{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":5},"content":[{"type":"text","text":"導讀問題："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"1、SaaS,PaaS,IaaS分別指什麼？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2、作爲一個leader如何進行合適的雲計算服務模式設計？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"3、傳統和雲計算服務的優勢和劣勢？如果是你來負責技術團隊，應該如何決策？"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"一、技術leader的抉擇"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 一個獵頭挖你到一家公司作爲技術leader，或者你是初創團隊的CTO/技術總監。可能會面臨的如下問題："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"1、是有着衆多賽道的選手產品作爲竟品，你如何能夠快速的支撐業務變化需求和專注於你的產品設計和業務？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2、你的公司沒有那麼多資金投入，挖不到很多專業人才，只能給你配備外包團隊人員臨時支持。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"3、你的公司沒有那麼多支持，需要你一個人想辦法在資金和人力有限的情況下，先run起來項目。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 這個時候的你可能會可能如下圖片：你會懷念原來的團隊，和原來的公司基礎設施，以及自己遊刃有餘的工作場景，但是面對現在高額的薪酬，卻無法解決問題的能力而焦頭爛額。"}]},{"type":"image","attrs":{"src":"https://static001.geekbang.org/infoq/60/6064e608e9bc69e639d61961edf46fa0.jpeg","alt":"表情包丨我什麼都沒有我只有雙下巴-看點快報","title":null,"style":null,"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"自研"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 1、業務方案：調研現在業界的流行框架，適配業務的方案，可能會遇到的困難點，以及根據業務需求，畫出原型，畫出領域模型，進行數據建模，進行系統概要設計，詳細設計，不斷勾勒和交流業務領域專家，達到目標一致。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 2、人力安排：另外一方面可能招聘相關技術人員，產品人員，設計人員，測試人員，運維人員，運營人員等來協助。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 3、硬件支持： 其他方面可能購買服務器等硬件資源。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 一切就緒，跟着原型和系統詳細設計進行開發，並交付給領導或者最終用戶。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"外採"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 比如阿里的第一版淘寶一個月完成了上線，很多其他公司產品也是，對於一個核心技術不能掌握，以及自己的業務模式不知道是否正確的情況下，最快的方式便是兼併或者收購，或者外採。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"託管"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 說起託管，大家都瞭解的github代碼託管倉庫。其實雲服務也是一種託管，比如阿里雲，騰訊雲，亞馬遜雲等。我們可以通過按需付費，不花冤枉錢，直接通過阿里雲購買服務器，域名解析器，負載均衡器，數據庫，以及享受專業團隊的技術支持和解決方案的共享。另外對於團隊，只需要關注自己的業務應用系統如何設計更好的滿足用戶需求就可以了。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"所以這裏我們能夠看到的是如果說在團隊初期，我們開始搭建團隊並開始項目旅程的時候，應該是外採-》託管-》自研的這個過程會比較合適。那麼我們接下來重點說明下雲服務下的託管決策。"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"二、雲服務的選擇"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"雲服務模式"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"SaaS全稱爲Software-as-a-service， 軟件解決方案（Saas），意思是“軟件即服務”。 在業內，SaaS被 稱爲軟件運營或簡稱軟營。 SaaS是一種基於互聯網提供軟件服務的應用模式。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"PaaS 全稱是 Platform as a Service ，中文含義是 平臺即服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"IaaS 全稱是 Infrastructure as a Service ，中文含義是 基礎設施即服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 也許對於上面你可能會有一種疑問，似懂非懂的感覺。我們可以看下如下的一張圖："}]},{"type":"image","attrs":{"src":"https://static001.geekbang.org/infoq/ae/ae03a08c669d2f7d58c20ed51a7b99df.png","alt":null,"title":null,"style":null,"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"基礎設施，比如數據中心，磁盤存儲，網絡，服務器，防火牆，負載均衡等等就是阿里雲，亞馬遜雲服務廠商提供出的IAAS服務產品。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 操作系統，編程語言SDK，應用服務器，中間件MQ,Redis，數據庫MySQL等，則是這些服務廠商提供出的PAAS服務產品。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 認證，登陸授權，用戶界面，控制面板，管理，事務控制則是這些服務廠商提供出的SAAS服務產品。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"現在的你是否有一絲瞭解了呢？"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 這裏的雲計算服務的特徵必須滿足如下要求： "}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"網絡接入"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"彈性"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"資源池化"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"可計量服務"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"按需自服務"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"總的一句話概括就是，按需付費，我的業務發展好，數據量上來了你可以給我彈性擴容，我的業務不好，你可以給我彈性縮容，計費方式根據我使用情況來計算。比如新浪微博的熱點一旦掛掉，就需要趕緊和阿里雲申請擴容。之前的釘釘由於疫情在線直播的數據量導致的系統不穩定，無法扛住流量，也是緊急和阿里雲申請機器擴容。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"雲服務的部署模式"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有云，一種多租戶環境，最終用戶與其他消費者一起，在一個共享的商業資源網絡上爲自己所使用的資源付費。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"好處："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公用事業價格：最終用戶只爲所消費的資源付費。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"彈性：彈性擴容"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"核心競爭力：管理基礎設施的專業團隊"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"缺點："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"控制：最終用戶依靠公有云提供商履行他們在性能和正常運行時間方面的服務等級協議SLA。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"監管問題：國家專門的機構進行監管"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"有限的配置：通用的配置並未私人特製化"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"那麼既然根據好處和缺點，我們便能夠決策出，涉及到的隱私數據，我們應該部署到私有云，而普通的數據可以部署公有云。"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"三、我們是否需要雲架構解決方案"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"業務架構要解決什麼"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對接觸點和業務功能要有很深的瞭解，可以畫一張業務架構示意圖來開始，來嘗試問如下的問題："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"業務領域專家背後的邏輯是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"用戶真正的需求、痛點是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"要試着解決什麼問題？商業驅動力是什麼？價值是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"我們的用戶是人還是系統？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"功能性需求和非功能性需求是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲服務消費地和數據的存儲地有關的法律是否允許？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲服務能通過哪些設備和接觸點進行訪問？現在的用戶通過多種渠道消費數據是否能夠支持？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"我們最終的可量化的目標基準值是什麼？"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"這裏的每一項內容都決定了，是否你的雲服務模式適合你當前的場景，你的上雲之路是否是正確道路。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"除了上述內容之外，你還需要對當前現狀有個充分了解，例如如下的因素也應該是你作爲技術leader應該考慮的方向："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"1、對於雲服務是否是過於自滿而忽略了一些落地場景"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2、未能創建有力的指導聯盟，導致其他人員不認可和不配合"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"3、低估願景的重要性，只考慮當下，未來的內容不考慮"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"4、未對願景進行充分溝通，大家沒有拉齊認知"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"5、放任障礙阻撓變革，爲之後留下禍根"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"6、未能產生快速成果，效果可能並不明顯"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"7、過早宣佈成功，樂觀的忽略了雲服務的劣勢帶來的影響"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"8、變革未能紮根企業文化，企業文化未能正確普及，導致後期變革乏力"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如果上述我們的顧慮都已經考慮完畢，並且已經通曬全員達成相同認知，那麼就要選擇合適的雲服務模式了。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"抉擇合適的雲服務模式"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲服務模式的可行性考慮因素："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"技術：性能，擴展性，安全性，監管，業務可持續性，災難恢復等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"財務：對於預算和採購等預估"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"戰略：方案加速上市，決策者選用Saas或者Paas而非Iaas的可能性越大"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"組織：根據團隊技術能力來判斷選擇何種模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"風險：公司承擔多大風險，方案多久能交工運行，安全漏洞會造成多大的損害"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"何時選擇SAAS服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"最常見的是CRM、ERP、審計、人力資源和工資單等企業業務應用，這些軟件已經有成熟的業界解決方案，我們並不需要再自己研究一套。另外對於如下的服務應用也可以考慮："}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"IT基礎設施類：安全，監控，日誌記錄，測試等"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據類：商業智能，數據庫即服務，數據可視化，儀表盤，數據挖掘等"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"效率工具類：協作工具，開發工具，調研。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"何時選擇PAAS服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據庫，中間件，操作系統等要求的如下因素多語言支持SDK，安全補丁，日誌，監控，彈性擴展，故障轉移，災難恢復等，都應該由供應商負責，我們可以直接選擇雲廠商的產品。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"何時選擇IAAS服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如果對於要求開發管理內存，配置數據庫，應用服務器，最大化吞吐量，明確數據如何在磁盤之前分佈和操作系統有個自己的把控能力的團隊可以不考慮了，如果說對於這些沒有人力和能力來把控，則可以交給服務廠商。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"四、上雲服務的關心因素"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"審計"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 審計的核心是保護公司和客戶的數據安全，這裏會經常有人說雲中的數據不安全。數據在哪裏都會面臨網絡威脅，我們不應該關注雲中數據安全不安全問題，應該專注哪些有關審計，法律合規，客戶需求以及風險等真正的問題和約束。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 在我們項目開發初期就應該考慮審計需求比如消費者的成熟度。另外對有關安全，日誌，監控，SLA管理，災難恢復和其他合規雲服務的關鍵組件進行策略設計。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"數據"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 數據首先需要區分是否是隱私需要保護的數據，如果是的話，我們需要利用開源的OpenStack來搭建自己的私有云，而對於非需要保護的數據，我們可以直接使用公有云來提供服務。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 在對雲服務進行選擇的時候，數據因素的考察也決定了你選擇哪個廠商，具體的因素可以參考如下幾點："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"物理特性：數據的容量、數據是否敏感、數據增量/全量、數據所有權"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"性能要求：實時、近實時、延時"}]}]}]},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"使用緩存層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"減少數據集大小"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"將數據庫區分爲只讀節點和只寫節點"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"將數據進行切片，分成特定客戶切片，特定時間切片，特定區域切片"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對陳舊數據歸檔，降低表的大小"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對數據集非規範化處理"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"易變性：數據變化的頻率，靜態數據集和動態數據集"}]}]}]},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"靜態數據集：事件驅動的數據，按時間順序發生。比如Web日誌，事務和收集數據。一次寫入和多次讀取"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"動態數據集：RDMS關係型數據庫解決通過ACID事務"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"容量：容量預估和備份策略"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"監管要求：加密"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事務邊界：性能邊界"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"保存期限：數據必須保存的期限"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"除上述因素外，還需要考慮所有的數據需求都會對如何存儲底層數據造成決策影響，比如數據是否需要隔離，以及數據存儲格式："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"多租戶還是單租戶"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"使用何種數據存儲格式：SQL、NoSQL、文件等。"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"多租戶還是單租戶"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"多租戶分爲完全隔離和數據隔離。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"完全隔離："}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"優點：提供獨立性，隱私，高擴展性"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"缺點：費用最高，複用性最低，最複雜。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據隔離："}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"優點：成本效率最高，複雜度最低，複用性最高"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"缺點：缺乏獨立性，性能最低，擴展性最差"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如何選擇，根據流量的大小來抉擇，如果流量大則完全隔離，如果流量小則數據隔離。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"選擇數據存儲類型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"聯機事物處理OLTP行爲。"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"鍵值存儲：Redis，Voldemort，DynamoDB：海量數據寫入"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"列存儲：Hadoop和Cassandra：允許出現空缺行值，擴展性好，不適合高度連接數據源"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"文檔存儲：MongoDB,CouchDB：處理不同格式的文檔，比如數據庫日誌，Web服務器日誌，應用服務器日誌等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"圖像數據庫：比如Neo4j和InfoGrid：繪圖方面有優勢，其他一般"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"其他存儲：比如內容分發CDN是流媒體和其他帶寬密集數據的選擇工具"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"安全"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 安全程度的評測"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"目標的行業"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"客戶期望"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"所存儲數據的敏感性"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"風險承受能力"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"產品成熟度"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"傳輸邊界：數據發出和接收的端點如何定義"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 需要根據自己的用戶人羣以及自己的數據和產品成熟度，公司業務和風險承受能力來進行綜合衡量。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" PAAS的不同模式部署"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有託管模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有代管部署模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有非代管部署模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"私有託管模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"私有代管部署模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"私有非代管部署模式"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 安全應該關注的方向"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"集中化：根據角色劃分，貨倉入口，購物入口，車輛入口來集中化的管理入口保證安全"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"標準化：例如採用公認的OAuth和OpenID"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"自動化：可以參考《鳳凰實驗》書描述的案例"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 焦點領域的關注"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"保護：安全控制，策略和流程"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"檢測：挖掘日誌，觸發事件和主動找出系統內安全漏洞的過程"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"預防：用什麼行動來防止進一步的損害，你的入侵預防措施在哪裏？"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 安全控制的策略問題"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"策略實施：規則與應用解藕，可配置能力，自動化"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"加密：靜態存放指的數據存儲的位置，通常數據存儲在數據庫中，有時候以文件的形式存放文件系統中。IP地址，服務器名稱，密碼，密鑰。可以將所有需要加密的數據統一管理。設計時候考慮簡潔和性能，加解密耗費性能影響。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"密鑰管理：公私密鑰對，公鑰保護的任何對象，只能私鑰解密。不以明文存儲，不再代碼直接引用，密鑰應用集中管理。密鑰應該放在被隔離和保護的環境裏，訪問受限，有備份和恢復措施，並且完全可審計。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"網頁安全：注入SQL，劫持用戶會話。對於系統定期掃描提高應用的安全等級"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"API管理：API支持OAuth和OpenID，如果存在不能使用上述的場景，那麼使用通過SSL進行的基本認證。避免會話和會話狀態來避免會話劫持的發生。另外一種方案：處理每一個請求時候重置認證。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"補丁管理：自動化方式進行，至少每30天創建並生成一個包含所有最新和最重要的安全補丁，實現部署過程的自動化"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"日誌：所有系統記錄的採集。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"監控：系統健康程度和活動發生的信息，實時活動和挖掘日誌文件"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"審計：覈查安全流程和控制來確保系統符合所要求的法規控制以及滿足系統安全要求與SLA過程。"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"監控"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 明確自己關注的監控點"}]},{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 比如我們通常關心的 RT響應時間，運行時間。頁面加載時間，網絡性能，應用程序接口性能等。線程，緩存，內存和CPU利用率，每秒請求數RPS，磁盤空間容量，以及CPU和內存利用率，訪問數量PV，UV，新用戶數，單用戶成本，以及其他業務相關指標。"}]},{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應該監控的類別："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"性能"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"吞吐率"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"質量"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"關鍵性能指標KPI"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"安全"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"合規"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 監控在雲堆棧的不同層進行："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"用戶層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應用層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應用堆棧層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"基礎設施層"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 不同的領域監控"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲供應商環境"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲應用環境"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"用戶體驗"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"SLA"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 定義參考的因素來源於不同的服務，不同的客戶人羣，不同的業務。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"不同的服務，客戶，業務對於SLA類型也不同常用的如下："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應用/服務的整體運行時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"頁面加載時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事務處理時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"API響應時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"報告響應時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事件解決事件"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事件通報事件"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"消費方和企業雲服務廠商的要求："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"安全和隱私保障"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公開的突發事件響應計劃"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"網頁漏洞掃描和報告"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"已發佈的災難恢復計劃"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"安全港協議"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據所有權聲明"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"備份和恢復處理文檔"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"源代碼託管"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對於供應商的直接SLA服務要求：正常的運行時間SLA介乎99.9%～100%"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"災難恢復"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 明確什麼是故障時間成本"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"恢復時間目標RTO或者業務要求服務恢復運行所需要的時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"恢復點目標RPO或者數據損失在可忍受範圍內的時間數"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"價值，災難恢復的價值，比如銀行數據系統資金系統等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"服務的關鍵程度，比如醫院醫療設備等"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"我們根據故障時間成本來制定不同的雲服務的恢復計劃。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"IaaS的災難恢復如何規劃"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"舉個例子：亞馬遜分爲地區和可用區域概念：地區坐落全球範圍，區域是地區之內的獨立的虛擬數據中心。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"爲了不避免系統失效，通常會跨區域冗餘部署。跨地區冗餘部署，或者混合雲部署。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"所以爲了避免系統故障而可以採用這兩種方式來進行處理。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"主要數據中心的災難恢復"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 從數據中心防備主數據中心發生災難的恢復方法："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"經典的備份和恢復方法：每日進行完整備份和增量備份，爲了特別的安全還可以備份"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"冗餘數據中心-單活冷備：冷備平時並不運行和啓動，出現緊急問題根據腳本進行執行。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"冗餘數據中心-單活溫備：熱備意味着數據庫服務器時刻運行並始終與主數據中心保持同步。而其他服務器依然冷備，這樣可以減緩災難恢復時間。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"冗餘數據中心-雙活熱備：雙活都在運行，一個數據中心發生故障不會造成任何的影響。 "}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"PaaS的災難恢復策略"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 最好的方式是公有云和私有云都有部署，方便自己把控私有云，出了問題以後不需要一直等待其他人的修復。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"SaaS的災難恢復策略"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 數據進行定時歸檔，並定期計劃性的抽取數據"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"混合雲的災難恢復策略"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"混合IaaS（專有）：專有的公有云提供商"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"混合IaaS（開源）：OpenStack的使用"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"混合PaaS：私有PaaS實現公有和私有云之間的故障轉移"}]}]}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"五、上雲服務的未來"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 當應用全部部署雲服務以後，後續團隊就需要更加關注業務需求和設計以及用戶體驗，從而給用戶帶來更好的價值和使用感受。那麼未來的演化方式就會變成逐步的PAAS平臺即服務，提供不同的服務平臺化的能力來幫助你更好的專注的關心自己的產品或者系統。"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"小結 "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"5W1H的重要性，應該在雲服務模式抉擇中深度思考,進而能夠更好的抉擇雲服務設計架構。"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"原因(Why)：我們在試着解決什麼問題？業務目標和驅動力是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"何人(Who)：誰需要這些問題得以解決？內部/外部參與者都有誰？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"什麼(What)：業務和技術需求都是什麼？有哪些法律和法規的約束，風險是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"何地(Where)：將在哪裏提供服務，有沒有特定的需求，法律，稅收，可用性問題，語言等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"何時(When)：服務需要什麼時間提供，預算是多少，與其他方案有沒有關聯。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如何(How)：組織如何交付這些服務？組織、體系架構和客戶是否都做好了準備？"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]}
架構設計篇之雲計算服務設計與決策
{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":5},"content":[{"type":"text","text":"導讀問題："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"1、SaaS,PaaS,IaaS分別指什麼？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2、作爲一個leader如何進行合適的雲計算服務模式設計？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"3、傳統和雲計算服務的優勢和劣勢？如果是你來負責技術團隊，應該如何決策？"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"一、技術leader的抉擇"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 一個獵頭挖你到一家公司作爲技術leader，或者你是初創團隊的CTO/技術總監。可能會面臨的如下問題："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"1、是有着衆多賽道的選手產品作爲竟品，你如何能夠快速的支撐業務變化需求和專注於你的產品設計和業務？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2、你的公司沒有那麼多資金投入，挖不到很多專業人才，只能給你配備外包團隊人員臨時支持。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"3、你的公司沒有那麼多支持，需要你一個人想辦法在資金和人力有限的情況下，先run起來項目。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 這個時候的你可能會可能如下圖片：你會懷念原來的團隊，和原來的公司基礎設施，以及自己遊刃有餘的工作場景，但是面對現在高額的薪酬，卻無法解決問題的能力而焦頭爛額。"}]},{"type":"image","attrs":{"src":"https://static001.geekbang.org/infoq/60/6064e608e9bc69e639d61961edf46fa0.jpeg","alt":"表情包丨我什麼都沒有我只有雙下巴-看點快報","title":null,"style":null,"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"自研"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 1、業務方案：調研現在業界的流行框架，適配業務的方案，可能會遇到的困難點，以及根據業務需求，畫出原型，畫出領域模型，進行數據建模，進行系統概要設計，詳細設計，不斷勾勒和交流業務領域專家，達到目標一致。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 2、人力安排：另外一方面可能招聘相關技術人員，產品人員，設計人員，測試人員，運維人員，運營人員等來協助。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 3、硬件支持： 其他方面可能購買服務器等硬件資源。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 一切就緒，跟着原型和系統詳細設計進行開發，並交付給領導或者最終用戶。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"外採"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 比如阿里的第一版淘寶一個月完成了上線，很多其他公司產品也是，對於一個核心技術不能掌握，以及自己的業務模式不知道是否正確的情況下，最快的方式便是兼併或者收購，或者外採。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"託管"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 說起託管，大家都瞭解的github代碼託管倉庫。其實雲服務也是一種託管，比如阿里雲，騰訊雲，亞馬遜雲等。我們可以通過按需付費，不花冤枉錢，直接通過阿里雲購買服務器，域名解析器，負載均衡器，數據庫，以及享受專業團隊的技術支持和解決方案的共享。另外對於團隊，只需要關注自己的業務應用系統如何設計更好的滿足用戶需求就可以了。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"所以這裏我們能夠看到的是如果說在團隊初期，我們開始搭建團隊並開始項目旅程的時候，應該是外採-》託管-》自研的這個過程會比較合適。那麼我們接下來重點說明下雲服務下的託管決策。"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"二、雲服務的選擇"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"雲服務模式"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"SaaS全稱爲Software-as-a-service， 軟件解決方案（Saas），意思是“軟件即服務”。 在業內，SaaS被 稱爲軟件運營或簡稱軟營。 SaaS是一種基於互聯網提供軟件服務的應用模式。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"PaaS 全稱是 Platform as a Service ，中文含義是 平臺即服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"IaaS 全稱是 Infrastructure as a Service ，中文含義是 基礎設施即服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 也許對於上面你可能會有一種疑問，似懂非懂的感覺。我們可以看下如下的一張圖："}]},{"type":"image","attrs":{"src":"https://static001.geekbang.org/infoq/ae/ae03a08c669d2f7d58c20ed51a7b99df.png","alt":null,"title":null,"style":null,"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"基礎設施，比如數據中心，磁盤存儲，網絡，服務器，防火牆，負載均衡等等就是阿里雲，亞馬遜雲服務廠商提供出的IAAS服務產品。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 操作系統，編程語言SDK，應用服務器，中間件MQ,Redis，數據庫MySQL等，則是這些服務廠商提供出的PAAS服務產品。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 認證，登陸授權，用戶界面，控制面板，管理，事務控制則是這些服務廠商提供出的SAAS服務產品。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"現在的你是否有一絲瞭解了呢？"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 這裏的雲計算服務的特徵必須滿足如下要求： "}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"網絡接入"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"彈性"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"資源池化"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"可計量服務"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"按需自服務"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"總的一句話概括就是，按需付費，我的業務發展好，數據量上來了你可以給我彈性擴容，我的業務不好，你可以給我彈性縮容，計費方式根據我使用情況來計算。比如新浪微博的熱點一旦掛掉，就需要趕緊和阿里雲申請擴容。之前的釘釘由於疫情在線直播的數據量導致的系統不穩定，無法扛住流量，也是緊急和阿里雲申請機器擴容。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"雲服務的部署模式"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有云，一種多租戶環境，最終用戶與其他消費者一起，在一個共享的商業資源網絡上爲自己所使用的資源付費。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"好處："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公用事業價格：最終用戶只爲所消費的資源付費。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"彈性：彈性擴容"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"核心競爭力：管理基礎設施的專業團隊"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"缺點："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"控制：最終用戶依靠公有云提供商履行他們在性能和正常運行時間方面的服務等級協議SLA。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"監管問題：國家專門的機構進行監管"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"有限的配置：通用的配置並未私人特製化"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"那麼既然根據好處和缺點，我們便能夠決策出，涉及到的隱私數據，我們應該部署到私有云，而普通的數據可以部署公有云。"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"三、我們是否需要雲架構解決方案"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"業務架構要解決什麼"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對接觸點和業務功能要有很深的瞭解，可以畫一張業務架構示意圖來開始，來嘗試問如下的問題："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"業務領域專家背後的邏輯是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"用戶真正的需求、痛點是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"要試着解決什麼問題？商業驅動力是什麼？價值是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"我們的用戶是人還是系統？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"功能性需求和非功能性需求是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲服務消費地和數據的存儲地有關的法律是否允許？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲服務能通過哪些設備和接觸點進行訪問？現在的用戶通過多種渠道消費數據是否能夠支持？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"我們最終的可量化的目標基準值是什麼？"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"這裏的每一項內容都決定了，是否你的雲服務模式適合你當前的場景，你的上雲之路是否是正確道路。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"除了上述內容之外，你還需要對當前現狀有個充分了解，例如如下的因素也應該是你作爲技術leader應該考慮的方向："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"1、對於雲服務是否是過於自滿而忽略了一些落地場景"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2、未能創建有力的指導聯盟，導致其他人員不認可和不配合"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"3、低估願景的重要性，只考慮當下，未來的內容不考慮"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"4、未對願景進行充分溝通，大家沒有拉齊認知"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"5、放任障礙阻撓變革，爲之後留下禍根"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"6、未能產生快速成果，效果可能並不明顯"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"7、過早宣佈成功，樂觀的忽略了雲服務的劣勢帶來的影響"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"8、變革未能紮根企業文化，企業文化未能正確普及，導致後期變革乏力"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如果上述我們的顧慮都已經考慮完畢，並且已經通曬全員達成相同認知，那麼就要選擇合適的雲服務模式了。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"抉擇合適的雲服務模式"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲服務模式的可行性考慮因素："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"技術：性能，擴展性，安全性，監管，業務可持續性，災難恢復等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"財務：對於預算和採購等預估"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"戰略：方案加速上市，決策者選用Saas或者Paas而非Iaas的可能性越大"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"組織：根據團隊技術能力來判斷選擇何種模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"風險：公司承擔多大風險，方案多久能交工運行，安全漏洞會造成多大的損害"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"何時選擇SAAS服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"最常見的是CRM、ERP、審計、人力資源和工資單等企業業務應用，這些軟件已經有成熟的業界解決方案，我們並不需要再自己研究一套。另外對於如下的服務應用也可以考慮："}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"IT基礎設施類：安全，監控，日誌記錄，測試等"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據類：商業智能，數據庫即服務，數據可視化，儀表盤，數據挖掘等"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"效率工具類：協作工具，開發工具，調研。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"何時選擇PAAS服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據庫，中間件，操作系統等要求的如下因素多語言支持SDK，安全補丁，日誌，監控，彈性擴展，故障轉移，災難恢復等，都應該由供應商負責，我們可以直接選擇雲廠商的產品。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"何時選擇IAAS服務"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如果對於要求開發管理內存，配置數據庫，應用服務器，最大化吞吐量，明確數據如何在磁盤之前分佈和操作系統有個自己的把控能力的團隊可以不考慮了，如果說對於這些沒有人力和能力來把控，則可以交給服務廠商。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"四、上雲服務的關心因素"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"審計"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 審計的核心是保護公司和客戶的數據安全，這裏會經常有人說雲中的數據不安全。數據在哪裏都會面臨網絡威脅，我們不應該關注雲中數據安全不安全問題，應該專注哪些有關審計，法律合規，客戶需求以及風險等真正的問題和約束。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 在我們項目開發初期就應該考慮審計需求比如消費者的成熟度。另外對有關安全，日誌，監控，SLA管理，災難恢復和其他合規雲服務的關鍵組件進行策略設計。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"數據"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 數據首先需要區分是否是隱私需要保護的數據，如果是的話，我們需要利用開源的OpenStack來搭建自己的私有云，而對於非需要保護的數據，我們可以直接使用公有云來提供服務。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 在對雲服務進行選擇的時候，數據因素的考察也決定了你選擇哪個廠商，具體的因素可以參考如下幾點："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"物理特性：數據的容量、數據是否敏感、數據增量/全量、數據所有權"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"性能要求：實時、近實時、延時"}]}]}]},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"使用緩存層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"減少數據集大小"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"將數據庫區分爲只讀節點和只寫節點"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"將數據進行切片，分成特定客戶切片，特定時間切片，特定區域切片"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對陳舊數據歸檔，降低表的大小"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對數據集非規範化處理"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"易變性：數據變化的頻率，靜態數據集和動態數據集"}]}]}]},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"靜態數據集：事件驅動的數據，按時間順序發生。比如Web日誌，事務和收集數據。一次寫入和多次讀取"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"動態數據集：RDMS關係型數據庫解決通過ACID事務"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"容量：容量預估和備份策略"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"監管要求：加密"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事務邊界：性能邊界"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"保存期限：數據必須保存的期限"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"除上述因素外，還需要考慮所有的數據需求都會對如何存儲底層數據造成決策影響，比如數據是否需要隔離，以及數據存儲格式："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"多租戶還是單租戶"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"使用何種數據存儲格式：SQL、NoSQL、文件等。"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"多租戶還是單租戶"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"多租戶分爲完全隔離和數據隔離。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"完全隔離："}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"優點：提供獨立性，隱私，高擴展性"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"缺點：費用最高，複用性最低，最複雜。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據隔離："}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"優點：成本效率最高，複雜度最低，複用性最高"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"缺點：缺乏獨立性，性能最低，擴展性最差"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如何選擇，根據流量的大小來抉擇，如果流量大則完全隔離，如果流量小則數據隔離。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"選擇數據存儲類型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"聯機事物處理OLTP行爲。"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"鍵值存儲：Redis，Voldemort，DynamoDB：海量數據寫入"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"列存儲：Hadoop和Cassandra：允許出現空缺行值，擴展性好，不適合高度連接數據源"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"文檔存儲：MongoDB,CouchDB：處理不同格式的文檔，比如數據庫日誌，Web服務器日誌，應用服務器日誌等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"圖像數據庫：比如Neo4j和InfoGrid：繪圖方面有優勢，其他一般"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"其他存儲：比如內容分發CDN是流媒體和其他帶寬密集數據的選擇工具"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"安全"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 安全程度的評測"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"目標的行業"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"客戶期望"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"所存儲數據的敏感性"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"風險承受能力"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"產品成熟度"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"傳輸邊界：數據發出和接收的端點如何定義"}]}]}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 需要根據自己的用戶人羣以及自己的數據和產品成熟度，公司業務和風險承受能力來進行綜合衡量。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" PAAS的不同模式部署"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有託管模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有代管部署模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公有非代管部署模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"私有託管模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"私有代管部署模式"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"私有非代管部署模式"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 安全應該關注的方向"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"集中化：根據角色劃分，貨倉入口，購物入口，車輛入口來集中化的管理入口保證安全"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"標準化：例如採用公認的OAuth和OpenID"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"自動化：可以參考《鳳凰實驗》書描述的案例"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 焦點領域的關注"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"保護：安全控制，策略和流程"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"檢測：挖掘日誌，觸發事件和主動找出系統內安全漏洞的過程"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"預防：用什麼行動來防止進一步的損害，你的入侵預防措施在哪裏？"}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 安全控制的策略問題"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"策略實施：規則與應用解藕，可配置能力，自動化"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"加密：靜態存放指的數據存儲的位置，通常數據存儲在數據庫中，有時候以文件的形式存放文件系統中。IP地址，服務器名稱，密碼，密鑰。可以將所有需要加密的數據統一管理。設計時候考慮簡潔和性能，加解密耗費性能影響。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"密鑰管理：公私密鑰對，公鑰保護的任何對象，只能私鑰解密。不以明文存儲，不再代碼直接引用，密鑰應用集中管理。密鑰應該放在被隔離和保護的環境裏，訪問受限，有備份和恢復措施，並且完全可審計。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"網頁安全：注入SQL，劫持用戶會話。對於系統定期掃描提高應用的安全等級"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"API管理：API支持OAuth和OpenID，如果存在不能使用上述的場景，那麼使用通過SSL進行的基本認證。避免會話和會話狀態來避免會話劫持的發生。另外一種方案：處理每一個請求時候重置認證。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"補丁管理：自動化方式進行，至少每30天創建並生成一個包含所有最新和最重要的安全補丁，實現部署過程的自動化"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"日誌：所有系統記錄的採集。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"監控：系統健康程度和活動發生的信息，實時活動和挖掘日誌文件"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"審計：覈查安全流程和控制來確保系統符合所要求的法規控制以及滿足系統安全要求與SLA過程。"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"監控"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 明確自己關注的監控點"}]},{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 比如我們通常關心的 RT響應時間，運行時間。頁面加載時間，網絡性能，應用程序接口性能等。線程，緩存，內存和CPU利用率，每秒請求數RPS，磁盤空間容量，以及CPU和內存利用率，訪問數量PV，UV，新用戶數，單用戶成本，以及其他業務相關指標。"}]},{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應該監控的類別："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"性能"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"吞吐率"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"質量"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"關鍵性能指標KPI"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"安全"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"合規"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 監控在雲堆棧的不同層進行："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"用戶層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應用層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應用堆棧層"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"基礎設施層"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 不同的領域監控"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲供應商環境"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雲應用環境"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":3,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"用戶體驗"}]}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"SLA"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 定義參考的因素來源於不同的服務，不同的客戶人羣，不同的業務。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"不同的服務，客戶，業務對於SLA類型也不同常用的如下："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"應用/服務的整體運行時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"頁面加載時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事務處理時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"API響應時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"報告響應時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事件解決事件"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"事件通報事件"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"消費方和企業雲服務廠商的要求："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"安全和隱私保障"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"公開的突發事件響應計劃"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"網頁漏洞掃描和報告"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"已發佈的災難恢復計劃"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"安全港協議"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"數據所有權聲明"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"備份和恢復處理文檔"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"源代碼託管"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對於供應商的直接SLA服務要求：正常的運行時間SLA介乎99.9%～100%"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"災難恢復"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":" 明確什麼是故障時間成本"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"恢復時間目標RTO或者業務要求服務恢復運行所需要的時間"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"恢復點目標RPO或者數據損失在可忍受範圍內的時間數"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"價值，災難恢復的價值，比如銀行數據系統資金系統等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":2,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"服務的關鍵程度，比如醫院醫療設備等"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"我們根據故障時間成本來制定不同的雲服務的恢復計劃。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"IaaS的災難恢復如何規劃"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"舉個例子：亞馬遜分爲地區和可用區域概念：地區坐落全球範圍，區域是地區之內的獨立的虛擬數據中心。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"爲了不避免系統失效，通常會跨區域冗餘部署。跨地區冗餘部署，或者混合雲部署。"}]},{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"所以爲了避免系統故障而可以採用這兩種方式來進行處理。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"主要數據中心的災難恢復"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 從數據中心防備主數據中心發生災難的恢復方法："}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"經典的備份和恢復方法：每日進行完整備份和增量備份，爲了特別的安全還可以備份"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"冗餘數據中心-單活冷備：冷備平時並不運行和啓動，出現緊急問題根據腳本進行執行。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"冗餘數據中心-單活溫備：熱備意味着數據庫服務器時刻運行並始終與主數據中心保持同步。而其他服務器依然冷備，這樣可以減緩災難恢復時間。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"冗餘數據中心-雙活熱備：雙活都在運行，一個數據中心發生故障不會造成任何的影響。 "}]}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"PaaS的災難恢復策略"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 最好的方式是公有云和私有云都有部署，方便自己把控私有云，出了問題以後不需要一直等待其他人的修復。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"SaaS的災難恢復策略"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 數據進行定時歸檔，並定期計劃性的抽取數據"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"混合雲的災難恢復策略"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"混合IaaS（專有）：專有的公有云提供商"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"混合IaaS（開源）：OpenStack的使用"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"混合PaaS：私有PaaS實現公有和私有云之間的故障轉移"}]}]}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"五、上雲服務的未來"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" 當應用全部部署雲服務以後，後續團隊就需要更加關注業務需求和設計以及用戶體驗，從而給用戶帶來更好的價值和使用感受。那麼未來的演化方式就會變成逐步的PAAS平臺即服務，提供不同的服務平臺化的能力來幫助你更好的專注的關心自己的產品或者系統。"}]},{"type":"heading","attrs":{"align":null,"level":1},"content":[{"type":"text","text":"小結 "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"5W1H的重要性，應該在雲服務模式抉擇中深度思考,進而能夠更好的抉擇雲服務設計架構。"}]},{"type":"bulletedlist","content":[{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"原因(Why)：我們在試着解決什麼問題？業務目標和驅動力是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"何人(Who)：誰需要這些問題得以解決？內部/外部參與者都有誰？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"什麼(What)：業務和技術需求都是什麼？有哪些法律和法規的約束，風險是什麼？"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"何地(Where)：將在哪裏提供服務，有沒有特定的需求，法律，稅收，可用性問題，語言等"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"何時(When)：服務需要什麼時間提供，預算是多少，與其他方案有沒有關聯。"}]}]},{"type":"listitem","content":[{"type":"paragraph","attrs":{"indent":1,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"如何(How)：組織如何交付這些服務？組織、體系架構和客戶是否都做好了準備？"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]}
發表評論
所有評論
還沒有人評論，想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章