TECHNICAL ISO/IEC TS SPECIFICATION 23167 First edition 2020-02 Information technology - Cloud computing Common technologies and techniques Referencenumber TEC IS0/IEC TS 23167:2020(E) [so @IS0/IEC 2020 IS0/IEC TS 23167:2020(E) COPYRIGHTPROTECTEDDOCUMENT @ ISO0/IEC 2020 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may on the internet or an intranet, without prior written permission. Permission can be requested from either IsO at the address below or Iso's member body in the country of the requester. ISO copyright office CP 401 : Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone: +4122 749 01 11 Fax: +41 22 749 09 47 Email: [email protected] Website: www.iso.org Published in Switzerland i @ IS0/IEC 2020 - All rights reserved IS0/IEC TS 23167:2020(E) Contents Page Foreword .V Introduction. ..vi 1 Scope. .1 2 Normative references ..1 3 Terms and definitions 1 4 Symbols and abbreviated terms. .4 5 Overview of common technologies and techniques used in cloud computing .4 5.1 General 4 5.2 Technologies .5 5.2.1 General .5 5.2.2 Infrastructure capabilities type of cloud services .5 5.2.3 Platform capabilities cloud services. 6 5.2.4 Application capabilities type cloud services .6 5.3 Techniques 6 6 Virtual machines and hypervisors .6 6.1 General .6 6.2 Virtual machines and system virtualization .7 6.3 Hypervisors. .7 6.3.1 General 7 6.3.2 Type I hypervisors. .8 6.3.3 Type II hypervisors .8 6.4 Security of vMs and hypervisors. 9 6.5 VM images, metadata and formats. 10 7 Containers and container management systems (CMSs) 11 7.1 General. 11 7.2 Containers and operating system virtualization 11 7.2.1 Description of containers. 11 7.2.2 Containerdaemon 12 7.2.3 Container resources, isolation and control 13 7.3 Container images and filesystem layering. .14 7.3.1 Image purpose and content. 14 7.3.2 Filesystem layering.. .15 7.3.3 Container image repositories and registries 16 7.4 Container management systems (CMSs) 17 7.4.1 General. 17 7.4.2 Common CMS capabilities 17 8 Serverless computing .19 8.1 General 19 8.2 Functions as a service 20 8.2.1 Overview.. 20 8.2.2 Functions within Faas 20 8.2.3 Serverless frameworks. 21 8.2.4 FaaS relationship to microservices and containers 21 8.3 Serverless databases. 22 9 Microservices architecture 22 9.1 General, 22 9.2 Advantages and challenges of microservices 23 9.3 Specification of microservices 25 9.4 Multi-layered architecture. 25 9.5 Servicemesh 28 9.6 Circuit breaker. 30 @ IS0/IEC 2020 - All rights reserved iii IS0/IEC TS 23167:2020(E) 9.7 API gateway 30 10 Automation .30 10.1 General 30 10.2 Automation of the development lifecycle .31 10.3 Tooling for automation .31 11 Architecture of PaaS systems .32 11.1 General .32 11.2 Characteristics of PaaS systems .33 11.3 Architecture of components running under PaaS system. .35 12 Data storage as a service. .36 12.1 General .36 12.2 Common features of DSaaS .37 12.3 Capabilities type of DSaaS .40 12.4 Significant additional capabilities of DSaaS .40 13 Networking in cloud computing. .41 13.1 Key aspects of networking .41 13.2 Cloud access networking ..41 13.3 Intra-cloud networking ..42 13.4 Virtual private networks (VPNs) and cloud computing ..43 14 Cloud computing scalability ..44 14.1 Scalability approaches .44 14.2 Parallel instances and load balancing ..45 14.3 Elasticity and automation .46 14.4 Database scaling .46 15 Security and the cloud common technologies .47 15.1 General. .47 15.2 Firewalls .47 15.3 Endpoint protection .47 15.4 Identity and access management .47 15.5 Data encryption .48 15.6 Key management .48 Annex A (informative) VM Images and disk images .49 Bibliography .50 iv @ IS0/IEC 2020 - All rights reserved IS0/IEC TS 23167:2020(E) Foreword IsO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of IS