Richard Godfrey will demonstrate his KoodibooK product and demonstrate how it can be scaled using Azure.

    Bert Craven will discuss how Azure can be used from a technical and commercial proposition from an enterprise such as EasyJet.  He will also demonstrate moving a WCF service into the cloud using the .NET Service Bus and Relay Bindings.

    When: 7/29/2009 from 6:00 PM to 9:30 PM GMT 
    Where: Microsoft, Cardinal Place 100 Victoria Street, London SW1E 5JL, UK 

    • Peter Laudati’s Azure Fire Starter Philly – Saturday June 20th post of 3/16/2009 describes the event and its schedule:

    Learn about Windows Azure and Azure services which enable developers to easily create or extend their applications and services. From consumer-targeted applications and social networking web sites to enterprise class applications and services, these services make it easy for you to give your applications and services the most compelling experiences and features.

    • 9:00-10:30 Introduction to Azure
    • 10:45-12:15 Azure Storage
    • 12:15-1:15 Working Lunch - Putting it together - Building a simple Azure Application
    • 1:30-2:00 Azure Services (Service Bus, Workflow Services)
    • 2:15-3:45 Azure Services (Access Control Service)
    • 4:00-5:30 Introduction to Live Services

    Register free at Microsoft Events.

    When: 6/20/2009 from 9:00 AM to 5:30 PM EDT 
    Where: Microsoft - Malvern MPR 1 & 2, Great Valley Corporate Center, 45 Liberty Boulevard Suite 210, Malvern, PA 19355

    The CloudCamp site announces CloudCamp San Francisco on 6/24/2009 from 5:30 to 10:00 PM at 835 Market Street, Suite 700, San Francisco, CA (Microsoft’s SFO office.)

    Tentative Schedule:
    5:30 Registration & Networking
    6:00 Intro & Welcome to CloudCamp
    6:15 Unpanel
    7:00 Prepare for Unconference
    7:15 Unconference - Sessions 1
    8:00 Unconference - Sessions 2
    8:45 Unconference - Sessions 3
    9:30 Summary of Sessions
    9:45 Networking

    When: 6/24/2009 from 5:30 to 10:00 PM PDT 
    Where: 835 Market Street, Suite 700, San Francisco, CA (Microsoft’s SFO office.)

    The World Bank presents Financial Crisis and Cloud Computing: Delivering More for Less, Demystifying Cloud Computing as Enabler of Government Efficiency and Transformation, a Government Transformation Initiative Workshop on 6/16/2009 at 9:00 AM to 1:00 PM EDT in Washington DC that features a live Webcast:

    The workshop will discuss the emergence of cloud computing and the advantages that it offers, particularly in terms of cost savings. The workshop will also highlight various challenges that need to be addressed with a special focus on connectivity, business models, efficiency, reliability, integration, security, privacy and interoperability issues.

    The key objective is to clarify the rather misty concept of cloud computing for both World Bank staff and our country clients. There is a lot of confusion around this idea with over 20 definitions offered so far by various parties. The workshop will also clarify the potential role of the World Bank and other development organizations in helping developing countries to realize this opportunity.

    This workshop is organized by the Global ICT Department and other partners as part of the Government Transformation Initiative, a collaboration between World Bank and the private sector aimed at supporting government leaders pursuing ICT-enabled public sector transformation.

    Register to confirm your participation in the Webcast.

    When: 6/16/2009 9:00 AM to 1:00 PM 
    Where: Washington, DC (Internet Webcast)

    The Fortworth .NET User Group’s June 2009 meeting will be Developing Applications Using [SQL] Data Services, presented by Rob Vettor, .NET Architect/Senior Solution Developer at Jack Henry and Associates on 6/16/2009 at Justin Brands. According to this 6/14/2009 post:

    In this session, we’ll…

    • Gain a clear understanding of a data service and how the REST protocol plays a key role
    • Explore local, or “on-premises,” data services implemented with the ADO.NET Data Services Framework
    • Explore Cloud-based data services implemented with SQL Data Services
    • Walk through examples with Silverlight and ASP.NET Ajax
    • Show how the ADO.NET Entity Framework provides an underlying foundation for data services 
    • Contrast the difference between SQL Data Services in the cloud and cloud data storage

    You’ll walk-away with a clear understanding of how this technology works as well as what is available now and in the near future.

    I wonder if Rob has an advance copy of SDS’s first relational CTP.

    When: 6/16/2009 
    Where: Justin Brands, Ft. Worth, TX

    David Linthicum and Ed Horst will conduct a Webinar entited Managing Business Transactions from the Enterprise to the Cloud and Back on 6/17/2009 at 9:00 AM PDT. AmberPoint is sponsoring the Webinar and Joe McKendric will moderate it. Details:

    In this informative webcast we’ll take you through the basics of implementing SOA systems that leverage cloud computing. We’ll focus on how to manage these systems, taking into account the special requirements posed by transactions flowing from the enterprise to the cloud and back.

    SOA and cloud computing expert David Linthicum, author of “Cloud Computing and SOA Convergence in Your Enterprise,” will walk you through the approach of bringing transactional SOA to the clouds, and the best practices in SOA governance. Ed Horst, Vice President of Product Strategy for industry leader AmberPoint, will cover best practices for managing composite application that leverage cloud computing.

    Register here. (Site registration is required)

    When: 6/17/2009 9:00 AM PDT 
    Where: The Internet

    Other Cloud Computing Platforms and Services

    <Return to section navigation list> 

    ••• Greg Ness claims The Intercloud Makes Networks Sexy Again and “Cisco Leads with Vision” in this 6/19/2009 post:

    Who knows who created the intercloud term, but it is a major development in articulating the enterprise cloud payoff.  Check out this Cisco blog and intercloud preso.  It is a grand and spectacular vision of where computing needs to go.

    Think of the intercloud as an elastic mesh of on demand processing power deployed across multiple data centers.  The payoff is massive scale, efficiency and flexibility.

    Just when you thought that Google and Amazon would control the skies, along comes Cisco with a brilliant vision that amplifies the role of the network and offers enterprises a sexy alternative.

    Kevin Jackson’s Two Days with AWS Federal post describes an upcoming two days of training with Amazon Web Services (AWS) Federal:

    Today, I start two days of training with Amazon Web Services (AWS) Federal. If that's the first time you've ever heard about an AWS Federal division, your not alone. Held in downtown Washington, DC the course was invite-only and attendance was IT services firms that had demonstrated a clear track record of success in the Federal market.

    He then goes on to list the companies in attendance, describes AWS’s use of the term “70/30 switch” and describes the first days session contents.

    Bernard Gordon recounts the Amazon Web Services Start-Up Event at the PlugandPlayTechCenter in Sunnyvale in his The Cloud as Innovation Platform: Early Examples article of 6/18/2009 for the Norwegian branch of IDG New Service:

    … Turning to the Amazon event, four Amazon customers presented and discussed their use of cloud computing (my discussion of the following is from notes and memory, as the slides are not yet available). …

    The customers were ShareThis, Pathwork Diagnostics, SmugMug and NetFlix.

    David Meyer’s BT moves infrastructure into the cloud post of 6/18/2009 for ZDNet.UK leads with:

    BT is about to formally launch a virtualised infrastructure service called BT Virtual Data Centre, which will form the basis of its cloud-computing strategy.

    VDC involves the virtualisation of servers, storage, networks and security delivered to customers via an online portal as cloud-based services. On Thursday, BT's Global Services division announced the customer rollout of VDC, which will initially target multinational corporate customers and the public sector.

    "VDC is the basis of our cloud-computing offering," Neil Sutton, BT Global Services's product chief, told ZDNet UK on Thursday. "We've begun to deliver communications-as-a-service and hosted services for voice, unified communications and CRM, and we see a roadmap where people want to be able to provision an infrastructure end-to-end. We want to deliver those things as a service in a predictable and flexible manner."

    C. Burns and M. West cowrote IBM’s Cloud Takes Shape, But Offering Still Lacks Necessary Guidance, a Saugatuck Research Alert about IBM’s newly announced “Smarter IT” cloud strategy. (Free site registration required.) The report identifies several “areas where user IT organizations will definitely need guidance and services” from IBM.  

    • Himanshu Vasishth’s System.Data.OracleClient Update post of 6/15/2009 to the ADO.NET Team Blog announces that the System.Data.OracleClient class will be deprecated in .NET Framework 4.0 in favor of third-party versions:

    … We learned  that a significantly large portion of customers use our partners’  ADO.NET providers for Oracle;  with regularly updated support for Oracle releases and new features. In addition, many of the third party providers are able to consistently provide the same level of quality and support that customers have come to expect from Microsoft. This is strong testament of our partners support for our technologies and the strength of our partner ecosystem.  It is our assessment that even if we made significant investments in ADO.Net OracleClient to bring it at parity with our partners based providers, customers would not have a compelling reason to switch to ADO.Net OracleClient. …

    Himanshu Vasishth is MSFT’s Program Manager, ADO.NET OracleClient (for a while).

    Q: Does Oracle’s pending purchase of Sun Microsystems have something to do with the ADO.NET Team’s decision?
    A: Probably (see below).

    • Dan Woods explains Why Oracle Wants Solaris in this 6/16/2009 for Forbes magazine. Woods writes:

    My guess is that the "Industry in a Box" vision mentioned by Charles Phillips, Oracle's co-president, will actually become the next wave of cloud computing. In a previous column, I recommended that Google ( GOOG - news - people ) get into the appliance business. My guess is Oracle will follow this path with a vengeance. Solaris will power Oracle's cloud offerings, but through appliances, Oracle will bring the cloud to the data center.

    Remember that Google, the leading provider of large-scale computing services in the cloud, does so by building its own hardware and software that is integrated and optimized for the task. I believe that Oracle recognizes that there are limits to the amount of enterprise IT that can be put into the cloud. Problems such as security, disaster recovery and moving huge amounts of data are significant barriers to cloud migration. But many of the same economic and operational benefits of the cloud can be achieved through remotely managed appliances that integrate software and hardware in one box. Oracle can run these over the Net using the Smart Services model I wrote about in Mesh Collaboration. The customer gets all the benefits of the cloud without having to move data off premise.

    • Lydia Leong discusses differentiation of cloud vendor offerings in her “Enterprise class” cloud post to the Gartner blogs of 6/16/2009:

    There seems to be an endless parade of hosting companies eager to explain to me that they have an “enterprise class” cloud offering. (Cloud systems infrastructure services, to be precise; I continue to be careless in my shorthand on this blog, although all of us here at Gartner are trying to get into the habit of using cloud as an adjective attached to more specific terminology.)

    If you’re a hosting vendor, get this into your head now: Just because your cloud compute service is differentiated from Amazon’s doesn’t mean that you’re differentiated from any other hoster’s cloud offering. …

    Ashlee Vance reports Sun Is Said to Cancel Big Chip Project (the Rock CPU) in her 6/15/2009 article for the NY Times’ Bits column:

    Sun has been working on the Rock project for more than five years, hoping to create a chip with many cores that would trounce competing server chips from I.B.M. and Intel. The company has talked about Rock in the loftiest of terms and built it up as a game-changing product. In April 2007, Jonathan Schwartz, the chief executive of Sun, bragged about receiving the first test versions of Rock. …

    This marks the second high-end chip in a row that Sun has canceled before its release. These types of products cost billions of dollars to produce, and Sun now has about a 10-year track record of investing in game-changing chips that failed to materialize.

    You can bet your children’s college fund that Oracle had something to do with killing Rock.

    • David Linthicum says Another Reason to Put Data in the Cloud is Google’s Fusion Tables in his 6/16/2009 post.

    Google Labs recently announced Google Fusion Tables, an "experimental system" for fusing data management and collaboration. In other words, it's a means to merge many data sources, including any electronic conversations around data, visualization and data queries. Fusion Tables provide a platform to analyze data along with tools for electronically collaborating about that analysis.

    The use cases here are numerous, but the core idea is that users will upload data, and then analyze and visualize the data on Google Maps or mashed up with other APIs, such as the Google Visualization API. Nothing new there, right? Wrong. Fusion Tables also provide for the discussion of data at the row or column level, or even specific data elements... think database and business intelligence meets Google Docs. However, the biggest bang for this new cloud service is the ability to "fuse" multiple sets of data that are logically related and then determine patterns.

    This looks to me like the capability that Jon Udell has been seeking for his calendar curating project the last several months.

    • Stacey Higgenbotham’s The GigaOM Interview: Kristof Kloeckner, CTO of IBM Cloud Computing post of 6/15/2009 begins:

    IBM’s first true cloud computing products, announced today, consists of workload-specific clouds that can be run by an enterprise on special-purpose IBM gear, Big Blue building that same cloud on its special-purpose gear running inside a firewall, or running the workload on IBM’s hosted cloud. The offering seems like a crippled compromise between the scalability and flexibility that true computing clouds offers and what enterprises seem to be demanding when it comes to controlling their own infrastructure. I spoke today with the chief technology officer of IBM’s cloud computing division, Kristof Kloeckner, to learn more. [Emphasis added.]

    Reuven Cohen summarizes the “Big Blue Cloud” in his The Big Blue Cloud, Getting Ready for the Zettabyte Age post of 6/16/2009:

    Well IBM has gone and done it, they've announced a cloud offering yet again. Actually what's interesting about this go, is not that they're getting into the cloud business (again) but instead this time they're serious about it. And like it or not, they're approach actually does kind of make sense for, assuming you're within their target demographic (the large enterprise looking to save a few bucks).

    My summary of the "Big Blue Cloud" is as follows: It's not what you can do for the cloud, but what the cloud can do for you. Or simply, it's about the application, duh? …

    James Urquhart’s IBM releases new enterprise cloud portfolio of 6/15/2009 is another analysis of IBM’s “Big Blue Cloud.”

    Jason Hiner attempts to answer Why Microsoft, Google, and Amazon are racing to run your data center in this 6/15/2009 post to ZDNet’s Behind the Lines blog:

    The race for your data center has already begun. Google, Microsoft, and Amazon are the leading players in a global data center build-out that has not been slowed by the current economic recession and that over next decade will change the face of both consumer computing and IT departments.

    The reason why these three companies are building out data center capacity around the world at a breakneck pace is that they want to be ready with enough capacity to handle the two big developments that are preparing to transform the technology world:

    1. Cloud computing: Applications and services delivered over the Internet
    2. Utility computing: On-demand server capacity powered by virtualization and delivered over the Internet

    With both of these trends, the biggest target is private data centers. Cloud computing wants to run the big commoditized applications (mail, groupware, CRM, etc.) so that an IT department doesn’t have to run them from a private data center. …

    Rich Miller’s IBM’s Cloud Gains Definition post of 6/15/2009 to the Data Center Knowledge site:

    This week IBM is rolling out new products that begin to bring some definition to its cloud computing roadmap. IBM is offering several services enabling public cloud computing. But Big Blue’s sharpest focus is on the private cloud, which presents an opportunity to sell hardware and software rather than monthly subscriptions.

    Here’s what IBM is announcing:

    Public Cloud: IBM can run your application testbed in its public cloud today, and will soon offer a subscription service to host virtual desktops in its data centers. The IBM Smart Business Test Cloud Services taps into, while the upcoming IBM Smart Business Desktop Cloud will establish a beachhead for expected future growth in enterprise desktop virtualization as a service delivery strategy. …

    Private Cloud: IBM CloudBurst provides customers with a private cloud in a single 42U rack for about $200,000. Included is a Websphere CloudBurst Appliance that comes pre-loaded with images for quickly deploying application environments based on IBM’s WebSphere software. … 

    John Treadway claims that the NYTimes broke IBM’s 6/16/2009 embargo by releasing details today and posted IBM Smart Business #CloudComputing Press Release (DRAFT) on 6/15/2009. John adds more IBM collateral in Tomorrow’s IBM “Smart Business” #CloudComputing Strategy – Today of the same date.

    Steve Lohr provides more background on IBM’s offerings in his I.B.M. to Help Clients Fight Cost and Complexity article for the New York Times of 6/14/2009.

    According to a Chris Hoff Tweet of the same date, IBM’s private cloud offering will compete with Cisco’s Unified Computer System.

    Nicholas Kolakowski reports Salesforce Offers Free Edition of Force.com in the 6/15/2009 eWeek article:

    Salesforce.com announced on June 15 the release of the Force.com Free Edition, a stripped-down version of its cloud computing platform for the enterprise. By relying on cloud-based resources, Force.com clients can run Websites and build Web applications without an on-premises infrastructure.

    Each client utilizing the free version of Force.com can deploy their newly built Web applications to up to 100 users. In addition, the free edition gives clients access to one Website with up to 250,000 page views per month, 10 custom objects/custom database tables per user, a sandbox development environment, free online training, and a library of sample applications.

    eBizQ’s Force.com Sites Expanding Cloud Platform to Deliver Real-Time Web Sites and Web Applications post of 6/15/2009 describes new Force.com sites:

    With the addition of Force.com Sites, companies can now use Force.com to build and run applications for their internal business processes as well as public-facing Web sites - entirely on salesforce.com's real-time cloud computing platform.

    Salesforce.com’s press release of 6/15/2009 is here.

    Monday, June 15, 2009

    LINQ and Entity Framework Posts for 6/8/2009+

    Note: This post is updated daily or more frequently, depending on the availability of new articles.

    • Updated 6/15/2009: Missing MSDN Magazine articles about EF in the June issue.

    Entity Framework and Entity Data Model (EF/EDM)

    • Danny Simmons’ “Antipatterns To Avoid In N-Tier Applications” article in the June 2009 issue of MSDN Magazine begins:

    As a member of the Entity Framework team, I frequently talk to customers about building applications that use the Entity Framework. Probably the topic I get asked about more than anything else is designing n-tier applications. In this article, I will try to set a foundation on which you can build for success in this part of your applications. The majority of the article is devoted to design anti-patterns for n-tier, which are usually the most important issues that I find. This is a topic where there are a lot of options and many issues to consider, so it is important to understand the overall space before making decisions for your particular application. In future articles, I will examine n-tier patterns for success and some of the key APIs and issues specific to the Entity Framework, and provide a sneak peak at features coming in the Microsoft .NET Framework 4 that should make n-tier significantly easier.

    Topics include:

      • Understanding n-tier
      • Don't distribute your objects!
      • Custom service or RESTful service?
      • Some n-tier anti-patterns

    Contents:

      • Understanding N-tier
      • Anti-Pattern #1: Tight Coupling
      • Anti-Pattern #2: Assuming Static Requirements
      • Anti-Pattern #3: Mishandled Concurrency
      • Anti-Pattern #4: Stateful Services
      • Anti-Pattern #5: Two Tiers Pretending to be Three
      • Anti-Pattern #6: Undervaluing Simplicity

    • Jeremy Miller’s Patterns & Practices column, “The Unit Of Work Pattern And Persistence Ignorance,” in MSDN Magazine’s June 2009 issue begins:

    In the April 2009 issue of MSDN Magazine ("Persistence Patterns") I presented some common patterns that you will encounter when using some sort of Object/Relational Mapping (O/RM) technology to persist business entity objects. I think it's unlikely that you or your team will be writing your own O/RM tooling from scratch, but these patterns are important to know to effectively use (or even just to choose) existing tooling.

    In this article, I would like to continue the discussion of persistence patterns with the Unit of Work design pattern and examine the issues around persistence ignorance. Throughout most of this article, I will be using a generic invoicing system as the example problem domain.

    Contents:

      • The Unit of Work Pattern
      • Using the Unit of Work
      • Persistence Ignorance
      • Can the Business Logic Run Independently of the Database?
      • Can I Design My Domain Model Independently from the Database Model?
      • How Does My Persistence Strategy Affect My Business Logic?
      • More Units of Work

    Matthieu Mezil describes a second extension method for to get entities with a composite key in his Entity Framework v2 : How to get only one entity easier with EF4 post of 6/12/2009.

    Gil Fink gives Julie Lerman’s book the thumbs-up in his Programming Entity Framework Book Review post of 6/11/2009.

    Alex JamesTip 25 – How to Get Entities by key the easy way of 6/11/2009 provides a general-purpose (but not typesafe) method for getting entities by key that uses the GetCSpaceEntityType<T>() extension method I wrote in Tip 13, to get the EntityType for T.”

    Jaroslav Kowalski describes two EF extensions (wrapping providers) that plug into the ADO.NET provider interface in his Tracing and Caching for Entity Framework available on MSDN Code Gallery post of 6/11/2009:

      • EFTracingProvider – which adds the ability to log all SQL commands that are executed (similar to LINQ to SQL’s DataContext.Log

      • EFCachingProvider – which adds transparent query results cache to EF

    Here’s Jarek’s diagram for his EF wrapping providers:

    image

    You can download the source code for the two providers from the Tracing and Caching Provider Wrappers for Entity Framework section of the MSDN Code Gallery.

    Jaroslav Kowalski updates the Entity Framework Toolkits & Extensions wiki in his UPDATED WIKI: Home post of 6/11/2009. EdmGen2.exe TPT Inheritance with LINQ to SQL are flagged New!

    Matthieu Mezil adds two extension methods, BeginGroupOfUndoActions and EndGroupOfUndoActions, to his first Undo Redo POC version in Entity Framework: Undo Redo v2 of 6/10/2009.

    Danny Simmons announces the first release of his new EF DPMud project to the MSDN Code Gallery in his D3: Release 0.0010 post of 6/10/2009. Danny discusses “a few decisions that came up along the way” and then “dig[s] into some specific code areas.”

    Lynn Erikson analyzes EFv2’s CodeOnly feature in his Entity Framework ‘Code Only’? If you take the red pill … post of 6/10/2009.

    Alex JamesCode Only post of 6/10/2009 begins:

    There are currently two ways to get Entity Framework apps up and running, we call these Database First and Model First respectively.

    Database First has been with us since .NET 3.5 SP1, and involves reverse engineering an Entity Data Model from an existing database.

    Model First is new to Visual Studio 2010/.NET 4.0 and allows you to create an Entity Data Model from scratch and then generate a database and mapping for it.

    However many developers view their Code as their model.

    Ideally these developers just want to write some Domain classes and without ever touching a designer or a piece of XML be able to use those classes with the Entity Framework.
    Basically they want to write ‘Code Only’.

    We are pleased to announce that we’ll be shipping a preview of “Code Only” on top of the .NET Framework 4.0 Beta 1 (more on that in the coming days).

    Alex goes on to describe how “Code Only” works in EF v2.

    LINQ to SQL

    Peter Kellner uncovers an Interesting LINQ side affect, Pass in empty List<int> using Contains and Get Where 0 == 1. Hmm in this 6/14/2009 post.

    Shahzad’s Multi tier architecture for Linq to Sql post of 6/13/2009 begins:

    This resource shows an approach for using Linq to Sql within a multi tier Asp.Net application, and particularly how it can be made to work well with ObjectDataSources. It is here as a discussion piece as well as a usable bit of code.

    The key features are a Request-scoped datacontext and entity repository classes which provide easy to use Create, Retrieve, Update and Delete (CRUD) operations implemented with Generics. Also included is a T4 template for auto generation of repositories from a dbml file.

    Alvin Ashcraft gives PLINQO a test drive in his Checking Out PLINQO to Generate LINQ to SQL Code with CodeSmith post of 6/10/2009.

    Peter Kellner’s 780 Requests Per Second Verses 110, You Really Need to Compile your LINQ to SQL (LINQ2SQL) Queries post of 6/8/2009 begins:

    So, I’ve been on kind of a rant lately about how slow LINQ2SQL is if you don’t compile your queries before executing them.  To be fair, if you are doing Windows Forms Programming, WPF or Silverlight it really does not have much impact.  The reason is that a very complex LINQ query may take 50 milliseconds (1/20th of a second).  No big deal if you just have a dozen or so of them to do.  The story changes though if you are using LINQ2SQL in a web environment that has limited CPU resources.  That is, unless you have unlimited money, if it takes more than one web server to handle your load, your throwing away money by using uncompiled LINQ2SQL.

    LINQ to Objects, LINQ to XML, et al.

    Fryan Valdez shows you how to Combine two sequences using LINQ Zip Operator with .NET 4.0 in this 6/13/2009 post.

    OmegaMan’s Linq vs. DataReader; Visual Examples Showing That Linq Does the Same in Less Lines of Code post of 6/10/2009 describes how to handle DbNull values with INullable<T> when using the SqlDataReader.

    ADO.NET Data Services (Astoria)

    Phani Raju describes how to use the Silverlight toolkit with ADO.NET Data services for Drill-down Charts using Astoria in this 6/10/2009 post.

    Phani Raju describes how to use the Silverlight toolkit with ADO.NET Data services for Master-Details with Accordion in this 6/10/2009 post.

    Faisal Mohamood’s POCO in the Entity Framework : Part 3 – Change Tracking with POCO post of 6/10/2009 covers:

      • Snapshot based Change Tracking (pure POCO without proxies)
      • Notification based Change Tracking with Proxies
      • Keeping the State Manager in Sync without using Proxies
      • New Overloads for SaveChanges

    ASP.NET Dynamic Data (DD)

    No significant posts as of 6/14/2009.

    Miscellaneous (WPF, WCF, MVC, Silverlight, etc.)

    Phani Raju describes how to use the Silverlight toolkit with ADO.NET Data services for Drill-down Charts using Astoria in this 6/10/2009 post. (Repeated from the ADO.NET Data Services (Astoria) section.)

    Phani Raju describes how to use the Silverlight toolkit with ADO.NET Data services for Master-Details with Accordion in this 6/10/2009 post. (Repeated from the ADO.NET Data Services (Astoria) section.)

    Sunday, June 14, 2009

    Windows Azure and Cloud Computing Posts for 6/8/2009+

    Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

    Update 6/13 and 6/14/2009: Mary Jo Foley on xRM and the Azure Services Platform, other Additions
    Update 6/11 and 6/12/2009: Additions
    • Update 6/9/2009: Additions

    Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

    To use these links, click the post title to display the single article you want to navigate.

    “Cloud Security and Governance” section added 6/8/2009.

    Azure Blob, Table and Queue Services

    <Return to section navigation list> 

    ••• Simon Davies reports that the blob and table storage services will require “the x-ms-version to be specified by all non-anonymous commands” in his 6/12/2009 post, Updated Windows Azure Table and Blob Storage Whitepapers. Simon quotes the updated whitepapers:

    By PDC 2009, we plan to require the x-ms-version to be specified by all non-anonymous commands. Until then, if no version specified for a given request, we assume that the version of the command the request wants to execute is the CTP version of the Windows Azure Storage APIs from PDC 2008. If a request comes in an invalid x-ms-version, it will be rejected.

    Alin Irimie’s Using Paging and Leverage Concurrency in Windows Azure Tables, Sync Between Devices and the Cloud with FeedSync reports three new Azure “how-do-I” video segments in this 6/12/2009 post:

      • How Do I: Use Paging in Windows Azure Tables.
        To improve application usability, many applications need to support viewing data page-by-page. In this screencast, you’ll learn how Windows Azure table storage provides a built-in mechanism that allows you to efficiently page through query results.
      • How Do I: Sync Between Devices and the Cloud with FeedSync?
        Syncing the cloud and a growing world of devices is a fundamental need in today’s world. In this video, you will learn how to use FeedSync feeds to synchronize Live Framework data between a device and the cloud.
      • How Do I: Leverage Concurrency in Windows Azure Table Storage?
        Windows Azure table storage is designed to support many users at the same time. In this session, you’ll learn how Windows Azure table storage supports concurrency, and you’ll learn a few strategies to help you deal with any concurrency violations.

    SQL Data Services (SDS)

    <Return to section navigation list> 

    ••• Eugenio Pace describes his First experiments with (new) SQL Data Services in this 6/12/2009 post. Eugenio writes:

    After some initial “hello world-ish” tests, I wanted to try something more interesting so I decided to port IssueTracker into SDS.

    As you know, IssueTracker was originally designed for SDS’ previous ACE model (Authority, Container, Entity), so my first task was to re-write the data access layer to use SQL Server.

    One of my goals in this experiment was to test SDS “impedance match” with on-premises SQL Server. Also, I wanted to develop independently of the availability of SDS. Not that SDS is unreliable, but currently it is available only inside Microsoft’s corporate network. I didn’t want to VPN into corpnet for this when working from home.

    So I chose to develop exclusively against my local SQL Express instance first and then make a switch to the real SDS:

    • Matthew Aslett’s On the opportunities for cloud-based databases and data warehousing post on the 451 Group’s blog concentrates on the recent Greenplum announcement, but concludes:

    [W]e are confident that Greenplum’s won’t be the last announcement from a data management focused on enabling private cloud computing deployments. While much of the initial focus around cloud-based data management was naturally focused on the likes of SimpleDB the ability to deliver flexible access to, and processing of, enterprise data is more likely to be taking place behind the firewall while users consider what data and which applications are suitable for the public cloud.

    The post includes a link to a report on SDS’s metamorphosis to a fully-relational Database as a Service in the cloud, but “You must be a current client, or active trialist of The 451 Group's services to view [it.]”

    • David Robinson announces on 6/9/2009 One more TechEd Video - The New Face of Microsoft SQL Data Services, as the session and Tech*Talk videos slowly dribble out of the Tech*Ed Online forum. The PAN66 video is here, not where the link in Dave’s blog points, and it carries the following description:

    The SQL Data Services team has recently announced an acceleration of its product roadmap and is now providing the world's first relational database as a service. Watch members of the product team as they discuss the new features of SDS including the development model, tools support, and how the services interoperate with the other building block services of the Azure Services Platform.

    Speaker(s): David Robinson, Nino Bice, Rick Negrin, Zhongwei Wu

    Alex Popescu makes the case for A Schema-less Relational Database in this 6/8/2009 post:

    A relational database management system (RDBMS) imposes a fixed schema, so why would I use schema-less and relational database in the same sentence? [Emphasis by Alex.]

    Prospective Azure developers comparing schemaless SQL Server Data Services (SSDS) tables that used the Entity-Attribute-Value (EAV) model with Azure EAV tables asked the same question. However, the SQL Server team came up with a different answer than Alex:

    They abandoned the approach in favor of a fully relational, schema-centric "SQL Server in the clouds" version at the demand of potential Azure developers in early 2009.

    I'd say the plain old EAV model (used by Azure Tables) is the way to go if you don't want to be bound by RDBMS constraints.

    The above two paragraphs are from my comment to Alex’s post. (Alex is Co-founder and CTO of InfoQ.com, Founder of DailyCloud.net.)

    Maureen O’Gara says “Enterprise Data Clouds solve three key problems facing the data warehouse market” as an introduction to her Petabyte-Scale Data Analytics Moving to the Cloud post of 6/8/2009. Maureen writes:

    Forrester analyst Jim Kobielus has predicted that data warehousing will evolve into a “virtualized, cloud-based, supremely scalable distributed platform.”
    Greenplum, the massively parallel open source data warehouse company, says it’s already happening and that companies like Fox Interactive Media, Zions Bank and Future Group, the big Indian retailer, have already built early iterations of so-called Enterprise Data Clouds (EDC) using its latest widgetry.

    It also figures that the Enterprise Data Cloud will displace the data warehouse appliance architectures that Oracle is so fond of, one of the reasons it’s supposedly buying Sun.

    Greenplum claims that Oracle is already way behind and playing catch-up with its relatively new Exadata data warehouse appliance; Greenplum and Netezza have been offering appliances for years.

    Look for Microsoft to detail their Business Intelligence (BI) offerings for SDS after it’s CTP this fall.

    .NET Services: Access Control, Service Bus and Workflow

     <Return to section navigation list>

    ••• The .NET Services Team warns that Workflow Services will be taken down in its Upcoming Important Changes to Microsoft .NET Workflow Service post of 6/12/2009:

    One of the comments that we’ve consistently heard about the .NET Workflow Service is that you want the Workflow Service to be built on .NET Framework 4‘s workflow engine. This is currently not the case, since we are prior to the release date of .NET Framework 4.

    As the direct result of user feedback, we will hold off further releases of the Workflow Service until after .NET Framework 4 ships. Since there will be important changes to the Workflow Service before it goes to full production, we are planning to take down the existing Workflow Service as part of service improvements in the month of July. This means any solutions that currently rely on the Workflow Service will have to be modified on or before July 1 in order to continue functioning smoothly. …

    The sixth iteration of Microsoft’s .NET Services will still include the Microsoft .NET Access Control Service and the Microsoft .NET Service Bus. …

    A rather strange description of “service improvements” n'est-ce pas? A description of the “modifications” required by July 1 would be appreciated, too.

    I assume that the temporary demise of .NET Workflow Services is due to the team’s desire to run WF on Dublin.

    You can learn more about WF and WCF changes in .NET 4.0 and download sample WF apps from links in MSDN’s Upcoming Changes to .NET Framework 4: Windows Communication Foundation (WCF) and Windows Workflow Foundation (WF) page. The .NET Framework 4: Workflow Foundation - Beta 1 and WF 4 Migration Guidance documents and samples also are useful.

    ••• The .NET Services Team’s .NET Services June 18th 2009 QFE Pre-Announcement and Scheduled Maintenance post of 6/12/2009 announces:

    .NET Services Team is going to release June 2009 QFE on 6/18/2009 (Thursday). Users will have NO access to .NET Services Portal and .NET Services during the scheduled maintenance down time from 6/18/2009 noon to 6/18/2009 5pm.

    Queues and Routers data will NOT be persisted and restored after the maintenance. Users will need to back up their data if they wish to restore them after the QFE release.

    The QFE provides a fix for:

    It is not possible to retrieve message (read and delete) from a Service Bus Queue through REST client such as Silverlight

    Vittorio Bertocci says “Geneva Framework in Windows Azure is not supported” in his 6/10/2009 response to Stephane Gunet’s ACS passive federation in a webrole : with source and demo (updated for Geneva beta 2) thread in the .NET Services - Technical Discussions forum. The full text of Vibro’s message:

    As of today, the use of Geneva Framework in Windows Azure is not supported and it requires hacks that may expose your application to serious security risks (a bit more background here). The product teams are working on a strategic solution for this.

    The question is “when will the strategic solution be available to Azure devs?”

    Live Windows Azure Apps, Tools and Test Harnesses

    <Return to section navigation list> 

    ••• Mary Jo Foley reports Microsoft takes off its xRM platform-as-a-service gloves by “building a new platform based on its CRM core engine” in this 6/12/2009 article. According to Mary Jo:

    Two years ago, Microsoft CEO Steve Ballmer mentioned for the first time publicly that Microsoft was building a new platform based on its CRM core engine. Since that time, it’s been tough to get the Softies to provide any real specifics on that technology, once known as the “Titan” platform, and now known as xRM.

    But with Salesforce.com stepping up its Force.com push, Microsoft seems to have decided it’s finally time to talk turkey about xRM and how Microsoft plans to position a Microsoft-hosted version of it as part of its Azure cloud platform. …

    xRM is an “anything relationship management” platform, upon which hundreds of partners,ISVs and customers already have written line-of-business apps (LOBs) using the core stack that powers Microsoft Dynamics CRM, explained Bryan Nielson, Microsoft’s Director of Worldwide Product Marketing for Dynamics CRM and XRM. The kinds of LOBs built using XRM range from a seeing-eye-dog application to complex human-resource-management systems, he said.

    Remember Microsoft’s fall 2008 rollout of Azure, when execs briefly outlined forthcoming “SharePoint Services” and “Dynamics CRM Services” that would be part of the services layer that sits on top of the Red Dog (Windows Azure OS)? (See the Azure architectural diagram if you’re feeling dazed and confused.) It turns out that mysterious “Dynamics CRM Services” box is actually “xRM application services,” the team told me this week, and said Microsoft’s slideware department would be updating their diagrams accordingly:

    What that means to customers and partners is when Microsoft launches the first final release of Azure this fall, the ability to host relationship-management applications in Microsoft’s cloud — something to which Ballmer alluded vaguely two years ago — will be live, too. This hosted xRM offering is Microsoft’s answer to Force.com and other “platform-as-a-service” competitors.

    There’s an xRM Virtual Users group at http://www.xrmvirtual.com, which is “powered by Dynamics CRM Online and Windows Azure.”

    ••• Steve Marx describes his latest Azure demo, The CIA Pickup, in his 6/12/2009 post: Actually, I’m a CIA Agent, as demonstrated in this Video: The CIA Pickup - a Windows Azure Sample. A mashup with Twilio handles the telephony:

    •• Shankar Pal’s Exchange Hosted Archive - A True Testament of Scalability post of 6/8/2009 to the SQL Data Services Team Blog describes how Microsoft runs its Exchange Hosted Archive (EHA) “on the same relational database service infrastructure as SDS.”

    I wanted to share with you some of my experiences on the scalability of SQL Data Services and how this is best exemplified by one of our online services, the Microsoft Exchange Hosted Archive (EHA). This is a very rich service for e-mail archive, e-Discovery and regulatory compliance for corporate customers and large organizations. The next generation EHA uses the same relational database service infrastructure as SDS. I will focus on the section of the service pertaining to the scale aspects of the workload, and discuss how the relational database service addresses the scale requirements of EHA. [Emphasis added.]

    Notice that Shankar did not say that EHA runs on SDS.

    Barb Mosher describes the Visual Studio 2010 Extensions: Windows Azure Tools for Cloud Services as they related to VS 2010 in this brief post. The post is brief because new features are few.

    Gaurav Mantri started an Azure Database Upload Utility - Available on CodePlex thread on 6/8/2009 in the Windows Azure forum. Guarive writes:

    We have released a utility on CodePlex just now which will allow you to import data from SQL Server databases (Version 2008/2005) and export it into your Azure Table Storage.
    Feature Highlights:

    • Supports SQL Server 2008/2005
    • Supports both SQL and Integrated Authentication
    • As a data source you can select one of the existing tables, views or write your own select query.
    • Allows you to selectively import columns.
    • Allows you to map column data types to Azure data types.

    This project was developed by Interns @ Cerebrata Software as a part of their college curriculam. More details about the project (source code, binary, user guide) can be found by visiting project site on CodePlex at:
    http://azuredatabaseupload.codeplex.com/

    Azure Infrastructure

    <Return to section navigation list> 

    ••• Pete Boden‘s Securing Microsoft’s Cloud Infrastructure: Part 2 post of 6/8/2009 discusses Microsoft’s history in online services and security. Pete continues:

    … Microsoft focuses on three key areas to provide a trustworthy cloud:

    • Utilizing a risk-based information security program that assesses and prioritizes security and operational threats to the business

    • Maintaining and updating a detailed set of security controls that mitigate risk

    • Operating a compliance framework that ensures controls are designed appropriately and are operating effectively

    Microsoft’s Information Security Program defines the compliance framework and how our security team operates.  The program has been independently certified by British Standards Institute (BSI) Management Systems America as being compliant with ISO/IEC 27001:2005.

    The framework that enabled Microsoft to earn the ISO 27001:2005 accreditation and SAS Type I and Type II attestations for our cloud infrastructure also sets the stage for product and service delivery teams to more efficiently obtain additional certifications and attestations as appropriate. Microsoft’s independently certified programs help to demonstrate the continued relevance of these programs to the evolution of challenges and opportunities in the online services marketplace. … 

    Pete Boden is Microsoft’s General Manager, Online Services Security & Compliance, Global Foundation Services

    •• Dmitry Sotnikov claims Garter finds a ‘Killer App’ for Cloud Computing in his 6/10/2009 post, which provides a summary of the contents of the $495 “APaaS: A Step to a ‘Killer App’ for Cloud Computing?” report.

    •• David Deans claims “[c]onfusion continues regarding the true meaning of cloud-based services” in his Demand for Cloud Infrastructure as a Service post of 6/12/2009:

    Some market studies continue to identify confusion regarding the true meaning of cloud-based services, and the apparent benefits derived by the early-adopters. One recent example comes from a survey of financial professionals in the UK.

    However, there is already growing demand from informed executive business and IT decision makers that are eager to move forward with various forms of cloud service deployments.

    In fact, Forrester Research has embarked on a new “Cloud and Virtualization Survey Data” series that offers key insights on where the market demand is developing, and they also debunk several stereotypes.

    He then goes on to describe Forrester’s conclusion:

    Forrester reached an interesting conclusion from their market assessment -- that’s contrary to conventional wisdom regarding the initial demand for cloud services. Enterprises are leading the adoption, not small and medium sized businesses (SMBs). Moreover, they have different technology preferences and comfort levels with virtualization.

    Forrester also believes that early adopters of IaaS service offerings are driven by the instant provisioning of servers and the pay-per-use pricing model. Furthermore, the enterprise IT operations buyers, unlike developer buyers, may want to integrate their on-premise infrastructure with anything they deploy to a service provider, either temporarily or permanently.

    •• Ari Rabkin of UC Berkeley’s RAD Lab compares clouds and peer-to-peer in this 6/11/2009 post to the Above the Clouds blog. Topics include:

      • Definitions
      • Limitations
      • Opportunities

    •• Simon Munro’s Azure’s Unplayed Private Cloud Card well-turned essay of 6/11/2009 predicts that Microsoft will “publish ‘Microsoft Windows 20xx Azure Edition’ as a SKU on their price lists for their well established channel to take to market.  We just don’t know what the ‘xx’ is.”

    Microsoft has steadfastly denied the intention to join the private clould market because Azure depends on specific, proprietary hardware running in Microsoft Data Centers. Simon argues:

    [I]f Microsoft sees that the market is turning against the private cloud and if their Excel spreadsheet shows that there is more money to be made out of private Azure than public Azure then all that they need to do is package their Azure fabric as a product.  Azure runs on Windows on commodity hardware and could (probably) easily be worked into a package that can be marketed to enterprise customers.  I am sure that there is some code that will need to be reworked and some wizards added, but Microsoft is reasonably good at writing software, so that shouldn’t be a problem.  What Microsoft does have is a distribution channel and a piece of PaaS software that runs on Windows.  Google would never be able to (or want to) extricate their PaaS from their commodity hardware, networks and secret sauce and  Amazon doesn’t have a distribution channel for enterprise software – leaving Microsoft as a viable cloud provider that could have both a private and public cloud offering.  So as competitors, yet again, predict the collapse of Microsoft – this time based on the private vs public cloud – I suggest that they don’t poke the sleeping giant too much.

    I agree that Azure will become another edition of Windows 20xx Server. Like Simon, I’m a bit cloudy on the value of xx.

    •• Tom Vanderbilt’s five-page Data Center Overload post to the New York Times’ “Magazine Preview” section on 6/8/2009 is a great read for upper management types that don’t understand the relationship between publically accessible data centers and cloud computing.

    James Urquhart posits Cloud Must Balance Innovation With Operational Excellence in this 6/9/2009 post to the Cisco Data Center Networks blog. James begins:

    One of Cisco’s internal mantras of late is the need to balance innovation with operational excellence. Our corporate CTO, Padmasree Warrior, laid out this argument as a part of a recent series predicting the future of collaboration. Essentially, a critical organizational debate is changing focus from “what takes precedence—innovation OR operational excellence” to “how do we balance the two?” Coming from the Silicon Valley, with its history of “fresh out of college” entrepreneurship and collapsing bubbles, this is a much needed discussion. …

    • Lydia Leong’s Wading into the waters of cloud adoption post of 6/9/2009 observes:

    I’ve been pondering the dot write-ups that I need to do for Gartner’s upcoming Cloud Computing hype cycle, as well as my forthcoming Magic Quadrant on Web Hosting (which now includes a bunch of cloud-based providers), and contemplating this thought:

    We are at the start of an adoption curve for cloud computing. Getting from here, to the realization of the grand vision, will be, for most organizations, a series of steps into the water, and not a grand leap. …

    Two client questions have been particularly prominent in the inquiries I’ve been taking on cloud (a super-hot topic of inquiry, as you’d expect): Is this cloud stuff real? and What can I do with the cloud right now? Companies are sticking their toes into the water, but few are jumping off the high dive. What interests me, though, is that many are engaging in active vendor discussions about taking the plunge, even if their actual expectation (or intent) is to just wade out a little. Everyone is afraid of sharks; it’s viewed as a high-risk activity.

    In my research work, I have been, like the other analysts who do core cloud work here at Gartner, looking at a lot of big-picture stuff. But I’ve been focusing my written research very heavily on the practicalities of immediate-term adoption — answering the huge client demand for frameworks to use in formulating and executing on near-term cloud infrastructure plans, and in long-term strategic planning for their data centers. The interest is undoubtedly there. There’s just a gap between the solutions that people want to adopt, and the solutions that actually exist in the market. The market is evolving with tremendous rapidity, though, so not being able to find the solution you want today doesn’t mean that you won’t be able to get it next year.

    William Hurley asks Will 'enterprise data clouds' reinvent data warehouses? in this 6/8 post to InforWorld’s Cloud Computing blog, and gives this answer in the deck:

    Greenplum looks to use commoditized hardware to manage multiple warehouses, jumping into a cloud trend.

    Hurley continues:

    Today database vendor Greenplum unveiled a "solution for enterprise data clouds." The company claims this represents a shift in how enterprise data is managed, and it's aiming to displace data warehouse appliances in large enterprises all together. Fox Interactive Media, T-Mobile, Zions Bank, and others are already working with Greenplum to build early iterations of enterprise data clouds (EDCs).

    So what the heck are EDCs? It turns out that it's just jargon for using cloud computing to create and manage multiple data warehouses on a common pool of commoditized hardware. I wanted the real scoop, so I sat down with Scott Yara, Greenplum's cofounder and president, to talk about this new offering and the future of enterprise-class data warehousing. [Link added.]

    See also Maureen O’Gara’s post in the SQL Data Services (SDS) section.

    Lori McVittie says “Automating components is easy. It’s automating processes that’s hard” in her And the Killer App for Private Cloud Computing Is post of 6/8/2009. Lori writes:

    The premise that if you don’t have an infrastructure comprised solely of Infrastructure 2.0 components then you cannot realize an automated, on-demand data center is, in fact, wrong. While the capabilities of modern hardware that come with Infrastructure 2.0 such as a standards-based API able to be leveraged by automation systems certainly makes the task all the more simple, it is not the only way that components can be automated. In fact, “legacy” infrastructure has been automated for years using other mechanisms that can certainly be incorporated into the dynamic data center model.

    When it’s time to upgrade or purchase new solutions, those components enabled with standards-based APIs should certainly be considered before those without, but there’s no reason that a hybrid data center replete with both legacy and dynamic infrastructure components cannot be automated in such a way as to form the basis for a “private cloud.” The thought that you must have a homogeneous infrastructure is not only unrealistic it’s also indicative of a too-narrow focus on the individual components rather than systems – and processes - that make up data center operations.

    Krishnan Subramanian posits SaaS Vendors Need A Mental Shift in this 6/8/2009 post:

    In April, I wrote a post about how SaaS users need a mental shift to do computing differently in this Cloud era. I have argued that they have to adjust themselves psychologically to play the Cloud game where they need to let go some control over their data in order to get access from anywhere in the world. In today's post, I am going to wear an users' hat and talk about how SaaS vendors need to change the way they do business in this era. This post is a result of my recent experience with two of my favorite SaaS applications.

    John Markoff and Clay Shirky talk to David Gelernter in this Edge Roundtable video, Lord of the Cloud of 6/8/2009:

    In June, 2000 Edge published David Gelernter's audacious "The Second Coming: A Manifesto", in which he wrote: "Everything is up for grabs. Everything will change. There is a magnificent sweep of intellectual landscape right in front of us". Ppublication of the manifesto led to one of the most vibrant and interesting Edge discussions, with contributions from many of the leading Edge thinkers in the area of computation. from Stewart Brand, to Freeman dyson, to W. Daniel Hillis.

    From the abstract by David Gelernter:

    The central idea we were working on was this idea of de-localized information — information for which I didn't care what computer it was stored on. It didn't depend on any particular computer. I didn't know the identities of other computers in the ensemble that I was working on. I just knew myself and the cybersphere, or sometimes we called it the tuplesphere, or just a bunch of information floating around. We used the analogy — we talked about helium balloons. We used a million ways to try and explain this idea.

    Dan Chenok issues a Call for Privacy Act to Catch Up with IT in this 6/5/2009 podcast of an interview by Eric Chabrow with Dan Chenok:

    The law rarely keeps pace with advancements in information technology, and the 35-year-old federal Privacy Act has failed to provide the proper framework needed to protect the privacy of citizens.

    Dan Chenok chaired the federal Information Security and Privacy Advisory Board that issued a report entitled Toward a 21st Century Framework for Federal Government Privacy Policy that calls for the creation of a federal chief privacy officer as well as chief privacy officers in major federal agencies and a federal Chief Privacy Officers' Council. The panel also recommended steps Congress and the Obama administration should take to change federal laws and regulations to allow the government to more efficiently use specific technologies, such as cookies, while maintaining citizens' privacy.

    Chenok, the one-time highest ranking non-political IT official in the Office of Management and Budget and now a senior vice president at IT services provider Pragmatics, spoke with Information Security Media Group's Eric Chabrow and explains how changing the way privacy is governed will enhance protection for American citizens.

    Bill Stempf’s Economics of Cloud computing presentation for the ACM post of 6/5/2009 describes his presentation:

    I presented a paper last month for the ACM and IEEE that will be published in the Cloud Computing Journal next month.  Thought I would post a few links here for those who are interested in cloud - I did cover Azure.  I'll do a blog post for Azure and VB when I manage to upload SHARP to the cloud, like I plan to. [Emphasis added.]

    The post contains links to the slides, presentation video, and post on Ulitzer.com.

    Cloud Security and Governance

    <Return to section navigation list>

    ••• Pete Boden‘s Securing Microsoft’s Cloud Infrastructure: Part 2 post of 6/8/2009 discusses Microsoft’s history in online services and security in the Azure Infrastructure section.

    ••• Dave Greenfield says Cloud computing security to grow in 2009 in his 6/14/2009 post to ZDNet’s Team Think blog:

    As I mentioned the other day, I’ve just completed a report with Osterman Research on the messaging security market.  What we found will be good news for cloud computing providers.

    While enterprise users continue to spend a large percentage of their workday involved with messaging activities, the Internet remains a dangerous place for users. Websense, for example, reported that 57 percent of attacks are delivered via the Web. Commtouch found that SPAM accounted for 72 percent of all email traversing the Internet in the first quarter of 2009. …

    As such, while server-based solutions will continue to dominate the messaging security market, cloud-based solutions will constitute a growing percentage of purchases.  The number of respondents who deployed hosted security services grew by nine percentage points since last year.  Over the next 12 months hosted anti-spam services, such as those offered by Kaspersky, Trend Micro and more recently Microsoft, are also expected to show their greatest growth.

    ••• Chris Hoff’s Cloud Computing Security: (Orchestral) Maneuvers In the Dark? post of 6/14/2009 analyzes Kevin Jackson’s Cloud Computing: The Dawn of Maneuver Warfare in IT Security post. @Beaker writes:

    Kevin’s essay is an interesting — if not hope-filled — glimpse into what IT Security could be as enabled by Cloud Computing and virtualization, were one to be able to suspend disbelief due to the realities of hefty dependencies on archaic protocols and broken trust models let alone huge gaps in technology and operational culture.  Readers of my blog will certainly recognize this from “The Four Horsemen of the Virtualization Security Apocalypse” and “The Frogs Who Desired a King: A Virtualization and Cloud Computing Security Fable

    and continues with a detailed essay on cloud computing security.

    Chris’s Hey, Uh, Someone Just Powered Off Our Firewall Virtual Appliance… post of 6/11/2009 discusses this scenario:

    Since virtual appliances (VAs) are just virtual machines (VMs) what happens when a SysAdmin spins down or moves one that happens to be your shiny new firewall protecting your production VMs behind it, accidentally or maliciously?  Brings new meaning to the phrase “failing closed.”

    and eats a big slice of humble pie in his Dear Mr. Schneier, I Was A Jackass & I’m Sorry… of 6/10/2009.

    •• Kevin Jackson expands on his earlier post on the subject (see below) in Expanding Maneuver Warfare in IT of 6/12/2009 begins:

    Earlier this week I published "Cloud Computing: The Dawn of Maneuver Warfare in IT Security" via Ulitzer. In publishing the article my intent was to explore the more dynamic approach to information security offered by cloud computing. Although the conversation continues in earnest, today I would like to highlight Ben's thoughts from Iron Fog:

    "What about managing virus outbreaks, patch deployment and vulnerability detection?

    •• Dana Gardner’s latest BriefingDirect 0f 6/11/2009 is Analysts define growing requirements for how governance supports corporate cloud computing features panelists David A. Kelly, president of Upside Research; Joe McKendrick, independent analyst and ZDNet blogger, and Ron Schmelzer, senior analyst at ZapThink.

    The post contains extended excerpts from panelists views and links to a full transcript of the discussion. You can also Listen to the podcast, Download the podcast, or find it on iTunes/iPod and Podcast.com.

    •• Alexander Howard’s Gartner and CA on addressing compliance requirements in cloud computing post of 6/11/2009 points to:

    Linda Tucci’s excellent new SearchCIO.com article … : “Addressing compliance requirements in cloud computing contracts.”

    In the piece, Tucci reports on interviews with Debra Logan, an enterprise content management analyst at Stamford, Conn.-based Gartner Inc, and Tom McHale, vice president of product management for CA’s GRC Manager suite, to gain answers to the following questions:

    • Who has access to sensitive data in the cloud?
    • Data backup: How often, how long, how well?
    • How will you manage e-discovery requests and satisfy different retention laws?

    “Even before price negotiations begin, CIOs must understand that data backup and storage in the cloud does not remove a company’s responsibility for the legal, regulatory and audit obligations attached to that information,” Tucci writes. “CIOs should be ready with a list of compliance questions for cloud vendors. But don’t expect their answers to suffice.”

    Alex continues with analyses of the Gartner recommendations for minimizing cloud security risks by other analysts.

    Alan Wilensky’s Even the mighty shall sometimes cloudfail post of 6/11/2009 analyzes Amazon EC2’s partial outage due to a lightening strike and recommends:

    … But when the cloud fails, your alternatives have to be in place. Such as: POS systems might have a set of distributed machines to capture inbound records and route card transactions. Rapid Replenishment systems might capture transaction logs for instant replications once your cloud host comes back. You might have a set of managed APIs that broker to another cloud and then reconcile the resynch.

    Many paths. However, there are some businesses that can tolerate the outages that are sure to occur as more move to remote services. One thing is for sure: The single point of failure is not just the cloud infrastructure and platform providers. The land rush to get the mid market onto PAAS solutions has been somewhat willfully blind regarding the following fact – most small /med biz has only one high speed connection, and most have not thought through the issues of hot comms failover at multiple sites. …

    Reuven Cohen provides additional background on the Amazon outage in his Amazon EC2 gets Zapped Overnight post of 6/11/2009.

    I thought lightening arrestors and surge suppressors were designed to handle most lightening strikes.

    Stoledano provides 3 Reasons Why Encryption is Overrated in this 6/10/2009 post to the Cleversafe blog:

      • Future processing power
      • Key management
      • Disclosure laws

    Instead, he recommends dispersal rather than encryption:

    With full disclosure – Cleversafe’s storage solution is based on Dispersal – consider its security benefits. Dispersed Storage technology divides data into slices, which are stored in different geographies.  Each slice contains too little information to be useful but any threshold can be used to recreate the original data.  Translation – a malicious party cannot recreate data from a slice, or two, or three, no matter what the advances in processing power.  And Dispersal does not require the time and energy of re-encryption to sustain data protection.

    Maybe encryption alone is “good enough” in some cases now  - but Dispersal is “good always” and represents the future.

    Mario Santana’s Cloud Computing and Security Issues article for Computer Technology Review is an essay that claims:

    The cloud brings with it a layer of additional security considerations, in terms of both technology and process.

    This layer of additional security isn’t necessarily scary or complicated.  But right now, trust in the security of cloud computing is the number one impediment to its growth.  This article takes a look at the cloud from various points of view.  I will compare real-world examples to look at security implications of the Cloud, and show how they integrate with traditional security processes.

    The article is interesting primarily because Mario Santana is director of Secure Information Services at Terremark Worldwide, Inc.

    • Kevin Jackson asserts “IT security can now use maneuver concepts for enhance defense” in his Cloud Computing: The Dawn of Maneuver Warfare in IT Security post of 6/9/2009:

    Until now, IT security has been akin to early 20th century warfare.  After surveying and carefully cataloging all possible threats, the line of business (LOB) manager and IT professional would debate and eventually settle on appropriate and proportional risk mitigation strategies. The resulting IT security infrastructures and procedures typically reflected a “defense in depth” strategy, eerily reminiscent of the French WWII Maginot line . Although new threats led to updated capabilities, the strategy of extending and enhancing the protective barrier remained. Often describe as an “arms race”, the IT security landscape has settled into ever escalating levels of sophisticated attack versus defense techniques and technologies. Current debate around cloud computing security has seemed to continue without the realization that there is a fundamental change now occurring. Although technologically, cloud computing represents an evolution, strategically it represents the introduction of maneuver warfare into the IT security dictionary.

    • Andrew Lavers explains Enterprise Policy for Zero-click Sign-in Using Information Cards with Geneva Beta 2 in this 6/9/2009 post. Topics include:

      • Reducing your login steps one click at a time
      • How Jerry the domain administrator can pick out cards for his users automatically
      • What constitutes a Card Usage Policy
      • Application patterns and hostname wildcards in a Card Usage Policy

    It remains to be seen if zero-click login will work for Azure projects using .NET Access Control Services. According to Microsoft’s Yi-Lun Lao in a May 19 response to my Details of CardSpace Credentials for WSHttp Bindings Simple (WSHttpRelayEchoService) thread in the .NET Services - Technical Discussions forum:

    Also note currently the Geneva CardSpace is not compatible with Windows CardSpace. [Emphasis added.]

    Krishnan Subramanian’s SaaS Security - Tell Me More post of 6/9/2009 recommends concentrating on “people access” to your data:

    … It is the responsibility of the SaaS vendors to educate users about their people centric security practices. It is the responsibility of the SaaS users to get to know these details from the vendors. As I have emphasized several times in this space, SaaS requires a mental shift on the part of the users. To make these adjustment comfortable for them, SaaS vendors should be more forthcoming about their security practices regarding the handling of data. In fact, some of the SaaS vendors are already doing this. For example, Google explains their practices clearly in this document. …

    Cloud Computing Events

    <Return to section navigation list>

    ••• Enterprise 2.0 Conference will hold an Evening in the Cloud event on 6/22/2009 at the Westin Boston Waterfront:

    [C]ome face-to-face with top purveyors of cloud-based computing for a lively debate hosted by David Berlind, and a vibrant discussion you won't soon forget.*

    The US$195 registration fee “[i]cludes access to all keynotes, the Expo Pavilion and sponsored sessions. Please note that space at the Evening in the Cloud event is limited and seats will only be reserved for the first 300 people to register.”

    •• Chenxi Wang and Eric Olden will present a Forrester Research Webcast, The Enterprise Edge & The Cloud: Securely Integrating Enterprise Identities to SaaS and the Cloud, on 6/25/2009 at 1:00 PM EDT. The post says attendees will learn:

      • Why the enterprise must focus on extending the enterprise network to the Cloud
      • The role of Cloud Identity Gateways, their relation to Web Security Proxies and how to use these solutions together
      • How to extend systems like Active Directory and LDAP to SaaS apps for access control, SSO, user account management and unified auditing
      • How Windows network sessions can be seamlessly extended through a Cloud Identity Gateway into SAML federated SaaS apps
      • How to de-provision user access inside the firewall and have that propagate across the Cloud to SaaS apps

    The Webcast requires registration at the above link.

    When: 6/25/2009 10:00 AM PDT 
    Where: The Internet

    •• Alan Williamson recommends Register[ing] Today for SOA World and Attend SOA & Cloud Bootcamp for Free in his lengthy SOA & Cloud Bootcamp: Who Ya Gonna Call? Cloudbusters! essay of 6/11/2009.

    The Expo plus Bootcamp discounted price of $200 for online registration expires today (6/12/2009)

    When: 6/22 – 6/23/2009 
    Where: The Roosevelt Hotel, NY, NY 

    SYS-CON announces Cloud Computing Expo 2009 West: Call for Papers Deadline June 30 on 6/11/2009:

    The Call for Papers for the 4th International Cloud Computing Conference & Expo, which will be held at the Santa Clara Convention Center in Santa Clara, CA, on November 2- 4, 2009, is now open. The Conference Theme in Santa Clara is "Bringing the Economics of the Web to Enterprise IT Through Cloud Computing."

    Our aim with each conference is to showcase breakout sessions from members of every layer of the Cloud ecosystem. The submission process is 100% online and the submissions URL is here.

    When: 11/2 – 11/4/2009 
    Where: Santa Clara Convention Center, Santa Clara, CA

    •• Gartner, Inc.’s Gartner Outlines Seven Practical Ways to Save Costs in the Data Center post covers “Key Issues for Data Center Professionals to Be Discussed at Gartner Data Center Conferences October 5-6 in London and December 1-4 in Las Vegas:”

    1. Rationalize the Hardware
    2. Consolidate Data Center Sites
    3. Manage Energy and Facilities Costs
    4. Renegotiate Contracts
    5. Manage the People Costs
    6. Sweat the Assets
    7. Virtualization

    Additional information is available in the Gartner report "How to Cut Your Data Center Costs." The report is available on Gartner's Web site.

    Gartner analysts will discuss the key issues for the data center during the Gartner Data Center Conferences taking place October 5-6 at the Royal Lancaster Hotel in London, and December 1-4 at Caesars Palace in Las Vegas. The event provides data center professionals with real-world perspectives and strategies to transform their data centers.

    When: 10/5 – 10/6/2009 
    Where: Royal Lancaster Hotel, London, UK

    When: 12/1 – 12/4/2009 
    Where: Ceaser’s Palace, Las Vegas, NV

    • David Pallmann will speak at the San Diego Azure User Group Meeting 6/11 about Silverlight and Azure:

    You'll learn how to create rich Silverlight applications that are Azure-hosted and take advantage of cloud services. We'll build an Azure-hosted Silverlight application from the ground up that utilizes web services and cloud storage.

    Click here to register.

    When: 6/11/2009, 6:00 to 8:00 PM PDT 
    Where:  AMN Healthcare, 12400 High Bluff Dr # 100, San Diego, CA 92130

    • Mike Amundsen will present a "Programming the Cloud with HTTP/REST" session at CodeStock 2009 on 6/26 – 6/27/2009 in Knoxville, TN. CodeStock includes several other Azure and cloud-related sessions. It’s likely that Aaron King’s Data Syncing using SQL Server Data Services presentation really covers today’s SQL Data Services (SDS), but the latter will undergo a major transformation starting in late July.

    When: 6/26 – 6/27/2009 
    Where: Lamar Alexander Bldg., Pellissippi State, 10915 Hardin Valley Rd., Knoxville, TN 37933 

    Kevin Jackson’s Vivek Kundra to Speak at NRO Showcase post of 6/8/2009 notes:

    According to the event website, the current rise in the use of Web 2.0 social media has spawned innovative and unorthodox approaches to meet the demands of today's global and highly mobile workforce. The data-driven web has morphed into a user-centric web, with increasingly empowered users who are accustomed to and demand self-service and highly customizable experiences. An expected highlight will be a demonstration of "Apps for Democracy" by Vivek Kundra, Federal CIO.

    Michele Weslander Quaid, Chief Technology Officer at the National Reconnaissance Office, announces the Unleashing the Crowd in the Cloud: Igniting the Innovation Insurgency conference to be held 6/17 – 6/18/2009 at the National Reconnaissance Office in Chantilly, VA. Keynote and special guest speakers include:

    • Vivek Kundra, Federal CIO
    • Jeff Jonas, IBM
    • Vint Cerf, Google
    • Dion Hinchcliffe, Hinchcliffe & Associates
    • David Stephenson, author of Democratizing Data

    It’s unfortunate that the Agenda page doesn’t include the topics the speakers intend to discuss and that you need an Intelligence Community (IC) badge or a TS/SCI clearance to attend.

    When: 6/17 – 6/18/2009 
    Where: National Reconnaissance Office, 14675 Lee Road, Chantilly, VA 20151-1715

    Other Cloud Computing Platforms and Services

    <Return to section navigation list> 

    ••• Dion Hinchcliffe’s Cloud computing and open source face-off post of 6/14/2009 claims:

    [O]pen source has become a key enabler for cloud computing by providing both cheap inputs (as in free) as well as rich capabilities to providers of cloud services. The writing, however, is beginning to appear on the wall: the cloud computing industry will use open source as leverage for a new generation of proprietary platforms-as-a-service, very much like the established Web 2.0 services in the consumer space have used open source platforms to capture and create lock-in around data.

    I agree. PaaS clouds will create vendor lock-in whether based on open-source or proprietary stacks.

    ••• James Hamilton discusses Erasure Coding and Cold Storage in this 6/13/2009 post:

    Erasure coding provides redundancy for greater than single disk failure without 3x or higher redundancy. I still like full mirroring for hot data but the vast majority of the worlds data is cold and much of it never gets referenced after writing it: Measurement and Analysis of Large-Scale Network File System Workloads. For less-than-hot workloads, erasure coding is an excellent solution. Companies such as EMC, Data Domain, Maidsafe, Allmydata, Cleversafe, and Panasas are all building products based upon erasure coding.

    At FAST 2009 in late February, A Performance Evaluation and Examination of Open-Source Erasure Coding Libraries For Storage will be presented. This paper looks at 5 open source erasure coding systems and compares there relative performance. The open source erasure coding packages implement Read-Solomon, Cauchy Read-Solomon, Even-Odd, Row-Diagonal Parity (RDP), and Minimal Density RAID-6 codes.

    James then summarizes the authors’ findings.

    ••• John Foley questions the need for Holyoke, MA’s proposed data center in his Cloud Computing Vs. $100 Million Data Center post of 6/12/2009 to InformationWeek:

    Citizens of Holyoke, Mass., had reason to celebrate this week as the governor of Massachusetts and other dignitaries--including Cisco CEO John Chambers, EMC CEO Joe Tucci, and the presidents of Boston University, MIT, and the University of Massachusetts--announced plans to build a $100 million data center in their town. It's an ambitious proposal, but is it necessary? …

    The drawback to a cloud services approach is that Holyoke wouldn't get the new construction and other related jobs that local politicians and residents understandably hope for. But job creation is a bad rationale for building a data center, anyway. Better to focus on research, innovation, and the myriad business opportunities created by on-demand IT resources regardless of how they're delivered.

    I wonder if the funding is from a federal stimulus project.

    •• Maureen O’Gara says Oracle’s Secret Plan for Sun is “Oracle CEO Larry Ellison is reportedly determined to turn Oracle-Sun into a cloud-based company” in this 6/12/2009 post:

    Oracle CEO Larry Ellison, who's orchestrating things even if co-president Chuck Phillips is nominally in charge of integration from the Oracle side, is reportedly determined to exploit the cloud phenomenon and turn Oracle-Sun into a cloud-based company by making sure he's got Oracle's whole software stack on network-based appliances built by Sun.

    He's also reportedly quite taken with Sun's container-based Modular Datacenter, expecting to do better with it than Sun has.

    Maureen didn’t disclose in the post who reported Ellison’s intention.

    •• Jana Technology ServicesUsing Amazon EC2 for PCI DSS compliant applications post of 4/29/2009 says:

    Many of these [12 PCI-DSS] requirements can’t be met strictly by a datacenter provider, but in Amazon’s case, they will be able to provide an SAS70 Type 2 Audit Statement in July that will provide much of the infrastructure information needed to meet PCI DSS certification.

    The post continues with a list of the Control Objectives that the Amazon Audit will address.

    •• Amazon Web Services published an Overview of Security Services