National foreword

This Published Document is the UK implementation of ISO/IEC TS 23167:2020.

The UK participation in its preparation was entrusted to Technical Committee IST/38, Cloud Computing and Distributed Platforms.

A list of organizations represented on this committee can be obtained on request to its secretary.

This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application.

Compliance with a British Standard cannot confer immunity from legal obligations.

This Published Document was published under the authority of the Standards Policy and Strategy Committee on 29 February 2020.

Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take PART in the work.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents) or the IEC list of patent declarations received (see http://patents.iec.ch).

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www.iso.org/iso/foreword.html.

This document was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 38, Cloud Computing and Distributed Platforms.

Any feedback or questions on this document should be directed to the user’s national standards body. A complete listing of these bodies can be found at www.iso.org/members.html.

Introduction

Cloud computing is described at a high, conceptual level in the two foundational standards ISO/IEC 17788^[¹^] and ISO/IEC 17789^[²^].

However, as the use of cloud computing has grown, a set of commonly used technologies has grown to support, simplify and extend the use of cloud computing alongside sets of commonly used techniques which enable the effective exploitation of the capabilities of cloud services. Many of these common technologies and techniques are aimed at developers and operations staff, increasingly linked together in a unified approach called DevOps (see 10.2). The aim is to speed and simplify the creation and operation of solutions based on the use of cloud services.

This document aims to describe the common technologies and techniques which relate to cloud computing, to describe how they relate to each other and to describe how they are used by some of the roles associated with cloud computing.

This document (a Technical Specification) addresses areas that are still developing in the industry, where it is believed that there will be a future, but not immediate, need for one or more International Standards.

This document will be of primary interest to service developers in Cloud Service Providers and to standards developers working with ISO and other organizations.

1 Scope

This document provides a description of a set of common technologies and techniques used in conjunction with cloud computing. These include:

virtual machines (VMs) and hypervisors;
containers and container management systems (CMSs);
serverless computing;
microservices architecture;
automation;
platform as a service systems and architecture;
storage services;
security, scalability and networking as applied to the above cloud computing technologies.

2 Normative references

3 Terms and definitions

4 Symbols and abbreviated terms

5 Overview of common technologies and techniques used in cloud computing

5.1 General

5.2 Technologies

5.3 Techniques

6 Virtual machines and hypervisors

6.1 General

6.2 Virtual machines and system virtualization

6.3 Hypervisors

6.4 Security of VMs and hypervisors

6.5 VM images, metadata and formats

7 Containers and container management systems (CMSs)

7.1 General

7.2 Containers and operating system virtualization

7.3 Container images and filesystem layering

7.4 Container management systems (CMSs)

8 Serverless computing

8.1 General

8.2 Functions as a service

8.3 Serverless databases

9 Microservices architecture

9.1 General

9.2 Advantages and challenges of microservices

9.3 Specification of microservices

9.4 Multi-layered architecture

9.5 Service mesh

9.6 Circuit breaker

9.7 API gateway

10 Automation

10.1 General

10.2 Automation of the development lifecycle

10.3 Tooling for automation

11 Architecture of PaaS systems

11.1 General

11.2 Characteristics of PaaS systems

11.3 Architecture of components running under PaaS system

12 Data storage as a service

12.1 General

12.2 Common features of DSaaS

12.3

12.4 Significant additional capabilities of DSaaS

13 Networking in cloud computing

13.1 Key aspects of networking

13.2 Cloud access networking

13.3 Intra-cloud networking

13.4 Virtual private networks (VPNs) and cloud computing

14 Cloud computing scalability

14.1 Scalability approaches

14.2 Parallel instances and load balancing

14.3 Elasticity and automation

14.4 Database scaling

15 Security and the cloud common technologies

15.1 General

15.2 Firewalls

15.3 Endpoint protection

15.4 Identity and access management

15.5 Data encryption

15.6 Key management

Bibliography

PD ISO/IEC TS 23167:2020

Information technology. Cloud computing. Common technologies and techniques

Current

Published:

29 Feb 2020