Sina SAE to build a safe and reliable public cloud

With the rapid development of cloud computing, cloud services have become the new darling of many enterprises, and many cloud service providers are emerging in the Chinese market. Therefore, we have launched the "cloud service Provider Survival Law" this topic. "The cloud service provider survival rule" mainly through to China's typical IaaS, PaaS, SaaS provider of in-depth interviews, on the one hand, let users understand the major suppliers of competitive advantages and survival, promote the application of cloud computing familiarity and acceptance, at the same time, China's cloud computing market situation has a more comprehensive display.

Recently, we had the opportunity to interview the Sina Cloud computing chief architect Mr. Conglei, listen to him tell us about Sina cloud computing in the domestic market survival.

Sina SAE to build a safe and reliable public cloud

When it comes to cloud computing, many people think about cloud security, and it's important to put data and other information on the security of the cloud. When asked about the SAE in these years of change, Conglei said: "The main technical improvements in the SAE or safety, safety is the SAE to do the public cloud the most important concern, can say that 80% of technical improvements are based on safety and reliability." The most recent technical improvement is the sandbox, the earliest sandbox is at the language level, now the sandbox has done three-dimensional, whether it is the operating system level, or language and level, including the Web server level. So, most of our technical improvements are geared toward how to improve the isolation and reliability of applications. ”

Conglei cloud security into several layers, he said: "For security issues, divided into many layers of problems, the bottom is the platform security." Platform Security we believe that it is the security of any enterprise's basic it, including the machine's login rights, directory management, the building of the whole room, cleaning room and so on a full range of solutions security, which are the traditional basic IT security. The platform is the unique security of cloud computing, from the SAE look, cloud-specific security is mainly divided into two aspects, on the one hand, to ensure the user's data security, on the other hand, to ensure that the user's account security. ”

Data security. Conglei from the SAE point of view on data security and account security two aspects of detailed analysis, he believes that the SAE data security is divided into two parts, part of the user code, part of the user data. He said: "The code part, if just a static file, no one to visit, these two people's files even if put together for a long time, will not access each other, absolutely safe, because no one triggers it." So all the unsafe factors are due to the execution body, there will be code to execute. So code insecurity is the root cause. Cloud code security is different from traditional code security, traditional code security from the internal enterprise, but the cloud code is the user, we do not see the user's code. For the code this aspect, Sina has its own sandbox mechanism. The sandbox mechanism guarantees the execution of all the user's code, which protects the user's memory, files, I/O, and other resource usage. We also have code security here, and prevent code loss and other measures, for commercial enterprises, can send encrypted code to the SAE, this is an effective measure. ”

The second part of the user data security, Sina also has effective security measures. He said: "On the SAE, user data security all requests must pass the signature data authentication to be able to access." In addition, for the most important data like MySQL, the data will have a double permission check. In other words, even if my data password is known to others, I still can't access my data because there is a second level of validation. ”

There is a bridge between code security and data security, the network. Now the network environment is very complex, the security of the network can not be neglected. In this respect, the Sina SAE also has a very perfect plan. Conglei said: "Network security has from outside to inside the security, is outside can attack the enterprise inside, in this respect, we mainly provide the application firewall." Application firewall is mainly to prevent competitors to the company's application of malicious attacks. And from the inside out of the security is another, our main measure is that all of our network operations (more than three layers) will be SAE protection, SAE will check your operation is correct, whether reasonable. ”

Account security. "The login for all the accounts on the SAE is authenticated through multiple layers, for example, if you want to delete an application, you will need a two validation." In addition, our account and management system has a corresponding system. In the same team, no one has multiple administrative rights, Sina has a very strict authority management mechanism. Sina will also have a security mechanism for consumer consumption, there will be warnings and reminders for users ' abnormal consumption. "Conglei said.

To sum up, through a variety of measures, from the network to data to the account, Sina has guaranteed the user in the SAE security.

Sina Cloud service Survival Way: Break the public cloud difficulties SAE support

For the current domestic small and medium-sized enterprises more optimistic about private cloud market, and the public cloud market has rejected the argument, Conglei that there is a certain truth. "It is far more difficult to make a public cloud in China than a private cloud, both in size and security, much harder than private clouds," he said. Conversely, it would be fairly easy for a business to make a private cloud out of a public cloud. Just like Amazon, which is now a successful public cloud, if Amazon launches a private cloud solution, it will be a success for customers to stare at. This means two layers of meaning, although the public cloud is difficult, but once the public cloud succeeds, the road behind will be very flat. In China, if there is no public cloud, only private cloud, it will be very difficult to promote. Do the public cloud is a long-term development, must have patience, not from the beginning to get everyone's approval. On the contrary, for example, the SAE in the public cloud can be said to be ranked ahead in the country, once the introduction of private cloud services, users will be very recognized. This kind of meaning is complementary, just like many people use this kind of service, naturally want to take home use of the truth. ”

This shows that Sina cloud computing is committed to the public cloud market to make a world. Conglei further from the application of Sina products and business model to explain Sina's achievements in the public cloud. He said: "SAE product line there are many, each product line will have a specific application of the crowd." First, SAE's PAAs platform, it has several special users, the first user is a common user, grassroots or individual developers or small teams, this user is concerned about if the savings, for this user is a high share of the relatively inexpensive and reliable platform; For enterprises, such as the University of the universities And companies like Citic Bank, perfect time, Audi, Adidas, and so on, are more likely to be more reliable, and they want it to be a separate, isolated environment. So what we are using for them is a VPC way to provide a separate and isolated operating environment for the enterprise. Cloud Store is another product line, cloud store users do not write code, users only need to log into the cloud store can quickly find a suitable service. Another product is the service store, which is intended for users who are providers of APIs. ”

When it comes to SAE's business model, Conglei said: "The SAE business model is relatively simple, one is the grassroots developers small team, there is a class of large and medium-sized enterprises." For those who are unwilling to work technology, we recommend them to the cloud store to buy mature products. For technical support users, we recommend that they use the SAE PAAs platform. For individual developers, our business model is to earn cloud beans through resources, through the user CPU, hard disk, memory usage to the price of the charge. For large enterprises, the service charge mainly to the enterprise annual fee. ”

Strong Partnership Sina strives to expand China's cloud computing market

China's current cloud computing market is slightly slower than foreign countries, and the reason for this, Conglei, said: "There is a process of understanding cloud computing in foreign markets, such as when Amazon enters the public cloud market, there are not many companies to choose cloud computing products." But with Amazon's intellectual transformation, more and more companies are willing to choose Amazon's cloud computing products. During this time, mailing a turning point, on the one hand, is the famous small companies, such as Twitter, they choose Amazon services, gradually bigger, and make a reputation, this is certainly a big publicity for Amazon. On the other hand, brand effects, like what I know about the CIA, will use Amazon as a choice. This is equivalent to an incentive for the US cloud computing market. China, in turn, is more complicated than America. First, we are relatively late to start, including concepts, technology, etc. Then there is China because of the network environment and the special situation of monitoring, but also make the domestic cloud computing market than abroad more complex. The third is the trust of Chinese users in cloud computing. China may not have a completely neutral company to do cloud computing. There will be some relatively neutral companies in the US, but in China it is basically a few big internet companies doing the public cloud. For example, Tencent, Baidu, Sina, so that China lacks a completely neutral company, this will lead to a decline in user trust. Therefore, the above reasons have led to China's cloud computing, especially public cloud development compared with foreign countries slightly slower. ”

In addition to the public cloud market, Conglei the private cloud market: "In the private cloud market, the demand for a private cloud market, whether IaaS or PAAs, remains to be tapped." That is, is there a compelling reason why users should choose a private cloud? At present, it is still a question mark for the enterprise. In addition, there are many downsides to pushing the private cloud, such as cost or corporate protection, which can also inhibit the development of private clouds. In the first two years of private cloud development, there will be some bad atmosphere in the country, such as the use of cloud computing in the name of enclosure, large-scale civil engineering. These also have a bad impact on private cloud construction, including cloud computing. "So it's because the public cloud and the private cloud are at home, leading to the slow development of domestic cloud computing."

For the slow development of the Chinese market, Sina in the future has a very long-term goal, in this regard, Conglei said: "Sina's goal in the future is to expand the size of the enterprise, so that more users to use cloud computing products." Also hope that with Baidu, Ali and other cloud computing companies to the Chinese cloud computing bigger, because after all, it is not the time to divide the cake, we have a small understanding of it, I hope that we together to the cloud computing market to cultivate. "In addition, Conglei also said that Sina's another development plan:" Another goal is the hope that the product penetrates the enterprise market, can let the enterprise use the cloud technology. ”

For Sina hopes and Baidu, Ali and other cloud service providers to expand China's cloud computing market, the attitude of the small series that is the so-called strong together, I believe that can help the future of China's cloud computing market is larger, technology more outstanding.

(Responsible editor: The good of the Legacy)