Hi Habr!

In a previous
article, I said that the
Cloud Connect conference had begun in Chicago. Judging by the reviews, the Koffer itself is quite interesting for the public, so I will try to lay out what I learned and understood. So…
Second day
From eight in the morning breakfast began and what we call networking. People meet up, people communicate, tell each other their expectations, plans - this is very interesting. Since on the second day, the real reports were already appointed, and not just the seminars, there were much more people in the lobby, which could not but please.
The report will be pictures, sorry for their quality ...Cloud Security Threats, Challenges, and Landscape
At 8:30, I went to a report on
Cloud Security Threats, Challenges, and Landscape . The report was conducted by
Pete Lindstrom and told everything that was possible in the clouds in safety. We reviewed the main topics:
- How can I easily translate the application to the clouds
- What are the risks of cloud computing?
- How we can improve cloud application security
What you need to pay attention to in the security issue:
- Cloud risks
- Cloud architecture
- Application Threats
- Application Vulnerabilities
What increases the risks?
- adding users
- adding administrators
- adding open ports
- adding new applications / services to the system
You should also pay attention to reducing the cost of attacks (for example, if the software has become popular, it has become cheaper to break it - many people are doing this). Increasing the rights of users in the system also significantly affects the risks.
')
What lowers the risks?
- deleting users
- closing ports
- deleting administrators
- stop applications / services in the system
Increasing the cost of attacks and revising the rights of users in the system are also very important for reducing risks.
It was told a lot about all sorts of user cases and possible options for protecting applications in the clouds. It looked like this:

Tuesday keynote
After the first series of reports, a long session of
Tuesday Keynote began - very, sometimes not very interesting people spoke, mostly heads of companies and leading experts in the field of cloud technologies. They talked about their experience in building clouds (Google, Rackspace) and about the directions that their companies will develop in the near future.

EXPO
At the exhibition, I talked to the Racksapce traders. I know a lot about them and used their OpenStack, so the conversation did not have a consulting character.

Stand EnterpriseDB PostgreSQL was sad and the consultant even during the conversation stuck into your iPhone and reluctant to answer questions

Compuware - the company engaged in performance tests and optimization had a gorgeous booth and very friendly and active consultants. Prior to this, one of their representatives was leading at yesterday’s seminar; this made it possible to easily communicate with the guys and ask them some questions that interest me about performance testing.

The Datanational company, which deals with the DR procedure for everything, received a question from me, which they promised to answer tomorrow. “How easy and simple is it to make Oracle RDS DRs in another region?” Was my question. This is really a pain in ass for many people. In general, I doubt that they are in the subject.

One of the discoveries for me was the company Zadara. They provide a very interesting service - fast drives for AWS EC2 interns. Next to the Amozon data center in the EAST region, they have a cluster of SSD drives that provides 5k + iops via iSCSI or nfs. True, interesting ?!

Beyond EBS
Dave Wright told a story about how AWS outstripped its competitors by several years, creating and implementing EBS technology. The evolution of EBS was shown:

The rest of the industry is 3-5 years away from EBS and looks like this:

Much has been told about the effectiveness of data warehousing, and of course advertising their product - storage based on flash drives.
Automating Cloud Applications Using Open Source
The guys from BrightTag told “Success Story” about how they created a product to manage resources in the clouds. And the band cloud is absolutely unimportant.

Their software can manage resources anywhere, is especially important for private clouds, where sometimes there are no concepts of auto-scaling and a load balancer. The guys write OpenSource to earn money on:

Afterword
The second day of the conference was more interesting: presentations, kinotes and an exhibition ... But, of course, it seems the most important thing that can be expected from this event is networking. There are a lot of people here who have no idea about the clouds and came to listen and find out what it is. When you have already eaten a dog on the most distinguished cloud technologies, a little can surprise you.