“This book continues the very high standard we have come to expect from ServiceTech Press. The book provides well-explained vendor-agnostic patterns to the challenges of providing or using cloud solutions from PaaS to SaaS. The book is not only a great patterns reference, but also worth reading from cover to cover as the patterns are thought-provoking, drawing out points that you should consider and ask of a potential vendor if you’re adopting a cloud solution.”
--Phil Wilkins, Enterprise Integration Architect, Specsavers

“Thomas Erl’s text provides a unique and comprehensive perspective on cloud design patterns that is clearly and concisely explained for the technical professional and layman alike. It is an informative, knowledgeable, and powerful insight that may guide cloud experts in achieving extraordinary results based on extraordinary expertise identified in this text. I will use this text as a resource in future cloud designs and architectural considerations.”
--Dr. Nancy M. Landreville, CEO/CISO, NML Computer Consulting

The Definitive Guide to Cloud Architecture and Design
Best-selling service technology author Thomas Erl has brought together the de facto catalog of design patterns for modern cloud-based architecture and solution design. More than two years in development, this book’s 100+ patterns illustrate proven solutions to common cloud challenges and requirements. Its patterns are supported by rich, visual documentation, including 300+ diagrams.

The authors address topics covering scalability, elasticity, reliability, resiliency, recovery, data management, storage, virtualization, monitoring, provisioning, administration, and much more. Readers will further find detailed coverage of cloud security, from networking and storage safeguards to identity systems, trust assurance, and auditing.

This book’s unprecedented technical depth makes it a must-have resource for every cloud technology architect, solution designer, developer, administrator, and manager.

Topic Areas

• Enabling ubiquitous, on-demand, scalable network access to shared pools of configurable IT resources
• Optimizing multitenant environments to efficiently serve multiple unpredictable consumers
• Using elasticity best practices to scale IT resources transparently and automatically
• Ensuring runtime reliability, operational resiliency, and automated recovery from any failure
• Establishing resilient cloud architectures that act as pillars for enterprise cloud solutions
• Rapidly provisioning cloud storage devices, resources, and data with minimal management effort
• Enabling customers to configure and operate custom virtual networks in SaaS, PaaS, or IaaS environments
• Efficiently provisioning resources, monitoring runtimes, and handling day-to-day administration
• Implementing best-practice security controls for cloud service architectures and cloud storage
• Securing on-premise Internet access, external cloud connections, and scaled VMs
• Protecting cloud services against denial-of-service attacks and traffic hijacking
• Establishing cloud authentication gateways, federated cloud authentication, and cloud key management
• Providing trust attestation services to customers
• Monitoring and independently auditing cloud security
• Solving complex cloud design problems with compound super-patterns

Thomas Erl is a top-selling IT author, founder of Arcitura Education, and series editor of the Prentice Hall Service Technology Series from Thomas Erl. With more than 200,000 copies in print worldwide, his books have become international bestsellers and have been formally endorsed by senior members of major IT organizations, such as IBM, Microsoft, Oracle, Intel, Accenture, IEEE, HL7, MITRE, SAP, CISCO, HP, and many others. As CEO of Arcitura Education Inc., Thomas has led the development of curricula for the internationally recognized Big Data Science Certified Professional (BDSCP), Cloud Certified Professional (CCP), and SOA Certified Professional (SOACP) accreditation programs, which have established a series of formal, vendor-neutral industry certifications obtained by thousands of IT professionals around the world. Thomas has toured more than 20 countries as a speaker and instructor. More than 100 articles and interviews by Thomas have been published in numerous publications, including The Wall Street Journal and CIO Magazine.

Robert Cope has more than 25 years of experience in mission critical systems development, spanning all aspects of the software system engineering lifecycle from architectural development, experimentation and prototyping, requirements development, design, implementation, and operations to acquisition program management for large systems. With more than 10 years in research, development, and implementation of security architecture, Public Key Infrastructure (PKI) security technology, and security services for large organizations, he has vast experience in information assurance, identity management deployment, operations, and maintenance of large-scale high assurance identity management enclaves.

Robert is the CEO of Homeland Security Consultants, a Federal Risk and Authorization Management Program (FedRAMP)-approved Third Party Assessment Organization (3PAO) for certifying cloud services. He led the development of the virtualization and cloud computing architecture for a large organization and was the chief architect responsible for the development of an enterprise authentication service, leading a team to integrate the organization’s identity and access management service architecture using Model Based System Engineering (MBSE) and the System Modeling Language (SysML).

Robert is a Certified Trainer for Arcitura’s Cloud School and SOA School. He has been a contributing member of the National Institute of Standards and Technology (NIST) Cloud-adapted Risk Management Framework (CRMF) and a contributing member of the Organization for the Advancement of Structured Information Standards (OASIS) IdCloud Technical Committee. He is also a member of the International Council on Systems Engineering (INCOSE).

A certified IT professional with over 14 years of experience in solution architecture and design, engineering, and consultation, Amin Naserpour specializes in designing medium to enterprise-level complex solutions for partially to fully virtualized front-end infrastructures. His portfolio includes clients such as VMware, Microsoft, and Citrix, and his work consists of integrating front-ends with backend infrastructure-layer solutions. Amin designed a unified, vendor-independent cloud computing framework that he presented at the 5th International SOA, Cloud + Service Technology Symposium in 2012. Certified in cloud computing, virtualization, and storage, Amin currently holds Technical Consultant and Cloud Operations Lead positions for Hewlett-Packard, Australia.

1. Introduction
2. Case Study Background

 

Part I. Fundamentals
3. Basic Terms and Concepts
4. The Architecture of Cloud Computing
5. Cloud Computing Mechanisms
6. Understanding Cloud Computing Mechanisms and Design Patterns

 

Part II. Infrastructure Patterns
7. Physical Platform Patterns
8. Virtualization Patterns
9. Data and Storage Patterns
10. Capacity Patterns

 

Part III. Scalability and Resource Pooling
11. Dynamic Scaling and Elasticity Patterns
12. High Availability Patterns
13. Bursting and Balancing Patterns

 

Part IV. Reliability and Recovery
14. Failover and Reliability Patterns
15. Disaster Protection and Recovery Patterns

 

Part V. Security
16. Trust Boundary Patterns
17. Hardening Patterns
18. Privacy and Confidential Data Exchange Patterns

 

Part VI. Monitoring
19. Cloud Monitoring Patterns
20. Usage Tracking and Billing Patterns
21. Metric Collection and Triggers Patterns

 

Part VII. Supplemental
22. Common Compound Design Patterns
23. Strategic Architecture Considerations

 

Appendices
Appendix A. Case Study Conclusion
Appendix B. Referenced Industry Standards