disruptive weather conditions · © 2014 • powered by smpte® professional development academy...

© 2014 • Powered by SMPTE® Professional Development Academy • www.smpte.org

SMPTE Monthly Webcast: Clouds in the Forecast

1


Welcome!

Disruptive Weather Conditions: Clouds in the Forecast

4/17/2014 2Copyright © 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 22© 2014 • Powered by SMPTE® Professional Development Academy • www.smpte.org

SMPTE Educational Webcast Sponsors

• Thank you to our sponsors for their generous support of SMPTE and the SMPTE Professional Development Academy:

2



2


Very Special Thanks

• SMPTE wishes to thank Ustream for their generous support of efforts to bring full motion video to SMPTE’s monthly Educational Webcast series


Your HostJoel E. Welch

Director of Education

SMPTE

4



3


Today’s Guest Speaker

Richard WelshCo-founder and CEO

Sundog Media Toolkit Ltd

SMPTE International Governor

5


Cloud for media

• Defining “cloud”

• Architectures

• Practical use

• Challenges

• Where next?



4


Popular cloud


The genesis of cloud



5


The genesis of cloud


Basic Cloud ArchitectureCompute Store

Real layers

Virtualising Layers

Processing Units Storage Units

CORE CORE CORE CORE Block Block Block Block Block

Operating System

Application

File SystemServer Hypervisor Storage Hypervisor



6


Compute Architecture

Processing Units

Operating System

Application

Server Hypervisor

Processing Units

Operating System

Application

Server Hypervisor

Bare MetalSoftware

Operating System

Type 1 Type 2

App

OS

App

OS

CORE CORE CORE CORE

App

App

OS

App

OS

App

OS

CORE CORE CORE CORE


Resource

Request

=

n GHz

processing

Compute Architecture

Processing Units

ServerHypervisor

CORE

CORE CORE

CORE

Resource

Request

=

4 core

machineVirtualCore

VirtualCore

Virtiu

alC

ore

n GHz

Processing

Virtiu

alC

ore

Virtiu

alC

ore



7


Storage Architecture

ServerHypervisor

Resource

Request

=

n GB StorageBlock Block Block Block

Block Block Block Block



Files Storage Units

Object

Object

Object

Object

Object

Object

Object


Common Hypervisors

Bare Metaltype1

Softwaretype2

vSphere

Server



8


Storage Protocols

Object File SystemBlock

CIFS

iSCSI

NFS

Fibre Channel

GlusterFS

GFS

DFS

Swift

Atmos

API

RESTSOAP

HCP

Luster


Software Defined Network

Switches Host Control ProtocolNetwork

Disks / SSD Block/Object ControlStorage

CPU / GPU Hypervisor ControlCompute

Bits and Bytes Files and Applications

Co

-ord

inat

edC

on

tro

l

API

Bal

ance

dTr

affi

c

VirtualisationHardware



9


Public Private Hybrid

store

Internal Network

compute

Internet

PROFESSIONAL

(public/community)

PUBLIC

storecompute

PRIVATE

storecompute HYBRID

Facility


Hybrid

Facility Data CentreVPN

Private Network



10


Service Deployment

store

Facility Network

computecompute

computecomputecompute

computecomputecompute

store

Internet

PROFESSIONAL

PUBLICstore

Development

server

server

server


Provisioning Virtual Resource

Total data size (TB)

$ C

ost per

TB

/month

Total Compute Resource (Flops)

$ C

ost per

Flo

p

Much more complex pricing(CPU/GPU type, cache size, attached RAM)

Storage Compute

Simple pricing(Long Term/Short term/Faster/Slower)



11


Physical Security

store

Content Network

computestorecompute

Corporate NetworkInternetBrick wall

fire

wal

l

Content

User access

Access + proxy

Remote usersAuthentication firewall

Authentication

fire

wal

l

Facility


Data Security

store

Content Network

computestorecompute

Corporate Network

Brick wall

Content

User access

Access + proxy

Remote usersSQL

Injection

XSS

CSRF

Directory

Traversal

Cross Core

Listening

SQL

Injection

Facility



12


Security

store

Content Network

computestorecompute

Corporate NetworkInternetBrick wall

Content

User access

Access + proxy

Remote users

FacilityEncrypted OS

Machine segregation

Encrypted OS Encrypted storage

Encrypted storage

Dow

nlo

ad

Authenticated

Requests

Encrypted trafficAuthenticated

Requests

Authenticated

Requests

Loose Coupled UI

Loose Coupled UI

Multipoint AuthenticationMultipoint Authentication


Heartbleedx.509

SSL sessionSSL handshake

Data Packet

Heartbeat

Heartbeatstruct

{

HeartbeatMessageType type;uint16 payload_length;

opaque payload[HeartbeatMessage.payload_length];

opaque padding[padding_length];

} HeartbeatMessage;

Length Payload

struct ssl3_record_st

{

unsigned int length; /* How many bytes available */[...]

unsigned char *data; /* pointer to the record data */

[...]

} SSL3_RECORD;

65535 bytes 1 byte

Jackpot = X.509

Pay out

• Passwords

• Messages

• Juicy Data

L PData Packet

P

Over-run from sent payload byte

into victim’s process memory



13


Heartbleed

•OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable

•Released 1.0.1 on 14th of March 2012

•OpenSSL 1.0.1g is NOT vulnerable

•Released on 7th of April 2014

•OpenSSL 1.0.0 branch is NOT vulnerable

•OpenSSL 0.9.8 branch is NOT vulnerable


Applications

Shoot Manage Edit VFX Grade Master QC Deliver

Dailies

Asset management

Collaborative

Editing

Colour

Engine

VFX

RenderTranscode

Test & Measurement

Playout



14


Challenges


Dailies

Asset management

Collaborative

Editing

Colour

Engine

VFX

RenderTranscode

Test & Measurement

Playout

Bandwidth/

File Size Security

Single technical environmentContent Delivery

NetworksWorkflow continuity Application interoperability


Current Scenario


Dailies

Asset management

Editing VFX RenderTranscode

Test &

Measurement

Playout

Public Cloud XPublic Cloud X

Pro Cloud A

Public Cloud YColour Engine

Pro Cloud B



15


Future


Dailies

Asset management

Collaborative

Editing

Colour

Engine

VFX

RenderTranscode

Test & MeasurementDelivery

Control


Q & A

Joel E. Welch

Richard WelshCo-founder and CEO Sundog Media Toolkit Ltd



16


Very Special Thanks

• SMPTE wishes to thank Ustream for their generous support of efforts to bring full motion video to SMPTE’s monthly Educational Webcast series


SMPTE Educational Webcast Sponsors

• Thank you to our sponsors for their generous support of SMPTE and the SMPTE Professional Development Academy:

32

disruptive weather conditions · © 2014 • powered by smpte® professional development academy...

Documents