Building an Enterprise Hybrid Cloud with the VMware vCloud...
51
© 2009 VMware Inc. All rights reserved Customer Presentation Building an Enterprise Hybrid Cloud with the VMware vCloud Solution Glenn Grabowski, Staff Systems Engineer, Senior Cloud Specialist, VMware May 4, 2011
Transcript of Building an Enterprise Hybrid Cloud with the VMware vCloud...
© 2009 VMware Inc. All rights reserved
Customer Presentation
Building an Enterprise Hybrid Cloud with the VMware vCloud SolutionGlenn Grabowski, Staff Systems Engineer, Senior Cloud Specialist, VMware
May 4, 2011
2
Agenda
VMware vCloud Initiative
IT Needs Cloud To Enable Efficiency and Agility
VMware’s Cloud strategy
VMware's vCloud solution stack
Conclusion and Q&A
3
Business
Owner
It’s all about “The App”
: Developers need more agile infrastructure…
We need to: •
Get capacity now•
Get s/w stacks deployed•
Simulate production
Once in prod, we need •
Plan capacity for app•
Place on Tier 1 capacity•
Provision the App Server, web, database
•
Set up the load balancer•
Set up the firewall•
Set up data protection•
Set up mgmt •
Manage the app•
…Operations
How do we get the h/w, manage the
app and deliver the SLA in production?
4
… and often leverage commodity clouds when IT doesn’t respond
Developers
May I have a LAMP stack,
please?
vSphere Admin
CIOs have concerns about…?
Security and Compliance?
Performance and SLAs?
Availability and Data Protection?
Intellectual Property
Queues Custom requests
Hardware acquisitionIndividual Approvals
5
Flexibility and agility are becoming increasingly important to IT
Source: CIO LinkedIn Market Pulse Survey, Oct 2010
6
Q9: Which of the following are top drivers of cloud computing initiatives at your organization? (Please check all that apply)
Business agility is the top driver for cloud computing
Base: 636 Total respondents; 234 US respondents; 202EMEA respondents; 200 APAC respondents Source: CIO Global Cloud Computing Adoption Survey January 2011
7
CIOs are facing public cost benchmarks…
Pushing IT to benchmark their own IT organization…
Public rate cards lead to tough questions about internal IT costs
8
Back to Reality -
Real life Provisioning example!
From:
9
Provisioning workflow with VMware's vCloud Director
To:
10
Agenda
VMware vCloud Initiative
IT Needs Cloud To Enable Efficiency and Agility
VMware’s Cloud strategy
VMware's vCloud solution stack
Conclusion and Q&A
11
Virtualization is the foundation of cloud, and it’s proliferating
Physical Hosts Virtual Machines
More VMs were deployed than physical servers starting 2 years ago
17.5
15.0
12.5
10.0
7.5
5.0
2.5
2006 2007 2008 2009 2010 2011 2012 20132005
Milli
ons
VM Cross Over
Gartner, Inc. Magic Quadrant for x86 Server Virtualization Infrastructure, Thomas J. Bittman, Philip Dawson, George J. Weiss, 26
May 2010. This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated
in the context of the entire report. The Gartner report is available upon request from VMware. The Magic Quadrant is copyrighted 2010 by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as
defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise
technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or
fitness for a particular purpose.
“Virtualization is a modernization catalyst and unlocks cloud computing.”
―Gartner, May 2010
VMware is alone in the Leaders Quadrant for x86 Server Virtualization
12
What is this Cloud Thing?
SaaS
Public CloudIaaS PaaS
Private Cloud
IT as a ServiceYour Cloud
Cloud Computing is an approach to computing that leverages the efficient pooling of on-demand, self-managed virtual infrastructure, consumed as a service.
13
Cloud is changing the new IT landscape…
Existing Apps New Enterprise Apps SaaS Apps
Existing Datacenters Public Cloud Services
The Challenge for IT:
Weave all this together into a cohesive,
secure, compliant whole
Evolve the Infrastructure
Modernize Application Development
Re-think End-User Computing
14
Evolve your existing datacenter to a private cloud
Leverage virtualization to transform physical silos into elastic, virtual capacity
Compute
Storage
Network
Increase automation thru built-in policy-driven management Move from static, physical security to dynamic, embedded security Enable secure, self-service to pre-defined IT services, with pay-for-use
Organization: Marketing Organization: Finance
Organization VDCs CatalogsOrganization VDCs CatalogsUsers & Policies Users & Policies
$75USEUSEUSEUSE
15
Evolve your existing datacenter to a private cloud
Compute
Storage
Network
Organization: Marketing Organization: Finance
Organization VDCs CatalogsOrganization VDCs CatalogsUsers & Policies Users & Policies
$75USEUSEUSEUSE
Private CloudCloud Infrastructure
Compute Storage Networking Integrated
Security
ManagementAutomation
16
Apps
Only VMware offers the best of both worlds with hybrid cloud
Cloud Infrastructure
Apps
Cloud Infrastructure Management
Security
Common platform
Common management
Common security
Cloud Computing Moves from a Technology Discussion to a Business Decision
vCloud
Service Provider
Private CloudVMware
Enterprise Hybrid Cloud
17
VMware offers a secure hybrid cloud for enterprises
Private Cloud
Portability
Cloud Consumption
vCloud
Cloud Consumption
vCloud
Operations and Management
vCenter
Operations and Management
vCenter
Security and Compliance
vShield
Security and Compliance
vShield
Virtualization
vSphere
Virtualization
vSphere
Public Cloud
Cross-Cloud Standards
vCloud API
Open Virtualization Format
Cross-Cloud Standards
vCloud API
Open Virtualization Format
Cross-Cloud Management
vCloud Connector
Cross-Cloud Management
vCloud Connector
vCloud Solution
vCloud Powered Broad array of
VMware-compatible clouds for any business need
vCloud Datacenter Security & performance
for enterprises
vCloud Express Rapid, credit card payment
for developers
Co-Branded vCloud Services
18
The leading public clouds all partner with VMware
Source: Gartner (December 2010)
4,000+ vCloud IaaS Partners
App Cloud
PaaS Partners
19
VMware offers two co-branded public cloud services
vCloud Express•
Rapid Signup with Credit-card Billing
•
Utility “pay as you go”
Pricing•
Lowest cost with high QoS
•
Interoperability across providers
vCloud Datacenter Services•
Guaranteed quality of service
•
Certified adherence to ref. architecture
•
Secure and compliant
•
Workload mobility across providers
vShield
vSphere
vCloud Director
vShield
Private Cloud
Common platform
Commonmanagement
Common security
vSphere
vCloud Director
Public Cloud
vCloud
Datacenter
Certified
Service
20
Extensions, notifications, and APIs enable third-party integrations
Easily orchestrate vCloud actions•
vCloud API
•
vCenter Orchestrator Plug-in
•
VMware Service Manager Plug-in
•
JMX Interfaces can be monitored using existing monitoring systems
Existing systems are supported•
In-Guest agents are fully supported
•
Existing IT request systems, approval management systems can be configured to use the vCloud API
VM Request
Policy
21
Cloud Foundry -
World’s first open Platform as a Service (PaaS) offering
Multiple Frameworks
22
Optimize not only how IT is delivered and managed, but
also how it is consumed
Increase business agility by empowering users to rapidly deploy services on-demand with self-service portals
Improve security and compliance within multi-tenant environments
with strong access controls and vShield security
Reduce costs by more efficiently delivering resources and by consolidating and standardizing your infrastructure
Enable application portability and interoperability across clouds
while leverage existing investments
Build a hybrid cloud with vCloud to resolve IT’s challenges
Consuming Infrastructure as a Service
Producing Infrastructure as a Service
23
Intercontinental Hotels built a hybrid cloud to offer global access
InterContinental Hotels Group•
More than 4,500 hotel properties, 650,000 guest rooms in more than 100 countries/ territories worldwide
Business Drivers•
Need for elasticity•
Use of current IT configurations•
Ability to charge back applications•
Cost effective; no CapEx
Solution Offering:•
Membership rewards program•
Exported vApp and uploaded into Verizon CaaS enabled by vCloud Datacenter
•
Used vCD to manage and configure application for use
24
Agenda
VMware vCloud Initiative
IT Needs Cloud To Enable Efficiency and Agility
VMware’s Cloud strategy
VMware's vCloud solution stack
Conclusion and Q&A
25
Cloud requires elasticity, on-demand access, resource pooling
Cloud Infrastructure
Cloud Application
PlatformEnd-User
Computing
vCloud Solution
Enterprise
Hybrid Cloud
Only VMware addresses all three
Only VMware enables the hybrid cloud
Only VMware offers true pooling with
Virtual Datacenters
Private Cloud
vCloud Powered
Community Cloud
26
Requirements for Building a Private Cloud
Abstraction
User Facing
IT Facing
Pooling
Elasticity
Mgmt Automation
SLA’s
Secure Multi-Tenancy
Service Catalog
Self-Service
Pay by consumption
Ubiquitous Access
27
VMware Offers a Complete CLOUD Solution
Abstraction
User Facing
IT Facing
vCloud DirectorvCloud Director
vSphere
vCenter ManagementvCenter Management
vShield SecurityvShield Security
Pooling
Elasticity
Mgmt Automation
SLA’s
Secure Multi-Tenancy
Service Catalog
Self-Service
Pay by consumption
Ubiquitous Access
28
vCloud API
Public CloudsProgrammatic Control and Integrations
VMware vCloud Director
Builds on vSphere and scales
up to 10,000 VMs and 25 vCenter Servers
Creates virtual datacenters, by pooling resources into new units of consumption
Securely enables the cloud
with vShield, LDAP authentication, and RBAC
Provides self-service portals and standardized infrastructure catalogs
Isolates users into organizations
with unique catalogs, policies, and LDAP
VMware vCloud Director builds on vSphere to transform IT
vCloud API and extensions enables cloud portability, orchestration, and integrations
Users
Organization 1 Organization m
VMware
vShield
Secure Private Cloud
VMware vCenter Server
VMwarevCenter Server
VMware vSphere VMware vSphere
User Portals
Virtual Datacenter n (Silver)Virtual Datacenter 1 (Gold)
SecurityCatalogs
29
VMware vCloud Director
vCloud Director introduces new multi-tenant resource abstractions
Secure Private Cloud
Organization: Marketing Organization: Finance
Organization VDCs CatalogsOrganization VDCs Catalogs
VMware vSphere
VMware vCenter Server
Resource Pools Datastores Port Groups
(Gol
d)
(Bro
nze)
Provider Virtual Datacenters
(Silv
er)
Users & Policies Users & Policies
30
IT must become an internal cloud service provider
IT becomes a service provider, enabling true business agility
Achieve the economics and agility of cloud computing without sacrificing security or control
Users are given an alternative to commodity public clouds, eliminating the need for unauthorized deployments
Self-Service
Portals
Virtual Data Centers
Catalogs
31
Java Stack Database on Linux
Provisions“hardware”
Needsservices
First standardize services with vApps and place into a catalog
32
Directory
Services
Group users into organizations and delegate access to the catalog
Organizations are completely isolated and secure•
Isolated virtual resources•
Independent LDAP-authentication•
Specific policy controls•
Unique catalogs
Catalogs can be customized by organization or shared•
Users can be given permission to create organization-wide catalogs
•
Organizations can be given permission to create datacenter-
wide catalogs
Enables a multi-tenant environment•
IT can serve multiple organizations from common infrastructure
•
33
Users deploy into logical containers of tiered resources with SLAs
One Size Fits All
Datacenter
Directory
Services
34
Users deploy into logical containers of tiered resources with SLAs
Business-Driven SLAs
Gold
Silver
Bronze
Directory
Services
Virtual Datacenters
35
These virtual data centers can be on premise or in public clouds
Business-Driven SLAs
Gold
Bronze
Directory
Services
Virtual Datacenters
Silver
36
Gold
Bronze
Directory
Services
IT can charge users on a pay-as-you-go model with Chargeback
37
Directory
Services
$100
$ 50
$150
$ 35
$175
$ 50
$275
$ 75
Pay for Use
GoldSLA
$100 per VM
BronzeSLA
$50 per VMUSE
USEUSE
USE
Pay for SLA
IT can charge users on a pay-as-you-go model with Chargeback
38
IT maintains control with Chargeback and user limits
Strict user limits•
Leases: Set maximum time period VMs can exist; IT can select renewal policies
•
Quotas: Maximum number of VMs per user within in organization
Chargeback integration•
Financial transparency for users and IT
•
Resources like broadband network traffic, public IP addresses, DHCP, and NAT can be metered and billed
Customizable allocation models•
Pay-as-you-Go
•
Allocation Pool
•
Reservation Pool
VMware vSphere
39
IT maintains control with strict controls and approvals
Strict access controls•
RBAC: Access privileges restricted by roles within LDAPo vApp creation/modificationo Catalog creation/modificationo Cross-organization sharingo Resource allocation
Approvals and workflows•
IT can require pre-approval if necessary using Service Manager or pre-existing suites
•
IT can create provisioning workflows
40
Shared vApp catalogs enable collaboration & workload portability
vApps contain all of the information required to deploy a service
Development Cycle Example: •
Developer end user submits a vApp to QA by publishing to the shared catalog
•
QA tester checks out the vApp from the shared catalog
•
Network isolation between vDCs allows VMs to have identical network settings without conflicts
vApps can be easily migrated to other clouds using vCloud Connector
Dev Build Virtual Datacenter
Dev Build Virtual Datacenter
Dev Build Virtual Datacenter
Sandbox Testing Virtual Datacenter
Functional Testing Virtual Datacenter
Functional Testing Virtual Datacenter
Test OrganizationDevelopment Organization
41
This fundamentally changes user behavior, benefiting both sides
Dynamic scaling and capacity management invisible to user, ensuring SLAs are met
IT can hot add capacity to the virtual datacenter without user disruption
As a result, users no longer feel the need to hoard or overprovision resources•
Aligns incentives to provision
•
Eliminates over-provisioning
•
Voluntary de-provisioning
42
LabCorp developers have instant access to VMs
Objectives•
Speed provisioning•
Provide self-service capacity on demand to IT teams•
Ease regulatory compliance, reduce risk, speed time to market
VMware Solution•
VMware vCloud Director provides secure cloud environment for controlled self-service to developers and admins
Business Impact•
Absorb acquired labs quickly, maintaining legacy systems •
Developers get VMs in seconds•
Meet constant demand for new tests, upgrades, regulatory reports
•
Build path to SaaS for agile, competitive business operations
Industry
Headquarters
Employees
Annual Revenue
“LabCorp grows by acquisition. Virtualization and the cloud environment enable us to absorb new labs and
speed time to market.”―
James P. Jones, IT Manager, Virtual/Cloud Services, LabCorp
•
VMware vSphere 4
•
VMware Site Recovery Manager (SRM)
•
VMware vCloud Director
•
vCloud Accelerator Service
PROFILE
Medical testing
Burlington, N.C.
28,000
$5.2 billion
VMWARE PRODUCTS & SERVICES
43
Only VMware offers defense in depth for your cloud infrastructure
Virtualizes common network services such as NAT and DHCP
vShield Endpoint protects the individual VM with offloaded anti-virus
vShield App protects the applications with multi-VM trust zones
vShield Edge protects the virtual data centers with port-
level stateful firewalls
44
VDC Gold VDC Bronze
Security profiles remain intact in the dynamic cloud environment
45
Security profiles follow workloads in the Hybrid Cloud model, too
vCloud Datacenter
VDC SilverVDC Gold VDC Bronze
Secure Private Cloud
Secure VPN
46
Cross cloud management makes hybrid cloud real
Visualize resources across hybrid clouds inside the vSphere Client •
See VMs, vApps and templates across vSphere and private and public vClouds
•
Delivered as a vSphere Client Plugin
Copy & operate on resources across clouds•
Copy resources between vSphere and vClouds
•
Perform power operations on workloads•
Access console of vApps running in vClouds
Deliver enterprise level security•
Data managed by onsite server•
Security scope set by vSphere Client
vCloud ConnectorConnect, visualize and operate on multiple clouds
vSphere
Verizon
vCloud
Colt vCloud
Bluelock
vCloudPrivate
Cloud
47
VMware provides continuous compliance within & across clouds
vCenter Configuration Manager •
Continuous Compliance
•
Assessment & Enforcement
Policies built from Out-of-the-box compliance templates•
SOX, HIPAA, FISMA, DISA, GLBA, ISO 27002, NIST, PCI DSS, NERC, CIS, FERC
•
Harden the hypervisor configs for ESX, network, storage, etc.
•
Harden the hypervisor guest
•
Harden the Guest OS
Build Golden Image / Standards
48
The US government trusts their vCloud deployment with vShield
View Users View UsersView Users
Scientific Apps
•
Build and maintain a secure network that isolates highly sensitive scientific applications from the rest of the environment without creating “airgaps”
Customer Need
•
Reduced provisioning time from 30 days to 30 minutes
•
Lower Capex & Opex by replacing hardware appliances with virtual appliances
Business Benefits
•
Create adaptive trust zones on the same shared infrastructure to control access to o highly sensitive scientific appso shared serviceso business critical appso and the DMZ
•
Restrict inbound and outbound traffic to the trust zones
•
Restrict access to applications in a trust zone to View users in the subgroup within the zone
•
Automatically move infected VMs to a remediation zone
Solution with vShield App
.Shared Svrs Business Apps
49
Secure multi-tenancy and VDCs allow BUs to share infrastructure
Secure Multi-tenancy with vShield•
Virtual networking technologies segregate network traffic
•
Policy-based management eliminates “noisy neighbor”
concerns
Enables shared infrastructure•
Formerly silo’d infrastructures (either separate clusters or entire datacenters) can be migrated to virtual data centers and share the
No airgapped pods/silos•
Eliminates the need for physical separation for security or compliance
Maximizes consolidation ratio
Healthcare
OrganizationAerospace
OrganizationConsumer
Organization
Healthcare
VDCAerospace
VDCConsumer
VDC
Healthcare
InfrastructureAerospace
InfrastructureConsumer
Infrastructure
50
VMware is the leader in enterprise hybrid cloud infrastructures
VMware is the leader in the cloud platform
VMware offers the products and services to build a hybrid cloud
VMware has the expertise and services to build clouds
VMware powers the industry’s largest cloud ecosystem
Private Cloud
Portability
Service Consumption
vCloud
Request Manager
vCenter
Chargeback
Service Consumption
vCloud
Request Manager
vCenter
Chargeback
Service Delivery
vCloud
Director
Service Delivery
vCloud
Director
Security and Compliance
vShield
Security Family
vCenter
Configuration Manager
Security and Compliance
vShield
Security Family
vCenter
Configuration Manager
Virtualization
vSphere
vCenter
Management Family
Virtualization
vSphere
vCenter
Management Family
Public Cloud
Cross-Cloud Standards
vCloud
API
Open Virtualization Format
Cross-Cloud Standards
vCloud
API
Open Virtualization Format
Cross-Cloud Management
vCloud
Connector
Cross-Cloud Management
vCloud
ConnectorvCloud
Powered Broad array of
VMware-compatible clouds for any business need
vCloud
Datacenter Security & performance
for enterprises
vCloud
Express Rapid, credit card payment
for developers
Co-Branded vCloud
Services
“Virtualization is a modernization catalyst and
unlocks cloud computing.”
Gartner, May 2010
VMware vCloud
Director Security
Hardening GuideWHITEPAPERv
C
e
nt
er
D
at
a
b
as
e
vCente
r
Server
E
n
d U
se
rs
v
C
D
P
or
tal
VMwar
e vCloud
Directo
r
v
C
D
D
a
t
a
b
a
s
e
v
C
e
nt
er
C
h
ar
g
e
b
ac
k D
at
a
b
as
e
vCenter
Chargeback Server
ESX/E
SXi
HostsD
at
as
to
re
s
N
et
w
or
ks
vCenter
Chargeback Web Interface
vCenter
Char
geback Col
lector
s (
vCenter, vCD, vSE)
vShield
Manager and vShield
Edge Virtual
Appliances
L
D
A
P
VMware vCloud
Director
vCenter
Chargeback
vShield
Manager w/ Edge
VMware vSphere
4 Enterprise Plus
vCloud
API v
Cl
o
u
d
A
PI
VMware vCloud
Director Security
Hardening GuideWHITEPAPER
VMware vCloud
Director 1.0 Performance and Best PracticesWHITEPAPER
51
Agenda
VMware vCloud
Initiative
IT Needs Cloud To Enable Efficiency and Agility
VMware’s Cloud strategy
VMware's vCloud
solution stack
Conclusion and Q&A
