delivering ca workload automation from a saas platform

World®’16

DeliveringCAWorkloadAutomationFromaSaaSPlatformChrisElvin,CATechnologies,SeniorDirector– EngineeringServices

MFX136S

MAINFRAMEANDWORKLOADAUTOMATION

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation

3 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Abstract

WorkloadAutomationhastraditionallybeenviewedasadatacenterdisciplinewithon-premisehardwarewiththeattendantIToperationalprocessesandstaff.Thissessionaimstoshowhowboththeworkloadengines,andtheserverstowhichworkloadisscheduledcanbecloudbased.Itfurtherdemonstratesthatthesecuritymechanismsbuilt-intoCAWorkloadAutomationsolutionscanbeusedtoenablethesecureandsafeschedulingofworkloadtomultiple“tenants”sharingasingleworkloadinstance.

ChristopherElvinCATechnologiesSeniorDirector- EngineeringServices

4 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Agenda

SAASANDWORKLOADAUTOMATION

WORKLOADAUTOMATIONSAASMODELS

CONCLUSIONS

NETWORKCONSIDERATIONS

MULTIPLETENANTS

ONDEMANDCONSIDERATIONS

1

2

3

4

5

6

5 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

SaaSandWorkloadAutomationReachfortheClouds

6 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

SaaSandWorkloadAutomation

§ Insimpleterms,SaaS=Outsourcing

§ Typicalfeaturesforconsumers– Consumptionbasedpricing– Subscriptionmodel– Externallyhosted(webbased)

§ Typicalfeaturesforproviders– Multi-tenant– Scalable

ReachfortheClouds

7 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

SaaSandWorkloadAutomationAligningWLAwithCloudPrinciples

§ Consumptionbasedpricing

§ Subscriptionmodel– Commercial,nottechnical

§ Scalable– Yes

§ Multi-tenant– Tomostintents/purposes– Workloadconsumers

§ Web-based– Yes

§ Externallyhosted– Hereismainchallenge

8 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

OnPrem

ise

Internet/Cloud

WorkloadAutomationSaaSModelsTraditionalWorkloadAutomation

WorkloadManager

Workload

9 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadAutomationSaaSModelsWorkloadAutomationOutsourcing

OnPrem

ise

Internet/Cloud

WorkloadManager

10 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadAutomationSaaSModelsWorkloadAutomationOutsourcing

OnPrem

ise

Internet/Cloud

WorkloadManager

11 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadAutomationSaaSModelsWorkloadintheCloud

OnPrem

ise

Internet/Cloud

WorkloadManager

12 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadAutomationSaaSModelsMovingtheManagerto“TheCloud”

OnPrem

ise

Internet/Cloud

WorkloadManager

13 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

NetworkConsiderationsAchievingConnectivity

OnPrem

ise

Internet/Cloud

WorkloadManager WebTraffic

VPN

14 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadManager

MultipleTenantsOperationalandNetworkSecurity

OnPrem

ise

Internet/Cloud CustomerA

CustomerBCustomerC

!!!!!!!

15 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

TheLightbulbMomentRedesigntheVPN

16 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadManager

IntroducingOpenVPNOpenSource,HighlyConfigurable

OnPrem

ise

Internet/Cloud CustomerA

CustomerBCustomerC

17 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

OpenVPNConfigurationOtherVPNsareAvailable

§ SSLtunnel(443/tcp)– Encrypted– Workswithproxies,NATetc

§ Point-Pointconnectivity– Notraffic“leakage”

§ PKIsecurity– Strongauthentication

§ PortMUX– Canshareport443withthe

workloadwebGUI

§ EachworkloadclienthasitsownVPNIPaddress– Avoidsnamingconflicts

betweencustomers

18 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadManager

IntroducingOpenVPNOpenSource,HighlyConfigurable

OnPrem

ise

Internet/Cloud CustomerA

CustomerBCustomerC

19 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

DeploymentConsiderations

§ VPNhostnames– Unique– Strongnamingstandards

§ IPaddressoverlap– Usemultipleinstance

ofOpenVPN– Differentportsand/orIPs

§ Strongnamingconventions– Separates“tenants”– Leveragesstrong

securitymodel

§ Resilienceandfailover– VPNlevel– WLAlevel

20 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadintheCloud

§ Conceptuallynodifferentto“vanilla”workload– CloudprovidergivesstaticIP/Hostname– UseOpenVPNtoprovidestaticIP/Hostname

§ Nodeoffline/online– Ifoffline,spinupbeforestartingjobs/workflows– Aftercompletiondowespindown?

OnDemandConsiderations

21 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WorkloadintheCloud

§ CAProcessAutomation(formerlyITProcessAutomation)– PowerPackforCAWorkloadAutomationAE– Cloud

§ Selfservice

§ Machinesallocateddynamicallyincloud– Deletedonceworkloadiscomplete– Cleanupafterexceptions

TrulyDynamicPlacement

22 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

TheMarketOpportunity

§ Betterleveragecloudresources– Dynamicplacement– Spinupandteardown

§ BetterservestheSMEmarketplace– Serviceprovideropportunity– Catersforsmallerenvironments

23 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Questions?

24 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Thankyou

Stayconnectedatcommunities.ca.com

@CAWORLD#CAWORLD ©2016CA.AllRIGHTSRESERVED.25 @CAWORLD#CAWORLD

MainframeandWorkloadAutomation

FormoreinformationonMainframeandWorkloadAutomation,pleasevisit:http://cainc.to/9GQ2JI