August 10, 2009

The feds lay out their cloud computing requirements

A new RFQ pushes vendors on service levels and security, while insisting on VM portability and support for both Windows and Linux

The big news in the federal cloud computing market is that the General Services Administration has issued a request for quotation for cloud storage, Web hosting, and virtual machine services, according to an InformationWeek Government article. The RFQ is a preliminary step toward an online storefront for all federal agencies requesting cloud computing services. In essence, it's a single portal for finding and purchasing these services using prearranged agreements specific to the needs of the U.S. government.

"The RFQ includes ground rules for being a cloud service provider to the U.S. government. Federal agencies will retain ownership of data and applications hosted online, and they can request full copies of data or apps at any time. In addition, cloud services are to be multitenant in architecture, be able to be provisioned securely and remotely, scale elastically, reside within the continental United States, and provide visibility into resource usage," the article notes.

[ Stay up on the cloud with InfoWorld's Cloud Computing Report newsletter. | Confused by the cloud hype? Read InfoWorld's "What cloud computing really means" and watch our cloud computing InfoClipz. ]

According to the RFQ, cloud SLAs must provide at least 99.95 percent availability, and the cloud computing providers have to take steps to secure their services. Moreover, virtual machine services must allow live migration of workloads from one VM to another, and all Web hosting services must provide Windows and Linux options.

What's important about this RFQ is that the U.S. government is clearly getting behind cloud computing and, thus, is looking to provide a mechanism for validating and procuring cloud computing services for government agencies. Also, it validates cloud computing as a core direction for the U.S. government, which is looking to lower costs and increase effectiveness for its IT infrastructures. (Who isn't?)

The trick with all this is to create a strategy around the cloud computing services, or mechanisms and ways of adopting these services, by selecting the right architectural assets, such as storage, databases, application servers, and process servers, to place on cloud platforms. That requires some additional thinking and planning to make cloud computing work for the agencies. Those agencies that just purchase these services in hopes that some miracle will occur won't find the pot of gold at the end of the cloud computing rainbow -- indeed, perhaps the opposite.

"There's still confusion among government technology professionals about cloud computing. A recent MeriTalk survey found that 'IT managers do not share a common understanding of the technology.' Almost half say they are still learning about what cloud computing is and how it works, and predict that it will take two-and-a-half years to realize the benefits of cloud computing," the InformationWeek article notes.

The issue with cloud computing is that many of those being asked to use it do not have an understanding of exactly what they are dealing with. Many have operational responsibilities, and while cloud computing looks interesting, perhaps exciting, they don't have a clue as to how cloud computing works in the context of their existing architecture and future strategic needs. This problem is solved with some basic understanding and advanced planning. However, the right approach will differ from agency to agency, enterprise to enterprise.

additional resources
White Paper - How to Improve Delivery of Advanced Web Applications

White Paper

Virtual Workforce: The Key to Expanding The Business While Cutting Costs

Get the independent advice and expertise you need to support a virtual workforce.

Go inside:
The three-step approach to making a virtual workforce a reality.
The four flavors of client virtualization technologies.
The three key initiatives that solve IT challenges.
Download now »
White Paper: Successfully Secure Your Wireless LAN With Wi-Fi firewalls.

White Paper

Addressing Linux Threats Leveraging Fewer Resources

The increase in Linux popularity has increased the frequency and sophistication of malware attacks. Read this 2 page white paper now to learn how you can protect your Linux environment with real-time protection that is certified by all major Linux vendors.

Download now »
White Paper - The 2009 Handbook of Application Delivery

White Paper

The 2009 Handbook of Application Delivery

Ensuring acceptable application delivery will become even more difficult over the next few years. As a result, IT organizations need to ensure that the approach that they take to resolving the current application delivery challenges can scale to support the emerging challenges. This handbook elaborates on the key tasks associated with planning, optimization, management and control and provides decision criteria to help IT organizations choose appropriate solutions.

Download now »
White Paper - Is Your Backup System Outdated?

White Paper

Mid-range Storage Considerations

A common misconception is that mid-range storage requirements are dramatically different than that of a larger enterprise. Mid-range storage users may require less capacity, but they have similar functionality and management requirements. This ESG paper examines mid-range storage needs and reviews a new solution that adjusts size while retaining value, performance and functionality.

Download now »
Tragicomix 10-Aug-09 5:08pm
"The RFQ includes ground rules for being a cloud service provider to the U.S. government. Federal agencies will retain ownership of data and applications hosted online, and they can request full copies of data or apps at any time. In addition, cloud services are to be multitenant in architecture, be able to be provisioned securely and remotely, scale elastically, reside within the continental United States, and provide visibility into resource usage," What I think is those requirements outline important points and issues that the current cloud providers like to minimize and would like potential customers to ignore. To those requirements I would add a liability provision. I want to be able to establish accurately that a security breach has affected my data. If such a breach occurs, the cloud provider will have to pay a hefty fine. So which of the current clouds meet those requirements? And when (if ever) those requirements are met, will the cost savings be that compelling?

Sign up to receive Cloud Computing Resource Alerts

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2010 Infoworld, Inc.