Disruptive Weather Conditions: Clouds in the Forecast Welcome! SMPTE Educational Webcast Sponsors Thank you to our sponsors for their generous support of SMPTE and the SMPTE Professional Development Academy: 4/17/2014 2 2 Copyright 2011 2014 Society Powered of Motion by SMPTE Picture Professional and Television Development Engineers. Academy All rights www.smpte.org reserved. www.smpte.org 2 1
Very Special Thanks SMPTE wishes to thank Ustream for their generous support of efforts to bring full motion video to SMPTE s monthly Educational Webcast series 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 3 Joel E. Welch Director of Education SMPTE Your Host 4/17/2014 4 4 Copyright 2011 2014 Society Powered of Motion by SMPTE Picture Professional and Television Development Engineers. Academy All rights www.smpte.org reserved. www.smpte.org 4 2
Today s Guest Speaker Richard Welsh Co-founder and CEO Sundog Media Toolkit Ltd SMPTE International Governor 4/17/2014 5 5 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 5 5 Cloud for media Defining cloud Architectures Practical use Challenges Where next? 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 6 3
Popular cloud 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 7 The genesis of cloud 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 8 4
The genesis of cloud 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 9 Basic Cloud Architecture Compute Store Real layers Virtualising Layers Server Operating Hypervisor System Processing Units Application Storage File System Hypervisor Storage Units CORE CORE CORE CORE Block Block Block Block Block 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 10 10 10 5
Compute Architecture App Application App Application App OSOperating System OSOperating System OS Server Hypervisor Bare Metal Server Hypervisor App Operating System Software Processing Units Processing Units CORE CORE CORE CORE CORE CORE CORE CORE Type 1 Type 2 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 11 11 11 Compute Architecture Resource Request = n4 GHz core processing machine n GHz Processing Server Hypervisor Processing Units Virtual CORE Core Virtiual Core Virtiual Core CORE Virtual CORE Core Virtiual Core CORE 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 12 12 12 6
Storage Architecture Resource Files Request = n GB Storage Storage Units Block ObjectBlock Block Block Object Server Hypervisor Block Block BlockObject Block Object Object Block Block Block Block Object Block Block BlockObject Block 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 13 13 13 Common Hypervisors Bare Metal type1 Software type2 vsphere Server 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 14 14 14 7
Balanced Traffic Co-ordinated Control Storage Protocols Object Block File System API REST SOAP Swift HCP Atmos iscsi Fibre Channel NFS CIFS GFS Luster GlusterFS DFS 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 15 15 15 Hardware Software Defined Network Virtualisation Bits and Bytes Files and Applications Switches Network Host Control Protocol Disks / SSD Storage Block/Object Control API CPU / GPU Compute Hypervisor Control 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 16 16 16 8
Public Private Hybrid PROFESSIONAL (public/community) HYBRID PRIVATE Internal Network Internet PUBLIC Facility 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 17 17 17 Hybrid Facility VPN Private Network Data Centre 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 18 18 18 9
$ Cost per TB/month $ Cost per Flop Service Deployment server Development server PROFESSIONAL Internet Facility Network server PUBLIC 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 19 19 19 Provisioning Virtual Resource Storage Compute Total data size (TB) Simple pricing (Long Term/Short term/faster/slower) Total Compute Resource (Flops) Much more complex pricing (CPU/GPU type, cache size, attached RAM) 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 20 20 20 10
firewall firewall Facility Physical Security Content User access Access + proxy Authentication firewall Authentication Remote users Content Network Brick wall Corporate Network Internet 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 21 21 21 Facility Data Security Cross Core Listening Content User access Access + proxy Directory Traversal SQL Injection SQL Injection Remote users Content Network Brick wall Corporate Network CSRF XSS 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 22 22 22 11
Facility Encrypted storage Security Encrypted OS Machine segregation Content User access Access + proxy Encrypted OS Encrypted storage Authenticated Requests Multipoint Authentication Encrypted traffic Authenticated Requests Multipoint Authentication Download Remote users Loose Coupled UI Content Network Brick wall Corporate Network Internet Loose Coupled UI Authenticated Requests 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 23 23 23 x.509 Heartbleed SSL handshake Data Packet Heartbeat struct { HeartbeatMessageType type; uint16 payload_length; opaque payload[heartbeatmessage.payload_length]; opaque padding[padding_length]; } HeartbeatMessage; L P SSL session Heartbeat 65535 bytes 1 byte Length Payload Data Packet P Over-run from sent payload byte into victim s process memory Jackpot = X.509 Pay out Passwords Messages Juicy Data struct ssl3_record_st { unsigned int length; /* How many bytes available */ [...] unsigned char *data; /* pointer to the record data */ [...] } SSL3_RECORD; 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 24 24 24 12
Heartbleed OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable Released 1.0.1 on 14th of March 2012 OpenSSL 1.0.1g is NOT vulnerable Released on 7th of April 2014 OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT vulnerable 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 25 25 25 Dailies Asset management Collaborative Editing Applications VFX Transcode Render Playout Colour Engine Test & Measurement Shoot Manage Edit VFX Grade Master QC Deliver 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 26 26 26 13
Dailies Asset management Collaborative Editing Challenges VFX Render Colour Engine Transcode Test & Measurement Playout Bandwidth/ File Size Security Single technical environment Workflow continuity Application interoperability Content Delivery Networks Shoot Manage Edit VFX Grade Master QC Deliver 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 27 27 27 Dailies Public Cloud X Editing Asset management Current Scenario VFX Render Pro Cloud A Colour Engine Pro Cloud B Transcode Public Cloud X Test & Measurement Public Cloud Y Playout Shoot Manage Edit VFX Grade Master QC Deliver 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 28 28 28 14
Future Dailies Asset management Collaborative Editing VFX Render Colour Engine Transcode Test & Measurement Delivery Control Shoot Manage Edit VFX Grade Master QC Deliver 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 29 29 29 Q & A Richard Welsh Co-founder and CEO Sundog Media Toolkit Ltd Joel E. Welch 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 30 30 30 15
Very Special Thanks SMPTE wishes to thank Ustream for their generous support of efforts to bring full motion video to SMPTE s monthly Educational Webcast series 4/17/2014 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 31 31 31 SMPTE Educational Webcast Sponsors Thank you to our sponsors for their generous support of SMPTE and the SMPTE Professional Development Academy: 4/17/2014 32 Copyright 2011 Society of Motion Picture and Television Engineers. All rights reserved. www.smpte.org 32 32 32 16