1、技术综述,GE Confidential Distribution authorized to individuals with need to know only,1,Predix 是一个平台 用于开发、部署、打造 工业互联网应用,GE Confidential Distribution authorized to individuals with need to know only,2,机器到云的部署 分布式计算、扩展性、编配,3,GE Confidential Distribution authorized to individuals with need to know only,Pr
2、edix的重要支柱 We are Changing More than Software,4,GE Confidential Distribution authorized to individuals with need to know only,Microservices Cloud Foundry-based platform DevOps (developer operations) 3rd party innovation,Metered consumption / cost to serve Recurring subscription revenue Bill of materi
3、als,1 Engineering,3 Operations,5 Culture,4 Financials,DevOps CI / CD (continuous integration / continuous delivery) Paired programming (eXtreme programming),DevOps Op Center BizOps (business operations),Invent and simplify Be a minimalist Bias for action Cultivate a meritocracy Disagree and commit,2
4、 Process,DevOps,5,GE Confidential Distribution authorized to individuals with need to know only,What is it?,Benefits To Platform Subscribers,Tools and Processes that stress Communication, Collaboration (information sharing and web service usage), Integration, Automation, and Measurementof cooperatio
5、n between Developers and its Operations,1,Improvement in platform quality,2,3,4,5,Risk mitigation,Getting quick releases,Speedier resolution of problems,Ideal for this competitive landscape,DevOps是一组过程、方法与系统的统称，用于促进开发、技术运营和质量保障部门之间的沟通、协作与整合。 它的出现是由于软件行业日益清晰地认识到：为了按时交付软件产品和服务，开发和运营工作必须紧密合作。 传统的软件组织将开
6、发、IT运营和质量保障设为各自分离的部门。在这种环境下如何采用新的开发方法，这是一个重要的课题：按照从前的工作方式，开发和部署不需要IT支持或者QA深入的、跨部门的支持，而现在却需要极其紧密的多部门协作。然而DevOps考虑的还不止是软件部署。它是一套针对这几个部门间沟通与协作问题的流程和方法。,BizOps,6,GE Confidential Distribution authorized to individuals with need to know only,What is it?,Benefits To Platform Subscribers,Tools and processes
7、 that enable the rapid, profitable Monetization of Predix Services and Predix-Powered appsby GE, its Customers and Partners,1,Innovate on Business Models,2,3,4,5,Granular Control & Visibility on Services,Tools to Ensure Profitability,Build Components For Customers, Iteratively,Visibility into Revenu
8、e and Cost Metrics,6,Understand Products and Market,Predix 促进合作伙伴创新,7,GE Confidential Distribution authorized to individuals with need to know only,Predix PaaS,8,GE Confidential Distribution authorized to individuals with need to know only,机器到云平台 as-a-Service,9,GE Confidential Distribution authorize
9、d to individuals with need to know only,建立在 Cloud Foundry,10,GE Confidential Distribution authorized to individuals with need to know only,是一个领先的开源平台 由 Cloud Foundry 社区 发展, 现由 GE CF 道场 为 工业用例 继续发展, 用 Microservices,服务独立性 - 部署，规模，持续性 小型代码库 易于理解 允许混合技术栈 每个工作的最佳工具,Providing Predix the scale for industri
10、al solutions,Predix Machine 与Connectivity,11,GE Confidential Distribution authorized to individuals with need to know only,Predix Machine 服务: 部署拓扑示例,12,GE Confidential Distribution authorized to individuals with need to know only,M2C,Predix Machine On Gateways and/or Controllers,13,GE Confidential D
11、istribution authorized to individuals with need to know only,Predix Connectivity,14,GE Confidential Distribution authorized to individuals with need to know only,Predix Cloud,15,GE Confidential Distribution authorized to individuals with need to know only,Infrastructure,Users,VMWare + Guest OS (Cent
12、OS, Windows),Server,Facilities,Block Storage,Network Infrastructure,Connectivity,Virtualization,BOSH,CLOUD FOUNDRY,Runtime,Logging,Monitoring,Data Runtime,DevOps,Industrial Internet Applications,Predix Platform,Cyber / Info/ Ops Security,NOC,OPEN STACK,MESOS,DOCKER,KVM,Predix Cloud 架构,GE Confidentia
13、l Distribution authorized to individuals with need to know only,16,Object Storage,Predix deployed & managed IaaS Enhanced security controls Purpose-built stack with lower TCO Managed data transport services Optimized for Predix workloads, including world-class data services,FD #1,FD # 2,FD # 3,Netwo
14、rk Rack,Ops + Tools + Network Rack,1920 vCores,12 TB RAM,706 TB RAW Ephemeral Storage,816 TB RAW Object Storage,264 TB RAW Block Storage,FD # 4,FD # 5,Predix Connectivity,Infrastructure Differentiators,Predix Cloud Pod (per site),17,GE Confidential Distribution authorized to individuals with need to
15、 know only,Support,Monitoring & Tools,Infrastructure Ops,Security Ops & Compliance,Predix Cloud Services,18,GE Confidential Distribution authorized to individuals with need to know only,PREDIX CLOUD,PaaS (Powered by Pivotal Cloud Foundry),CF Provided Services,CF Dev/Infrastructure Services,Predix De
16、vOps,Predix BizOps,CF 3rd-Party Provided Services,LEGEND,Queuing (RabbitMQ),Blob Store (Riak CS),RDBMS (PostGRES),Cache,Security (UAA),Predix Services,Log Storage and Search (ELK),Monitoring(New Relic),Notification (SMTP),CLI/CI,Asset,Source (GH),Build (Jenkins),Acquisition,Activation,Engagement,Exp
17、erience,Analytics,Data,Security,Predix Operational Services,Predix Services,Pivotal Cloud Foundry services,Predix Services: Assets,19,GE Confidential Distribution authorized to individuals with need to know only,Asset Services,20,GE Confidential Distribution authorized to individuals with need to kn
18、ow only,工业资产的逻辑模型是实现优化目标的关键。 Asset Services 提供了独特的方法：存储、分类、成组合查询资产模型,传统RDBMS方法 Traditional RDBMS Approach,新式图形数据库方法 New Graph DB Approach,工业互联网要求开放、扩展的模型和以及运行规模，只有采用图形数据库才能满足,To be useful, open model framework needs to be constrained (achieved with business rules in the catalog),组织结构Organization,业务逻
19、辑 Business Logic,资产与成组分类,部件号,资产结构模板,业务逻辑结构 Business Rule Framework,目录 Catalog,配置管理和跟踪历史Configuration Management & Audit History,Asset Services - What,21,GE Confidential Distribution authorized to individuals with need to know only,Predix Asset Architecture,22,GE Confidential Distribution authorized
20、to individuals with need to know only,Cloud,Cloud Runtime,Scalability & HA,Elastic Graph Database,Knowledge Graph,RESTful APIs (Query, Ingestion, Model, etc.),Graph Query,APM,Context-Awareness,Services,Interface,Analytics,Industrial Apps,Graph Analytics,Business Rules,Classification,Audit History,Mu
21、lti-tenancy,Structured Assets Networked Assets Semantic Models & Ontologies Loose Relationships Custom Objects,Predix Services: Analytics,23,GE Confidential Distribution authorized to individuals with need to know only,可重用分析目录Catalog of Reusable Analytics,分析工作流程的业务流程引擎Orchestration Engine for Analyt
22、ics Workflows,资产感知分析 Asset-aware Analytics,Analytics Services,24,GE Confidential Distribution authorized to individuals with need to know only,Why Deliver Analytics As a Service?,25,GE Confidential Distribution authorized to individuals with need to know only,Provide analytics as a service to multip
23、le stakeholders,Analytics Architecture,26,GE Confidential Distribution authorized to individuals with need to know only,Triggers,Data Services,Application Services,Analytic Service UI,Orchestration Configurator,Monitoring Dashboard,Catalog Management,Configuration Services,Monitoring Services,Asset
24、Data Handler,Catalog Services,Predix Services: Data,27,GE Confidential Distribution authorized to individuals with need to know only,SECURE, MULTI-TENANCY SERVICE FOR HIGH VOLUMES OF DATA PROCESSING AND STORAGE,Time series,Cloud Gateway,Message Service,APIs,Mobile,Web,Data processing,Data Originatio
25、n,Analysis & Usage,Data Ingestion,Pipelines,Machine + Enterprise Data,Data Lake (Storage & Process),NoSQL,Relational,Object,Caching,Search,Dist. File Syst.,Data Services,28,GE Confidential Distribution authorized to individuals with need to know only,Serves the need for a holistic, reliable, and cos
26、t effective computing environment,时间序列预报TIME SERIES FORECASTING 探查 EXPLORATION 搜索与联合查询 SEARCH & FEDERATED QUERY 语境 CONTEXTUALIZATION 数据管理 DATA MANAGEMENT 数据质量 DATA QUALITY 云管理 CLOUD MANAGEMENT,Time Series,Blob/Object,Ingestion,Streams,Search,数据服务: 时间序列,29,GE Confidential Distribution authorized to i
27、ndividuals with need to know only,Predix Services: Security,30,GE Confidential Distribution authorized to individuals with need to know only,威胁继续增长,31,GE Confidential Distribution authorized to individuals with need to know only,Over 800% increase in ICS-Cert vulnerability reports since 2010,And Pre
28、dix Continues to Embrace Security,32,GE Confidential Distribution authorized to individuals with need to know only,SAST, DAST, Artifact integration & automation Code vaulting & vetted delivery to platform Routine Red Team platform assessments DevOpsSec evaluations for platform base code,PROTECT OT/I
29、T IN AN APP FACTORY DELIVERY MODEL,End-to-end Infrastructure Visibility Full Security Operations Center & Tooling App-to-App behavioral evaluation Maintain chain of custody for data communities,ESTABLISH USER-BASED WORLD FOR INDUSTRIAL APPS,BRING OPERATIONAL AVAILABILITY & GOVERNANCE WITH “IT”,Commo
30、n & Layer Identity for User, Device, Software & Data Automated isolation & monitoring - incidents Unified & clean runtime environments Visibility to mixed Information assets,SECURE & CERTIFY OPERATIONAL INFRASTRUCTURE,ISO 27K, NIST 800-53 & FIPS 140-2 L1/2 Controls Matrix & Compliance Unified Monito
31、ring Framework Extend Compliance for GE & Customers Over 60 Geo Industry specific regulations, app users to operational, at every connection & layer, automated secure apps, end-to-end visibility,Predix Cyber & Operational Security,33,GE Confidential Distribution authorized to individuals with need t
32、o know only,Tiers of User Identity for Predix,34,GE Confidential Distribution authorized to individuals with need to know only,Applications,Platform Services,OS Management,Virtualization Management,Overlapping tiers of Identities Layers of control & isolation,Enterprise Identity Management,UAA,Nix L
33、DAP / SSH Key Store,Other Directory Services,UAA,BYO Identity,Enterprise Directory,Predix IDaaS,Predix Cloud Active Directory,Cloud Management Identity Services,Platform Identity Services,Governance and Certification to Secure Operational Infrastructure,35,GE Confidential Distribution authorized to
34、individuals with need to know only,Main Design Characteristics,Full ISO 27001/2 Certification End-to-end Infrastructure Visibility Extend Compliance for GE & Customers Unified Monitoring Framework Central Controls Separate Monitors ISMS (Information Security Mgmt System),One Framework Multiple Certi
35、fications,ISO 27001,HIPAA,FIPS,FDA,FFIEC,FedRAMP,AICPA SOC,NERC,PCI DSS,Predix Operational Services: DevOps,36,GE Confidential Distribution authorized to individuals with need to know only,Agile planning Source control management Automated build and deploy Load testing tools,Develop, track, plan, an
36、d deploy software in one place,Provides application developers: The same tools and capabilities that are used to build the Predix platform Automated builds and deployments for remote embedded systems Cloud Foundry tile for Jenkins, integrated with UAA,Microservices can go through the pipeline indepe
37、ndently!,DevOps Services,37,GE Confidential Distribution authorized to individuals with need to know only,Predix Operational Services: BizOps,38,GE Confidential Distribution authorized to individuals with need to know only,Predix,Success is determined by long-term and cost-efficient customer relatio
38、nshipsRequires continuous iteration to improve: products, subscriber engagement channels, business models,Identify areas for product improvement Infrastructure utilization Support costs Create targeted price plans to increase CLTV Optimize technology infrastructure for highest utilization Identify o
39、pportunities to reduce support costs through customer self-service,Key Features Subscriber Segmentation Subscription Price Plan Management Subscriber Email Communications Entitlement Management Subscription Analytics and Metrics 3rd Party Services pre-integrated,BizOps Services,39,GE Confidential Di
40、stribution authorized to individuals with need to know only,Identify areas for product improvement Infrastructure utilization Support costs Create targeted price plans to increase CLTV Optimize technology infrastructure for highest utilization Identify opportunities to reduce support costs through c
41、ustomer self-service,Predix Services: Experience,40,GE Confidential Distribution authorized to individuals with need to know only,Predix Experience,41,GE Confidential Distribution authorized to individuals with need to know only,Px: Design System for the Predix Platform Predix Mobile: Mobile app dev
42、elopment framework (offline and online sync between devices and cloud) and it integrates with back-end enterprise systems Predix.io: All-encompassing website (marcom, dev tools, provisioning, community, etc.),Deep Contextual Navigation,42,GE Confidential Distribution authorized to individuals with n
43、eed to know only,43,GE Confidential Distribution authorized to individuals with need to know only,从 Predix Mobile,从 Px 组件,客户可以使用 Predix Mobile 应用开发平台设计、开发部署移动 Apps,Px 智能组件可以快速开发响应式浏览器App,创建 Apps 的两种方法,44,GE Confidential Distribution authorized to individuals with need to know only,45,GE Confidential
44、 Distribution authorized to individuals with need to know only,Predix.io,46,GE Confidential Distribution authorized to individuals with need to know only,Where developers go to:,Monitor,Find Support,Manage,Purchase,Get Started,Discover,Cost, Performance, Pipelines,Docs, Forum, Blog, Support,Services
45、, Apps, Users, Accounts,Plans, Services,Registration, Starter Packs, Docs,What, Why, How, How much,Predix, 事实上的工业互联网的选择,47,GE Confidential Distribution authorized to individuals with need to know only,GE和非GE资产硬件无关的机器软件即插即用互联在多设备中扩展支持工业各种协议,经验、启发和物理模型先进的数据驱动技术多元化配置服务弹性执行和分析监视端到云的分析,基于ISA95数据模型标准化的数据格
46、式数据作为服务，实现数据目录和分析统一处理和融合数据,专用硬件和软件安全的 “门控社区” 模式终端到终端的工业级安全在软件定义的数据中心运行提高效率和弹性,认证应用程序用户符合ISO27K，NIST800-53，FIPS 140-2 L1/2控制，60多个地缘行业的特殊规定24/7/365 安全运行中心可定制的事故处理集成的智能防攻击用eGRC进行审计控制,5 大方面 Predix 胜过普通的物联网PaaS,48,GE Confidential Distribution authorized to individuals with need to know only,工业分析,工业云,安全,数
47、据管理,连接设备,PRIMARY,PRIMARY,PRIMARY,PRIMARY,49,GE Confidential Distribution authorized to individuals with need to know only,SECONDARY,SECONDARY,SECONDARY,PRIMARY,50,GE Confidential Distribution authorized to individuals with need to know only,用Predix改变您的工业应用,#1 更快的 应用交付 #2 工业级 云平台 #3 全新的 商业价值,GE Confidential Distribution authorized to individuals with need to know only,51,
