2011_VMware_vCloud

VMware vCloud áttekintő őLovas Balázs – VMware oktató 2011.03.17.© 2009 VMware Inc. All rights reservedAgendaMiért felhő? ő VMware vCloud – funkciók VMware vCloud – komponensek és architektúra DEMO2Internal Product and Solutions for IT as a Service MapSecure Private CloudvCloud Powered Public CloudsIndependent Public CloudsEnd-User ComputingApplication AccessCloud Application PlatformApplication PortabilityCloud Infrastructure and Management3Internal Product and Solutions for IT as a Service MapSecure Private CloudvCloud Powered Public CloudsIndependent Public CloudsEnd-User ComputingApplication AccessCloud Application PlatformApplication PortabilityCloud Infrastructure and ManagementvCenter vShield vCloud DirectorvCloud Datacenter vCloud ExpressApplication Mobility VMware vSphere: Foundation for Cloud Computing4Internal Product and Solutions for IT as a Service MapSecure Private CloudvCloud Powered Public CloudsIndependent Public CloudsEnd-User ComputingApplication AccessCloud Application PlatformSpring vFabric vFabric HypericvmForceOher PaaS PartnersGoogle App EngineOther cloud infrastructure providersApplication PortabilityCloud Infrastructure and ManagementvCenter vShield vCloud DirectorvCloud Datacenter vCloud ExpressApplication Mobility VMware vSphere: Foundation for Cloud Computing5Internal Product and Solutions for IT as a Service MapSecure Private CloudvCloud Powered Public CloudsIndependent Public CloudsEnd-User ComputingView Thin App Zimbra SaaS ApplicationsOther SaaS ProvidersApplication AccessCloud Application PlatformSpring vFabric vFabric HypericvmForceOher PaaS PartnersGoogle App EngineOther cloud infrastructure providersApplication PortabilityCloud Infrastructure and ManagementvCenter vShield vCloud DirectorvCloud Datacenter vCloud ExpressApplication Mobility VMware vSphere: Foundation for Cloud Computing6The hybrid cloud is the best model to capture these benefitsEnterprisesBridgingCloud Service ProvidersPrivate CloudOperated solely for an organization, typically within the firewallHybrid CloudComposition of 2 or more interoperable clouds, enabling data and application portabilityPublic CloudAccessible over the Internet for general consumption78IT must respond to custom requests and LOBs face queuesApproval processes and queues Custom requests strain IT Hardware acquisition Infrastructure deployment Manual planning and provisioning Difficult capacity management May I have a LAMP stack, please?UsersInfrastructure Admin9Granting self-service access reduces dependency on ITSelf-Service PortalEnd User or IT RepresentativeStandardization with central catalog of templates and media No overprovisioning with feeling of infinite resourcesVMware vCloud Director VMware vSphereCloud Admin &10For IT, this is a similarly challenging situationFrom managing a highly customized, siloed datacenter To a standardized and pooled datacenterProcess AProcess BProcess CStandardized ProcessesVirtual Datacenter 1 (Gold)Virtual Datacenter 2 (Silver)App Stack AApp Stack BApp Stack CvSpherevSpherevSpherevSphereDB211Agenda12VMware vCloud Director is one key component in the cloudNetworksESX/ESXi HostsDatastoresVMware vSphere 4 Enterprise Plus13Leverage existing investments in people and technologyBuilds on VMware vSphere Utilizes your existing x86 hardware Support existing and future applications Integrates with your existing management software Uses the same skill set14VMware vCloud Director is one key component in the cloudLDAP vCenter DatabasevCenter ServerNetworksESX/ESXi HostsDatastoresVMware vSphere 4 Enterprise Plus15Scales across 25 vCenter Servers, 10k VMs, and 10k users10,000 VMs 10,000 Users25 vCenter Servers1000 Hosts16VMware vCloud Director is one key component in the cloudLDAP vCenter DatabasevCenter Server vShield Manager w/ EdgevShield Manager and vShield Edge Virtual AppliancesNetworksESX/ESXi HostsDatastoresVMware vSphere 4 Enterprise Plus17Integrated vShield features simplify security and compliancevShield for vCloud Director is a virtual appliance providing essential perimeter network and security services including:• Port-level stateful firewall • Network Address Translation • DHCP servicesfirewallvShieldEnables fast, secure and automated provisioning of multitenant Org VDCs in private clouds• Simpler, easer to operate• One Edge per Org, deployed anywhere • Built-in network isolation • Integrated and manageable by REST APIs for scriptand 3rd party automationDHCP Services• Improved visibility, control and compliance• Application aware NetFlow visibility • Automated log collection with syslog and VCintegration18VMware vCloud Director is one key component in the cloudvCenter ChargebackvCenter Chargeback Web Interface vCenter Chargeback DatabasevCenter Chargeback ServerLDAP vCenter DatabasevCenter Server vShield Manager w/ EdgevShield Manager and vShield Edge Virtual AppliancesNetworksvCenter Chargeback Collectors (vCenter, vCD, vSE)ESX/ESXi HostsDatastoresVMware vSphere 4 Enterprise Plus19VMware vCloud Director is one key component in the cloudvCenter ChargebackvCD Portal vCenter Chargeback Web Interface vCD Database vCenter Chargeback DatabaseVMware vCloud DirectorVMware vCloud DirectorLDAP vCenter DatabasevCenter Chargeback ServervCenter Server vShield Manager w/ EdgevShield Manager and vShield Edge Virtual AppliancesNetworksvCenter Chargeback Collectors (vCenter, vCD, vSE)ESX/ESXi HostsDatastoresVMware vSphere 4 Enterprise Plus20VMware vCloud Director is one key component in the cloudvCenter Chargeback vCloud APIEnd Users vCD Database vCD Portal vCenter Chargeback Web Interface vCenter Chargeback DatabaseVMware vCloud DirectorVMware vCloud DirectorLDAP vCenter DatabasevCenter Chargeback ServervCenter Server vShield Manager w/ EdgevShield Manager and vShield Edge Virtual AppliancesNetworksvCenter Chargeback Collectors (vCenter, vCD, vSE)ESX/ESXi HostsDatastoresVMware vSphere 4 Enterprise Plus21The New Business Model For IT : The Secure Private CloudCloud Consumer• New datacenter “consumption units” –Self Service Portals Infrastructure Catalogues Chargebackvirtual datacenters (VDC)VMware vCloud Director and vCenter ChargebackVirtual Datacenter 1 (Gold) Virtual Datacenter n (Silver) Virtual Datacenter n (Silver)• The new IT supply chain: standardizedcatalogue based service delivery• Self-service user access with metering,monitoring, and chargebackVMware vShield Security Products VMware vCenter Management ProductsvSphere vSphere vSphere vSphere• Converged datacenter: Migrate network,storage and security functions into virtual appliances• Better than physical Application QoS:VMware vSphere availability and security • Highly automated, policy-based management • Hybrid cloud infrastructureCloud Provider22To make this possible, cloud requires new resource abstractionsVMware vCloud DirectorOrganization: Marketing Users & Policies Organization VDCs Catalogs Users & Policies Organization: Finance Organization VDCs CatalogsProvider Virtual DatacentersVMware vCenter ServerResource Pools Datastores Port GroupsVMware vSphere Secure Private Cloud23(Bronze)(Silver)(Gold)Agenda24vCloud Director builds on vSphere to transform ITBuilds on vSphere and scales up to 10,000 VMs and 25 vCenter ServersOrganization 1 Organization mUsersCreates virtual datacenters, by pooling resources into new units of consumptionVMware vCloud DirectorUser Portals Catalogs SecuritySecurely enables the cloud with vShield, LDAP authentication, and RBACVirtual Datacenter 1 (Gold)VMware vShieldVirtual Datacenter n (Silver)Provides self-service portals and standardized infrastructure catalogsVMware vCenter Server VMware vCenter Server VMware vSpherevCloud Secure Private Cloud APIVMware vCenter Server VMware vSphereIsolates users into organizations with unique catalogs, policies, and LDAPVMware vSpherePublic CloudsITvCloud API enables inter-cloud portability, programmatic control, and integrations25Programmatic Control and IntegrationsUsers have an isolated infrastructure sandboxOrganization Virtual Datacenters are isolated resource pools dedicated to an organization Logical abstraction between application and underlying hardware Access without risk of exceeding capacity, bothering “neighbors,” or creating security issues Can be offered at a predefined SLA with corresponding costs26Infrastructure Service CatalogFinance OrganizationOrganization Virtual Datacenter 1 Organization Virtual Datacenter 1 Organization Virtual Datacenter 2 Organization Virtual Datacenter 2R&D OrganizationOrganization Virtual Datacenter 1 Organization Virtual Datacenter 1 Organization Virtual Datacenter 3 Organization Virtual Datacenter 3Users deploy standard services from central catalogsDirect access to catalogs through self-service portal Catalogs contain templates, vApps, and Media Catalogs can be customized by organization • Users can be given permission tocreate organization-wide catalogs • Organizations can be given permission to create datacenterwide catalogsLinux Templates Windows TemplatesBasic Media CatalogWeblogic vApps Oracle vAppsPremium Media Catalog27And specific Quality of Service metrics can be defined and metVDCs can be given specific performance and availability characteristics • Backed by tiered hardware • Pre-defined SLA / response time • Availability, performance guarantees Leverages vSphere features such as • VMware HA • DRS and vMotion • Thin Provisioning vShield technologies include • Guarantees secure and isolatedenvironments28AvailabilitySecurityPerformanceUsers are grouped into organizations with isolated VDCsGroup users into organizations that can represent any policy group such as a business unit, division, or subsidiary company Each has isolated virtual resources, independent LDAP-authentication, specific policy controls, and unique catalogs.Marketing OrgProvisioning Policies Access ControlvDCsCatalogsFinance OrgProvisioning Policies Access ControlMulti-tenant environment Move from isolated islands of virtualization IT can serve multiple organizations from common infrastructure29vDCsCatalogsAutomating routine tasks further reduces costsInfrastructure Automation • Built-in VMware vCloud Director • Rapid Provisioning • Network Configuration Business Level Automation • Leveraging the APIs and…• VMware vCenter™ Orchestrator • Third party orchestration and servicemanagement softwareVM Request• Automate routine tasks • Build ITIL workflows • Script complex operationsPolicy30IT can define multiple consumption modelsCapacity-as-you-go • “Pay-Per-VM” model • No upfront resource allocation • Org VDC allocated resources only asusers create vApps • IT can set compute limits to cap usageReservation pools • Guaranteed container • 100% of container guaranteed • Organization given resource managementcapabilities (shares and reservations)Allocation Pools • Resources allocated, but not guaranteed • Similar to the “airline seat” model • IT given resource management role andcan over provision31Leases, quotas, and a PAYG model ensures responsibilityLeases: Set maximum time period VMs can exist; IT can select renewal policies Quotas: Maximum number of VMs per user within in organizationvCenter Chargeback works with VMware vCloud Director to provide cost visibility • Costing hierarchies are automaticallycreated based on vCloud Director • vCloud Director resources like broadband network traffic, public IP addresses, DHCP, NAT can be metered and billedVMware vSphere32User controls and policies ensure IT maintains controlUser policies • Quotas • Leases Role-based access controls • vApp editing privileges • Sharing • Catalog creation Use existing LDAP directory service33AgendaDEMO34Agenda35vCloud Datacenter Service enables a secure hybrid cloudPrivate CloudPublic CloudvCloud Datacenter Certified vShield ServicevShieldCommon securityvCloud DirectorCommon managementvCloud DirectorvSphereCommon platformvSphere36VMware provides an evolutionary path to the cloudLeverage Existing InvestmentsScale Across Your InfrastructureFlexibility to Expand to the Public CloudHelp When You Need It37Users are happy. IT is happy.Energize Business Through ITSimplify IT, Lower Costs, Increase Agility38VMware vCloud Director ArchitectureSecure Secure Secure Clients Clients ClientsScalability• Horizontal scaling at both application and physical infrastructure layers • Add vCloud Director Server(s) as need increases • vCloud Director layer implemented in OSGivCloud Director ServerPublic InternetLoad BalancervCloud Director ServervCloud Director Server…SecurityDatabase• Hardened for availability on public internetReplication Database for backup & availability• User permissions • Multi-tenancyMessage Busresource pools, storage, network…resource pools, storage, networkAvailability• Limit single points of failure39。