The downside of the cloud

When hosted storage goes wrong

Services that store enterprise data in a "cloud" on the Internet raise questions that organisations are just beginning to ask, but for all their limitations, they may be no more risky than on-site storage platforms.

The technology behind cloud storage, as well as cloud computing, lets enterprises tap into IT resources without regard to where they're located. So cloud computing typically means relegating primary or backup data to an undefined repository outside the enterprise rather than a local data centre or a dedicated remote site. By using cloud storage services, organisations can save on capital expenses and on complex setup and administration tasks, proponents say. Putting data in the cloud can also make it accessible from more locations.

Saving work and expense is a key reason why cloud services are expected to grow in the next few years. Last year, 4 percent of worldwide IT spending went to cloud services, and by 2012 that figure will be 9 percent, according to research company IDC. Because of its cost and space requirements, data storage is a prime candidate for using  cloud technology, and IDC predicts storage will grow from 8 percent to 13 percent of cloud spending in that same period.

Vendors are stepping up to fill that demand. Amazon.com made an early splash in cloud computing and now includes a storage service, called S3, in its offerings. Nirvanix started offering a cloud archiving and backup service in 2007, and some of the biggest names in storage, including EMC's Mozy unit and Seagate, have also entered the game.

Anyone who's pondering how to deal with a cloud storage provider is already ahead of the game, according to analyst Henry Baltazar of The 451 Group.

"Right now, people aren't really (looking out) for this, because they're still weighing out whether they want to use cloud storage or not. ... It's still a brand-new market," Baltazar said.

But handing off any IT function involves some loss of control, and storage raises particular worries. For many companies, information is the core asset, and if employees and customers can't get to it, business grinds to a halt.

"Nobody's perfect. The best clouds in the world have downtime," acknowledged John Engates, CTO of Rackspace, a 10-year-old hosting company that has a cloud storage service in beta testing.

So what happens if things go sour with the service provider that's holding on to your data? How easy is it to get the information back or move it on to another provider? There are some dangers that enterprises should prepare for, but it turns out cloud storage may not be as risky as it seems, and possibly no more troublesome than an in-house system, according to users and industry analysts.

If it does come to the point of changing service providers, there is likely to be work involved, said IDC analyst Benjamin Woo.

"It's much more involved than just saying, 'I don't like this provider. I'm going somewhere else,'" Woo said. For one thing, you may have to change the backup software you use on your own premises, if your new cloud provider's system doesn't support it. Internal policies and procedures may also have to change, he said.

As for the process of getting back the data held in the cloud or moving it on to another provider, there are no standards used in common across the industry, analysts said.

There's no equivalent in cloud storage of a common transport mechanism like SMTP, said Joe Kvidera, founder and CEO of Procedo, which provides data migration software and services. Because the industry is still in its infancy, vendors are choosing their own compression, encryption and transport mechanisms to differentiate themselves, Kvidera said.

But some vendors are taking steps to give subscribers more control and make migration easier. FreshBooks' McDerment believes it would be easy to move his archived files to another cloud. Rackspace provides a Cloud Files API (application programming interface) that could be used to write a new script, he said. Meanwhile, the API allows FreshBooks to manipulate and arrange its documents just by changing code, he said.

Nirvanix also provides a set of APIs, and it has worked out integration deals with vendors of backup and archiving software such as Atempo so customers can keep using the utilities they're familiar with, said Nirvanix President and CEO Jim Zierick. In addition, Nirvanix offers CloudNAS, a bridging software that can make the Nirvanix cloud look like any NAS drive. Using the Nirvanix API set, it mimics commonly used file systems such as CIFS (Common Internet File System) and NFS (Network File System), Zierick said.

Still, migrating a large amount of data from one service provider to another, or from a cloud to in-house storage, is a major undertaking. The basic Nirvanix service uses the public Internet to move files around, but the company has helped individual customers to rent high-bandwidth lines to handle large one-time shifts to the Nirvanix cloud, Zierick said. It has even helped customers load the data on a server at their facility and then physically transport that server to Nirvanix for offloading. The company is now talking to storage consulting firms about offering migration services.

Procedo's Kvidera said demand for migration services, which can cost between US$5,000 and $40,000 per terabyte, is growing rapidly.

Internal storage, one of the most proprietary areas of IT, still has its own costs and pitfalls, said Nucleus Research analyst Rebecca Wettemann.

"If all my data is in a proprietary storage architecture within my own architecture ... is it less difficult to get it out and move it to another vendor? The answer is probably no," Wettemann said. The costs are likely to be higher, too, because a company may have large investments in specialised training as well as hardware and software, she said.

In addition, enterprises are likely to have more leverage with cloud storage providers than with companies that sold them storage infrastructure, Wettemann said. If there's a problem, a service provider will have more incentive to make the customer happy because it needs the next month's subscription fee, she said.

If push really comes to shove, a cloud storage provider might hold a customer's data hostage. At Rackspace, it's never come to that, Engates said. Nirvanix includes language in its contracts that lets it block a customer's access to data, but the company would do everything in its power to resolve a dispute before it came to that, Zierick said.

IDC's Woo thinks serious conflicts between a cloud storage provider and a customer are unlikely because the service is so simple.

"The most optimal relationship to have in a backup scenario ... is a non-existing one," Woo said.


What are your views on this subject? Use the form below to post a comment on this article up to 500 characters.


Characters remaining: 500

Add your commentComments

Paul | Published: 19:21 GMT, 01 June 2009

The nature of the internet means a communications line from business to cloud host will be diversely routed by default, even with dedicated internet connection. Ultimately you are hostage to the normal traffic patterns of the internet. So whilst your connection (and hence access to your critical company data) may be reasonable most of the time, you cant guaranteed this will always be the case. Murphy's law will ensure that the time you most need your data will be the time when interupted service occurs. The internet is therefore not the ideal transport for mission critical data or applications. Office desktop productivity would be a reasonable use, but a contact centre CRM application or real time application would not fit. MAybe a reader can point to a taxonomy of suitable application types ?

Related Operating Systems news

Oracle given breathing space by EC

Regulator gives an extra week to prepare Sun takeover arguments.

Microsoft, Linux rivals mock Google Chrome OS

Operating system crippled by reliance on web access

Google releases Chrome OS to waiting world

Stresses speed and security of operating system.

NSA helped with work on Windows 7 security

Privacy organisations concerned about spooks' involvement.

Related Operating Systems reviews

Jolicloud OS

Moblin 2.0 review

Ubuntu Netbook Remix



Email this article to a friend or colleague:


PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Database security: Preventing enterprise data leaks at the source

IDC discusses the growing internal threats to business information, the impact of government regulations on the protection of data, and how enterprises must adopt database security best practices...

Download Whitepaper

Service-oriented security

SOA has become an integral part of enterprise software by providing a framework to efficiently develop software as services that is easily sharable, reusable, and integrated. No where is the need more apparent than in the Identity Management space. Welcome to the age of Service-Oriented Security (SOS).

Download Whitepaper

Data protection prospective vendor checklist

Organisations need a way to map business needs against all these challenges in procuring a technical solution. To help, SANS has developed the following Prospective Vendor Checklist.

Download Whitepaper

Unlock the power of the mainframe

This whitepaper presents the notion of CICS as an integration hub based on a component-based, service-oriented architecture supporting Web services. Highlights will review the challenges and contrasted support for Web services natively in CICS.

Download Whitepaper

Techworld UK - Technology - Business

COLT White Paper

Are all VoIP services the same?

Questions to ask your service provider to ensure you get the VoIP service you need
With careful choice of partner, your business can have all the advantages of VoIP access - reduced costs, flexibility and simplicity - without the drawbacks.
This white paper is your guide to ensure you get right the VoIP service and details the pitfalls which businesses would do well to avoid.

Download white paper
BMC

Ride the express lane in the journey to speed ITIL adoption

Explore the challenges in making the journey to ITIL and the criteria for selecting consulting services
By following ITIL practices, your IT organisation will become more closely integrated with the business. We recommend making the journey to ITIL in a sequence of six incremental steps, the phases of which are driven through execution of a strategic transformational roadmap.

Download white paper

Webcast: IT Financial Management: Cost Optimisation for Efficiency and Agility.
On Demand Webcast
Join this webcast to learn about the techniques and technologies that can help you prove the value of IT to the business by understanding the true cost of today's IT services and those that will be necessary to deliver future success.

Register Today

Site Map

IDG Network

* *