|
"A service where software and content are stored on massive, high-performance computers (data centers) connected to the Internet, allowing users to access (retrieve) them whenever needed." Then, what does "Cloud Service" mean in the context of a Cloud Security Switch? By narrowing the scope of "content" to "network," we can redefine it as: "A service where network content is stored on massive, high-performance computers connected to the Internet and accessed whenever needed." Based on this definition, the necessary conditions for the cloud can be summarized as follows:
Conditions 1, 2, 3, and 4 are the minimum requirements for providing a cloud service, while condition 5 can be seen as a differentiation point between cloud system providers. I believe the market winner will be determined by which company appeals to users most effectively with this differentiation point. From the perspective of these conditions, let's look at the structure and operational form of the Cloud Security Switch.
1. High-performance computers capable of integrated content storage are required.
2. Internet operation allowing connection to content from anywhere is required.
3. Since it connects via the Internet, encryption for the connection is essential.
The Cloud Security Switch consists of the switch, which handles network switching functions, and the TiController, which integrates and manages these switches. The TiController is located on the Internet as a high-performance computer that integrates, stores, and manages network content. The switches operating in the user's network collect network information and store it as content in the TiController. Users receive their network information through the content stored in the TiController via a web browser. Additionally, to fit the open Internet environment, the Cloud Security Switch connects to the TiController via an encrypted web communication channel, and users connect to the TiController via HTTP(S).
4. Independent content management for each user is required.
Users have their own operational management accounts on the TiController. Through this account, they can build their own network operation environment within the TiController. Users log in to their User Account (Tenant) on the TiController, configure an Organization and Network within their own space (Tenancy), and register and operate switches on that network. Furthermore, as the Cloud Security Switches applied to the network operate within the user's network, they transmit various status information occurring in the network to the TiController, providing content accessible to the user.
5. Content operation services must be provided to the user.
Through the Cloud Security Switches applied to the network, various information generated in the network is aggregated into the TiController. The content aggregated in the TiController includes:
Based on this content, the TiController provides various network services to the user. Representative services include:
Additionally, it provides RESTful Open APIs to allow integration with manager systems operated independently by the user.
In conclusion, while a traditional security switch provided security and L2/L3 switching functions as a standalone device, a Cloud Security Switch can be defined as an extended cloud network operation platform. It retains the functions of a security switch but stores network content in a cloud manager (TiController) via the Internet space, thereby providing network services to the user. |