Build Faster, Securely, Anywhere With IBM Cloud Satellite

Image credit: iStockphoto/KuznetsovDmitry

There are many benefits to having multiple cloud environments, but there are also big challenges. Companies must overcome inconsistency, complexity, and a shortage of skills and time required to operate and secure multiple rapidly evolving platforms. Using different clouds is further complicated by the different development practices each environment requires. 

Let’s say your financial services company is based in the U.S. and has successfully marketed a payment solution to online businesses in North America. Fast economic growth in Southeast Asia is presenting an opportunity to offer your solution there. But the risks of entering a new and geographically distant market would usually include large costs — data centers, new staff, etc. — and a long path to delivery. Not managed well, those risks may decrease your company’s competitiveness by increasing the price you can profitably service customers. In addition, regulations will require that your solution process payments within the region and within a two-second interval; penalties for non-compliance could easily cost millions.

In meeting those challenges, the advantages of a distributed cloud stand out. First, in using a distributed cloud, your team can deliver your solution into whatever environment your customer chooses — on-premises data center, a colocation site, on a cloud platform, or edge locations like retail stores. Also, to make serial customizations unnecessary, your development team can use their usual pipeline to modify existing application code so that it flexibly complies with data locality rules. Finally, by adding new targets to the pipeline, your team can deploy the modernized application to multiple locations as needed, scaling your business without a big increase in operations staff.

"Distributed cloud . . . refers to the distribution of public cloud services to different physical locations while the operation, governance, and evolution of the services remain the responsibility of the public cloud provider. [The] distributed cloud brings aspects of worldwide public cloud regions, hybrid cloud and edge computing to the original world of cloud computing." – Gartner, "Top 10 Strategic Technology Trends: Distributed Cloud"

With IBM Cloud Satellite as your distributed cloud, you can build faster, securely, and anywhere you want.

IBM Cloud Satellite is Available

Delivered from a single view controlled through the public cloud and maintained as a service by IBM, IBM Cloud Satellite gives you the ability to deploy IBM Cloud services anywhere.

With IBM Cloud Satellite, customers gain the flexibility to run their applications where it makes sense while still leveraging all the security and ops benefits of the public cloud. Satellite locations can be in on-premises data centers, colocation centers, in public clouds, or at the edge. Enterprise applications can run in close proximity to their data stores, reducing latency and increasing data security. Running Cloud Services in a specific country or region allows you to comply with local data residency regulations easily. With IBM Cloud Satellite, as with IBM public cloud, your teams focus on app development, not redundant operational chores or platform differences.

IBM Cloud Satellite enables you to do the following:

  • Run workloads where it makes the most sense: Unlike other public clouds, IBM Cloud is architected with an open-source Kubernetes foundation for greater portability to IBM Cloud Satellite locations. Because you can run workloads, data, and services in any environment — public cloud, your data center, or an edge location — you can achieve consistent application operations and improved performance across your environments.
  • Improve auditability and accountability when data and workloads remain in place: You have a leg up for audits and compliance by keeping workloads where regulations require.
  • Adapt quickly to new markets and needs: You get a common as-a-service platform to extend cloud-native tools to any location. At the same time, you’re transforming existing code to build new apps in days, not months. All of which leads to quick responses to competitive threats.
  • Access a rich catalog of API-driven cloud services and software: Deploy cloud services with the click of a button to any environment. 
  • Simplify service availability and control: Employ a single dashboard, common identity and access management, and centralized observability across your IBM Cloud Satellite locations. This will help you to achieve end-to-end security where data and workloads reside.

Key concepts and components

Satellite extends IBM Cloud with the new concept of a "location." Locations are infrastructure outside IBM public cloud where you can run services and applications: 

A location is supported by a group of Red Hat Enterprise Linux hosts that provide the capacity to run your applications and IBM Cloud service instances. IBM Cloud Satellite supports the infrastructure that clients already have today. In addition, clients can choose to run their Satellite locations on integrated appliances or via IBM Cloud Satellite Infrastructure Service:

Once you create and populate a location, you can start using it to run IBM Cloud services, such as Red Hat OpenShiftIBM Cloud Pak for Data as a ServiceIBM Cloud DatabasesContinuous Delivery pipelinesAI, and more:

Satellite locations also become targets for the IBM Cloud content catalog, enabling you to deploy software from IBM Cloud to clusters running in your Satellite locations. With IBM Cloud Satellite, IBM Cloud Paks can be deployed anywhere on a cloud-managed OpenShift cluster. Satellite provides capabilities to manage configuration across locations and control network traffic between locations and IBM Cloud and between applications running in those locations. 

Single pane of glass lets you view and manage all IBM Cloud services and applications running in Satellite locations across your on-premises, cloud platform, and edge network environments.

Satellite Config provides a global view of your applications and control over configuration and application deployment. 

Security for Satellite starts in the IBM Cloud console, where you extend the familiar controls for policies, logging, monitoring, IAM, and more.

Satellite Link is a two-way tunnel you control that securely connects your Satellite location to the IBM Cloud region from which your location is managed. Encrypted communication that leaves and enters your location is proxied by the Link tunnel server, and network traffic on this connection can be monitored and audited. IBM can never see or touch your data.

The original article by Jason McGee, IBM fellow, vice president and chief technology officer, is here.

The views and opinions expressed in this article are those of the author and do not necessarily reflect those of CDOTrends. Image credit: iStockphoto/KuznetsovDmitry