Tuesday, May 19, 2009

Problems Using Self-Issued CardSpace Cards with .NET Service Bus WSHttp Binding Sample

The .NET Services SDK (March 2009) CTP includes a reasonably complete set of samples for the .NET Service Bus (SB). Installing the CTP adds a Microsoft .NET Services SDK (March 2009 CTP) node to the Programs menu with Access Control, Scenarios, ServiceBus, Setup and Workflow sub folders.

Opening …\Service bus leads to GettingStarted and ExploringFeatures subfolders. The latter contains Bindings, Configuration, Metadata, Queues, RelayAuthentication, and Routers subfolders. Binding has folders for NetEvent, NetOneWay, NetTcp, WebHttp and WSHttp bindings. The WSHttp folder contains five sample solutions. I started with the Simple\CS35 C# sample: WSHttpRelayEchoSample.sln.

The Details of CardSpace Credentials for WSHttp Bindings Simple (WSHttpRelayEchoService)thread of 5/18/2009 in the .NET Services - Technical Discussions forum reports this problem and, as of 5/18/2009 2:30 PM PDT there’s no suggested workaround.

Update 5/19/2009: Problem Solved! (Sort of)

The problem has been resolved as due to a combination of the following:

  1. An incorrect scope URI autogenerated when creating an Access Control Service credential for the solution (bug).
  2. Incompatibility between the Windows CardSpace “Geneva” and original WindowsCardSpace Control Panel applets (unpublicized).

Details are in my last reply of 5/19/2009 to Li-Lun Luo in the Details of CardSpace Credentials for WSHttp Bindings Simple (WSHttpRelayEchoService)thread of 5/18/2009 in the .NET Services - Technical Discussions forum, which is quoted near the end of this post.

It’s to be noted that Vittorio Bertocci reported the following in his Claims and Cloud: Pardon our Dust post of 4/1/2009 (not an April Fools Day story):

[F]or a variety of reasons, an application that takes advantage of the Geneva Framework will not work “as is” when hosted in Windows Azure, including Microsoft products that were written to use the Geneva Framework. You may have heard that the new full trust settings we announced for Windows Azure at MIX would make the above scenario work, however that’s not the case: there is more than full trust for enabling the complete range of possibilities offered by claims based access.

There is no mention of the problem in the "Geneva" Framework Beta 2 Release Notes.

The problematic incompatibility here has nothing to do with Azure as far as I can determine. It relates to the two local Control Panel Applets and possibly to incompatibility with WCF claims components.

An unresolved question: Why haven’t more .NET developers reported problems when attempting to use of CardSpace credentials with .NET Services SDK samples after installing Geneva Beta 2? Are prospective .NET Services users avoiding CardSpace authentication/authorization?

The incompatibility bug has been reported as “Windows Cardspace "Geneva" (Beta 2) is Incompatible with Windows Cardspace (Default) Control Panel Applet” (453987) to the Microsoft Code Name "Geneva" Claims Based Access Platform Microsoft Connect forum.

The WSHttpRelayEchoSample.sln Sample

WSHttpRelayEchoSample.sln contains a Service and Client projects pair. Both services specify CardSpace as the credentialType in their App.Config files:

<configuration>
  <system.serviceModel>
    <behaviors>
      <endpointBehaviors>
        <behavior name="cardSpaceClientCredentials">
          <transportClientEndpointBehavior credentialType="CardSpace" />
        </behavior>
      </endpointBehaviors>
    </behaviors>

and

    <services>
      <!-- Application Service -->
      <service name="Microsoft.ServiceBus.Samples.EchoService">
        <endpoint name="RelayEndpoint"
                  contract="Microsoft.ServiceBus.Samples.IEchoContract"
                  binding="wsHttpRelayBinding"
                  bindingConfiguration="default" 
                  behaviorConfiguration="cardSpaceClientCredentials"
                  address="" />
      </service>
    </services>

Readme and Release Notes References to CardSpace Cards

The Readme.htm page for the solution states:

This example uses a Windows CardSpace credential that acquires tokens from the Access Control Service based on a card selected from and sent by the CardSpace identity selector; in other words, you will be prompted to pick an information card.

and

To run the sample build the solution in Visual Studio and then run the two resulting executables using an elevated privileges command line. The 'service' should obviously be started first and the 'client' second. For either program you will be prompted once for a Windows CardSpace card. The card you select must have been registered with the Microsoft .NET Services Access Control Service beforehand.

The ReleaseNotes.htm page states:

Breaking Changes

Access Control Service

The Access Control Service of this release has the following breaking changes:

  • In the previous CTP, you could associate the same certificate or InfoCard credential with multiple solutions. In this case, one of the InfoCards was used as the default. This CTP only recognizes the default InfoCard. All other associations are removed.

Known Issues

Access Control Service

  • Windows CardSpace sometimes fails on Access Control Website.
    • In some cases a registry entry is missing which CardSpace requires to function correctly. Check the registry for the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\InformationCard Token Provider folder. If it doesn't exist, create it. Inside folder, check for {Default} key. If it doesn't exist, create it with value: {D978F0CB-DEBA-4388-83BE-D3E106E02A4F}. Modifying the Registry can cause serious harm to your computer. Please proceed with caution.
  • The registry entry is present and has the required GUID value.

    Bruno Terkaly’s Azure – Microsoft .NET Services- Step 01 – The Service Bus – Blog Post about Setup post includes a table of valid CredentialType values. The Description for the CloudSpace value is:

    The client credential is a self-issued Windows CardSpace information card that is registered with the .NET Access Control Service. [Emphasis added.]

    The table is taken from the CredentialType enum’s documentation.

    Steps to Reproduce the Problem

    To associate a self-issued CardSpace information card with a Service Bus solution:

    1. Go to http://portal.ex.azure.microsoft.com/.

    2. Click the Sign In link to open the Getting Started page.

    3. Click the .NET Services solution you previously set up, oakleaf-sb for this example, to open the Solution: oakleaf-sb page.

    4. Click the Solution Credentials link to open the Credentials Management page, which reports “There are no Information Cards associated with this Solution.”

    5. Click the Select a Card button to open the Add a Card page which proposes to add the default card without identifying it. This indicates that you have an existing card that might not be appropriate for associating with the solution.

    6. To eliminate the existing associated card(s), open Control Panel’s Windows CardSpace[“Geneva”] applet, select an existing card and click the Delete Card link (for each card), and close the applet. (Deleting a card doesn’t remove it from other solutions.) I created these cards when testing Access Control Services federation:

    7. Return to the Credentials Management page. (If you click the Select a Card button, you receive a “No matching cards found” dialog; click cancel.)

    8. Open the WSHttpRelayEchoSample.sln solution in VS 2008 and press F5 to build and run the solution and open the Service console with a “Please enter the solution name to use with this sample:” prompt.

    9. Type the solution name (oakleaf-sb for this example) and press Enter to open the Windows CardSpace dialog.

    10. If cards are present, click the Back Up Cards link and save the cards to a file, then click the Delete All Cards link so you can add a new default card.

    11. Click the Add a Card button, then click the Personal Card link.

    12. Give the card a name, such as oakleaf_sb for this example (Hyphens aren’t permitted in CardSpace names), and click Send to close the dialog. The solution will throw a timeout exception on the Main() method’s host.Open() instruction.

    13. Shut down and restart the instance, repeat step 9 to open the Choose a Card dialog.

    14. Select the card you added in steps 10 through 12 and click Send.

    15. You receive the following exception at the host.Open() instruction:

    Preliminary Analysis

    It appears that the applies-to-address claim, which seems to be a custom claim type, is missing from the personal (self-issued) CardSpace file.

    The question is “What’s the workaround?

    Here’s the full text of my last entry as of 5/19/2009 11:00 AM PDT to the Details of CardSpace Credentials for WSHttp Bindings Simple (WSHttpRelayEchoService) thread of 5/18/2009 in the .NET Services - Technical Discussions forum, which reported this problem:

    Yi-Lun:

    I found the problem, which appears to be a bug:

    The auto-added scope http://echoservice is invalid.

    Changing the scope to the full DNS http://oakleaf-sb.servicebus.windows.net/EchoService/ and selecting the card works as expected for Serivice and Client projects.

    Adding the scope also works as expected.

    Updating blog accordingly after testing on Vista with Geneva Beta 2 installed.

    “applies-to-address" is a rather confusing synonym for scope, is it not.

    Update: Removed Geneva Beta 2 from Vista SP1 machine. Had to remove and recreate the association in the Credentials window to get the above fix to work.

    Cheers,

    --rj

    Sunday, May 17, 2009

    Windows Azure and Cloud Computing Posts for 5/11/2009+

    Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

    Update 5/15-17/2009: Download new Geneva materials from Tech*Ed; Citrix offering for cloud service providers; Windows Azure MMC blob and queue management tool, more Geneva posts, other additions.

    • Update 5/13-14/2009: Geneva Beta 2 does not solve the incompatibility problems with Windows Azure (see the .NET Services: Access Control, Service Bus and Workflow section.)

    U.S. General Services Administration (GSA) issues Request for Information (RFI) about Infrastructure as a Service (IaaS) offerings (see the Azure Infrastructure section.)

    Subscribe to the OakLeaf blog on your Amazon Kindle. Get details here. Click capture below for full-size image.

    Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

    Azure Blob, Table and Queue Services

    <Return to section navigation list> 

    • Brent Stineman has updated his Azure queues series with Hands on Azure Queues – Part 3.5 of 5/14/2009. Brent says this post is:

    [A]n update to my QueueDemo solution that combines enhancements I’ve made as a result of my last article on service configuration options. Putting my own words to practice, I have updated the QueueDemo so that it can now be used against either Development or Hosted Storage. The changes are as follows:

    • enhanced constructor to pull account credentials and URI endpoint from configuration
    • enhance URI to check host and create full URI in either path or host style as appropriate

    Jim Nakashima’s Adding an HTTPS Endpoint to a Windows Azure Cloud Service post of 5/12/2009 clarifies the instructions in his Enabling SSL Connections on Windows Azure article for adding a HTTPS/port 443 endpoint for a WebRole:

    First are the cert requirements. 

    • The certificate must contain a private key that is marked exportable
    • The certificate must have the Server Authentication Intended Purpose

    When running on the Development Fabric, the certificate also needs to be self-signed – this is to prevent any security issues around leaking the private key of a real certificate.

    SQL Data Services (SDS)

    <Return to section navigation list> 

    •• Still waiting for videos of the Tech*Ed 2009 SDS sessions. It’s a total FAIL not to have session videos available within 24 hours of the presentation.

    .NET Services: Access Control, Service Bus and Workflow

     <Return to section navigation list>

    •• Vittorio Bertocci (a.k.a. Vibro) delivers More details about the Identity Developer Training Kit, which includes Exercise 5: Accepting Tokens from .NET Access Control Service, in this 5/15/2009 post.

    •• Sidd Shenoy’s Deep Dive into "Geneva" Next Generation Identity Server and Framework presentation at Tech*Ed 2008 is regurgitated for attendees only in Tech*Ed 2009 online. Beth Massi’s TechEd Sessions Online – My Favorites post of 5/15/2009 lists four Tech*Ed 2009 session videos, but I’ve yet to see a 2009 Azure session.

    The “Geneva” Team offers Step-By-Step Guides, Virtual Machines and “Geneva” Whitepapers from Tech*Ed 2009 hands-on labs and presentations in this 5/15/2009 post:

    The Step-by-Step guides and virtual machines that were used at the Tech Ed "Geneva" hands on labs and sessions are now available for download.  You should find these helpful if you were unable to get to TechEd, missed the Geneva hands on lab sessions, or just want to be able to go through the material at your own pace. They are a great way to get your hands on and play with the Geneva technology.

    You can download these materals from here.

    “Geneva” interop whitepapers include "Geneva" and Sun OpenSSO and Novell Access Manager, which you can download from here.

    Additionally, for Beta 2 we've updated our "Geneva" Framework for Developers whitepaper and the "Geneva" Datasheet. You can download these papers from here.

    • John Fontana’s Microsoft IT goes live with its Geneva identity platform post of 5/13/2009 reports:

    Two days after shipping the second beta of its newest identity platform, Microsoft's internal IT department is rolling out the software corporate wide. …

    The company's IT department will change DNS records today on its internal network so all its identity federations are handled through its Geneva server environment rather than the current five Active Directory Federation Servers (ADFS) the company runs, according to Brian Puhl, a technology architect for Microsoft IT [Puhl link added].

    Microsoft has nearly 410,000 computers and 165,000 users on its network. …

    Puhl also said Microsoft will federate Live IDs with its Geneva infrastructure to support access to cloud services.

    So far, it appears to me that only Stephane Grunet and those using his workaround (see below) can use Geneva Beta 2 now to federate Windows Live IDs with Azure WebRoles.

    Here’s a diagram from John’s article that depicts the planned integration:

    Capture courtesy of Network World

    Update 5/13/2009: Geneva Beta 2 does not solve the incompatibility problems with Windows Azure. According to Stephane Gunet’s ACS passive federation in a webrole : with source and demo post of 5/13/2009 to a thread in the .NET Services - Technical Discussions forum:

    First of all, it seems the issues we had with beta 1 are not solved : the session cookie is still encrypted using DPAPI and certificate reference is still a reference to the certificate stores of the machine.

    John Fontana mentions Azure twice in his Microsoft's identity cloud platform enters Beta 2 post of 5/12/2009 for NetworkWorld:

    The company has linked Geneva and the Microsoft Azure cloud operating system to create SSO to cloud-based services.

    Also part of the platform is the Microsoft Service Connector, the Microsoft Federation Gateway and the .Net Access Control Service, which are designed to create a sort of identity backbone and connection to the cloud, specifically Azure.

    The incompatibility problems noted in the preceding post make claims of cloud-based identity services with Azure suspect.

    Vittorio Bertocci’s Announcing the Identity Developer Training Kit post of 5/11/2009 does what it says. Vibro describes it:

    The Identity Developer Training Kit is a set of hands-on labs and resources designed to help developers to take advantage of Microsoft’s identity products and services. Being designed for developers, the kit focuses on the Geneva Framework: however it also gives guidance on how to take advantage of Geneva Server, Windows Live ID, the Microsoft Federation Gateway and the .NET Access Control Service (which is featured in a renewed and expanded lab). Most of the tasks are demonstrated both for ASP.NET web applications and for WCF services. We went to great lengths for eliminating as much as possible the friction that is traditionally associated with security samples, by providing configuration scripts and tools which automate many of the setup steps. (Emphasis Vibro’s.)

    He also posted Geneva Beta 2 is out! on the same day.

    The Geneva Team’s What’s New in Geneva Beta 2 post of 5/12/2009 reports that Geneva Beta 2 is available for download from here. Here’s what’s new in “Geneva” Framework – IDFX:

      • Enhanced FedUtil Tool with local STS for easy offline development
      • New Visual Studio templates for building claims-aware web applications, web services, and security token services
      • Support for SharePoint 2007
      • Revised token handlers
      • Revised federation authentication module
      • New Claims Authorization Manager API
      • Updated config support

    Here’s what’s new in CardSpace:

      • Support for Group Policy-based Information Card provisioning.
      • Updated management UI
      • Updated card tile
      • Group Policy-based way for administrator to make card selection decisions for specific sites
      • -  Improved provisioning of X509-backed cards
      • -  Compatible with most existing managed cards

    The Geneva Forum is here, this is the support email address and the Geneva website. The Microsoft Code Name "Geneva" beta 2 Resource Page has links to more than you want to know about the product. You receive a message with a link to this page after registering.

    I’m downloading and testing now; I’ll update this post after I determine Beta 2’s compatibility with Windows Azure projects. I’m asking around. Keep an eye on the latest additions to Stephane Gunet’s ACS passive federation in a webrole : with source and demo thread in the .NET Services - Technical Discussions forum.

    Note: The download requires registration, removes your existing CardSpace “Geneva” tool, and requires a reboot. I removed CardSpace “Geneva” and the Microsoft “Geneva” SDK with the Control Panel applet before installing Beta 2.

    Live Windows Azure Apps, Tools and Test Harnesses

    <Return to section navigation list> 

    Ryan Dunn announces the availability of the Windows Azure MMC in this 5/14/2009 post:

    Available immediately from Code Gallery, download the Windows Azure MMC. The Windows Azure Management Tool was created to manage your storage accounts in Windows Azure.

    Following are some of the tool’s features:

    • Manage multiple storage accounts
    • Easily switch between remote and local storage services
    • Manage your blobs
      • Create containers and manage permissions
      • Upload files or even entire folders
      • Read metadata or preview the blob contents
    • Manage your queues
      • Create new queues
      • Monitor queues
      • Read (peek) messages
      • Post new messages to the queue
      • Purge queues

    Note that the tool doesn’t work with the Windows 7 RC due to a bug in the RC’s PowerShell feature.

    • Alin Irimie’s Windows Azure PHP Development Kit post of 5/14/2009 announces:

    Microsoft announced today at TechEd India — a show running simultaneously with TechEd 2009 in Los Angeles, a new software development kit for people interested in building apps in PHP for Windows Azure cloud. The PHP SDK for Windows Azure, a.k.a. PHPAzure, is an open source project, available for download from Microsoft CodePlex. The SDK provides consistent programming model for Windows Azure Storage (Blobs, Tables, Queues).

    but doesn’t offer a link to download the open-source code, which is here. Mary Jo Foley’s Microsoft makes available PHP development kit for its Azure cloud post of 5/13/2009 contains more information about PHPAzure.

    • Jamie Thomson describes an SQL Server Integration Services (SSIS) 2008 package to read Azure log files in his Viewing Windows Azure log files using SSIS post of 5/14/2009. His package doesn’t download the log blobs, but it does format them nicely for readability in a viewer. The post include a link to the package’s source code.

    Steve Nagy’s Converting A Web App Into An Azure Cloud Service Web Role post of 3/11/2009 shows you how to start with a Blank Cloud Service, make a change to the Web app’s *.csproj file to add a <RoleType>Web</RoleType> element, and then affiliate the Web app with the cloud service. Steve says:

    So there you go! Quick and easy. The important thing now is that you can either run the web app standalone, or you can run it on your local development fabric, OR you can deploy it to Windows Azure.

    Azure Infrastructure

    <Return to section navigation list> 

    •• James Hamilton reviews a minibook by Luiz André Barroso and Urs Hölzle of the Google infrastructure team in his The Datacenter as a Computer post of 5/16/2009. James has high praise for The Datacenter as a Computer: An Introduction to the Design of Warehouse-Scale Machines, which “is just over 100 pages long but an excellent introduction into very high scale computing and the issues important at scale.” Here’s the eBook’s abstract:

    As computation continues to move into the cloud, the computing platform of interest no longer resembles a pizza box or a refrigerator, but a warehouse full of computers. These new large datacenters are quite different from traditional hosting facilities of earlier times and cannot be viewed simply as a collection of co-located servers. Large portions of the hardware and software resources in these facilities must work in concert to efficiently deliver good levels of Internet service performance, something that can only be achieved by a holistic approach to their design and deployment. In other words, we must treat the datacenter itself as one massive warehouse-scale computer (WSC).

    We describe the architecture of WSCs, the main factors influencing their design, operation, and cost structure, and the characteristics of their software base. We hope it will be useful to architects and programmers of today’s WSCs, as well as those of future many-core platforms which may one day implement the equivalent of today’s WSCs on a single board.

    •• Andrea DiMaio’s US Federal Government Blesses “Government 2.0” post of 5/16/2009 discusses how the White House’s Crosscutting Programs document addresses transparency as well as participation collaboration with emphasis on:

      • USAspending.gov, a web site that  will allow citizen to verify “when, with whom, and on what the Government is spending taxpayer funds, and whether or not that money is delivering results”. Data will be made available in such a way that users will be able to “combine them into different data sets, conduct analysis and research, or power new information-based products and businesses”.
      • Data.gov, the much discussed repository to access public data from across the whole federal government to help unlock the so-called “power of information” and to create value by mashing up public and non-government information. As I mention in earlier posts, this has already triggered initiatives by vendors who are (or want to be seen as) proactive.
      • Recovery.gov, which applies the same principles as USAspending.gov to the tracking of funds coming from the Stimulus Package.

    •• James Urquhart continues his interoperability series with his Exploring cloud interoperability, part 3 article of 5/16/2009, which asserts:

    Today, the focus is on providing a unified API for Infrastructure as a Service operations. In addition to standardizing how systems are provisioned, when they are active and what policies apply for situations like component failure or load spikes, it is also critical that this API unifies the way in which images are imported and exported from each provider's platform. A cloud operations API needs to cover as much of the system life cycle as possible, including provisioning and deployment.

    There is so much effort being made in this space right now, by so many groups, that it is at times a little overwhelming. Luckily, I found a resource that has helped me organize not only the predominant operations API effort, but also the image/data and application/service interoperability classes. Believe it or not, it is a wiki dedicated to cloud efforts in the federal government market. (I'm telling you, the feds seem to be way ahead of the pack when it comes to organizing cloud activities these days.)

    VMGuy’s Could Microsoft Be Contemplating a Data Services Cloud Offering? post of 5/15/2009 analyzes Microsoft’s “plans to consolidate its data storage and Web services business units:”

    While most saw this as a sign of the bad economic times, Joe McKendrick thinks maybe it’s actually a smart business move. 

    Effectively, this move puts all of Microsoft’s SOA-related initiatives, including Oslo, under the same branch as its data storage and cloud services. Here’s why McKendrick thinks it’s a money-making, rather than cost-cutting, move:

    I don’t think Microsoft is retrenching or cutting back SOA to save money — rather, I think the vendor sees more opportunity in the cloud, with the growing service-orientation of data management — with SOA as the enabler. 

    The connection between the cloud and SOA is pretty clear. SOA is services, cloud is services delivered via the Internet. And it’s pretty obvious how cloud computing and data storage go together. But what’s the connection between all three?

    VMGuy’s post contains his answer.

    • David Linthicum seconds Chris’s concern with “Right to Audit” costs in his SaaS/Cloud Audit Demands Could be Costly post of 5/14/2009. Quoting SC Magazine's Angela Moscaritolo, who focuses on security in the world of SaaS and cloud computing:

    With respect to data security, organizations must review the vendor's data protection techniques to ensure appropriate cryptography is used for both data in rest and in motion, and make sure the appropriate documentation is available for auditors. In addition, the provider's access control and authentication procedures should be reviewed, and companies should find out if third parties have access to the information.

    • Chris Hoff’s Incomplete Thought: The Crushing Costs of Complying With Cloud Customer “Right To Audit” Clauses post of 5/14/2009 observes:

    Almost all of the Cloud providers I have spoken to are being absolutely hammered by customers acting on their “right to audit” clauses in contracts. This is a change in behavior.  Most customers have traditionally not acted on these clauses as they used them more as contingency/insurance options.  With the uncertainty relating to confidentiality, integrity and availability of Cloud services, this is no more.  Cloud providers continue to lament that they really, really want a standardized way of responding to these requests*

    These providers — IaaS, PaaS and especially SaaS — are having to staff up and spend considerable amounts of time, money and resources on satisfying these requests from customers.

    Chris suggests that the Cloud Security Alliance could, “as a community, facilitate both expectations and deliverables from both the consumer and provider perspective.”

    • Robert Westervelt reports Forrester advises cautious approach to cloud computing services in this detailed 5/14/2009 post to SearchSecurity.com. The report analyzes Forrester’s US$1,999 "How secure is your cloud?" report by Chenxi Wang, a principal analyst at Forrester. Chenxi will present a session on the topic in Forrester’s IT Forum 2009 conference’s Track H: Protecting Your Data, Safeguarding Your Reputation on May 19, 4:00 PM at the Palazzo, Los Vegas. 

    • Reuven Cohen reports in his Federal Cloud Capability RFI Released by U.S. Government post of 5/13/2009 that that the U.S. General Services Administration (GSA) has released a Request for Information (RFI) for Infrastructure as a Service (IaaS) offerings, which is the first step in the procurement process leading to selecting IaaS vendor(s):

    Description: The GSA Office of the Chief Information Officer (OCIO), in concert with the IT Infrastructure Line of Business (ITI LoB), requests Capability Statements and responses to Business Model, Pricing Model, and Service Level Agreement (SLA) questions, 1 through 5, from vendors who provide Infrastructure as a Service (IaaS) offerings.

    Ruv’s post analyzes the RFI document with an emphasis on interoperability and data portability:

    For me the most important aspect of this RFI is the emphasis they've placed on cloud Computing Interoperability and Portability specifically in #5 of the RFI Doc. Something I've been pushing for in my recent Washington meetings. I'm ecstatic they've included some my recommendations including an "exit strategy", prevention of vendor lockin and multi-cloud (“cloud-to-cloud”) support.

    Terremark Worldwide probably has an inside track because they were chosen to host the USA.gov site, as noted in Rich Miller’s The Obama Team’s Cloudy Ambitions post of 5/13/2009. There’s more about Terremark in my Windows Azure and Cloud Computing Posts for 4/27/2009+ post’s Other Cloud Computing Platforms section.

    • Andrea DiMaio chimes in with his US Federal Government Puts Its Toes into the Cloud Computing Water post of 5/12/2009:

    Suggested pilots cover a broad spectrum, ranging from user computing to data centers, from portals to content and records management, from case management to enterprise software. It is clear that, while the most immediate impact will be on the IT Infrastructure Line of Business (not by chance GSA’s Patrick Stingley has been named Federal Cloud CTO), other Lines of Business (such as Financial Management or HRM) are soon to come.

    It will be interesting to watch how this plays out and affects the marketplace. This is probably the largest scale endorsement of cloud computing of any government and, although it is still at a nascent stage, may set the bat for many other governments to follow.

    J. Nicholas Hoover’s Federal Budget Lays Out Government Cloud Computing Plans article of 5/12/2009 for InformationWeek analyzes “a supplement to the administration's proposed 2010 budget:”

    A section of the Analytical Perspectives document on Crosscutting Programs calls for a number of pilot projects that would help the government roll out government-wide common services, including some using cloud computing. According to the document, the government would use these tests to determine security and privacy requirements, develop standards, gather data, and benchmark costs and performance, but the pilots eventually will roll out more widely to federal agencies.

    Kevin Jackson concludes “What a great day for Federal Cloud Computing !!” in his President Obama's 2010 Budget Highlights Cloud Computing post of 5/12/2009:

    President Obama's 2010 Budget (pp. 157-158) has highlighted cloud computing as a key tool for improving innovation, efficiency and effectiveness in Federal IT.

    "Cloud-computing is a convenient, on-demand model for network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. The cloud element of cloud-computing derives from a metaphor used for the Internet, from the way it is often depicted in computer network diagrams. Conceptually it refers to a model of scalable, real-time, internet-based information technology services and resources, satisfying the computing needs of users, without the users incurring the costs of maintaining the underlying infrastructure. Examples in the private sector involve providing common business applications online, which are accessed from a web browser, with software and data stored on the “cloud” provider’s servers."

    Reuven Cohen’s White House Leading Cloud Computing Charge post of 5/12/2009 carries a “Optimizing Common Services and Solutions/Cloud-Computing Platform” deck and begins:

    Very interesting developments today from the U.S. federal government on cloud computing. Bob Marcus at the OMG has sent me an overview of a White House Cross-Cutting Programs Document released earlier. The document outlines the administration's 2010 budget requests. According to the document White House officials want agencies to launch pilot projects that identify common services and solutions and that focus on using cloud computing. I think the most important aspect of this announcement is that "cloud computing" is now being mandated from the highest levels of the U.S. government.

    Lydia Leong, a Gartner analyst who writes the Cloud Pundit: Massive-Scale Computing blog says in her The cloud computing forecast post of 5/11/2009:

    John Treadway of Cloud Bzz asked my colleague Ben Pring, at our Outsourcing Summit, about how we derived our cloud forecast. Ben’s answer is apparently causing a bit of concern. I figured it might be useful for me to respond publicly, since I’m one of the authors of the forecast.

    The full forecast document (clients only, sorry) contains a lot of different segments, which in turn make up the full market that we’ve termed “cloud computing”. We’ve forecasted each segment, along with subsegments within them. Those segments, and their subsegments, are Business Process Services (cloud-based advertising, e-commerce, HR, payments, and other); Applications (no subcategories; this is “cloud SaaS”); Application Infrastructure (platform and integration); and System Infrastructure (compute, storage, and backup).

    John Treadway says “Gartner’s definition of cloud computing is at odds with the U.S. Government's” in his Cloud Computing Expo: The Gartner Cloud vs. Everybody Else post of 5/12/2009. John contends:

    Gartner’s definition of cloud computing is at odds with the U.S. Government (http://csrc.nist.gov/organizations/fissea/2009-conference/presentations/fissea09-pmell-day3_cloud-computing.pdf), McKinsey (http://uptimeinstitute.org/content/view/353/319), IDC (http://blogs.idc.com/ie/?p=190), U.C. Berkeley
    (http://www.eecs.berkeley.edu/Pubs/TechRpts/2009/EECS-2009-28.html) and nearly every other definition that’s out there.  It provides no actionable value, which in the end is where Gartner tends to shine, and it’s not defensible in any discussion with practitioners and other experts.

    James Urquhart asks Are the feds the first to a common cloud definition? on 5/10/2009 (updated 5/12/2009) and then quotes Reuven Cohen and Chris Hoff (@Beaker) posts regarding the recently-replicated cloud computing definition from the National Institute for Standards and Technology (NIST).

    Andrea DiMaio reports in his A New Perspective on Cloud Computing in Government post of 5/10/2009 to the Gartner Blog Network:

    Over the last several months I have been researching on both web 2.0 and cloud computing in government. Incidentally, both topics are top of mind for the new US administration.

    I am working on a research note that explores in detail the analogies between these two topics, but I want to share some of my thoughts on this blog.

    It seems to me that most discussions about cloud computing have a bottom-up nature, since they relate to the ability and willingness of governments to gradually commoditize portions of their infrastructure as well as some of their enterprise applications. At the same time though, governments are discussing about the role of “open government data” and social media to improving citizen engagement. …

    The commodization of IT assets and services is the “server-side” version of the consumerization of client devices and social media tools that is driving agencies to consider the use of consumer tools to engage with citizens as well as to support internal operations. [Emphasis Andrea’s.]

    Her subsequent What Does “Commoditization of Government” Mean? post of 5/11/2009 makes this point:

    [A]ll aspects of government, ranging from service delivery to operations, from IT to policy making,  are at risk of being commoditized as a consequence of changes we see already happening. The commoditization of government concerns infrastructure and applications, as well as the socialization of information and the engagement of external constituents in service delivery, problem solving and policy-making through crowdsourcing. These are just early signs of a deeper, longer term process that will cause many government organizations to rethink how special they really are and to what extent they can leverage resources that are commodities.

    Cloud Computing Events

    <Return to section navigation list> 

    Mike Ormond’s Interested in Azure? post of 5/14/2009 announces the next meeting of the UK Azure NET users group. Additional details and registration are at http://ukazurenet-in-rest.eventbrite.com/. The signup list is quite long at the moment.

    When: May 19, 2009 
    Where: Microsoft London (UK) Office

    Randy Bias delivers in his CloudSlam ‘09 Conference Materials post of 5/10/2009 links to *.wmv files on Amazon S3 of presentations at the CloudSlam ‘09 virtual conference. The list matches, as far as I can determine, the CloudSlam schedule posted here. The links are reported to be good until 5/20/2009, so don’t let grass grow under your feet before downloading them. File size is about 100 MB, on average.

    When: April 20-24, 2009
    Where: Virtual Event (Internet)

    Geva Perry says in his Enterprise Cloud Summit post of 5/4/2009:

    I'll be speaking on a panel at the upcoming Enterprise Cloud Summit in Las Vegas (@Interop), May 18-19.  The topic of the panel is "Where Can Things Go Wrong?" and should be a nice conversation with the moderator Greg Ness and these panelists:

    Peter Coffee, Director, Platform Research, salesforce.com
    Randy Rowland, General Manager, Managed Hosting & Cloud Computing Services, Terremark Worldwide, Inc.
    Geva Perry, Founder, Thinking Out Cloud
    Bill McGee, Vice President, Products and Technology, Third Brigade

    The rest of the agenda also looks very interesting. Check it out here. And there's also a CloudCamp event on Monday evening.

    If you haven't signed up already, you can register here and get a 40% discount.

    When: May 18-19, 2009
    Where:  Mandalay Bay Convention Center, Las Vegas

    Don Dodge’s What’s Next in Tech? Boston post of 5/12/2009 describes the upcoming What’s Next In Tech - Where will the next waves of growth will come from? panel. Don says “A panel of entrepreneurs will reveal their thoughts on the next big thing, followed by a panel of VCs discussing where they are investing their money.”

    One of the topics is cloud computing; Don provides the following as a discussion starter:

    Cloud Computing – Obviously…everyone knows this. Amazon, Google, Microsoft, and other big players are making huge investments in Cloud Computing. But, where are the opportunities for startups? Every decade it seems a platform shift creates opportunities for tools (management, monitoring, migration, security, performance, auditing, etc) to manage the transition. All the tools that worked so well in the mainframe era didn’t work for client/server. New companies emerged to fill the gap. Then web based applications came along and created a new need for software tools to manage the process. The old client server tools didn’t work. The move to virtualization did it again. And now we have a new set of challenges in cloud computing. There are lots of gaps and holes to fill.

    When: June 25, 2009 Price: $40 
    Where: Boston University, School of Management, 595 Commonwealth Ave, Boston, 02215

    Brandon Watson says in his GigaOm Structure ‘09 Event post of 5/12/2009 that he’ll be a member of the Toward Cloud Computing: Private Enterprise Clouds As A First Step panel at Om Malik’s GigaOm Structure ‘09 event in San Francisco on 6/25/2009. The theme of Structure ‘09 is “Put Cloud Computing to Work.” Here’s the panel’s description:

    Enterprises aren’t yet able or ready to migrate their applications to public clouds.  Public cloud infrastructure can’t run existing enterprise applications without requiring a rewrite.  Yet the lure of usage-based resourcing is strong. The solution? Build your own cloud with your existing infrastructure investment as a first step. This panel will contrast vendor visions about how internal systems can work in unison with external cloud platforms. A must attend for those looking to find solutions or opportunity in the migration path to cloud services.

    Click here to register with an Azure-related discount code.

    When: June 12, 2009 
    Where: Mission Bay Conference Center, San Francisco, CA

    Other Cloud Computing Platforms and Services

    <Return to section navigation list> 

    Yogesh Gupta says Cisco Gets into Cloud Computing with Unified Service Delivery in this 5/15/2009 post:

    Cisco strengthened its foray into cloud-based domain with the launch of Cisco Unified Service Delivery (USD). The solution will aid service providers to build a platform for cloud services by combining Cisco's datacenter portfolio and Unified Computing architecture to deliver data and video services to any place and device. Elaborating on the Cisco DataCentre 3.0 strategy, Rajesh Chainani, Country Director- Service Provider, Cisco India said, "From datacenter 2.0 focusing on client server and distributed computing, the market has evolved into third phase of datacenter services which revolve around service oriented and web 2.0 based virtualized environment."

    Reuven Cohen’s Citrix Jumps on Cloud Hosting Bandwagon post of 5/15/2009 reports:

    The cloud hosting & service provider market seem to be becoming the key battle ground for cloud enablers formerly known as virtualization vendors. Following upon recent announcements from VMware and Cisco, Citrix has announced a Service Provider Program aimed squarely at service/hosting providers who deliver software services and hosted applications to end-user customers on a rental, subscription or services basis, A.K.A. Cloud Service Providers (CSP).

    The most interesting aspect of the new program has to do with Citrix's approach to billing. The program is designed with cloud business goals in mind with no up-front license fee commitments. Cloud hosters need only submit monthly usage reports and are invoiced accordingly. The program is being offered as part of Citrix Cloud Center (C3) which they describe as designed to give cloud providers a complete set of service delivery infrastructure building blocks for hosting, managing and delivering cloud-based computing services.

    James Watters asks IBM’s Webspan Cloud to Compete with Azure? on 5/14/2009 and responds with a definite “No way”:

    Having thrown a little sand at IBM’s lack of a cloud compute service, I read the recent headlines about IBM Webspan with some trepidation. Geek’s.com proclaimed “IBM announces WebSpan, the first Windows Azure alternative,” gulp, had IBM really created a massive cloud service to rival the scope of Azure?

    No: desite the hyperbolic headline this is an existing SaaS business integration provider named Hubspan building a Websphere based extension to its platform. Hubspan/Webspan is not a general compute platform; instead it is business integration SaaS with existing integration customers such as Visa. As I detailed in my initial piece, the economic pressures and operational challenges of a generalized compute cloud remain unattractive to big blue. If Azure wants to be the OS for the next 50 years, backed by massive data-center investments, Webspan is hardly comparable in scope or investment.

    Aaron Ricadela asks What's Holding Back Google Apps? in this 5/14/2009 BusinessWeek article. The topic is Google’s office productivity apps but the objections to their use unquestionably apply to PaaS and IaaS cloud computing, too.

    • Krishnan Subramanian delivers detailed reports on cloud computing topics from the Gluecon conference in Looking back at Gluecon 2009 Day 1 and Looking back at Gluecon 2009 Day 2 of 5/14/2009.

    Andrew Ross Sorkin analyzes Sun Microcomputer’s Preliminary Proxy Statement from the SEC in his Sun’s Deal Saga and the Mystery Suitor “Dealbook” post of 5/12/2009, which choreographs what became the mating dance of Oracle and Sun:

    The blow-by-blow account describes a saga in which various suitors showed interest, backed away and then re-engaged. One leading contender, described in Tuesday’s regulatory filing as “Party A,” is a dead ringer for I.B.M., whose offer for Sun was complicated by Sun’s concerns that antitrust regulators might block the deal.

    James Urquhart’s As Citrix vies for cloud lead, is anyone following? post of 5/12/2009 observes:

    Last week's announcement of enhancements to Citrix Cloud Center (C3) at Citrix Synergy 2009 was one that made me sit up and take notice. A while ago, I proclaimed that the era of the "cloud os" had begun, and I called out VMWare vCloud, Citrix C3 and 3TERA AppLogic as examples of what would eventually become cloud operating systems.

    Citrix (and the former XenSource team) has been strangely silent since that post. Yeah, there have been one or two "announcements" that basically positioned existing Citrix technologies as being cloud infrastructure, but all in all both VMWare and 3TERA greatly outstripped Citrix in the marketing department.

    Geva Perry notes that “It's no surprise then that consumer-oriented companies, such as Amazon and Google, are the ones leading the charge in what is essentially a B2B market” in his Marketing Cloud Computing: Uncharted Territories post of 5/12/2009.

    Geva Perry’s Hubs, Spokes and Islands in the Cloud post of 5/12/2009 begins a series about the roles of startups in the cloud marketspace:

    This first post in the series has to do with the cloud offering's role in its ecosystem. Before I jump into it, I acknowledge the fact that there is a very large body of work about this topic. Please see my footnote on this.

    We can think about as the hub-spoke-island dilemma: cloud providers (IaaS, PaaS, SaaS) and cloud services need to make a strategic decision about their role within the ecosystem.

    Some are the sun of their solar system (hub) and others play the role of the planets (spoke). But things can get a bit more complex than that and the decision on what role to play is not trivial.

    Saturday, May 09, 2009

    Windows Azure and Cloud Computing Posts for 5/4/2009+

    Windows Azure, Azure Data Services, SQL Data Services and related cloud computing topics now appear in this weekly series.

    Updated 5/9 and 5/10/2009: Additions
    • Updated 5/7 and 5/8/2009: Additions

    Note: This post is updated daily or more frequently, depending on the availability of new articles in the following sections:

    Azure Blob, Table and Queue Services

    <Return to section navigation list> 

    My Windows Azure Blob Test Harness Project is Live! post from 1/4/2009 was updated on 5/6/2009 to reflect recent changes in the project to recover from Windows Live SkyDrive’s assignment of new IDs to six of the seven source bitmaps and zip files that serve as content for the live Azure demo.

    I haven’t a clue why SkyDrive changed the IDs to new values with a few more characters.

    SQL Data Services (SDS)

    <Return to section navigation list> 

    See the list of five Tech*Ed 2009 SDS sessions in the Cloud Computing Events section.

    • Dennis Gobo lists more than A couple of reasons I won't be moving my databases to the cloud anytime soon on 5/7/2009 after listening to “the SSDS session … presented by David Robinson who is a senior program manager on the SQL team. [Link added.]” Here’s Dennis’s screen capture “that shows you what is and what is not available for V1:”

     

    • Jeffrey Schwartz’s Microsoft Revamps SQL Data Services (SDS) Cloud Database of April 2009 includes quotes from developers (including yours, truly), analysts and Microsoft about SDS’s mid-course correction with the move from the Entity-Attribubute-Value (EAV) to the relational data model.

    .NET Services: Access Control, Service Bus and Workflow

     <Return to section navigation list>

    Maor David demonstrates how to use the Microsoft .NET Services Service Bus and the  NetTcpRelayBinding in his Azure .NET Services – A Twitter Service Bus post of 4/29/2009. The tutorial post is based on the Echo sample in Azure SDK for .NET Services (March 2009 CTP) and includes source code on SkyDrive.

    J. D. Lasica’s free Identity in the Age of Cloud Computing: The next-generation Internet’s impact on business, governance and social interaction 110-page eBook published by the Aspen Institute and is available for downloading in PDF here. The Institute has released the new report under a Creative Commons Attribution Noncommercial license.

    The .NET Services Team made the Microsoft .NET Services White Papers (March 2009 CTP) available for downloading on 5/8/2009. The White Papers include:

      • An Introduction to Microsoft .NET Services for Developers by Aaron Skonnard. This overview paper introduces Microsoft® .NET Services, each of its building block services, and how they fit together.
      • A Developer’s Guide to the Microsoft® .NET Access Control Service by Keith Brown. This whitepaper shows developers how to use a claims-based identity model and the Microsoft® .NET Access Control Service – part of the Microsoft® .NET Services family – to implement single sign-on, federated identity, and role based access control in Web applications and services.
      • A Developer’s Guide to the Microsoft® .NET Service Bus by Aaron Skonnard. This whitepaper shows developers how to use the .NET Service Bus – part of the Microsoft® .NET Services family – to provide a secure, standards-based messaging fabric to connect applications across the Internet.
      • A Developer’s Guide to the Microsoft® .NET Workflow Service by Matt Milner. This whitepaper provides details about the Microsoft® .NET Workflow Service, its relation to Windows Workflow Foundation, and what developers need to know to begin building workflows for the cloud. It not only explains the current tools and capabilities but also outlines the vision for future releases.

    The authors are instructors at Pluralsight. According to a 5/8/2009 Twitter post, the .NET Services team will “See you at #TechEd at the LA Convention Center next week!”

    • Vittorio Bertocci announces The Id Element weekly: Ruchi Bhargava on Windows CardSpace Geneva interview on 5/7/2009:

    Ruchi Bhargava, Sr. Development Lead on the Federated Identity team, has been working with Windows CardSpace from the beginning and has been involved in all aspects of the product's development. In this episode she highlights some of the challenges end users and developers had with Windows CardSpace v1 and the work the team has done to bring a new experience to both users and developers with Windows CardSpace "Geneva". This work includes a complete rewrite of the product in native code for faster download and snappier performance, as well as enhancements for the end user experience that developers can now have a greater influence over -- to call out a few of the items Ruchi discusses.

    and gloats over Geneva wins a European Identity Award in the category “Best Innovation” at the European Identity Conference 2009:

    In the category “Best innovation”, […] Another award in that category went to Microsoft for their Geneva project, in which federation becomes part of user containers - in the view of Kuppinger Cole, one of the most significant enhancements for future use and dissemination of the Identity Federation.

    • Stephane Gunet’s ACS passive federation in a webrole : with source and demo thread of 5/7/2009 in the .NET Services - Technical Discussions forum includes a live demo of passive federation of a WebRole with Live ID here and source code on CodePlex here. I’ve tested his demo and it works! Stephen says (inter alia):

    I finally got Access Control Service up and running in a web role and managed to build a small library to help set it up without too many hacks : almost everything can be properly set up in the <microsoft.identitymodel> section of web.config. The only piece of code you need is the creation of the sign in request.

    What you can do with it is build a web role that will use Access Control Service to provide authentication and authorization using passive federation. The demo and sample code uses Live ID as an identity provider, but you should be able to use any other identity provider thanks to ACS security model.

    Thanks Stephane; I needed that.

    • Vittorio Bertocci, a.k.a. Vibro, provides links to his claims-based identity, “Geneva” samples and Azure’s .NET Access Control Service posts for the last year in his 6 years of blogging post of 5/6/2009. If you’re interested in implementing federated identity with Azure, Vibro’s posts are invaluable.

    Vittorio Bertocci’s What goes into claims post of 5/5/2009 explains federated claims-based identity management with a strong “Geneva” flavor and a touch of hand-hewn graphics. If you’re working with Access Control Services and the “Geneva” Framework, be sure to read this post (despite the fact that the Azure March 2009 CTP and Geneva Framework aren’t compatible.)

    It’s possible that my Problem with the Azure Services Training Kit’s IntroAccessControl Hands-on Lab post of 5/4/2009, to which Vittorio added an insightful comment, prompted his post of the next day.

    Live Windows Azure Apps, Tools and Test Harnesses

    <Return to section navigation list> 

    Darryl K. Taft announce Microsoft Launches Windows Azure Cloud Developer Contest in this 5/6/2009 post. Here’s the deck:

    To highlight the capabilities of its Windows Azure cloud and the Azure Services Platform, Microsoft has announced a contest inviting developers to create innovative applications to run on Azure. Microsoft will award winners for creating compelling .NET and PHP applications, and will invite the overall Web development community to vote on a third "community application" winner.

    More information about the contest, which closes 6/18/2009 can be found at http://www.newcloudapp.com/.

    David Pallman’s Azure Storage Explorer 2.1 Now Available post of 5/9/2009 reports:

    Although Azure Storage Explorer has become a popular tool for viewing Azure cloud storage, the most requested feature has been an ability to modify what's in storage. Version 2.1 provides the capability to create or delete blob containers, blob items, queues, queue messages, tables, and table items.

    You can download the updated source code, binaries, and docs from CodePlex.

    • Microsoft’s Public Sector Developer Evangelism team announced the Open Government Data Initiative (OGDI) on 5/8/2009. OGDI is Azure-based data service the makes government data available in the form of blobs or, presumably, tables. Here’s the team’s description:

    The Open Government Data Initiative (OGDI) is an initiative led by Microsoft Public Sector Developer Evangelism teamExternal Link. OGDI uses the Azure Services PlatformExternal Link to make it easier to publish and use a wide variety of public data from government agencies. OGDI is also a free, open source ‘starter kit’ (coming soon) with code that can be used to publish data on the Internet in a Web-friendly format with easy-to-use, open API's. OGDI-based web API’s can be accessed from a variety of client technologies such as Silverlight, Flash, JavaScript, PHP, Python, Ruby, mapping web sites, etc.

    Whether you are a business wishing to use government data, a government developer, or a ‘citizen developer’, these open API's will enable you to build innovative applications, visualizations and mash-ups that empower people through access to government information. This site is built using the OGDI starter kit software assets and provides interactive access to some publicly-available data sets along with sample code and resources for writing applications using the OGDI API's.

    Email us at askogdi@microsoft.com if you have government data sets that you would like us to publish or if you have other questions.

    OGDI appears to me to be a very small-scale version of Amazon Web Services’ Public Datasets.

    • Stephane Gunet’s ACS passive federation in a webrole : with source and demo thread of 5/7/2009 in the .NET Services - Technical Discussions forum includes a live demo of passive federation of a WebRole with Live ID here and source code on CodePlex here. I’ve tested his demo and it works. (Copied from the .NET Services: Access Control, Service Bus and Workflow section.)

    • David Pallman adds a Silverlight, WCF and Sodoku demo to his live Azure apps with his Azure Sudoku now on CodePlex post of 5/7/2009. Dave says:

    I could have implemented Azure Sudoku without the WCF service, but since this is meant to be a reference project I wanted to include WCF for an important reason: Silverlight can't directly access Azure's RESTful services. That means when you work on Azure-hosted Silverlight solutions the only way you'll be able to make use of cloud storage and other Azure services is if your solution contains a WCF service that Silverlight can go through to get to Azure services.

    Jamie Thomson’s Tweetpoll – My first Windows Azure application is live post of 5/6/2009 describes his live Azure “application [that] displays the distribution of the lengths of Twitter statuses (‘tweets’) from Twitter’s public timeline.” Source code is available on Codeplex.

    David Pallman reports in AzureMortgageService now on CodePlex of 5/4/2009 the availability of his:

    [D]emo WCF service that calculates mortgage schedules, along with a WPF-based desktop app for invoking the service and displaying the results. The demo is on CodePlex at http://AzureMortgageService.codeplex.com. If you're looking for a working Azure service with a real-world scenario that's clean and simple, you might find this useful.

    Here’s a full-size screen capture of the UI from Dave’s blog post:

    My Windows Azure Blob Test Harness Project is Live! post from 1/4/2009 was updated on 5/6/2009 to reflect recent changes in the project to recover from Windows Live SkyDrive’s assignment of new IDs to six of the seven source bitmaps and zip files that serve as content for the live Azure demo. (Repeated from the Azure Blob, Table and Queue Services section")

    Azure Infrastructure

    <Return to section navigation list> 

    My San Francisco Bay Area is Center of US Interest in Cloud Computing post of 5/9/2009 offers a geographical analysis of interest in the four Google search terms I analyzed in the Interest in Cloud Computing Increases as Web Services and SOA Lose Google Search and News Volume post (see below.)

    •• Peter Mell and Tim Grance of the National Institute of Standards and Technology (NIST) have proposed a Working Definition of Cloud Computing which Ruv Cohen posted as a new thread to the Cloud Computing Interoperability Forum (CCIF) on 5/9/2009.

    •• Tom Bittman’s Four Myths About Cloud Computing post of 5/8/2009 contends that the following ideas are myths:

    1. There will be a “big switch”
    2. Cloud computing is just an evolution of “fill in the blank”
    3. Only megaproviders will win
    4. Cloud computing is about IT commoditization

    I’m not so sure that #3 is a myth. (Tom is a Gartner analyst.)

    •• Chris Hoff (a.k.a. @Beaker) takes On the Draft NIST Working Definition Of Cloud Computing… in this 5/8/2009 post. Chris says, quoting Reuven Cohen:

    I can’t seem to find it anywhere [for “public ratification & comment”] except for references to its creation as a deliverable in FY09 in a presentation from December, 2008.  I searched NIST’s site, but perhaps I’m just having a bad search day.

    That’s the only original source I have.  From @Beaker on Twitter: Please contribute in reviewing the Cloud Security Alliance Guidance via our Google Groups: http://is.gd/wNso.

    My Interest in Cloud Computing Increases as Web Services and SOA Lose Google Search and News Volume post of 5/9/2009 analyzes the hype cycles for four Google search terms: SOA, Web services, virtualization and cloud computing. Here’s a preview of the results for the past five+ years:

    •• Greg Ness analyzes The Dizzying Economics of Cloud Computing in this 5/8/2009 post, which concludes:

    Out there in the land of service providers is a Henry Ford or Bill Gates who understands the coming transformation and is testing and innovating for comparative advantages while others hang on in desperation.  Where they build tomorrow’s factories will make all the difference, in the same way that the Marshall Plan and the railroad etc. shifted wealth on often unprecedented scales.

    For “factories” read “data centers.”

    •• James Staten’s Leveraging cloud computing for new business enablement of 5/8/2009 cites “Forbes.com HP VP and CTO Russ Daniels’ … short commentary on how cloud computing can help reignite the global economy and his focus is what makes the difference.” James writes:

    Where Russ differs from many others on cloud computing in that he is talking about the vision from a higher, business level than most others, who are down in the IT weeds most of the time. Where Nick Carr talks about cloud computing sending corporate data centers to the trash heap, Russ is looking at what new business opportunities can be enabled by the cloud.

    James is a Principal Analyst for Forrester Research serving IT Infrastructure & Operations professionals.

    • Joe Weinman’s McKinsey Cloud Report's Popularity Disproves Its Own Analysis InformationWeek article of 5/8/2009 includes an analysis that concludes:

    The bottom line is, it's the total cost that matters. It may be better to pay a little more some of the time than a little less all the time. If that isn't clear, let me rephrase it: It may be better to pay nothing most of the time than something all the time. This is one of the many ways cloud services, even when and if they are more expensive, generate cost savings.

    • Reuven Cohen reports on spending “the last two days in Washington DC in conversations with various US government officials regarding the opportunities for cloud computing within the federal government” in his The US Federal Government defines Cloud Computing post of 5/7/2009:

    Something I found particularly interesting was that for the first time, the
    federal government is moving more quickly then the private sector in both
    their interest and potential adoption of what has been referred to as the
    federal cloud. Making things even more interesting is the appointment
    of Patrick Stingley as what I would describe as the federal "Cloud Czar" or more formally the Federal Cloud CTO at the General Services Administration (GSA). … One of Stingley's first tasks is creating a development plan for a federal cloud computing capability.

    Ruv goes on to quote the Draft NIST Working Definition of Cloud Computing of 4-24-09 by Peter Mell and Tim Grance.

    • James Urquhart takes on Image/Data portability in his Exploring cloud interoperability, part 2 post of 5/7/2009. James previously defined the topic:

    This is the one that most people assume when they say "cloud interoperability." How do you define a virtual server image, or a Java application, or a Customer Releationship Management (CRM) database, such that it can be deployed on another host, often a competitive host, without modification?

    and goes into more detail in this post.

    • David Lawsky’s Little-known cloud startups attract venture interest article of 5/7/2009 for Reuters makes these points:

    Venture capitalists are increasingly looking to invest in start-up companies that provide complementary services for the Internet "cloud", hoping to get in on the ground floor of a trend that the world's biggest tech companies are pushing. …

    Experts say these start-ups will work alongside the likes of Google Inc, Amazon.com Inc and Microsoft Corp, which say they are investing in this concept but warn it is a nascent, rapidly shifting arena. …

    Kevin Harvey, general partner of Benchmark Partners, said his venture capital firm invested in Rightscale and Engine Yard because they provide essential services. Amazon joined with Benchmark in helping fund Engine Yard, which has now secured $18.5 million in financing.

    • Bill McNee’s Saugatuck Readers Survey: SaaS and Cloud Reign Supreme Saugatuck Research Alert of 5/6/2009 finds:

    SaaS and Cloud Computing topped the list of research topics that readers want Saugatuck to focus on over the next 12-18 months, with 89 percent and 87 percent respectively ranking as them as “critical” or “very important.” …

    Saugatuck readers clearly see SaaS and Cloud Computing as the two most important trends and disruptive technologies driving change in Enterprise Computing.

    Avenade’s 2009 Global Survey of Cloud Computing survey of 502 respondents conducted by Keller Research in January 2009 found in the “Poised to Adopt a Viable Solution” section:

      • Nine in 10 of C‐level executives and IT decision‐makers in the United States, and six of 10 globally, are familiar with cloud computing.
      • Business executives and IT decision makers overwhelmingly agree that cloud computing is the real deal (71 percent worldwide and 87 percent in the United States) – it is seen as a viable technology option.
      • Furthermore, nearly two in three IT execs worldwide and four of five in the United States believe cloud computing reduces up‐front costs.

    But concluded in the “Afraid to Change” section:

      • Even though nearly half of respondents consider themselves early adopters of new technologies, the majority of companies are afraid to change to cloud computing technologies.
      • Of those who use internal IT systems, the vast majority of those companies (84 percent) have no plans to switch to cloud computing in the next 12 months.
      • By a 5‐to‐1 ratio, companies trust internal IT systems over cloud‐based technologies due to fear about security threats and loss of control of data and systems

    Gartner, Inc. claims Worldwide SaaS Revenue to Grow 22 Percent in 2009 in this May 2009 report:

    Enterprise Software Segment

    2009

    2008

    Content, Communications and Collaboration (CCC)

    $2,507

    $2,155

    Office Suites

    512

    136

    Digital Content Creation (DCC)

    126

    70

    Customer Relationship Management (CRM)

    2,169

    1,838

    Enterprise Resource Planning (ERP)

    1,376

    1,256

    Supply Chain Management (SCM)

    861

    748

    Other Application Software

    483

    387

    Total Enterprise Software

    $8,035 

    $6,591

    Additional information is available in the Gartner report “Market Trends: Software as a Service, Worldwide, 2009-2013.” The US$2,495 report is available here on Gartner’s Web site.

    Jason Hiner’s Sanity check: Why corporate IT will eventually embrace cloud computing post of 4/27/2009 to TechRepublic’s “Tech Sanity Check” column carries the following deck:

    When you mention “cloud computing” to most IT professionals, the look of palpable disdain on their faces is unmistakable. That’s going to change over the next five years. Here’s why.

    Hiner is Editor-in-Chief of TechRepublic.

    Bill Lodin describes his Using Logging in a Windows Azure Application screencast of 5/6/2009:

    Windows Azure provides a built-in framework for writing log messages from your applications. In this screencast, you’ll learn how to use the Windows Azure logging API and how to read log messages whether your application is running in the development fabric or in the cloud.

    Brent Stineman asks App Dev in the cloud. What is the benefit? and finds the answers in a Webinar delivered by Rightscale:

    Well the obvious answer is that Azure Services are a PaaS and not a SaaS. When consuming a SaaS that resides in a public cloud, you’re consuming a specific product with its (usually limited) options for customization and extension. When you hit those limits, your options for further extension or integration between that off-premise solution and any other item are limited. To extend that offering the service consumer either has to tie it to to their existing infrastructure likely through the implementation of an on-premise custom or packaged solution. The challenge with this is how to maintain the benefits your organization received when it made the decision to use a off-premise SaaS offering. If you moved to the cloud to gain scalability, you need to make sure your on-premise extension is equally scalable.

    • Krishnan Subramanian tries Clearing The Confusion On Security And Clouds in this 5/7/2009 post that distinguishes between “Cloud Security” and “Security in the Cloud.”

    Rona Suchat’s Cloud-Based Application Development and Testing Services: Customers' Leading Requirements and Provider Preferences US$3,500 IDC research report “highlights demand-side results of customer perception of top criteria and providers they would select if procuring cloud-based application development or testing services.”

    Cloud Computing Architect’s IDC Report Examines Customers' Leading Requirements and Provider Preferences for Cloud-Based Application Development and Testing Services includes more detail about the report’s contents.

    Jim Damoulakis recommends Steering Clear of a Cloud Boondoggle in his Expert Advice story of 5/6/2009 for E-Commerce Times:

    The hype surrounding cloud computing seems to be reaching a peak. Enthusiasm and expectations are running hot. Companies must approach the concept with an open mind as well as a healthy measure of skepticism. The challenge that organizations attempting to adopt a cloud model must face is ensuring that the promised efficiencies and service benefits are actually realized.

    James Hamilton continues his datacenter cookbook with Next Point of Server Differentiation: Effiiciency at Very High Temprature of 5/5/2009.  James claims:

    High data center temperatures is the next frontier for server competition (see pages 16 through 22 of my Data Center Efficiency Best Practices talk: http://mvdirona.com/jrh/TalksAndPapers/JamesHamilton_Google2009.pdf and 32C (90F) in the Data Center). At higher temperatures the difference between good and sloppy mechanical designs are much more pronounced and need to be a purchasing criteria.

    Steve Martin announces Azure Developer Challenge – Judged by Om Malik and Michael Cote in this 5/4/2009 post:

    But before you head off to create your masterpiece, make sure you check out www.Newcloudapp.com for official rules, registration info, important deadlines and to learn what money, fame, and glory are in store for three creative developers J.

    Bill Rigby’s Microsoft's slow-moving cloud may overshadow rivals article for Reuters of 5/4/2009. Rigby writes:

    Next year Microsoft plans to roll out its Office suite of applications online, and by then its Azure cloud platform should be up and running, allowing third-party developers to design programs to run in Microsoft's cloud, expanding the range of tasks customers can do with it.

    Microsoft says hosting companies' systems in the cloud means they can charge more for services, while the customer ends up saving money on hardware, servers and IT support, potentially taking sales away from companies like IBM and Hewlett-Packard Co

    His article concentrates on the potential for “Office in the Cloud” to cannibalize on-premise sales, but concludes:

    [Amazon, Google, and Salesforce] have moved more aggressively into cloud computing -- the trend toward running software in remote data centers and accessing it over the Internet -- but do not have the power to capture Microsoft's most lucrative customers.

    Cloud Computing Events

    <Return to section navigation list> 

    Jeremy Geelan’s Cloud Computing Expo Europe 2009 in Prague: Themes & Topics post of 5/10/2009 reports:

    The overall conference theme of Cloud Computing Conference & Expo Europe, which will take place, May 18-19, 2009, in Prague, Czech Republic is "Deploying Cloud Computing in the Enterprise." Here we present a round-up of Themes & Topics that will be covered in the rich array of breakout sessions, General Sessions, and Power Panel dicussions at the 2-day event.

    Our organizing principle for the Prague event is that through our intensive schedule of keynotes, general and breakout sessions, attending delegates will be assured of leaving with abundant resources, ideas and examples they can apply immediately to leveraging the Cloud, helping them to maximize performance, minimize cost and improve the scalability of their Enterprise IT endeavors.

    The event is co-located with SYS-CON's Virtualization Conference Europe 2009.

    When: May 18 - 19, 2009 
    Where: Hilton Prague Hotel, Prague, Czech Republic

    Computer Sciences Corp. (CSC) announces a new Cloud Computing Domain with Doing Business in the Cloud as its first research project. The domain sponsored a 2008 Study Tour Report: The Consumerization of Enterprise IT – Choices and Risks in Moving to the Cloud and will host the Doing Business in the Cloud: What it Means for Cost, Agility, and Collaboration study tour on October 10 through 13 in San Francisco. CSC in the US and UK sponsors the Leading Edge Forum (see below.)

    The CSC Leading Edge Forum presents From the Boardroom to the Cloud - Are Business and IT Organized for the Future? which addresses these issues:

    While the technology industry often speculates about the Future of the IT Organization, today’s business leaders are much more focused on the best way to Organize IT for their firm’s Future. As information technology pervades virtually every aspect of the modern firm, and as an ever-more powerful Internet ‘cloud’ emerges, companies are rethinking the way that technology is deployed, used and managed across their organizations. This is especially true in today’s turbulent and unpredictable business climate.

    The conference includes the following cloud-directed presentations:

      • The Voice of the Boardroom: Perspectives on Cloud Computing and social media-based applications. How do they impact the business and the way it is run?
      • Choices and Risks in Moving to the Cloud

    Registration closes May 11, 2009

    When: May 18, 2009 
    Where: King's Place, 90 York Way, London N1 9AG, UK

    Forrester Research’s IT Forum 2009 will feature a Uncovering Value In The Cloud And On Your Desktop keynote by Chris Capossela, Senior Vice President, Information Worker Product Management Group, Microsoft Corp, and a Saving, Making, And Risking Cash With Cloud Computing Forrester Analyst Panel, as well as How Cloud Computing Can Drive Greater Data Center Efficiency and Determining The Cloud's Role In Your Email Architecture breakout sessions.

    When: May 19 to May 22, 2009 
    Where: The Palazzo Las Vegas, 3325 Las Vegas Blvd. South, Las Vegas

    • Reuven Cohen reports in a Federal Cloud Standards Summit (July 15th) post that he has been “invited to provide a keynote presentation at the upcoming Cloud Standards Summit July 15th in Washington:”

    Being held as part of the OMG Standards in Government & NGO's Workshop July 13-15, 2009, Arlington,Virginia. The goal of the Cloud Standards Summit is to initiate a dialogue with government IT leaders on the theme of "Coordinating Standardization Activities to Remove Government Cloud Computing Roadblocks". Potential government implementers of Cloud Computing will supply their feedback on key issues that could delay federal Cloud Computing deployments.

    Announcement: http://www.omg.org/news/meetings/GOV-WS/css/index.htm
    Draft Agenda: http://federalcloudcomputing.wik.is/July_15%2c_2009
    Wiki: http://federalcloudcomputing.wik.is

    When: July 15, 2009, 8:00 AM to 5:00 PM EDT 
    Where: Westin Arlington Gateway, Arlington, VA 

    • Dmitry Sotnikov lists My TechEd Sessions, which include Birds of a Feather (BOF), Ask the Experts and Case Study presentations, in his 5/7/2009 post:

      • Birds-of-a-Feather,”Going to the Cloud: Are We Crazy?” Dmitry Sotnikov, 4:30 p.m. Tuesday May 12, room 501A – this one is IT-oriented discussion of risks and benefits of putting your IT systems into the cloud.
      • PowerShell Ask the Experts Session, Dmitry Sotnikov and Kirk Munro, 12:30 p.m. Wednesday May 13, Quest booth 808 – this will actually be PowerShell – not cloud – oriented.
      • Birds-of-a-Feather, “Developing on Azure: Stories from the Trenches,” Dmitry Sotnikov, 6:45 p.m. May 14, room 502A. A developer-oriented discussion so everyone who is kicking the Azure tires can share there war stories and get advice.
      • “Case Study: Migrating Existing Client Applications to Windows Azure,” Dmitry Sotnikov, 2:45 p.m. May 15, room 515B – my main session of the show. I will talk about how Quest is using Windows Azure to turn its products into SaaS offerings.
      • Also, check out this session if you are interested specifically in Exchange Online and corresponding migration path: “Migration to Microsoft Online Services from Exchange and Non-Microsoft Platforms,” Quest’s Keith Ridings and Microsoft’s Erik Ashby, 4:30 p.m. May 14, room 403B.

    [Emphasis Dmitry’s.]

    • David Robinson’s What’s New in Microsoft SQL Data Services presentation at the Enterprise Developer and Solutions Conference in NYC lets you know what you can expect from SDS when the Azure team releases the first CTP of the upgraded v1. Dennis Gobo isn’t thrilled about the 10GB database size limit, inter alia.

    Red Hat announced on 4/23/2009 a virtual Open Source Cloud Computing Forum:

    The virtual event will provide time to discuss progress to date, issues and potential solutions and future directions. The event will be technically focused, with no marketing or product selling permitted.

    If you believe Red Hat won’t be promoting its products services, would you be interested in buying my bridge?

    When: July 22, 2009, Time not specified 
    Where: Internet (virtual conference)

    NYC Cloud Computing Group announces Microsoft Cloud 101 and Cloud Based Client/Server 2.0. Microsoft evangelist Bill Zack and Rabih Nassar, founder & CEO of apstrata/element^n, will present:

    [T]wo action packed presentations/discussions. Learn the basics of Microsoft's Cloud offerings, centered around the Azure Services Platform. You will walk away with a solid understanding of Microsoft's cloud integration approach and how you can easily integrate with these comprehensive services. Additionally, learn about an exciting new paradigm that empowers you to embrace the cloud framework to deliver rich client services based applications using Flex, Silverlight, Ajax and Web Services.

    When: May 20, 2009, 6:00 PM 
    Where: Gemini Systems LLC, 61 Broadway, New York, NY (212) 480-3960

    Doug Hauger, Azure’s Genera Manager, gave the keynote for Microsoft’s Enterprise Developer and Solutions Conference which covered the “cloud-computing landscape.” The keynote starts at about 07:30 into this hosted video segment.

    Here’s a “sample of enterprise corporations and partners will be presenting [Azure-related] topics such as:

    • Windows Azure Deep Dive
    • An IP based communication system using Microsoft Live Services
    • Federated Identity and Claims based authorization with Geneva Server and the Access Control Service
    • Healthcare in Cloud, Technology as an enabler for the Service Oriented Health Plan of the Future
    When: May 5 and 6, 2009, 9 AM to 5 PM 
    Where: Marriott Marquis, 1535 Broadway, New York New York 10036  

    Microsoft Tech*Ed 2009’s Session Catalog contains 20 Azure-related sessions and 7 Hands-On Labs. I’ve listed them because Network World’s @JohnFontana says, “The MS TechEd 2009 Web site, using it is like being dragged over 20 miles of broken glass.”

    Basics

    • ARC01-INT Architecting Your Web Application for the Cloud with Larry Clarkin and Wade Wegner
    • ARC204 An Overview of the Azure Services Platform with David Chappell
    • ARC311 Software As a Service in the Cloud with Michael Stiefel

    SQL Data Services (after mid-course correction to the RDBMS data model)

    • DAT202 What's New in Microsoft SQL Data Services with Rick Negrin
    • DAT203 Roles and Responsibilities Managing a Microsoft SQL Data Services Database with Rick Negrin and Zhongwei Wu
    • DAT316 Building Applications with Microsoft SQL Data Services and Windows Azure with Liam Cavanagh and David Robinson
    • DAT324 WiE: Building Location-Aware Services with Microsoft SQL Server with Ed Katibah and Olivier Meyer
    • PAN66 The New Face of Microsoft SQL Data Services with Nino Bice, Rick Negrin and Zhongwei Wu

    Specialized Presentations/.NET Services

    • DTL335 Model View Controller on Azure: Getting Development Done by Steve Smith
    • DTL404 Case Study: Migrating Existing Client Applications to Windows Azure by Dmitry Sotnikov
    • ISB206 What's Behind the Cloud: Microsoft's Data Center Transformation by Christian Belady
    • ISB209 Join the Cloud: Essential Tools for Microsoft Online Services (Solution Accelerators) by Robin Maher and Baldwin Ng
    • SIA306 Federated Collaboration Using Microsoft Office, SharePoint, Active Directory Rights Management Services, and Microsoft "Geneva" by Vijay Gajjala and Tariq Sharif
    • SIA314 Microsoft Code Name "Geneva" Identity Platform Overview by Caleb Baker, Stuart Kwan and Martin Raepple
    • SIA320 Securing the Cloud by Kai Axford
    • SOA01-INT Architecting Enterprise-Grade Cloud Applications by Eugenio Pace
    • SOA316 Programming Microsoft .NET Services by Aaron Skonnard
    • SOA319 Interconnect and Orchestrate Services and Applications with Microsoft .NET Services by Clemens Vasters
    • SOA401 Developing Service Oriented Workflows by Brian Noyes

    Hands-On Labs

    • AZP01-HOL Building Windows Azure Services with PHP
    • AZP02-HOL Getting Started with Windows Azure Storage
    • AZP03-HOL Using Windows Azure Tables
    • AZP04-HOL Building Windows Azure Services
    • AZP05-HOL Introduction to the Microsoft .NET Access Control Service
    • AZP06-HOL Introduction to the Microsoft .NET Service Bus
    • AZP07-HOL Introduction to the Microsoft .NET Workflow Service

    When: May 11-15, 2009
    Where: Los Angeles Convention Center

    Other Cloud Computing Platforms and Services

    <Return to section navigation list> 

    •• CloseUp Media reports DISA Awards Contract to Northrop Grumman and EyeIT for the SIMtone cloud computing platform in this 5/9/2009 post. According to the article:

    SIMtone's Universal Computing platform is a stateless and massively scalable intelligent network computing solution that allows users to securely access data and applications residing in any cloud from a broad array of endpoint devices. Through its patented technology, by placing intelligence in the network, SIMtone allows firewalls to be closed to inbound traffic so that data and applications remain secure in corporate data centers yet are globally accessible via any device on any broadband connection.

    What’s interesting about this item is that DISA = Defense Information Systems Agency.

    •• Rick Hodgin claims IBM announces WebSpan, the first Windows Azure alternative in this 5/9/2009 post:

    On Tuesday, IBM announced a new Cloud Computing hardware and software solution called WebSpan. Working jointly with another company called Hubspan, this SaaS (Software-as-a-Service) platform is the very heart of what cloud computing will become — and is basically another version of what Microsoft described with their Windows Azure operating system last October.

    Like Azure, WebSpan is designed for businesses to simplify the process of rolling out software and data systems, as well as coordinating data and services between them. And also like Azure, WebSpan is a fee-based service-oriented software environment which automatically scales up/down as real-world needs arise, allowing for the ongoing monthly service fee to be paid directly to IBM (or Microsoft) as their software and hardware are used, but without the up-front maximum capital investment in buying a server platform to support their busiest times. WebSpan (and Azure) will scale automatically, and their customer (the business using their service) will shell out more money the busier things get.

    Rick closes his story with a burst of paranoia that ends:

    In my opinion, Cloud Computing’s benefits are not worth the risks. Period. I mean seriously … do you want $100 billion companies controlling your data?

    •• Sam Dean’s Eucalyptus Systems Shares Details On its Open Source Cloud Plans post of 5/8/2009 to GigaOM’s OStatic site includes the following:

    Eucalyptus Systems will focus initially on providing Red Hat-like training and consulting services for the Eucalyptus platform, which (under a FreeBSD-style license) provides an infrastructure for cloud computing on clusters that duplicates the functionality of Amazon's EC2, using the Amazon command-line tools directly. Many companies are already using Eucalyptus as a platform to seamlessly manage their public cloud and on-premise cloud applications, reaping cost advantages over proprietary cloud players. We caught up with Eucalyptus Systems' CTO Rich Wolski, one of the founders of the project, to get details on the company's plans

    Jimmy Blake complains about a GMail outage in his Google Apps: Consumer SLAs for Enterprise Business post of 5/8/2009:

    Google mail was down again this morning, with POP3 and IMAP4 (the route used by most business users) completely unavailable and the Web interface described as ‘patchy’.

    This is the latest in a series of outages to hit Google, with an outage of several hours earlier this year in Feburary and another lasting a few hours in August 2008. …

    Deciding to compete only on price means that you can’t invest properly in infrastructure, or the people to run it.  When your core business is advertising, how much attention can you lavish on a sideline project especially when you’re laying off a third of your workforce?

    • WRAL.LocalTechWire reports Red Hat targets ‘cloud computing’ market, CEO says on 5/7/2009. The story quotes Jim Whitehurst:

    In a speech at the Software Summit in San Francisco this week, Whitehurst said the world’s top Linux developer and services provider is positioned to exploit the market because of its open source roots. … "Other than Microsoft. I find it hard to believe many clouds are running anything other than Linux," he added.

    Red Hat will host its own “Open Source Cloud Computing Forum,” on July 22. It will be a virtual conference. [Link added.]

    Amazon Web Services announced in a 5/7/2009 e-mail message to AWS developers:

    We're excited to let you know that we've added a new feature to Amazon CloudFront, AWS's easy-to-use, low-cost content delivery service: access logs. Access logs are activity records that show you details about every request delivered through Amazon CloudFront. We've heard that many customers wanted more information about how, when, where and to whom their content is being delivered, so we're happy to make this feature available starting today.

    Amazon also announced a LogAnalyzer for Amazon CloudFront that runs Amazon Elastic MapReduce:

    Using Amazon Elastic MapReduce and LogAnalyzer application you can generate usage reports containing total traffic volume, object popularity, a break down of traffic by client IPs and edge location. Reports are formatted as tab delimited text files, and delivered to the Amazon S3 bucket that you specify.

    A sample application also is available.

    David Linthicum reports IBM Taps Private Clouds to Change SOA on 5/6/2009 from the IBM Impact conference in Las Vegas:

    [I]t's clear that IBM is banking on cloud computing, but not the public cloud computing that we've been talking so much about lately. IBM is focusing on the private cloud as a jumping off point to public clouds. Why? For one thing, they are not in the public cloud business as of yet. The best play for IBM in the emerging world of cloud computing is to drive changes in conventional data centers by creating private clouds. 

    Obie Fernandez claims that Heroku's Provisionless Hosting for Rails Apps is Revolutionary in his 5/6/2009 InfoQ post. Obie says:

    In response to changing demand, Heroku’s intelligent infrastructure can launch additional, fully-independent dynos at new locations in the grid, or shut down existing idle ones. Startup time for a new dyno is less than 2 seconds, a fact that gives Heroku’s platform an unprecedented level of dynamism.

    Sounds like Azure’s approach to me.

    Paul Miller’s Talking with Kristof Kloeckner about IBM and the Cloud post of 5/6/2009 describes a podcast with IBM’s head cloud honcho:

    With an enterprise-friendly combination of hardware, software and professional services, IBM should be well placed to work with wary CxOs as they try to understand the extent to which Cloud Computing makes sense within their own business. Announcements earlier this year, as I said at the time, seemed geared toward building and sign-posting an easy on-ramp to the Cloud for those already comfortable with IBM and its products, but the indications were that IBM had bigger plans.