October 19, 2009

Beware of cloud computing consultants who focus on infrastructure

The rise of cloud computing has led to a lot of 'consultants' who care more about the simple relocation of systems than real architecture

Along with the rapid rise of cloud computing, an army of people with the phrase "cloud computing consultant" on their business cards has arrived. However, many of these individuals, while well intentioned, come from the infrastructure side and have a tendency to miss the core value of cloud computing. They disregard the potential for the cloud computing to better support the business, and instead view it simply as a change of platforms.

Let me be very clear: The movement toward cloud computing is an architectural issue, meaning that you have to take the whole business into account, understand all existing systems at a detail level, and only then begin to consider cloud computing options. Moreover, you need to think about how the systems are divided among on-premise and cloud-delivered platforms, the synergy of the architecture with the mission, and the future needs of the business.

[ Get the no-nonsense explanations and advice you need to take real advantage of cloud computing in the InfoWorld editors' 21-page Cloud Computing Deep Dive PDF special report, featuring an exclusive excerpt from David Linthicum's new book on cloud architecture. | Stay up on the cloud with InfoWorld's Cloud Computing Report newsletter. ]

However, many consultants approach cloud computing as an infrastructure-only issue. They don't consider the whole business, including mission and objectives, or core attributes of each system, new or old. For them, it's more about how you're moving and to where, not what you're moving and why. There is a huge difference.

So how do you know if the cloud computing consultants knocking on your door are more interested in infrastructure changes than architecture changes? I have a few ways to tell:

They mention Amazon.com or another popular cloud computing provider in the first meeting. They already have a solution in their back pocket, without understanding much about your business or the "as is" architecture. Again, they are looking at this as a platform change, not as an adjustment in architecture.

They don't seem to care about the core business. Business needs and context drive your IT strategy and implementation approach, including any architectural changes such as the movement to cloud computing. Without an understanding of the business, you can't support it using IT resources, clouds or no clouds.

They don't present core architectural artifacts. These artifacts include governance models, security models, performance models, process models, data models, and perhaps a service decomposition diagram or two. Instead, they present network topologies and Visio diagrams depicting physical systems. Those are fine for the infrastructure component of your cloud strategy, but by themselves they do not address data, governance, security, and so on. Thus, they lack the foundations to make any meaningful IT changes, including a migration to cloud computing platforms.

This story, "Beware of cloud computing consultants who focus on infrastructure," was originally published at InfoWorld.com. Follow the latest developments in cloud computing at InfoWorld.com.

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »
vkennedy 19-Oct-09 7:19am
What a breath of fresh air! The company I work for (Information Concepts) has been trying to get past the infrastructure discussion and to the architecture discussion since we adopted Cloud Computing as a viable solution set for our customers over a year ago. My boss, Wayne Beekman, has posted editorials and given interviews about the importance of the architecture aspect and how it will affect business as a whole, to little budging from our audience. It’s great to know that there are other people out there who are highlighting the importance of the architectural argument of Cloud Computing; not just making it a new means-to-an-end approach to infrastructure. Thanks for this article and please- keep beating this drum!!
markbsigler 21-Oct-09 11:48am

While it's fair to castigate consultants with pre-supposed solutions as fakirs, it is also often their clients that are forcing the focus of a cloud initiative to be on infrastructure, and perhaps with good intentions. The expense of an aging data center can be a catalyst to examine new models for how we resource and source technology. The better consultants, with executive support, can steer that discussion and focus on architecture, processes and governance to support services.

cassoryl 26-Oct-09 11:32am
I agree with the author on all his points below and he is spot on about this being an architectural decision not one made on infrastructure alone. For a successful cloud deployment I think it is architecture on two fronts. The first being the application’s architecture and the second being the partner’s. Most companies have the in house knowledge of how their applications function; however transitioning this application to the cloud without addressing integration, management and security will increase the risk to the business. Integration needs vary and are driven by staffing resources (and capabilities), Service Level Agreements (SLAs), application usage, and business patterns. Businesses should evaluate integration points around the partner’s SLAs, pre build operating systems, Application Programming Interfaces (APIs), load balancing, and geo diversity to name a few. System administrators need to transition from just monitoring the health of their machines to monitoring the health the partner’s cloud services as well. Marrying a short list of metrics from the systems side and the partner’s side will give administrators the full view of performance and “bang for their buck” as they evaluate the true cost of cloud computing for their application and their company. Security in the cloud is a topic in and of itself; however I think the biggest hurdle to overcome is the urge to forklift an application without examining its communication requirements and data sensitivity levels. Traditional 3 tier architectures (Web Services, Application and Database) may have unsecured communications between the layers. Moving some pieces of this architecture to the cloud and not all would increase the security threat to the company. You should address the communication in the architecture or move all three tiers to your cloud partner. Given the shared nature of the cloud, security managers should evaluate adoption of data at rest encryption (full disk, data, database etc). This can be done in the application architecture or by a 3rd party product. www.mevolutionblog.com

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2009 Infoworld, Inc.