the journey to cloud computing

Upload: korhl

Post on 04-Apr-2018

217 views

Category:

Documents


0 download

TRANSCRIPT

  • 7/30/2019 The Journey to Cloud Computing

    1/29

    2011 VMware Inc. All rights reserved

    The journey to cloud computingJan Tiri, CISSP - Systems Engineer, VMware Inc.

  • 7/30/2019 The Journey to Cloud Computing

    2/29

    2

    2010 Milestone: Virtualization is Now De Facto Model

    We are past a virtual tipping point!

    0

    2,500,000

    5,000,000

    7,500,000

    10,000,000

    12,500,000

    15,000,000

    17,500,000

    VM Cross Over

    2005 2006 2007 2008 2009 2010 2011 2012 2013

    Source:

    IDC

    Physical ServersVirtual machines

  • 7/30/2019 The Journey to Cloud Computing

    3/29

    3

    The Rise of a New Era in IT

    Mainframe

    PC / Client-Server

    Web

    Cloud

    Cloud Computing will transformthe delivery of IT services

  • 7/30/2019 The Journey to Cloud Computing

    4/29

    4

    Virtualization & Cloud Management: VMware Approach

    Application Management Encapsulate applications into containers with vApps

    Assure application portability & performance Establish service contracts with infrastructure

    End-User Computing Management Provision & deploy desktops rapidly

    Manage workstation images simply

    Deliver virtualized applications to desktop

    End User Computing

    Cloud Applications

    VMware Management Solutions

    IT BusinessManagement

    Govern cloud

    provisioning

    processes Track cloud

    software license

    usage

    Standardize

    cloud partitions

    VMware Cloud Director

    vSphere

    Infrastructure & Operations Management

    Create a zero-touch, compliant infrastructure Build automation into platform

    Deliver self-service through policy-driven control

    Public/Private/Hybrid CloudVirtualized Infrastructure

  • 7/30/2019 The Journey to Cloud Computing

    5/29

    5

    vAPP

    vApp the virtual application

    APP

    Business apps consist of multiple

    VMs and form a vAPP vAPPs are treated as the

    management container

  • 7/30/2019 The Journey to Cloud Computing

    6/29

    6

    The application portability is the key

    =VM OVFVM+INFO

    Virtual

    Machine

    Description of VM

    properties

    OVF Virtual

    Machine

    The Open Virtualization Format (OVF)is an industries standard, to ensure

    cross platform VM portability

  • 7/30/2019 The Journey to Cloud Computing

    7/29

    7

    OS

    Exchange

    Operating System

    Virtualization

    OS

    SAP ERP

    Operating System

    Virtualization

    OS

    File/Print

    Operating System

    Virtualization

    OS

    Oracle CRM

    Operating System

    Virtualization

    Virtual Infrastructure

    InterconnectPool

    CPU

    Pool

    MemoryPool

    Storage

    Pool

    Traditional View VirtualInfrastructure

    Abstraction + Pooling = Reduced Complexity

  • 7/30/2019 The Journey to Cloud Computing

    8/29

    8

    Abstraction + Pooling = Reduced Complexity

    Oracle CRM

    Operating System

    SAP ERP

    Operating System

    File/Print

    Operating System

    Exchange

    Operating System Virtual Infrastructure

    InterconnectPool

    CPUPool

    MemoryPool

    Storage

    Pool

    Data Protection

    Security

    Failure Protection

    Site Evacuation

  • 7/30/2019 The Journey to Cloud Computing

    9/29

    9

    Changing the way services are added

    Operating System

    Virtualization

    Application

    Owners IT Department

    Core AppAvailability

    Data

    ProtectionCore App

  • 7/30/2019 The Journey to Cloud Computing

    10/29

    10

    HyperVisorHyperVisor

    Dynamic Computing

    Vmotion

    Greater Availability

    HA (High Availability)X

    Availability services

  • 7/30/2019 The Journey to Cloud Computing

    11/29

    11

    virtual data center

    Vmotion stateful (live)

    migration of VMs

    DRS automated migration(load balancing)

    + intelligent auto-placement ofnew VMs

    Storage Vmotion statefulmigration of vms storage - i/o,maintenance, new storage

    Availability services

  • 7/30/2019 The Journey to Cloud Computing

    12/29

    12

    virtual data center

    Fault Tolerance

    HA still available for lower tierapps

    Identify VMs you want for faulttolerance and start the service

    A shadow VM is created and

    takes over if host failureoccurs

    X

    Availability services

  • 7/30/2019 The Journey to Cloud Computing

    13/29

    13

    virtual data center virtual data center

    StorageReplication

    X

    Availability services

  • 7/30/2019 The Journey to Cloud Computing

    14/29

    14

    Data Protection Services

    VMware ESX / ESXi

    Backup / Restore

    functionalityNo Backup Agents in OS

  • 7/30/2019 The Journey to Cloud Computing

    15/29

    15

    Changing the way services are added

    Operating System

    Virtualization

    Application

    Owners IT DepartmentAvailability

    Data

    Protection

    Security

    Core App

  • 7/30/2019 The Journey to Cloud Computing

    16/29

    16

    Traditional vs vShield

    OS

    APP

    DATA

    OS

    APP

    DATA

    OS

    APP

    DATA

    Host based Security

    Network based Security

    VMware vSphere + vShield

    SECURITY SECURITY SECURITY

    Introspect Processor, Memory, Network, File Access

  • 7/30/2019 The Journey to Cloud Computing

    17/29

    17

    Leveraging Virtualization for Better-than-Physical Security

    Issues

    AV storms can cause 100%

    saturation in shared compute (CPU)and SAN/NAS (storage I/O)

    environments

    Traditional agents are resource

    intensive - not optimized for high

    utilization, efficient clouds

    Up to 6 GB on VMware View desktops

    Opportunities

    Leverage hypervisor to offload AV

    functions from agents into a

    dedicated security VM Deploy security in a more agile,

    service-driven manner to both private

    and public cloud environments

    VMware vSphere

    Introspection

    SVM

    OSHardened

    AV

    VM

    APP

    OSKernel

    BIOS

    VM

    APP

    OSKernel

    BIOS

    VM

    APP

    OSKernel

    BIOS

  • 7/30/2019 The Journey to Cloud Computing

    18/29

    18

    Efficient resource consumption

    Scan server approach means

    no agent footprint

    less memory and management

    overhead

    Lower CPU and IO load

  • 7/30/2019 The Journey to Cloud Computing

    19/29

    19

    VMware vShield App

    Application Protection for Network Based

    Threats Hypervisor-level firewall

    Inbound, outbound connectioncontrol applied at vNIC level

    Elastic security groups - stretch

    as virtual machines migrate to newhosts

    Robust flow monitoring

    Policy Management

    Simple and business-relevantpolicies

    Managed through UI or RESTAPIs

    Logging and auditing based onindustry standard syslog format

  • 7/30/2019 The Journey to Cloud Computing

    20/29

    20

    Automated Cloud VDC Perimeter Security with vShield Edge

    APP

    DB

    DMZ

    INTERNET

    vShield Edge

    Production

    VDC

    APPDMZ

    Development

    VDC

    vSphere vSphere vSphere vSphere

    Virtual Distributed Switch

    vShield Edge

    DB

  • 7/30/2019 The Journey to Cloud Computing

    21/29

    21

    vShield Portfolio overview

    DMZ Application 1 Application 2

    Securing the Private Cloud End to End: from the Edge to the Endpoint

    Edge

    vShield Edge

    Secure the edge of

    the virtual datacenter

    Security Zone

    vShield App andZones

    Create segmentation between

    enclaves or silos of workloads

    Endpoint = VM

    vShield Endpoint

    Offload anti-virus processing

    Endpoint = VM

    vShield Manager

    Centralized Management

  • 7/30/2019 The Journey to Cloud Computing

    22/29

    22

    Changing the way services are added

    Operating System

    Virtualization

    Application

    Owners IT DepartmentAvailability

    Data

    Protection

    Security

    Core App

    Flexible Size

  • 7/30/2019 The Journey to Cloud Computing

    23/29

    23

    Flexible Resources

    Hot Add

    CPU

    Memory

    Disk

    Networking

    VMware ESXi & ESX

  • 7/30/2019 The Journey to Cloud Computing

    24/29

    24

    Flexible and Controlled Resources

    Memory ControlCPU Control

    Storage IO Control

    Resource Pools

    Network IO Control

  • 7/30/2019 The Journey to Cloud Computing

    25/29

    25

    The Hybrid Cloud

    Public CloudService Provider

    Private Cloud

    VMware =Enterprise Hybrid Cloud

  • 7/30/2019 The Journey to Cloud Computing

    26/29

    26

    Cross cloud management makes hybrid cloud real

    Visualize resources across hybridclouds inside the vSphere Client

    See VMs, vApps and templates acrossvSphere and private and public vClouds

    Delivered as a vSphere Client Plugin

    Copy & operate on resources

    across clouds Copy resources between vSphere and

    vClouds

    Perform power operations on workloads

    Access console of vApps running in

    vClouds

    Deliver enterprise level security

    Data managed by onsite server

    Security scope set by vSphere Client

    vCloud Connector

    Connect, visualize and operateon multiple clouds

  • 7/30/2019 The Journey to Cloud Computing

    27/29

    27

    VMware Solutions for IT as a Service

    vCloud PoweredPublic Clouds

    IndependentPublic Clouds

    Application Access

    SaaSApplications

    Other SaaS

    ProvidersView Thin App Zimbra

    End-User Computing

    Application Portability

    Spring vFabric vFabric Hyperic

    vmForce

    Oher PaaS

    Partners

    Google AppEngine

    Other cloudinfrastructure

    providers

    Cloud Application Platform

    Secure Private Cloud

    VMware vSphere: Foundation for Cloud Computing

    vCenter vShield vCloud Director

    vCloudDatacenter

    vCloud Express

    Application Mobility

    Cloud Infrastructure and Management

    vCloud Director

  • 7/30/2019 The Journey to Cloud Computing

    28/29

  • 7/30/2019 The Journey to Cloud Computing

    29/29

    29

    vSphere 4.1 Editions SMB

    = New feature with 4.1 release

    = Existing feature moving down edition

    = Edition specific feature= Carry-over feature

    ESSENTIALS

    4-way vSMP

    VC Agent

    3 Hosts/ 6 Procs6 physical cores

    Update Manager

    VCB / vStorage APIs

    ESSENTIALSPLUS

    High Availability

    4-way vSMP

    VC Agent

    3 Hosts / 6 Procs6 physical cores

    Update Manager

    Data Recovery

    VCB / vStorage APIs

    Thin Provisioning Thin Provisioning

    VMotion

    HYPERVISOR

    vSphere Client

    Converter

    Single Server ESXi