<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>data centre &#8211; Best DevOps</title>
	<atom:link href="https://www.bestdevops.com/tag/data-centre/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.bestdevops.com</link>
	<description>Lets Learn, Do it &#38; Share! Thats a Best DevOps!!!</description>
	<lastBuildDate>Wed, 14 Oct 2026 14:06:30 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Software-defined storage unlocks opportunity for managed service providers</title>
		<link>https://www.bestdevops.com/software-defined-storage-unlocks-opportunity-for-managed-service-providers/</link>
					<comments>https://www.bestdevops.com/software-defined-storage-unlocks-opportunity-for-managed-service-providers/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Wed, 21 Oct 2020 09:55:17 +0000</pubDate>
				<category><![CDATA[Micro Services]]></category>
		<category><![CDATA[commoditised]]></category>
		<category><![CDATA[data centre]]></category>
		<category><![CDATA[focus]]></category>
		<category><![CDATA[maximise]]></category>
		<category><![CDATA[micro-services]]></category>
		<category><![CDATA[Opportunity]]></category>
		<category><![CDATA[standardise]]></category>
		<category><![CDATA[virtualisation]]></category>
		<category><![CDATA[virtualised]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=14048</guid>

					<description><![CDATA[Source:-https://www.itweb.co.za The managed service provider (MSP) market is extremely competitive and fraught with challenges. MSPs need to offer competitive pricing [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://www.itweb.co.za</p>
<p>The managed service provider (MSP) market is extremely competitive and fraught with challenges. MSPs need to offer competitive pricing to make their offerings attractive to customers, but at the same time require the agility to develop and deliver solutions that support the customer journey into the cloud. MSPs also need to meet and exceed service level agreements (SLAs) to maintain their customer base. They also need to avoid vendor lock-in, which may isolate potential customers, simplify their solution stack to streamline management and operations, and ensure their technology is always up to date. Achieving all of this can be impossible without the right foundation in place, which is where software-defined storage (SDS) comes in.</p>
<p><strong>Standardising hardware is the key</strong></p>
<p>SDS is the ideal supporting platform to help MSPs build and deliver solutions and easily manage and operate them. By decoupling hardware and software, SDS allows MSPs to take advantage of their choice of server technology and server architecture. This ensures a vendor-agnostic approach, while at the same time enabling MSPs to standardise on their hardware, using commodity servers, cloud architecture or a combination of the two.</p>
<p>By unifying block, object and file for hypervisors, containers, backup and cloud workloads, the result is a scale-out, resilient and distributed architecture that maximises availability and protects against hardware failure. Essentially, SDS brings significant simplicity into the framework for enhanced predictability in an elastic solution that can scale to thousands of nodes as demand increases, without disrupting service.</p>
<p>The ultimate goal is to establish a fabric that can support a variety of workloads, including virtualisation, containers and backup, and meet today’s data infrastructure challenges through a single domain.</p>
<p><strong>Ideal for MSPs</strong></p>
<p>The backbone of SDS is highly supportive of a multi-tenancy environment and simplifies management of the technology stack that goes with it, regardless of the storage or workloads that are being run. SDS also supports all providers, ensuring there is no vendor lock-in, giving ultimate flexibility in the choice of hardware, development and deployment options.</p>
<p>A single management and presentation layer not only simplifies complexity, it also collapses storage silos into a single management interface to eliminate mass data fragmentation. By deploying a software-defined layer on top of commoditised hardware, across various clusters including virtualised, bare metal, containers and the cloud, a truly agile infrastructure can be created. This also mitigates the risk of technology refreshes, which can be absorbed without creating disruption or downtime.</p>
<p>Virtual disks deliver a utility storage framework on the back end, for granular provisioning of volumes with enterprise storage functionality. This elastic infrastructure eliminates downtime across the spectrum. It also further delivers on agility by automating management of the underlying hardware and infrastructure, removing this from day-to-day administrative tasks.</p>
<p><strong>Focus on customers, not tin</strong></p>
<p>Using SDS, MSPs can solve new infrastructure challenges in a distributed way, enabling seamless cloud integration and adoption, supporting the hybrid cloud journey and allowing for enterprise data protection through data distribution.</p>
<p>SDS provides storage for virtual environments, seamlessly integrates with various container orchestrators, and serves as a single backup storage target, regardless of which backup software solution is in use. This improves efficiency, allowing MSPs to extend their service offerings easily, scale without performance degradation and support their clients’ multi-cloud strategy with persistent, high-availability storage.</p>
<p>MSPs are able to maximise their total cost of ownership, simplicity and scale, which lends itself to multiple use cases. From agile container footprints to micro-services and virtualisation, MSPs are able to drive a single data centre model across regions that provides absolute uptime and high availability. SDS essentially transforms commodity hardware into an elastic, resilient, modern storage solution that allows MSPs to focus on customers and application sets, rather than on the underlying hardware needed to deliver services.</p>
<p>&nbsp;</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/software-defined-storage-unlocks-opportunity-for-managed-service-providers/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Bharti Airtel Partners with AWS to Expand Enterprise Cloud Services in India</title>
		<link>https://www.bestdevops.com/bharti-to-widen-cloud-services-for-enterprises-with-aws-pact/</link>
					<comments>https://www.bestdevops.com/bharti-to-widen-cloud-services-for-enterprises-with-aws-pact/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Thu, 06 Aug 2020 06:07:29 +0000</pubDate>
				<category><![CDATA[AWS]]></category>
		<category><![CDATA[Airtel Cloud]]></category>
		<category><![CDATA[data centre]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[IT automation]]></category>
		<category><![CDATA[Software-Market]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=13139</guid>

					<description><![CDATA[Bharti Airtel and Amazon Web Services have joined forces to broaden Airtel's cloud offerings for enterprise customers, targeting a rapidly growing Indian public cloud market.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>Originally reported by <a href="https://www.thehindu.com" rel="noopener">The Hindu</a> on 5 August 2020.</em></p>



<h2 class="wp-block-heading">Airtel and AWS Form Strategic Cloud Partnership</h2>



<p class="wp-block-paragraph">Bharti Airtel Ltd. and Amazon Web Services (AWS) announced a strategic partnership aimed at expanding Airtel&#8217;s enterprise cloud business in India. The agreement enables Airtel to offer a significantly broader range of cloud products and managed services to its large enterprise and SMB customer base.</p>



<p class="wp-block-paragraph">At the time of the announcement, Airtel reported serving more than 2,500 large enterprises and over one million emerging businesses through its product portfolio, which includes <strong>Airtel Cloud</strong> — its multi-cloud product and solutions business.</p>



<h2 class="wp-block-heading">What the Partnership Covers</h2>



<p class="wp-block-paragraph">Under the agreement, Airtel Cloud will establish an <strong>AWS Cloud Practice</strong> backed by AWS Professional Services. The collaboration is structured around three main pillars:</p>



<ul class="wp-block-list">
<li><strong>AWS Cloud Practice:</strong> Airtel Cloud will develop a dedicated AWS practice, giving enterprise customers access to AWS Professional Services expertise through an Airtel-led engagement model.</li>
<li><strong>Differentiated Airtel Cloud Products:</strong> New cloud products and capabilities will be built by combining AWS services with Airtel&#8217;s own data centre infrastructure, network assets, and telecoms offerings — aiming to produce solutions not available from either company alone.</li>
<li><strong>Integrated Sales and Support:</strong> Enterprise customers will receive a unified sales, consulting, and support experience from both Airtel and AWS teams, along with enhanced security, scalability, and cloud management capabilities.</li>
</ul>



<h2 class="wp-block-heading">Why This Matters: India&#8217;s Growing Public Cloud Market</h2>



<p class="wp-block-paragraph">The timing of the partnership reflects broader momentum in India&#8217;s enterprise technology sector. According to International Data Corporation (IDC) figures cited at the time of the announcement, India&#8217;s public cloud services market was valued at approximately <strong>$3.4 billion in 2020</strong> and was projected to reach <strong>$7.1 billion by 2024</strong> — representing significant compound annual growth.</p>



<p class="wp-block-paragraph">For Airtel, partnering with AWS positions the telco to compete more aggressively for a share of this expanding market, moving beyond traditional connectivity services into higher-margin managed cloud and professional services.</p>



<h2 class="wp-block-heading">The Telco-Cloud Convergence Trend</h2>



<p class="wp-block-paragraph">The Airtel–AWS deal is part of a broader global trend in which telecommunications operators leverage their existing network infrastructure, data centre footprint, and enterprise customer relationships to compete in the cloud services space. Telcos bring several natural advantages to this market:</p>



<ul class="wp-block-list">
<li><strong>Network edge infrastructure:</strong> Proximity to customers enables low-latency cloud delivery, particularly relevant for hybrid and edge computing use cases.</li>
<li><strong>Existing enterprise relationships:</strong> Large telcos already hold long-term contracts with enterprises for connectivity, making cross-selling cloud services a lower-friction opportunity.</li>
<li><strong>Data centre assets:</strong> Many telcos operate their own data centres, which can be integrated with hyperscaler infrastructure to create differentiated hybrid offerings.</li>
</ul>



<p class="wp-block-paragraph">By combining Airtel&#8217;s network and data centre capabilities with AWS&#8217;s cloud platform and professional services expertise, the partnership is designed to address the full cloud adoption lifecycle for Indian enterprises — from initial migration consulting through to ongoing managed operations.</p>



<h2 class="wp-block-heading">Implications for Enterprise DevOps Teams in India</h2>



<p class="wp-block-paragraph">For DevOps and platform engineering teams operating within Indian enterprises, this kind of partnership can have practical implications:</p>



<ul class="wp-block-list">
<li><strong>Broader procurement options:</strong> Enterprises already purchasing connectivity services from Airtel may be able to consolidate cloud procurement under a single vendor relationship.</li>
<li><strong>Access to AWS services through a local partner:</strong> Airtel&#8217;s Professional Services layer, backed by AWS, could provide localised support for cloud migrations, architecture reviews, and DevOps toolchain implementations.</li>
<li><strong>Hybrid and multi-cloud architectures:</strong> The combination of Airtel&#8217;s on-premises data centre capabilities with AWS public cloud services is particularly suited to enterprises with regulatory or latency requirements that prevent a full public-cloud migration.</li>
</ul>



<h2 class="wp-block-heading">Video Overview</h2>



<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio">
<div class="wp-block-embed__wrapper">
<iframe  id="_ytid_47557"  width="675" height="379"  data-origwidth="675" data-origheight="379" src="https://www.youtube.com/embed/?enablejsapi=1&#038;list=PLTCuRW0ikUdMFARYSiWm733n1DcCem6bN&#038;autoplay=0&#038;cc_load_policy=0&#038;cc_lang_pref=&#038;iv_load_policy=1&#038;loop=0&#038;rel=1&#038;fs=1&#038;playsinline=0&#038;autohide=2&#038;theme=dark&#038;color=red&#038;controls=1&#038;disablekb=0&#038;" class="__youtube_prefs__  epyt-is-override  no-lazyload" title="YouTube player"  allow="fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen data-no-lazy="1" data-skipgform_ajax_framebjll=""></iframe>
</div>
</figure>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/bharti-to-widen-cloud-services-for-enterprises-with-aws-pact/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Google Cloud and HCL Expand Partnership to Strengthen E-Commerce and Hybrid Cloud Capabilities</title>
		<link>https://www.bestdevops.com/google-cloud-and-hcl-strengthen-partnership-bolster-e-commerce-cx/</link>
					<comments>https://www.bestdevops.com/google-cloud-and-hcl-strengthen-partnership-bolster-e-commerce-cx/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Sat, 06 Jun 2020 07:37:03 +0000</pubDate>
				<category><![CDATA[Google Cloud]]></category>
		<category><![CDATA[data centre]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[Google cloud]]></category>
		<category><![CDATA[IT automation]]></category>
		<category><![CDATA[IT-announcement]]></category>
		<category><![CDATA[Software technology]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=12809</guid>

					<description><![CDATA[Google Cloud becomes the preferred cloud platform for HCL Commerce, while HCL plans to leverage Anthos for multi-cloud and hybrid deployments — part of a broader push to modernise enterprise e-commerce infrastructure.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>Originally reported by <a href="https://datacentrenews.eu" rel="noopener noreferrer" target="_blank">datacentrenews.eu</a>. Original announcement date: June 2020.</em></p>



<h2 class="wp-block-heading">HCL Commerce Moves to Google Cloud</h2>



<p class="wp-block-paragraph">HCL Technologies and Google Cloud announced an expanded partnership that makes Google Cloud the preferred cloud platform for HCL Commerce. The agreement is designed to give businesses access to Google&#8217;s global infrastructure combined with HCL&#8217;s commerce platform, enabling more scalable, data-driven customer experiences across industries.</p>



<p class="wp-block-paragraph">According to the two companies, the integration aims to help organisations execute digital transformation strategies more rapidly — particularly relevant as retail and e-commerce businesses accelerate their shift to cloud-native operations.</p>



<h2 class="wp-block-heading">What the Partnership Covers</h2>



<ul class="wp-block-list">
<li><strong>Preferred cloud platform:</strong> Google Cloud becomes the primary infrastructure provider for HCL Commerce deployments, offering global edge presence, elasticity, and reliability.</li>
<li><strong>Multi-cloud and hybrid deployments via Anthos:</strong> HCL has stated its intention to leverage Google&#8217;s Anthos platform to support multi-cloud and hybrid-cloud HCL Commerce deployments, giving enterprises flexibility in where and how they run workloads.</li>
<li><strong>Joint product roadmap:</strong> The launch of HCL Commerce on Google Cloud is described as the first of several planned joint offerings, with future focus areas including application modernisation, data centre optimisation, and database value unlock.</li>
<li><strong>Global partner ecosystem:</strong> HCL&#8217;s implementation partner network will support delivery of the combined commerce solution across verticals.</li>
</ul>



<h2 class="wp-block-heading">Executive Perspectives</h2>



<p class="wp-block-paragraph">Darren Oberst, HCL Corporate Vice President and Head of Software, framed the collaboration in terms of business resilience:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"><p>&#8220;The collaboration between Google Cloud and HCL Commerce is helping customers rapidly execute their digital transformation strategy that is rooted in the new normal. With the support of our global implementation partner ecosystem, we can now deliver a proven, comprehensive commerce solution across all industries, handling the challenges of today and in the future.&#8221;</p></blockquote>



<p class="wp-block-paragraph">Kalyan Kumar, HCL Chief Technology Officer and Corporate Vice President, highlighted the broader product collaboration:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"><p>&#8220;The HCL Google Cloud Business Unit is enabling product collaboration across HCL Software and Google Cloud. The launch of HCL Commerce on Google Cloud is the first among a number of planned joint offerings built around application modernisation, data centre and database value unlock.&#8221;</p></blockquote>



<p class="wp-block-paragraph">Kevin Ichhpurani, Google Cloud Corporate Vice President, emphasised the customer experience angle:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"><p>&#8220;It is more important than ever for firms spanning all industries to deliver strong, customer-centric eCommerce experiences. We&#8217;re proud that Google Cloud infrastructure will power HCL Commerce, helping businesses leverage the elasticity and reliability of Google Cloud and ultimately delivering positive eCommerce experiences for customers around the world.&#8221;</p></blockquote>



<h2 class="wp-block-heading">Why Anthos Matters for Hybrid E-Commerce Deployments</h2>



<p class="wp-block-paragraph">The planned use of Google&#8217;s Anthos platform is a technically significant element of this partnership. Anthos is Google&#8217;s managed application platform that lets organisations run containerised workloads consistently across on-premises infrastructure, Google Cloud, and other public clouds. For enterprise retailers with existing on-premises investments — common in the HCL Commerce customer base — Anthos provides a migration path that avoids a hard cutover to public cloud, instead enabling a gradual or permanent hybrid model.</p>



<p class="wp-block-paragraph">This is particularly relevant for e-commerce platforms that must handle highly variable traffic spikes (such as seasonal peaks) while keeping sensitive transactional data under tighter control where compliance requires it.</p>



<h2 class="wp-block-heading">Broader Context: Google Cloud&#8217;s Partner Expansion Strategy</h2>



<p class="wp-block-paragraph">The HCL announcement was part of a wider pattern of Google Cloud deepening enterprise partnerships in mid-2020. Around the same period, Google Cloud expanded its relationship with Dell Technologies, which included the launch of a joint hybrid cloud storage system capable of handling high-performance workloads of up to 50 petabytes.</p>



<p class="wp-block-paragraph">That Dell-Google solution was designed for workloads requiring high throughput and low-latency file storage — such as video streaming services supporting 4K content — and allowed movement of demanding workloads in a single filesystem between on-premises Dell infrastructure and Google Cloud.</p>



<p class="wp-block-paragraph">Kris Day, Dell Vice President of Modern Data Centre for Asia Pacific and Japan, described the strategic intent:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"><p>&#8220;Our new advancements affirm our belief that cloud is an accelerator for innovation, as well as underpin our go-to-market strategy of bringing the cloud operating model spanning edge, private and public clouds with consistent infrastructure and operations. These Dell Technologies Cloud updates are designed to support our customers across Asia Pacific and Japan who are investing in multi-cloud strategies that include hybrid, public and private cloud environments to meet different needs for a variety of data workloads — mission-critical applications, AI and ML workloads, as well as developer environments.&#8221;</p></blockquote>



<h2 class="wp-block-heading">Key Takeaways for DevOps and Platform Engineers</h2>



<ul class="wp-block-list">
<li><strong>HCL Commerce on Google Cloud</strong> signals growing enterprise appetite for fully managed, cloud-native commerce infrastructure rather than self-hosted deployments.</li>
<li><strong>Anthos as a bridge layer</strong> is becoming a recurring pattern for ISVs looking to support hybrid deployments without forking their product for each environment.</li>
<li><strong>Multi-cloud is a selling point, not just a technical option</strong> — vendors are explicitly calling out multi-cloud flexibility as a business requirement, not just an architectural preference.</li>
<li><strong>Platform partnerships drive go-to-market</strong>: Joint business units (like the HCL Google Cloud Business Unit mentioned here) are increasingly the vehicle through which cloud providers and ISVs co-develop and co-sell solutions.</li>
</ul>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/google-cloud-and-hcl-strengthen-partnership-bolster-e-commerce-cx/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Azure Confidential Computing Built on Intel SGX Hardware: What DevOps Engineers Need to Know</title>
		<link>https://www.bestdevops.com/what-is-azure-confidential-computing-built-on-intel-hardware/</link>
					<comments>https://www.bestdevops.com/what-is-azure-confidential-computing-built-on-intel-hardware/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Mon, 04 May 2020 07:57:12 +0000</pubDate>
				<category><![CDATA[Azure]]></category>
		<category><![CDATA[COVID-19]]></category>
		<category><![CDATA[data centre]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Software-Market]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=12189</guid>

					<description><![CDATA[Azure's DCsv2-Series VMs use Intel SGX hardware to protect data in use inside secure enclaves—closing the last major gap in cloud data security. Here's how it works and why it matters for DevOps teams.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">Data security in the cloud typically covers two states: data at rest (encrypted on disk) and data in transit (encrypted over the network). There has historically been a third, harder problem: protecting data <em>while it is being processed in memory</em>. Azure Confidential Computing, delivered through the DCsv2-Series virtual machines, addresses this gap using hardware-enforced trusted execution environments (TEEs) built on Intel Software Guard Extensions (SGX).</p>



<h2 class="wp-block-heading">What Is Confidential Computing?</h2>



<p class="wp-block-paragraph">Confidential computing is a security model that uses hardware-based mechanisms to isolate and protect data while it is in use—that is, while code is actively processing it inside CPU memory. The goal is to ensure that even privileged software layers (the hypervisor, the host operating system, or a cloud provider&#8217;s own administrators) cannot access the plaintext data being worked on.</p>



<p class="wp-block-paragraph">The term and the surrounding ecosystem are governed by the <strong>Confidential Computing Consortium (CCC)</strong>, a project under the Linux Foundation. Members include Microsoft, Intel, Google, IBM, and other major technology vendors, who collaborate to standardize TEE interfaces and promote open-source tooling for enclave development.</p>



<h2 class="wp-block-heading">Azure DCsv2-Series VMs and Microsoft&#8217;s Role</h2>



<p class="wp-block-paragraph">Microsoft&#8217;s DCsv2-Series virtual machines are designed specifically for confidential computing workloads. According to Microsoft, launching this VM series made it one of the first cloud providers to offer virtualized confidential computing as a generally available product. The VMs run on physical hosts equipped with Intel SGX-capable processors, and each VM can allocate a portion of protected memory—called Enclave Page Cache (EPC)—for enclave execution.</p>



<p class="wp-block-paragraph">From a DevOps perspective, workloads targeted at these VMs must be either:</p>



<ul class="wp-block-list">
<li><strong>Enclave-aware applications</strong> written or ported using the Intel SGX SDK, Open Enclave SDK, or similar frameworks.</li>
<li><strong>Lift-and-shift confidential workloads</strong> where a compatibility layer (such as a library OS) runs an unmodified application inside an enclave.</li>
</ul>



<h2 class="wp-block-heading">How Intel SGX Creates Trusted Execution Environments</h2>



<p class="wp-block-paragraph">Intel Software Guard Extensions (SGX) is a set of CPU instructions that allow an application to create private memory regions called <strong>enclaves</strong>. Key properties of SGX enclaves include:</p>



<ul class="wp-block-list">
<li><strong>Memory encryption:</strong> The CPU encrypts enclave memory automatically. Data decrypts only inside the physical CPU package, so DRAM snooping yields only ciphertext.</li>
<li><strong>Isolation from privileged software:</strong> The OS, hypervisor, and BIOS cannot read enclave contents, even with ring-0 access or physical access to the server.</li>
<li><strong>Remote attestation:</strong> A relying party (e.g., a client sending sensitive data) can cryptographically verify that a specific, unmodified enclave is running on genuine SGX hardware before sending secrets to it.</li>
<li><strong>Sealing:</strong> An enclave can encrypt data to a key derived from the enclave&#8217;s identity and the platform, so sealed secrets can only be reopened by the same enclave on the same hardware.</li>
</ul>



<p class="wp-block-paragraph">Intel describes SGX as the most widely researched and deployed application isolation technology in this category. The Open Enclave SDK, maintained as an open-source project within the CCC, provides a cross-platform API so developers can write enclave code that targets SGX (and other TEE types) without being locked to a single hardware vendor&#8217;s SDK.</p>



<h2 class="wp-block-heading">Why the &quot;Data in Use&quot; Gap Matters</h2>



<p class="wp-block-paragraph">Traditional cloud security controls protect data at rest and in transit well. The remaining exposure occurs the moment a cloud service decrypts data to process it. At that point, a compromised hypervisor, a malicious insider with administrative access, or a memory-scraping attack could theoretically read the plaintext. Regulatory frameworks such as GDPR, HIPAA, and financial sector requirements make this a compliance concern, not just a theoretical one.</p>



<p class="wp-block-paragraph">Confidential computing shrinks this attack surface by keeping data encrypted even while in use. The attack surface moves down to the CPU&#8217;s microarchitecture—a much harder target than software-layer exploits.</p>



<h2 class="wp-block-heading">Practical Use Cases</h2>



<p class="wp-block-paragraph">Confidential computing unlocks several scenarios that are difficult or impossible to accomplish safely with conventional cloud architectures:</p>



<h3 class="wp-block-heading">Multi-Party Computation</h3>



<p class="wp-block-paragraph">Multiple organizations can contribute sensitive datasets to a shared computation (for example, banks pooling transaction records for fraud-detection analytics) without any party exposing raw data to the others or to the cloud operator. Each party&#8217;s data enters the enclave encrypted; results exit, but intermediate plaintext never leaves the enclave boundary.</p>



<h3 class="wp-block-heading">Confidential Machine Learning</h3>



<p class="wp-block-paragraph">Multiple parties can collaborate to train a machine learning model on combined datasets—such as anonymized health records from different providers—without sharing the underlying data. The enclave enforces that only the agreed-upon model training code runs on the combined data.</p>



<h3 class="wp-block-heading">Secure Database Query Processing</h3>



<p class="wp-block-paragraph">Database engines running inside enclaves can process encrypted queries without the database administrator or cloud provider being able to view query contents or result sets. This removes the need to fully trust the database operator with sensitive business data.</p>



<h3 class="wp-block-heading">Trusted Remote Virtual Machines</h3>



<p class="wp-block-paragraph">Enterprises running workloads in a partner&#8217;s or third-party cloud environment can use remote attestation to verify that their code is running in an intact enclave on genuine SGX hardware before transmitting secrets, removing dependence on contractual trust alone.</p>



<h2 class="wp-block-heading">The Confidential Computing Consortium and Open-Source Ecosystem</h2>



<p class="wp-block-paragraph">The Confidential Computing Consortium, hosted under the Linux Foundation, sets the governance rules for interoperability standards and open-source projects related to TEEs. Its primary open-source outputs include:</p>



<ul class="wp-block-list">
<li><strong>Open Enclave SDK:</strong> A cross-platform SDK for writing enclave applications that can target multiple TEE technologies.</li>
<li><strong>Enarx:</strong> A runtime for deploying applications in TEEs without rewriting them, supporting multiple hardware backends.</li>
<li><strong>Gramine (formerly Graphene-SGX):</strong> A library OS allowing unmodified Linux applications to run inside SGX enclaves.</li>
</ul>



<p class="wp-block-paragraph">The nonprofit governance model is intended to prevent any single vendor from controlling the standards, ensuring interoperability across cloud platforms and TEE implementations from different hardware vendors.</p>



<h2 class="wp-block-heading">Architectural Considerations for DevOps Teams</h2>



<p class="wp-block-paragraph">Before planning a confidential computing deployment on Azure DCsv2-Series VMs, DevOps and platform engineering teams should evaluate:</p>



<ul class="wp-block-list">
<li><strong>EPC size constraints:</strong> SGX enclave memory (EPC) is limited and managed by the CPU. Applications requiring large in-memory datasets may need architectural changes to process data in smaller chunks.</li>
<li><strong>Performance overhead:</strong> Context switches between trusted and untrusted execution zones and EPC paging introduce latency. Benchmark your specific workload; overhead varies significantly by access pattern.</li>
<li><strong>Attestation infrastructure:</strong> Remote attestation requires integrating with Intel&#8217;s attestation service or Microsoft Azure Attestation. This is a non-trivial pipeline addition.</li>
<li><strong>SDK and language support:</strong> SGX development is most mature for C and C++. Higher-level language support (Rust, Go, Python) exists through library OS approaches but adds complexity.</li>
<li><strong>Patching cadence:</strong> SGX has been subject to microarchitectural side-channel research (such as Spectre variants targeting enclaves). Keeping SGX platform software and microcode updated is essential.</li>
</ul>



<h2 class="wp-block-heading">Summary</h2>



<p class="wp-block-paragraph">Azure Confidential Computing on DCsv2-Series VMs, powered by Intel SGX, addresses the historically unprotected attack surface of data in use. By running sensitive workloads inside CPU-enforced encrypted enclaves, organizations can reduce reliance on organizational trust in cloud administrators, satisfy regulatory requirements for data confidentiality, and enable entirely new categories of multi-party and collaborative computation. For DevOps engineers, the practical challenges lie in EPC capacity planning, attestation pipeline integration, and the additional complexity of enclave-aware application development—areas worth investing in for workloads where data sensitivity is high.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/what-is-azure-confidential-computing-built-on-intel-hardware/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Assessing Data Centre Strategies for Cloud-Scale Software</title>
		<link>https://www.bestdevops.com/assessing-data-centre-strategies-for-cloud-scale-software/</link>
					<comments>https://www.bestdevops.com/assessing-data-centre-strategies-for-cloud-scale-software/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Wed, 18 Oct 2017 05:54:30 +0000</pubDate>
				<category><![CDATA[Agile]]></category>
		<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[Agile Development]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[cloud-scale software]]></category>
		<category><![CDATA[data centre]]></category>
		<category><![CDATA[data centre strategies]]></category>
		<category><![CDATA[Digital Transformation]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=2839</guid>

					<description><![CDATA[Cloud-scale software demands a fundamentally different data centre strategy than traditional enterprise applications. This article examines the four key characteristics — multi-tenancy, DevOps agility, elastic scale, and powerful analytics — that should shape your infrastructure decisions.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">The rapid advancement of cloud-scale software is reshaping nearly every facet of modern life. How we work, communicate, shop, manage money, and access healthcare looks radically different from even five years ago. Underpinning that transformation is the rise of cloud-based software — SaaS platforms, eCommerce sites, fintech and health-tech applications, IoT-enabled services, and AI-driven experiences such as autonomous vehicles and smart-home systems.</p>



<p class="wp-block-paragraph">Data centre strategies for cloud-scale software are fundamentally different from those designed to support traditional, on-premises enterprise applications. Whether workloads are hosted on public IaaS, in a private cloud, or in a managed private cloud, infrastructure planners need to account for characteristics that make modern cloud software architecturally distinct. This article breaks down those characteristics and their practical implications for infrastructure design.</p>



<h2 class="wp-block-heading">Why Cloud-Scale Software Demands a Different Infrastructure Approach</h2>



<p class="wp-block-paragraph">Traditional enterprise software was typically deployed for a known, bounded user population on dedicated hardware. Cloud-scale software inverts nearly every one of those assumptions: user populations are large and variable, deployments are shared, release cycles are compressed, data volumes are enormous, and analytical workloads are central rather than peripheral. Each of these factors has direct consequences for how data centres must be designed and operated.</p>



<h2 class="wp-block-heading">1. Application Multi-Tenancy</h2>



<p class="wp-block-paragraph">Cloud software is inherently multi-tenant: many users from different organisations share the same underlying infrastructure while maintaining strict logical separation of their private data. This architectural pattern places specific demands on data centre infrastructure:</p>



<ul class="wp-block-list">
<li><strong>Consistent performance isolation.</strong> A surge in activity from one tenant must not degrade the experience of others. Infrastructure must provide predictable, isolated performance under variable aggregate load.</li>
<li><strong>Shared-resource efficiency.</strong> Multi-tenancy only delivers its cost and operational benefits when the infrastructure can efficiently pool and reallocate compute, memory, network, and storage resources across tenants in real time.</li>
<li><strong>Security boundaries.</strong> Logical separation must be enforced at every layer — networking, storage, and application runtime — to prevent data leakage between tenants.</li>
</ul>



<p class="wp-block-paragraph">Hyperconverged infrastructure (HCI) and software-defined storage platforms have become popular choices for multi-tenant deployments precisely because they allow fine-grained quality-of-service policies to be applied per tenant or per workload.</p>



<h2 class="wp-block-heading">2. Agile Development and DevOps Velocity</h2>



<p class="wp-block-paragraph">One of the core advantages of centralised, cloud-scale infrastructure is the ability to ship new features frequently — weekly or even daily release cycles are common in mature DevOps organisations. This cadence creates infrastructure requirements that are easy to overlook during initial capacity planning:</p>



<ul class="wp-block-list">
<li><strong>Programmable, API-driven provisioning.</strong> Teams cannot afford to wait days for manually provisioned test or staging environments. Infrastructure must expose APIs that CI/CD pipelines can consume to spin environments up and tear them down automatically.</li>
<li><strong>Immutable deployments and rapid rollback.</strong> Container-based and immutable-infrastructure patterns require storage and networking layers that support fast image distribution and stateless compute scaling.</li>
<li><strong>Observability from day one.</strong> High-frequency releases increase the probability of regressions reaching production. Infrastructure must expose rich telemetry — metrics, logs, and traces — that development teams can consume alongside application-level signals.</li>
</ul>



<p class="wp-block-paragraph">Infrastructure that requires lengthy change-management cycles or manual intervention becomes a bottleneck that negates the value of the DevOps practices built on top of it. The data centre strategy must treat infrastructure-as-code as a first-class requirement, not an afterthought.</p>



<h2 class="wp-block-heading">3. Elastic and Cost-Efficient Scale</h2>



<p class="wp-block-paragraph">Cloud-scale businesses are built on the assumption of growth: more users, more connected devices, more data. Data centre infrastructure must scale seamlessly and predictably to match that growth. This has two interrelated dimensions.</p>



<h3 class="wp-block-heading">Technical Scalability</h3>



<p class="wp-block-paragraph">Infrastructure must scale horizontally without architectural re-engineering. Storage, compute, and networking capacity should all be addable in incremental units without requiring application downtime or data migration. Scale-out architectures — distributed storage clusters, disaggregated compute pools, software-defined networking — are better suited to this requirement than traditional scale-up, monolithic designs.</p>



<h3 class="wp-block-heading">Cost Scalability</h3>



<p class="wp-block-paragraph">One well-known challenge with public IaaS is that storage and compute costs tend to grow nearly linearly with workload volume, making it difficult to realise economies of scale at the infrastructure layer as the business grows. A well-designed data centre strategy — whether built on private cloud, colocation, or a hybrid model — should aim to improve cost efficiency per unit of workload as scale increases, rather than simply tracking it linearly. This typically means evaluating:</p>



<ul class="wp-block-list">
<li>Total cost of ownership (TCO) of owned or leased infrastructure versus on-demand public cloud spend at projected scale.</li>
<li>Reserved or committed-use pricing models on public IaaS for predictable baseline workloads.</li>
<li>Hybrid architectures that run steady-state workloads on owned infrastructure while bursting to public cloud for unpredictable peaks.</li>
</ul>



<h2 class="wp-block-heading">4. High-Performance Analytics</h2>



<p class="wp-block-paragraph">Analytics is no longer a secondary, batch-oriented workload running overnight in a data warehouse. For modern cloud-scale applications, real-time analytics is a core part of the product experience and the operational backbone of the business:</p>



<ul class="wp-block-list">
<li><strong>Personalisation engines</strong> in eCommerce and streaming platforms make real-time decisions based on user behaviour data at massive scale.</li>
<li><strong>Business intelligence</strong> in enterprise SaaS applications surfaces insights that must reflect near-current state of operational data.</li>
<li><strong>Machine learning inference</strong> for AI-enabled features — recommendations, fraud detection, image recognition — runs continuously against live data streams.</li>
<li><strong>Conversational interfaces and chatbots</strong> rely on low-latency model inference to maintain acceptable response times.</li>
</ul>



<p class="wp-block-paragraph">These workloads share a common infrastructure requirement: very high I/O throughput combined with low, consistent latency. All-flash storage arrays and NVMe-based storage architectures have become key enablers for delivering analytics performance at the scale cloud software demands. Emerging NVMe-over-Fabrics (NVMe-oF) networking protocols promise to extend the low-latency characteristics of local NVMe storage across a shared network fabric, enabling storage disaggregation without the latency penalty of traditional SAN or NAS.</p>



<h2 class="wp-block-heading">Navigating a Complex Ecosystem</h2>



<p class="wp-block-paragraph">Product, DevOps, IT, and finance teams charting data centre strategies for cloud-scale applications face an increasingly complex decision landscape. The technology choices — hyperconverged infrastructure, software-defined storage, bare-metal cloud, colocation, public IaaS, hybrid architectures — are not mutually exclusive, and the right answer is rarely a single vendor or a single deployment model.</p>



<p class="wp-block-paragraph">A practical evaluation framework should test candidate strategies against each of the four dimensions above:</p>



<ol class="wp-block-list">
<li><strong>Multi-tenancy:</strong> Does the infrastructure enforce performance isolation and data security between tenants without requiring over-provisioning?</li>
<li><strong>DevOps agility:</strong> Can the infrastructure be provisioned, configured, and decommissioned entirely through APIs and infrastructure-as-code tooling?</li>
<li><strong>Scale economics:</strong> Does the cost model improve — or at least hold flat — as workload volume grows, rather than scaling linearly?</li>
<li><strong>Analytics performance:</strong> Can the storage and compute layers deliver the throughput and latency required by real-time analytical workloads at production scale?</li>
</ol>



<p class="wp-block-paragraph">Infrastructure vendors and cloud service providers that can credibly address all four dimensions will be well positioned to support the next generation of cloud-scale software. Those that excel on compute or networking alone, but create bottlenecks at the storage or orchestration layer, will increasingly be disqualified from shortlists as engineering teams become more sophisticated in their evaluations.</p>



<h2 class="wp-block-heading">Key Takeaways</h2>



<ul class="wp-block-list">
<li>Cloud-scale software requires infrastructure designed for multi-tenancy, rapid deployment cycles, elastic scale, and high-performance analytics — not simply more of what supported traditional enterprise software.</li>
<li>DevOps velocity is only achievable when the underlying infrastructure is fully API-driven and can be managed as code.</li>
<li>Cost efficiency at scale requires deliberate architectural choices; public IaaS alone does not automatically deliver economies of scale.</li>
<li>Real-time analytics workloads are increasingly central to cloud software products and demand low-latency, high-throughput storage infrastructure such as all-flash and NVMe-based systems.</li>
<li>Most production environments will adopt hybrid strategies, mixing public IaaS, private cloud, and colocation to balance agility, performance, and cost.</li>
</ul>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/assessing-data-centre-strategies-for-cloud-scale-software/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
