Merlin Glynn (@virtualMerlin) - Building an Enterprise Hybrid Cloud with the VMware vCloud Solution
•
6 gostaram•1,326 visualizações
Building an Enterprise Hybrid Cloud with the VMware vCloud Solution
Recomendados
Recomendados
Mais conteúdo relacionado
Mais procurados
Mais procurados (19)
Destaque
Destaque (9)
Semelhante a Merlin Glynn (@virtualMerlin) - Building an Enterprise Hybrid Cloud with the VMware vCloud Solution
Semelhante a Merlin Glynn (@virtualMerlin) - Building an Enterprise Hybrid Cloud with the VMware vCloud Solution (20)
Último
Último (20)
Merlin Glynn (@virtualMerlin) - Building an Enterprise Hybrid Cloud with the VMware vCloud Solution
- 1. Building an Enterprise Hybrid Cloud with the VMware vCloud Solution Merlin Glynn, Cloud Architect , VMware APO VMworld 2011 DTC Talk
- 2. VMware vCloud Initiative Evolving Virtualized Datacenters to a Cloud Infrastructure
- 4. Increase automation thru built-in policy-driven management
- 5. Move from static, physical security to dynamic, embedded securityCompute Storage Network
- 8. Enable secure, self-service to pre-defined IT services, with pay-for-useOrganization VDCs Catalogs Organization VDCs Catalogs Users & Policies Users & Policies Compute Storage $75 Network
- 9. Evolve Your Existing Datacenter to a Private Cloud USE USE USE USE Organization: Marketing Organization: Finance Organization VDCs Catalogs Users & Policies Organization VDCs Catalogs Users & Policies Private Cloud Cloud Infrastructure Compute Management Automation Storage Networking IntegratedSecurity Compute Storage $75 Network
- 12. Common securityApps vCloudService Provider VMware Enterprise Hybrid Cloud Private Cloud Cloud Infrastructure Security Cloud Infrastructure Management Cloud Computing Moves from a Technology Discussion to a Business Decision
- 13. Cloud Requires Elasticity, On-demand Access, and Resource Pooling vCloud Solution Only VMware offers true pooling with Virtual Datacenters Only VMware address all three End-User Computing Cloud Infrastructure Cloud Application Platform Only VMware enables the hybrid cloud EnterpriseHybrid Cloud Private Cloud vCloud Powered Community Cloud
- 14. VMware vCloud Initiative VMware Delivers This Today with vCloud
- 15. VMware Offers a Secure Hybrid Cloud for Enterprises The VMware vCloud Solution Private Cloud Public Cloud Co-Branded vCloud Services Cloud ConsumptionvCloud vCloud Datacenter Security & performance for enterprises Portability Operations and ManagementvCenter Cross-Cloud StandardsvCloud APIOpen Virtualization Format vCloud Express Rapid credit-card payment for developers Security and CompliancevShield Cross-Cloud ManagementvCloud Connector vCloud Powered Broad array of VMware-compatible clouds for any business need VirtualizationvSphere
- 16. The Solution is for IT to Become a Cloud Service Provider IT becomes a service provider, enabling true business agility Achieve the economics and agility of cloud computing without sacrificing security or control Users are given an alternative to commodity public clouds, eliminating the need for unauthorized deployments Self-ServicePortals Catalogs Virtual Data Centers
- 17. Architecting and Managing a Cloud Infrastructure Logical Constructs
- 18. VMware vCenter Server vCloud Director Introduces New Multi-tenant Resource Abstractions VMware vCloud Director Organization: Marketing Organization: Finance Organization VDCs Catalogs Organization VDCs Catalogs Resource Pools Datastores Port Groups Users & Policies Users & Policies Provider Virtual Datacenters (Gold) (Bronze) (Silver) VMware vCenter Server VMware vSphere Secure Private Cloud
- 19. The end Thank you! Confidential
- 20. Delivering and Managing a Cloud Infrastructure Deep Dive Module
- 21. In this Layer, CIOs are Facing Public Cost Benchmarks… Public Rate Cards Lead to Tough Questions About Internal IT Costs Pushing IT to Benchmark Their Own IT Organization…
- 22. Virtualization is the Foundation of Cloud, and It’s Proliferating “Virtualization is a modernization catalyst and unlocks cloud computing.” ―Gartner VM Cross Over More VMs were deployed than physicalservers starting 2 years ago VMware is alone in the Leaders Quadrantfor x86 Server Virtualization 17.5 15.0 12.5 10.0 7.5 5.0 2.5 Millions 2012 2005 2006 2007 2008 2009 2010 2011 2013 Physical Hosts Virtual Machines Gartner, Inc. Magic Quadrant for x86 Server Virtualization Infrastructure, Thomas J. Bittman, Philip Dawson, George J. Weiss, 26 May 2010. This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the entire report. The Gartner report is available upon request from VMware. The Magic Quadrant is copyrighted 2010 by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
- 23. IT Can Define Multiple Consumption Models Capacity-As-You-Go “Pay-Per-VM” model No upfront resource allocation Org VDC allocated resources only as users create vApps IT can set compute limits to cap usage Reservation pools Guaranteed container 100% of container guaranteed Organization given resource management capabilities (shares and reservations) Allocation Pools Resources allocated, but not guaranteed Similar to the “airline seat” model IT can over-provision
- 24. Only VMware Offers Defense in Depth for Your Cloud Infrastructure Virtualizes common network services such as NAT and DHCP vShield Endpoint protects the individual VM with offloaded anti-virus vShield App protects the applications with multi-VM trust zones vShield Edge protects the virtual data centers with port-level stateful firewalls
- 25. VDC Gold VDC Silver Security Profiles Remain Intact in the Dynamic Cloud Environment
- 26. VDC Gold VDC Silver vCenter Configuration Manager Continuous Compliance Assessment & enforcement Policies built from Out-of-the-box compliance templates SOX, HIPAA, FISMA, DISA, GLBA, ISO 27002, NIST, PCI DSS, NERC, CIS, FERC Harden the hypervisor configsfor ESX, network, storage, etc. Harden the hypervisor guest Harden the Guest OS Build Golden Image / Standards VMware Provides Continuous Compliance Within and Across Clouds
- 28. Highly sensitive scientific apps
- 29. Shared services
- 31. And the DMZ
- 32. Restrict inbound and outbound traffic to the trust zones
- 33. Restrict access to applications in a trust zone to View users in the subgroup within the zone
- 36. Networking and Storage Are Easier to Configure & Provision New Model of IT—Intelligent Policies Old Model of IT—Manual Configuration IT needs to allocate storage manually for each VM request IT needs to manually configure port groups for each VM request Multiple touches, multiple people involved Intelligent placement of VMs ensures balanced load & highest resource utilization VDCs & network pools allow cluster-wide policies that are vMotion neutral Fenced networks can be provisioned across hosts without any manual IT configuration Virtual Datacenter n (Silver) Virtual Datacenter 1 (Gold) VMwarevShield RequestTicket vSphere Admin
- 38. Native management designed-in, at each architectural layer
- 40. Delivers self-service with control
- 41. Self-manages to desired state
- 43. Cloud interoperability across service providers
- 44. Open and standards-based approach
- 46. Extensions, Notifications, and APIs Enable Third-Party Integrations Easily orchestrate vCloud actions vCloud API vCenter Orchestrator Plug-in VMware Service Manager Plug-in Extensions, notifications, and JMX Interfaces can be monitored using existing monitoring systems Existing systems are supported In-Guest agents are fully supported Existing IT request systems, approval management systems can be configured to use the vCloud API VM Request Policy
- 47. Bridging the Clouds With the Only Hybrid Cloud Deep Dive Module
- 48. A Host of Features Including Site-to-Site VPN Makes This a Reality VDC Gold VDC Silver VDC Bronze Secure VPN Secure Private Cloud vCloud Datacenter
- 49. The Leading Public Clouds AllPartner with VMware 4,000+ vCloudIaaS Partners App CloudPaaS Partners Source: Gartner (December 2010)
- 50. VMware Offers Two Co-Branded Public Cloud Services vCloud Datacenter Services vCloud Express Rapid signup with credit card billing Utility “pay as you go” pricing Lowest cost with high QoS Interoperability across providers Guaranteed quality of service Certified adherence to ref. architecture Secure and compliant Workload mobility across providers vCloudDatacenterCertifiedService Common security Private Cloud Public Cloud vShield vShield Commonmanagement vCloud Director vCloud Director Common platform vSphere vSphere
- 51. VMware Leverages Cross-Cloud Standards for Workload Mobility vCloudAPI: First Cloud API Submitted to Open Industry Standards APIs: Programmatic Access to Resources OVF PrivateCloud PublicClouds OVF: First Industry Standard Cloud Workload
- 52. Cross Cloud Management Makes Hybrid Cloud Real vCloud Connector Connect, visualize andoperate on multiple clouds Visualize resources across hybrid clouds inside the vSphere Client See VMs, vApps and templates across vSphere and private and public vClouds Delivered as a vSphere Client Plugin Copy & operate on resources across clouds Copy resources between vSphere and vClouds Perform power operations on workloads Access console of vApps running in vClouds Deliver enterprise level security Data managed by onsite server Security scope set by vSphere Client Colt vCloud vSphere BluelockvCloud PrivateCloud VerizonvCloud
- 53. Cross Cloud Management Makes Hybrid Cloud Real NDA UNTIL VMWORLD Web portal to manage content vCloud.vmware.com Provides an operating portal across clouds Provides sample content (OS images, virtual appliances) Federation across clouds vCloud Connector – visualize, copy and operate on resources across vSphereand private / public vClouds vApp Publisher – federate content between clouds efficiently and reliably by scheduling background transfers Hybrid architecture Data stored and managed by onsite server Cloud-based vCloud.vmware.com facilitates innovation UI is a mashup of online service and onsite servers Project Discovery Federate and synchronize content between clouds End Users Colt vCloud InternalvSphere(s) BluelockvCloud InternalvCloud(s) ContentCloud
- 54. Intercontinental Hotels Built a Hybrid Cloud to Offer Global Access InterContinental Hotels Group More than 4,500 hotel properties, 650,000 guest rooms in more than 100 countries/ territories worldwide Business Drivers Need for elasticity Use of current IT configurations Ability to charge back applications Cost effective; no CapEx Solution Offering Membership rewards program Exported vApp and uploaded into Verizon CaaS enabled by vCloud Datacenter Used vCD to manage and configure application for use
- 56. VMware is the Leader in Enterprise Hybrid Cloud Infrastructures VMware is the leader in the cloud platform VMware offers the products and services to build a hybrid cloud vCenter Chargeback vCloud API vCloud API vCD Portal Private Cloud Public Cloud vCenter Chargeback Web Interface “Virtualization is a modernization catalyst and unlocks cloud computing.” Gartner, May 2010 End Users Co-Branded vCloud Services vCD Database vCenter Chargeback Database Cloud ConsumptionvCloud VMware vCloud Director vCloud Datacenter Security & performance for enterprises VMware vCloud Director vCenter Chargeback Server Portability Operations and ManagementvCenter LDAP vCenter Database Cross-Cloud StandardsvCloud APIOpen Virtualization Format VMware has the expertise and services to build clouds VMware powers the industry’s largest cloud ecosystem vCloud Express Rapid credit-card payment for developers vCenter Server Security and CompliancevShield VMware vCloudDirector SecurityHardening Guide VMware vCloudDirector SecurityHardening Guide vShield Manager w/ Edge Networks VMware vCloud Director 1.0 Performance and Best Practices vShield Manager and vShield Edge Virtual Appliances WHITEPAPER WHITEPAPER Cross-Cloud ManagementvCloud Connector vCenter Chargeback Collectors (vCenter, vCD, vSE) vCloud Powered Broad array of VMware-compatible clouds for any business need VirtualizationvSphere ESX/ESXi Hosts Datastores VMware vSphere 4 Enterprise Plus
- 58. VMware has the expertise and services to build clouds Experienced team has built the best clouds in the industry Technical Services Cloud Practice in conjunction with VMware Professional Services (PSO) and partners Professional Service Offerings vCloud Jumpstart vCloud Accelerator Service Custom vCloud Engagements Reference architecture Certified and enforced with vCloud Datacenter Service PartnersPublicly available on vmware.com Best Practice Whitepapers Technical whitepapers written by the experts who built the top public and private clouds vCenter Chargeback vCloud API vCloud API vCD Portal vCenter Chargeback Web Interface End Users vCD Database vCenter Chargeback Database VMware vCloud Director VMware vCloud Director vCenter Chargeback Server LDAP vCenter Database vCenter Server VMware vCloudDirector SecurityHardening Guide VMware vCloud Director 1.0 Performance and Best Practices Architectinga vCloudVersion 1.0 vShield Manager w/ Edge Networks vShield Manager and vShield Edge Virtual Appliances TECHNICAL WHITE PAPER TECHNICAL WHITE PAPER TECHNICAL WHITE PAPER vCenter Chargeback Collectors (vCenter, vCD, vSE) ESX/ESXi Hosts Datastores VMware vSphere 4 Enterprise Plus
- 59. Appendix Customer Case Study Library
- 60. Five primary use cases resonate strongly with customers Each Implementedby VMwareCustomers Shared Infrastructure for Multiple LOBs (Multiple LOBs, datacenter consolidation, etc) Rapid Deployment (Lab, Demo, Test, etc) Private / Hybrid Evolving The Business Model (Offering Products as a Service) Global Access (Bring Apps Close to Users for performance, etc) Public / Hybrid Temporary or Elastic Capacity(Seasonal, projects, batch processing, DR/failover, etc)
- 61. 1. GE, CMU, and others are evolving to a shared infrastructure Customer Example Major multinational conglomerate Currently two shared IT providers, and most businesses running on physically isolated environments Enable on-demand proof-of-concepts (POCs) Solution Offering Isolated Virtual Data Centers Distributed Resource Schedule Business Benefits CapEx and OpEx Savings Maximizes utilization of hardware (increased VM density) Simplified management HealthcareInfrastructure Aerospace Infrastructure Consumer Infrastructure HealthcareOrganization AerospaceOrganization Consumer Organization HealthcareVDC AerospaceVDC Consumer VDC
- 62. 2. Sabre Holdings enables rapid sales-led POCs in the cloud Customer Example Airline solution provider Non-technical sales force, currently uses PPT slides, but now sales deploys product demos on-the-fly Solution Offering Easy-to-use self-service portal Pre-built images stored in catalog RBAC and user-policies Isolated deployment environment Business Benefits Increased Revenue Shorter sales cycle Higher deal win-rate Before Gottahave it! ??? After
- 63. 3. Sabre Holdings is changing their business model Customer Example Airline solution provider Moved from hosting physical hardware at customer to centralized hosting from their cloud Solution Offering Isolated Virtual Data Centers Self-Service Access vShield Security Technologies vCenter Chargeback integration Business Benefits Higher customer satisfaction Simplified Control of Application Lower cost operating model Before After
- 64. VMware vCloud Director 3. Similarly, LANL is changing evolving their business model Customer Example Government research institution Pre-approves access to VDC to cut through red-tape and gives research teams direct access to infrastructure resources Solution Offering vShield Security and Isolation Virtual Data Centers RBAC and user policies Business Benefits Reduced processing time and overhead Increased application pool of research requests Research teams (End Users) Research Institution (Cloud Admin)
- 65. 4. IHG uses public clouds to provide global access to apps InterContinental Hotels Group More than 4,500 hotel properties, 650,000 guest rooms in more than 100 countries/ territories worldwide Business Drivers Need for elasticity Use of current IT configurations Ability to charge back applications Cost effective; no CapEx Solution Offering: Membership rewards program Exported vApp and uploaded into Verizon CaaS enabled by vCloud Datacenter Used vCD to manage and configure application for use
- 66. 8.0 5. Customers leverage vCDC for temporary or elastic capacity Customer Example Major multinational conglomerate Partnering with vCloud partner to offload peak workloads into the public cloud Vision around DR to the cloud Solution Offering Open API and file formats (OVF) Abstraction from underlying hw Public cloud solution partners Business Benefits Application mobility Flexibility for the future (no lock in) Reduce hardware expenditure for peak demand (procure for average) Resource Needs 8 8 8 8 8 0 0 0 0 0 4 0 3 0 Wk2 Wk 1 Wk7 Wk6 Wk5 Wk4 Wk3 Needs Cloud Owned 8 7 7 3 2 2 5 5 0 0 4 1 3 0 Wk7 Wk6 Wk5 Wk4 Wk3 Wk2 Wk 1
Notas do Editor
- Every one of our customers has existing applications, running in existing datacenters, that represents significant investments and ongoing value. The first thing we are doing with these customers, is helping them stand-up a Private Cloud, to get the most efficiency and agility out of their existing assets. And this can be done in a pragmatic, evolutionary way. We have over 250,000 customers worldwide that are already on this path, because they are leveraging vSphere to virtualize the entire fabric of the datacenter, including CPU & memory, storage, and networking. And because they are using vSphere, they get built-in high-availability, and automated, dynamic resource scheduling to give them the cloud attributes of elastic, pooled capacity. <click>With virtualization in place, the independent silos are broken down, enabling us to automate many of the mundane, repetitive administration tasks with our vCenter management suite, further decreasing opex in the datacenter.
- Another attractive benefit of cloud computing is the notion of on-demand, self-service, which contributes to increased customer satisfaction and business agility. This notion is just as important in the Private Cloud, but needs to be done in a way that conforms to IT security policies.<click>Businesses are made-up of multiple organizations, such as our example here with both Marketing and Finance. Each organization has members, or users, with respective security policies, as defined in corporate identity management systems. <click>With vCloud Director, IT organizations can define catalogs of pre-defined IT services, that can be accessed through a self-service portal, and deployed to pre-configured logical datacenters, or Virtual Datacenters as we refer to them, that represent committed SLA’s to the organization. And with our Chargeback module, IT can set-up pay-for-use models for each organization, dependent on their virtual datacenter and actual usage parameters.
- These steps are what transform existing datacenters, into cost-effective, flexible Private Cloud environments. That is the focus of VMware’s Cloud Infrastructure solutions, covering all aspects of infrastructure, including security and management.
- The real value in cloud computing is when all boundaries are flexible, to enable cross-cloud federation and coordination. This is what gives customers maximum choice and flexibility in how to streamline costs and improve agility. Our belief is that cloud computing implies a ubiquitous model for interoperability between multiple clouds, both within and outside the enterprise. We refer to this as Open Cloud Computing, which we are fully committed to.<click>This is why VMware is working with so many public cloud service providers, as part of our vCloud program, to create compatible cloud environments for application mobility.<click>In particular, we are working with a handful of service providers to create a secure, enterprise-class cloud service, that uses a common service-level management model based on vCloud Director, and a common security model based on vShield, to extend the trust boundary of the enterprise into these public cloud services, and enable the safe, secure mobility of application workloads between the environments. <click>This class of service is referred to as the VMware vCloud Datacenter Service, and ensures a common platform, management model, and security model, to create the ultimate secure hybrid cloud environment. With vCloud, open cloud computing moves from being a technology discussion, to a business decision!
- In this new model, the IT organization becomes a cloud service provider for the business, achieving the benefits of cloud computing without sacrificing security or control. Users experience unprecedented responsiveness and agility, and IT management can reduce costs through increased consolidation, task automation, and simplified administration.VMware vCloud Director enables IT organizations to deliver resources to internal organizations as virtual datacenters. By logically pooling compute, storage, and networking capacity into virtual datacenters, IT organizations can manage resources more efficiently with complete abstraction between consumption and delivery of IT services.
- All icons separated out.
- TRADITIONAL: physical devices statically placed at boundariesWhat are boundaries in new world?2 changes -> move into Software AND move into virtual fabricBIG MOVE FROM securing virtualized infrastructure to virtualizing security infrastructure
- Pull it together – from static to dynamicProtection stays in place as VDCs morphWhat’s more – security eats from same poolAll about ensuring efficient protection that follows logical view of world
- Pull it together – from static to dynamicProtection stays in place as VDCs morphWhat’s more – security eats from same poolAll about ensuring efficient protection that follows logical view of world
- Efficiency through ConsolidationThe initial desire to run business critical apps on VI is typically driven by consolidation. ERP systems, Exchange, databases, etc, frequently consume large pools of servers which are overprovisioned like your typical x86 systems, and usually span not just production but test, dev and training. These applications are ideal candidates for consolidation, typically enabling consolidation ratios of 5XX or more.Guarantee App Quality of Service.With VMware, applications can scale dynamically to ensure service levels under variable load.In addition, VMware provides built-in HA and DR to ensure availability without complexity of app-specific clustering.Accelerate App LifecycleApplications can de developed, tested, and deployed faster with VMware. Vmware enables apps to be provisioned on-demand, in a matter of minutes, whether in the labs or in production.
- Key pointThe dynamic nature of a cloud infrastructure fabric requires management to execute management responsibilities in different ways, using different IT Management methods. Virtualization drives new patterns of architectures, redefining the boundaries between IT components and resources and operational processes, leading to significant changes in the way different components of the IT stack are managed and configured, secured and delivered, across a heterogeneous computing platform plane.The table describes a number of key IT Management disciplines for a private cloud infrastructure. It sets out how traditional IT Management approaches approach these disciplines against the requirements for a (private) cloud infrastructure. The comparison by discipline emphasizes how new innovative technologies drive a new paradigm, the Cloud Era, and how this will change the way IT is managed. Current/traditional management solutions lack mature capabilities, tools and processes to manage highly dynamic infrastructure fabric computing for cloud computing (aggregation and dis-aggregation of related pooled resources). Deploying traditional server, network and storage systems is slio’d , labor intensive and complex. Life cycles and deployments are often one-off configurations, glued to specific application and departmental roles. Application stay rooted/bound to the configuration, forming multiple silos. Optimization is often a ‘guessing game’ of IT capacity planning, while the mobility and distribution of application is a manual-intensive process, when practiced at all. Virtualization focuses on the speed of processes of deployments and utilizes dynamic pooled/shared resources more efficiently, increased levels of automation, OS intelligence and management tools. Through VMware’s vast experience with its most advanced customers, VMware has developed an approach to guide the path to the ultimate goal: IT as a Service through a cloud architecture.
- But, security in the private cloud is one thingWhat if I want to extend my security model to the public cloudThat’s what’s so cool about EDGE… extend logical datacenter across sitesConnect the two with VPNPublic cloud apps can use directory, interact on trusted netBut how can I be sure public clouds implement all of these security capabilitiesHappy to introduce new program focused on this
- And we're committed to that open and interoperable. So examples are things like OVF, Open Virtualization Format, of which VMware was a key driver behind in getting that established through the Distributed Management Taskforce as a key standard. This standard really is the first standard for portable Cloud workloads and we continue to add to the standards environment with things like our vCloud API where we're trying to drive through that same organization the standards around how to manage at a service level across multiple Clouds. So we are committed to open and interoperable.VMware is committed to open & interoperable, even above and beyond the work we are doing with vCloud Service Provider Partners. VMware is actively leading the charge to standardize interoperability between cloud computing environments, working through the Distributed Management Task Force: OVF – Open Virtualization Format – to provide portability of virtual appliances across clouds and virtualization platformsvCloud API – to standardize programmatic access to cloud resources.
- If cloud is about reducing complexity in the datacenter, cutting costs, and increasing agility, no other vendor has ever successfully delivered on all three of these in such a profound way as VMware.” No other vendor has delivered as much impact as VMware. VMware has already delivered reduced complexity, cost, and agilitySo who do you really believe can deliver this with cloud? The big 4? What have they given you? Have you automated your way to a cloud over the past 10 years? What’s new?