{"type":"doc","content":[{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"由於要集成客戶的數據堆棧，所以我們需要提供最高級別的安全性和遵從性。問題是：我們將如何構建它們？SaaS嗎？On-prem嗎？還是別的什麼方法？爲了實現這些目標，我們選擇了混合部署架構，這是一種結合了on-prem安全性和SaaS便利性的新方法。本文將解釋我們做出這一選擇的原因。"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"italic"},{"type":"color","attrs":{"color":"#333333","name":"user"}}],"text":"本文最初發佈於Towards Data Science，經原作者授權由InfoQ中文站翻譯並分享。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"隨着公司接收和存儲的"},{"type":"link","attrs":{"href":"https:\/\/www.forbes.com\/sites\/gilpress\/2020\/01\/06\/6-predictions-about-data-in-2020-and-the-coming-decade\/?sh=4b07485b4fc3","title":null,"type":null},"content":[{"type":"text","text":"數據越來越多"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"，比以往任何時候都要多，並且對這些數據的訪問和使用方式的審查也越來越嚴格，在現有的數據基礎設施中新增任何類型的第三方解決方案都隱含着一定的安全問題。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"事實上，在GDPR、CCPA、HIPAA（還有許多其他重要的縮寫）的時代，管理複雜的數據系統和保持敏感數據的安全是兩個截然不同的問題，沒有一個適用於所有問題的解決方案。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對於數據負責人而言，選擇解決哪個問題完全取決於你。"}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"傳統的on-prem部署模型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/4e\/4ede5293fc712421d19ba70090f5453b.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":"center","origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#7b7f83","name":"user"}}],"text":"On-prem部署架構，第三方軟件在客戶的環境中運行，提供了更高的安全性，但代價是速度和運營效率。圖片由作者提供。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"On-premises（on-prem）指傳統的部署模型，軟件運行在客戶的環境中，通常在專用VPC內。特別是，服務存儲或處理的所有數據都保留在客戶的雲中。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"優勢"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雖然供應商編寫代碼，但客戶保持對數據的完全控制和所有權。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"On-prem解決方案向客戶提供二進制文件和許可密鑰（對於授權軟件），由客戶管理部署。無數軟件產品選擇了這種傳統的部署模型。例如MemSQL和Splunk早期的on-prem產品，需要依賴客戶的工程和IT團隊來處理部署。與SaaS解決方案相比，on-prem平臺通常根據客戶的需求提供更好的定製和配置。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"對於客戶來說，選擇使用on-prem架構的供應商，一個明顯的好處是可感知的安全性和遵從性。通過將數據保存在客戶的環境中，on-prem架構不暴露與外部各方的連接。此外，由於所有的數據和軟件都存放在客戶的雲裏，供應商無法訪問任何敏感信息。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"挑戰"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"On-prem部署模型要求客戶承擔大部分的運營開銷。客戶必須自己分析解決災難恢復問題，例如應用程序中斷和數據停機，這可能會耗費大量的時間，並導致低於標準的體驗。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"On-prem模型的第二個限制是部署速度慢，無論是基線軟件還是未來任何產品更新。由於軟件存在於客戶的環境中，升級可能是一個冗長的過程，需要大量的訪問權限和額外的資源。"}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"SaaS部署模型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"軟件即服務（SaaS）解決方案提供託管在供應商雲中的現成軟件，客戶可以立即獲得並使用這些軟件。在這個模型中，軟件由供應商運行和管理，客戶數據存儲在供應商的雲中。在Salesforce的引領下，"},{"type":"link","attrs":{"href":"https:\/\/www.snowflake.com\/","title":null,"type":null},"content":[{"type":"text","text":"Snowflake"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"、"},{"type":"link","attrs":{"href":"https:\/\/segment.com\/","title":null,"type":null},"content":[{"type":"text","text":"Segment"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"和"},{"type":"link","attrs":{"href":"https:\/\/chartio.com\/","title":null,"type":null},"content":[{"type":"text","text":"Chartio"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"是近年來數據世界的著名案例。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/3c\/3cc2b60f01afef177c8051cdf357dc43.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":"center","origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#7b7f83","name":"user"}}],"text":"SaaS模型託管在供應商的雲環境中，允許快速部署和輕鬆更新，但會帶來額外的數據安全和訪問問題。圖片由作者提供。"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"優勢"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"SaaS模型使供應商更容易進行更新、推出新功能並大規模地解決常見問題，而不是將更改推送到單個客戶的環境中。對許多人來說，這通常都是以較低的成本創造了更令人愉快的用戶體驗。這也擴展到了軟件的維護，這是將這項工作外包給最瞭解軟件的供應商。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"挑戰"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"當將數據混合在一起時，SaaS模型就會變得更復雜，特別是當關繫到遵從性需求和數據鎖定時。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"儘管任何自重的SaaS提供商都會對靜態數據進行加密，但它仍然被鎖定在供應商的環境中。因此，許多客戶不願意（或出於監管原因不能）完全放棄數據的管理和存儲。"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"即使客戶願意簽字將數據存儲在自己的環境之外，他們仍然必須接受這樣一個事實，即數據現在完全鎖定在供應商的控制之下。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"那麼，如何才能獲得on-prem解決方案的遵從性和靈活性優勢，同時又具備SaaS供應商的易於部署和便利性呢？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"我們相信，現代數據產品有一個更好的發展方向：混合架構。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"混合部署模型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在過去的十年裏，我們看到，越來越多的軟件工程和DevOps團隊利用"},{"type":"link","attrs":{"href":"https:\/\/tomtunguz.com\/cloud-prem-architecture\/","title":null,"type":null},"content":[{"type":"text","text":"混合雲架構"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"來管理基礎設施即服務應用程序，包括"},{"type":"link","attrs":{"href":"https:\/\/blog.newrelic.com\/technology\/hybrid-cloud-deployment-models-examples\/","title":null,"type":null},"content":[{"type":"text","text":"New Relic"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"和"},{"type":"link","attrs":{"href":"https:\/\/devops.com\/3-ways-atlassian-usage-is-evolving-in-the-new-normal\/","title":null,"type":null},"content":[{"type":"text","text":"Atlassian"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。最近，許多數據軟件供應商也做出了類似的設計決策。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/fb\/fb08d7ebb17ce45204c1f566f4504171.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":"center","origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#7b7f83","name":"user"}}],"text":"混合架構模型利用了軟件工程和DevOps架構的最佳實踐，將on-prem的安全性與SaaS部署的易用性結合起來。圖片由作者提供。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"爲了在現代數據棧中將SaaS世界和on-prem世界的精華結合到一起，數據軟件的買家應該考慮採用混合架構的解決方案。該方法由兩部分組成：（1）由供應商管理的控制平面；（2）客戶環境中的數據平面。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"控制平面"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通常，控制平面承載着軟件的大部分業務邏輯，並處理不敏感的元數據。它與數據平面通信，並將敏感操作（如處理、存儲或刪除數據）委託給數據平面。控制平面還提供Web頁面和API接口，並監視數據平面的運行狀況。控制平面完全運行在供應商的環境中，通常遵循多租戶架構，但有些供應商提供了單租戶控制平面（通常需要額外付費），該控制平面運行在客戶專用的、完全隔離的VPC中。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"數據平面"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"數據平面通常處理和存儲客戶的所有敏感數據。它必須能夠接收來自控制平面的指令，並傳回有關其操作和運行狀況的元數據。從技術上講，控制平面和數據平面之間的接口通常是由運行在客戶環境中的瘦代理來實現的。一些供應商甚至可以完全跳過代理，完全利用跨雲帳戶的IAM角色。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"從本質上講，將客戶數據與管理軟件分離開來，使客戶獲得了SaaS產品的靈活性，同時還擁有on-prem解決方案的遵從性和數據所有權，並始終將客戶數據保存在客戶的雲環境中。"}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"快速參與，縮短價值實現的時間"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通常，這種混合架構使客戶能夠快速部署軟件，而且只需很少的人工開銷。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"與此同時，這種快速參與使客戶能夠即時看到產品的效果，並在短期內從他們的數據或ML模型中快速獲得價值。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通常，作爲這種部署模型的一部分，採用混合解決方案的供應商會提供隨叫隨到的技術支持，這是他們產品的一個關鍵特性——幾乎就像爲客戶提供一個嵌入式的SRE團隊。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"將複雜的基礎設施與客戶敏感數據的管理分開"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"混合模型的最大好處之一是，它不需要客戶配置或維護供應商複雜的基礎設施，同時讓客戶可以完全控制他們的數據。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"一種方法是通過代理或跨帳戶角色讓供應商可以訪問“數據平面”，提取諸如元數據、查詢日誌和聚合統計數據等信息。與許多SaaS產品不同，該方法不會從客戶的數據倉庫、數據湖或BI工具中提取個人記錄或個人識別信息，並存儲在供應商的雲上。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"這種混合方法還有助於添加控制供應商帳戶權限範圍的“旋鈕（knob）”（例如，越寬鬆，客戶方的管理就越少，反之亦然）。這讓客戶在數據訪問和安全方面擁有更大的自主權，這對金融科技和醫療保健等行業至關重要，因爲這些行業存在大量的敏感數據，對錯誤的容忍度很低，甚至完全不能容忍。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通過讓供應商管理服務的計算資源，可以確保產品的任何問題都可以通過供應商快速解決，而不給客戶帶來負擔。數據代理解決了這個問題，並確保基礎設施可以輕鬆地維護、調試和更新，而無需客戶投入資源。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"給正在閱讀本文的供應商的建議：我們建議您儘早取得SOC2認證——稍後您會感謝我們的。許多企業，特別是GDPR、HIPAA和SOX合規行業中的企業，在考慮與您合作之前都需要這個。"}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"快速、持續的軟件升級"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"混合部署模型將穩定的雲原語（如S3、EMR、DynamoDB）保存在客戶雲中，並將所有不斷改進、快速變化的基礎設施（即產品本身）保存在託管雲中。因此，客戶可以比較輕鬆地將新的解決方案集成到他們的數據棧中，因爲與複雜的on-prem軟件相比，嘗試和開始使用混合模型成本要低得多。與在客戶的私有云中託管服務相比，在供應商的環境中託管服務還可以讓推出面向所有客戶的更新更容易、更順暢。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在供應商的環境中託管服務意味着客戶可以訪問新特性，確保創新和產品開發不是豎井驅動的。客戶甚至不需要知道不同的軟件版本和緩慢的升級週期——他們可以放心，他們將永遠使用最新、最好的版本，而且是完全自動的。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"混合模型爲客戶提供了選擇如何使用產品的靈活性，例如，他們可能想要跨整個數據棧部署它，或者只在幾個選定的數據環境中部署它，並且可以根據需要輕鬆地添加或刪除服務實例。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"爲靈活、安全的數據棧指明方向"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雖然我們在創立Monte Carlo和Tecton時並不認識對方，但我們最終爲我們的產品選擇了類似的架構。這種混合模型最終成爲我們爲數據和ML組織提供支持的關鍵，同時也得到了安全團隊的批准。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通過利用SaaS\/on-prem混合架構，解決方案提供商可以構建易於部署的數據產品，幾乎不需要客戶承擔任何運營開銷，促進完全的數據所有權，而且可能最重要的是，最大限度地確保數據安全性和遵從性。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}},{"type":"strong"}],"text":"英文原文鏈接"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"："},{"type":"link","attrs":{"href":"https:\/\/towardsdatascience.com\/data-software-as-a-service-the-case-for-a-hybrid-deployment-architecture-c696ceaf9ef1","title":null,"type":null},"content":[{"type":"text","text":"Data Software-as-a-Service: the case for a hybrid deployment architecture"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]}]}
數據軟件即服務：混合部署架構介紹
{"type":"doc","content":[{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"由於要集成客戶的數據堆棧，所以我們需要提供最高級別的安全性和遵從性。問題是：我們將如何構建它們？SaaS嗎？On-prem嗎？還是別的什麼方法？爲了實現這些目標，我們選擇了混合部署架構，這是一種結合了on-prem安全性和SaaS便利性的新方法。本文將解釋我們做出這一選擇的原因。"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"italic"},{"type":"color","attrs":{"color":"#333333","name":"user"}}],"text":"本文最初發佈於Towards Data Science，經原作者授權由InfoQ中文站翻譯並分享。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"隨着公司接收和存儲的"},{"type":"link","attrs":{"href":"https:\/\/www.forbes.com\/sites\/gilpress\/2020\/01\/06\/6-predictions-about-data-in-2020-and-the-coming-decade\/?sh=4b07485b4fc3","title":null,"type":null},"content":[{"type":"text","text":"數據越來越多"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"，比以往任何時候都要多，並且對這些數據的訪問和使用方式的審查也越來越嚴格，在現有的數據基礎設施中新增任何類型的第三方解決方案都隱含着一定的安全問題。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"事實上，在GDPR、CCPA、HIPAA（還有許多其他重要的縮寫）的時代，管理複雜的數據系統和保持敏感數據的安全是兩個截然不同的問題，沒有一個適用於所有問題的解決方案。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"對於數據負責人而言，選擇解決哪個問題完全取決於你。"}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"傳統的on-prem部署模型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/4e\/4ede5293fc712421d19ba70090f5453b.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":"center","origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#7b7f83","name":"user"}}],"text":"On-prem部署架構，第三方軟件在客戶的環境中運行，提供了更高的安全性，但代價是速度和運營效率。圖片由作者提供。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"On-premises（on-prem）指傳統的部署模型，軟件運行在客戶的環境中，通常在專用VPC內。特別是，服務存儲或處理的所有數據都保留在客戶的雲中。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"優勢"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雖然供應商編寫代碼，但客戶保持對數據的完全控制和所有權。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"On-prem解決方案向客戶提供二進制文件和許可密鑰（對於授權軟件），由客戶管理部署。無數軟件產品選擇了這種傳統的部署模型。例如MemSQL和Splunk早期的on-prem產品，需要依賴客戶的工程和IT團隊來處理部署。與SaaS解決方案相比，on-prem平臺通常根據客戶的需求提供更好的定製和配置。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"對於客戶來說，選擇使用on-prem架構的供應商，一個明顯的好處是可感知的安全性和遵從性。通過將數據保存在客戶的環境中，on-prem架構不暴露與外部各方的連接。此外，由於所有的數據和軟件都存放在客戶的雲裏，供應商無法訪問任何敏感信息。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"挑戰"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"On-prem部署模型要求客戶承擔大部分的運營開銷。客戶必須自己分析解決災難恢復問題，例如應用程序中斷和數據停機，這可能會耗費大量的時間，並導致低於標準的體驗。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"On-prem模型的第二個限制是部署速度慢，無論是基線軟件還是未來任何產品更新。由於軟件存在於客戶的環境中，升級可能是一個冗長的過程，需要大量的訪問權限和額外的資源。"}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"SaaS部署模型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"軟件即服務（SaaS）解決方案提供託管在供應商雲中的現成軟件，客戶可以立即獲得並使用這些軟件。在這個模型中，軟件由供應商運行和管理，客戶數據存儲在供應商的雲中。在Salesforce的引領下，"},{"type":"link","attrs":{"href":"https:\/\/www.snowflake.com\/","title":null,"type":null},"content":[{"type":"text","text":"Snowflake"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"、"},{"type":"link","attrs":{"href":"https:\/\/segment.com\/","title":null,"type":null},"content":[{"type":"text","text":"Segment"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"和"},{"type":"link","attrs":{"href":"https:\/\/chartio.com\/","title":null,"type":null},"content":[{"type":"text","text":"Chartio"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"是近年來數據世界的著名案例。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/3c\/3cc2b60f01afef177c8051cdf357dc43.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":"center","origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#7b7f83","name":"user"}}],"text":"SaaS模型託管在供應商的雲環境中，允許快速部署和輕鬆更新，但會帶來額外的數據安全和訪問問題。圖片由作者提供。"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"優勢"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"SaaS模型使供應商更容易進行更新、推出新功能並大規模地解決常見問題，而不是將更改推送到單個客戶的環境中。對許多人來說，這通常都是以較低的成本創造了更令人愉快的用戶體驗。這也擴展到了軟件的維護，這是將這項工作外包給最瞭解軟件的供應商。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"挑戰"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"當將數據混合在一起時，SaaS模型就會變得更復雜，特別是當關繫到遵從性需求和數據鎖定時。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"儘管任何自重的SaaS提供商都會對靜態數據進行加密，但它仍然被鎖定在供應商的環境中。因此，許多客戶不願意（或出於監管原因不能）完全放棄數據的管理和存儲。"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"即使客戶願意簽字將數據存儲在自己的環境之外，他們仍然必須接受這樣一個事實，即數據現在完全鎖定在供應商的控制之下。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"那麼，如何才能獲得on-prem解決方案的遵從性和靈活性優勢，同時又具備SaaS供應商的易於部署和便利性呢？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"我們相信，現代數據產品有一個更好的發展方向：混合架構。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"混合部署模型"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在過去的十年裏，我們看到，越來越多的軟件工程和DevOps團隊利用"},{"type":"link","attrs":{"href":"https:\/\/tomtunguz.com\/cloud-prem-architecture\/","title":null,"type":null},"content":[{"type":"text","text":"混合雲架構"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"來管理基礎設施即服務應用程序，包括"},{"type":"link","attrs":{"href":"https:\/\/blog.newrelic.com\/technology\/hybrid-cloud-deployment-models-examples\/","title":null,"type":null},"content":[{"type":"text","text":"New Relic"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"和"},{"type":"link","attrs":{"href":"https:\/\/devops.com\/3-ways-atlassian-usage-is-evolving-in-the-new-normal\/","title":null,"type":null},"content":[{"type":"text","text":"Atlassian"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。最近，許多數據軟件供應商也做出了類似的設計決策。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/fb\/fb08d7ebb17ce45204c1f566f4504171.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":"center","origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#7b7f83","name":"user"}}],"text":"混合架構模型利用了軟件工程和DevOps架構的最佳實踐，將on-prem的安全性與SaaS部署的易用性結合起來。圖片由作者提供。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"爲了在現代數據棧中將SaaS世界和on-prem世界的精華結合到一起，數據軟件的買家應該考慮採用混合架構的解決方案。該方法由兩部分組成：（1）由供應商管理的控制平面；（2）客戶環境中的數據平面。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"控制平面"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通常，控制平面承載着軟件的大部分業務邏輯，並處理不敏感的元數據。它與數據平面通信，並將敏感操作（如處理、存儲或刪除數據）委託給數據平面。控制平面還提供Web頁面和API接口，並監視數據平面的運行狀況。控制平面完全運行在供應商的環境中，通常遵循多租戶架構，但有些供應商提供了單租戶控制平面（通常需要額外付費），該控制平面運行在客戶專用的、完全隔離的VPC中。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"數據平面"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"數據平面通常處理和存儲客戶的所有敏感數據。它必須能夠接收來自控制平面的指令，並傳回有關其操作和運行狀況的元數據。從技術上講，控制平面和數據平面之間的接口通常是由運行在客戶環境中的瘦代理來實現的。一些供應商甚至可以完全跳過代理，完全利用跨雲帳戶的IAM角色。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"從本質上講，將客戶數據與管理軟件分離開來，使客戶獲得了SaaS產品的靈活性，同時還擁有on-prem解決方案的遵從性和數據所有權，並始終將客戶數據保存在客戶的雲環境中。"}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"快速參與，縮短價值實現的時間"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通常，這種混合架構使客戶能夠快速部署軟件，而且只需很少的人工開銷。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"與此同時，這種快速參與使客戶能夠即時看到產品的效果，並在短期內從他們的數據或ML模型中快速獲得價值。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通常，作爲這種部署模型的一部分，採用混合解決方案的供應商會提供隨叫隨到的技術支持，這是他們產品的一個關鍵特性——幾乎就像爲客戶提供一個嵌入式的SRE團隊。"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"將複雜的基礎設施與客戶敏感數據的管理分開"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"混合模型的最大好處之一是，它不需要客戶配置或維護供應商複雜的基礎設施，同時讓客戶可以完全控制他們的數據。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"一種方法是通過代理或跨帳戶角色讓供應商可以訪問“數據平面”，提取諸如元數據、查詢日誌和聚合統計數據等信息。與許多SaaS產品不同，該方法不會從客戶的數據倉庫、數據湖或BI工具中提取個人記錄或個人識別信息，並存儲在供應商的雲上。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"這種混合方法還有助於添加控制供應商帳戶權限範圍的“旋鈕（knob）”（例如，越寬鬆，客戶方的管理就越少，反之亦然）。這讓客戶在數據訪問和安全方面擁有更大的自主權，這對金融科技和醫療保健等行業至關重要，因爲這些行業存在大量的敏感數據，對錯誤的容忍度很低，甚至完全不能容忍。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通過讓供應商管理服務的計算資源，可以確保產品的任何問題都可以通過供應商快速解決，而不給客戶帶來負擔。數據代理解決了這個問題，並確保基礎設施可以輕鬆地維護、調試和更新，而無需客戶投入資源。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"給正在閱讀本文的供應商的建議：我們建議您儘早取得SOC2認證——稍後您會感謝我們的。許多企業，特別是GDPR、HIPAA和SOX合規行業中的企業，在考慮與您合作之前都需要這個。"}]}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"快速、持續的軟件升級"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"混合部署模型將穩定的雲原語（如S3、EMR、DynamoDB）保存在客戶雲中，並將所有不斷改進、快速變化的基礎設施（即產品本身）保存在託管雲中。因此，客戶可以比較輕鬆地將新的解決方案集成到他們的數據棧中，因爲與複雜的on-prem軟件相比，嘗試和開始使用混合模型成本要低得多。與在客戶的私有云中託管服務相比，在供應商的環境中託管服務還可以讓推出面向所有客戶的更新更容易、更順暢。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在供應商的環境中託管服務意味着客戶可以訪問新特性，確保創新和產品開發不是豎井驅動的。客戶甚至不需要知道不同的軟件版本和緩慢的升級週期——他們可以放心，他們將永遠使用最新、最好的版本，而且是完全自動的。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"混合模型爲客戶提供了選擇如何使用產品的靈活性，例如，他們可能想要跨整個數據棧部署它，或者只在幾個選定的數據環境中部署它，並且可以根據需要輕鬆地添加或刪除服務實例。"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"爲靈活、安全的數據棧指明方向"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雖然我們在創立Monte Carlo和Tecton時並不認識對方，但我們最終爲我們的產品選擇了類似的架構。這種混合模型最終成爲我們爲數據和ML組織提供支持的關鍵，同時也得到了安全團隊的批准。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"通過利用SaaS\/on-prem混合架構，解決方案提供商可以構建易於部署的數據產品，幾乎不需要客戶承擔任何運營開銷，促進完全的數據所有權，而且可能最重要的是，最大限度地確保數據安全性和遵從性。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}},{"type":"strong"}],"text":"英文原文鏈接"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"："},{"type":"link","attrs":{"href":"https:\/\/towardsdatascience.com\/data-software-as-a-service-the-case-for-a-hybrid-deployment-architecture-c696ceaf9ef1","title":null,"type":null},"content":[{"type":"text","text":"Data Software-as-a-Service: the case for a hybrid deployment architecture"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]}]}
發表評論
所有評論
還沒有人評論，想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章