Business has long pursued the goal of making IT more of a strategic tool and
less of a necessary evil. Organizations are constantly looking for easier,
cheaper, and more logical ways to build applications and unite the silos of
functionality they still depend on. One approach that has met with some
success is the concept of just-in-time integration - a technique to combine
new functionalities as quickly and cheaply as required, whether they reside
inside an organization or outside of it (i.e., with a business partner).
From the architectural perspective, just-in-time integration is a cornerstone
of service-oriented architecture (SOA). Under SOA, applications consist of
aggregations of calls to services. Services are simply coarsely grained
functions that are made available to invoking applications using a consistent
semantic. They might encapsulate a well-defined un... (more)
Cloud Security Journal on Ulitzer
Two weeks ago, I delivered a webinar about new security models in the cloud
with Anne Thomas Manes from Burton Group. Anne had one slide in particular,
borrowed from her colleague Dan Blum, which I liked so much I actually
re-structured my own material around it. Let me share it with you:
This graphic does the finest job I have seen of clearly articulating where
the boundaries of control lie under the different models of cloud computing.
Cloud, after all, is really about surrendering control: we delegate
management of infrastructure, application... (more)
Security Journal on Ulitzer
So you’ve bought into the idea of service-orientation. Congratulations.
You’ve begun to create services throughout your internal corporate network.
Some of these run on .NET servers; others are Java services; still others are
Ruby-on-Rails—in fact, one day you woke up and discovered you even have a
mainframe service to manage. But the question you face now is this: how can
all of these services be made available to consumers on the Internet? And
more important, how can you do it securely?
Most organizations buffer their contact with the outside world u... (more)
This year’s VMworld conference saw the announcement of VMware’s new
vCloud Director product, a culmination of the vision for the cloud computing
the company articulated last year and a significant step forward in providing
a true enterprise-grade cloud. This is virtualization 2.0—a major rethink
about how IT should deliver infrastructure services. VMware believes that the
secure hybrid cloud is the future of enterprise IT, and given their success
of late it is hard to argue against them.
vCloud Director (vCD) is interesting because it avoids the classic
virtualization metaphors ... (more)
We have worked with many APIs here at Layer 7. And over time we’ve seen it
all, ranging from the good to the bad. We even see the downright ugly. Now a
good API is a beautiful thing; it encourages innovation, abstracts
appropriately, and is designed with enough forethought that nobody needs to
change it down the road. Resiliency is a good quality in an API. APIs are a
little like cockroaches in that they will likely outlive the human race.
But what about the other ones? The ugly and bad ones? This is where
developers could use some guidance.
Truth is, good API design isn’t really... (more)