• Infrastructure as a Service (IaaS)
• Virtual Machines, Networks, Storage at Google
• Leverages Google
  • Scale
  • Speed
  • Global Footprint
  • Google Cloud Platform

• Infrastructure:
  • Google Cloud Storage
  • Google Compute Engine
• Platform: Google App Engine
• Services:
  • Cloud SQL
  • BigQuery
  • Prediction API
  • Translation API
  • Lots more: https://developers.google.com/products/

• Secure
• Open and Flexible
• Consistent
• Proven
• Enables an ecosystem

• Compute
• Network
• Storage
• API & Tools

• JSON over HTTP
• Main Resources (Nouns)
  • Projects
  • Instances
  • Networks and Firewalls
  • Disks and Snapshots
  • Zones
• Actions (Verbs):
  • GET, POST (create) and DELETE
  • Custom ‘verbs’ for updates
• Auth via OAuth2


• gcutil: command line utility
• Web UI: Built on GAE
• Libraries
• Partners and ecosystem


• Container for all resources
• Team Membership
• Group ownership
• Billing


• Root access
• validated locked down kernel
• Stock Images: Based on Ubuntu, CentOS
• Useful utilities preinstalled


• Intel Sandy Bridge
• 1, 2, 4 and 8 virtual CPUs
  • A virtual CPU is a hyperthread
  • Smaller types coming
• 3.75GB RAM per virtual CPU
• Over 420GB local disk per CPU
  • Dedicated spindles on -4 and -8
• New Performance Metric
  • GCEU: Google Compute Engine Unit
  • 2.75 GCEUs per virtual CPU


• Kernel Virtual Machines
  • Linux is the hypervisor
  • Virtualized, non-virtualized run side by side
  • Worked closely with Red Hat
• Linux cgroups
  • Resource isolation
  • Public Linux feature driven by Google kernel engineering


• Isolated networks per project
• Private IPv4 space (RFC 1918)
• IP Level (Layer 3) network
• Flat across geographical regions
• Internal facing DNS
  • VM name = DNS name


• External IPs
  • Reserved, ephemeral or none
  • Not tied to region/zone
  • Dynamic attach/detach
• 1-to-1 NAT
• Built in firewall system
• Global network footprint
• Limitations
  • Outgoing SMTP blocked
  • UDP, TCP, ICMP only


• Fast, consistent performance
• Provisioned via API
• Local to a zone
• R/W with single instance
• R/O with multiple instances
• Encrypted at rest


• Currently used for booting all instances
• Lives and dies with instance
• Large 'extended' devices
• Dedicated spindles (4 vCPU+)
• Encrypted at rest


• Internet object store
• Global API based access
• Great for getting data in and out
• Frictionless access with service accounts

• Region: geography and routing
• Zone: fault isolation
• 3 US Zones in limited preview

• Synthetic identity for VMs and code
• Google Compute calling Google APIs
  • Examples: Cloud Storage, App Engine task queue API
• App Engine calling Compute Engine API
  • Use App Engine as 'orchestrator'
  • Build your own customized dashboard and control logic

me@workstation$ gcutil addinstance sa-example --service_account_scopes=storage-rw
me@workstation$ gcutil ssh sa-example
[snip]
me@sa-example$ gsutil mb gs://unique-bucket-name
Creating gs://unique-bucket-name/...

• Dictionary of key/value pairs
• Set from the API, read by the Instance
• Accessible at metadata server (http://metadata/...)
• Useful for small amounts of configuration data
• Project level metadata inherited by all instances

me@workstation$ gcutil addinstance metadata-example \
  --metadata=role:master --metadata_from_file=config:config.txt
me@workstation$ gcutil ssh metadata-example
[...snip...]
me@metadata-example$ curl http://metadata/0.1/meta-data/attributes/role
master
me@metadata-example$ curl http://metadata/0.1/meta-data/attributes/config
[...file content...]

• Builds on Metadata
• Equivalent to rc.local
• Example Usage:
  • Install packages, start services
  • Use Google Cloud Storage to grab data, code and binaries
• Bootstrap other management systems

me@workstation$ cat render-stuff.sh
#! /bin/bash                            
apt-get install -y contextfree
cfdg -s 10000 /usr/share/doc/contextfree/examples/sierpinski.cfdg /tmp/out.png
gsutil cp -a public-read /tmp/out.png gs://contextfree-examples/sierpinski.png

me@workstation$ gcutil addinstance start-me-up \
  --metadata_from_file=startup-script:setup-my-instance.sh \
  --service_account_scopes=storage-rw
me@workstation$ gcutil ssh sa-example
[...snip...]
me@sa-example$ tail -f /var/log/google.log

• We're growing the service carefully to make sure build the best product possible
• We're focusing on computation and/or I/O intensive batch workloads
• SLA and support are available now for commercial customers
• You can apply for program at http://cloud.google.com
• Come see me after the talk if you have a great application for Compute Engine

• Google Cloud Platform
  • http://cloud.google.com/compute
• Google Compute Engine Documentation
  • http://developers.google.com/compute
• Google Compute Engine Announcement Group
  • https://groups.google.com/forum/?fromgroups#!forum/gce-announce




• My contact info
  • email: jbeda@google.com
  • G+: http://profile.google.com/joebeda