Presentation v mware desktop virtualization online bootcamp

VMware Desktop Virtualization Online Bootcamp

Start Now

PRESENTED BY VMWARE

Table of Contents | VMware Desktop Virtualization Online Bootcamp

VMware End User Computing Vision and Journey ................................................................................. 3 by Matthew Hardman, VMware

Storage Deep Dive – Considerations and Best Practices ...................................................................... 23 by Jim Yanick, VMware

Network Considerations and Best Practices ........................................................................................... 40 by Shannon McFarland, Cisco

Optimizing the Base Image for VMware View ........................................................................................ 64 by Todd Dayton, VMware

PCoIP Tuning ............................................................................................................................................... 87 by Chuck Hirstius, VMware

PCoIP Protocol Bandwidth Improvements Incorporated in VMWare View 5. ...................................... 111 by Ron Wang, VMware

Delivering Applications .............................................................................................................................. 118 by Heath Doerr, VMware

Leveraging Security Server for PCoIP ....................................................................................................... 135 by Mark Benson, VMware

Design Consideration Guidelines for VMware View ............................................................................... 149 by John Dodge, VMware

Troubleshooting and Monitoring VMware View ...................................................................................... 177 by David Messina, Xangati and Ron Wang, VMware

Additional Resources .................................................................................................................................. 194

PRESENTED BY VMWARE

3

VMware End User ComputingVision and Journey by Matthew Hardman, VMware

Storage Deep Dive – Considerations and Best Practices by Jim Yanick, VMware

Network Considerations and Best Practices by Shannon McFarland, Cisco

Optimizing the Base Image for VMware View by Todd Dayton, VMware

PCoIP Tuning by Chuck Hirstius, VMware

PCoIP Protocol Bandwidth Improvements Incorporated in VMware View 5.0 by Ron Wang, VMware

Delivering Applicationsby Heath Doerr, VMware

Leveraging Security Server for PCoIP by Mark Benson, VMware

Design Consideration Guidelines for VMware View by John Dodge, VMware

Troubleshooting and Monitoring VMware Viewby David Messina, Xangatiand Ron Wang, VMware

Additional Resources

VMware End User Computing Vision and JourneyMatthew Hardman, VMware

PRESENTED BY VMWARE

4












People Are Working Differently and Have High Expectations

ACCESS

• 37% use do-it-yourself tech

• 97% carry > 2 devices

APPS

• 2015 Mobile App Market $38B

DEVICES

• 2010 Shipments Tablets + Smartphones > PC

• 2015 Shipments 1.1B cell phones, 300M tablets

Sources: Morgan Stanley 2011, Gartner 2011,

Forrester 2010, Pew 2011

Transition to the Post-PC Era Has Already Begun

PRESENTED BY VMWARE

5












IT Is Under Pressure from Every Direction

PRESENTED BY VMWARE

6












Transition to the Post-PC Era – A Process, Not an Event

Evolution, not revolution: Keep users working

PRESENTED BY VMWARE

7












VMware EUC Platform for the Post-PC Era

PRESENTED BY VMWARE

8












Where Are We Headed for the User?

My Apps, My Files, Native Device Experience

PRESENTED BY VMWARE

9












Break the Cycle and Move to the Post-PC Era

PRESENTED BY VMWARE

10












PRESENTED BY VMWARE

11












View and ThinApp – Deliver Desktops as a Managed Service

PRESENTED BY VMWARE

12












PRESENTED BY VMWARE

13












Horizon – Your Bridge to the Cloud and Mobile

PRESENTED BY VMWARE

14












Horizon Mobile – Bridging Personal, Enterprise Mobile Workspaces

PRESENTED BY VMWARE

15












PRESENTED BY VMWARE

16












Project AppBlast – Universal Application Access

PRESENTED BY VMWARE

17












Project Octopus – Secure Data Sync and Collaboration Service

PRESENTED BY VMWARE

18












Horizon – Setting Application, Data, and Device Policies

PRESENTED BY VMWARE

19












VMware End User Apps – Connect Users via Social Applications

PRESENTED BY VMWARE

20












VMware End User Apps – Connect Users via Social Applications

PRESENTED BY VMWARE

21












Summary – The VMware Platform for the Post-PC Era

PRESENTED BY VMWARE

22












The Power of VMware

PRESENTED BY VMWARE

23












Storage Deep Dive – Considerations and Best PracticesJim Yanick, Senior Systems Engineer, VMware

PRESENTED BY VMWARE

24












Agenda

Updates on View Composer

Storage Considerations

PRESENTED BY VMWARE

25












View Composer Improvements

Storage Performance and Optimization

• Tiered storage support resulting in lower cost

- Leverage different tiers of storage to maximize performance vs. cost

PRESENTED BY VMWARE

26












View Composer Enhancements

• Customization/Provisioning- Sysprep support

- Refresh, Recompose and Rebalance [RRR] for Floating Pool

- In 4.5:

- Floating = Non-Persistent

- Dedicated = Persistent

• Storage Performance and Optimization- Tiered support

- Optimization

- Disposable disk and Local swap file redirect

- Allow creation of linked-clones on local storage

• Management- Full Management of Persistent Disk (formerly known as UDD)

- Garbage collection script to clean-up linked-clones

PRESENTED BY VMWARE

27












View Composer: Customization/Provisioning

• Sysprep support- Sysprep : Optional New SID for each clone

• Refresh/Recompose/Rebalance

PRESENTED BY VMWARE

28












View Composer: Tiered Storage

• Allow master VM replica to reside in a separate data store- Use high-performance storage to boost performance (e.g. reboot, virus scan)

PRESENTED BY VMWARE

29












View Composer: Tiered Storage

• OS Disk and View Persistent Disks

• Linked Clones vs. Replicas

PRESENTED BY VMWARE

30












View Composer: Disposable Disk

• Disposable Disk: Redirect paging and system temp files to a temporary disk removed upon VM powered off

PRESENTED BY VMWARE

31












View Composer: Disposable Disk

• Disposable Disk: Redirect paging and system temp files to a temporary disk removed upon VM powered off

PRESENTED BY VMWARE

32












View Composer: Other Storage Optimization

• Local swap file redirect - Not reducing storage but allow the use of cheap local storage for individual VM swap file

• Allow creation of linked-clones using local data stores - Wizard will not filter out local data stores for use of VM cloning

- Allow use of cheap local storage for non-persistent pool VMs

View Composer: Enhanced Management Functions

• Persistent Disk (formerly known as UDD) Management - Detach/Migrate/Archive/Reattach

- Managed as “first class object”

• Garbage collection scripts - Remove one or more linked-clone VM(s) by name(s) from View, SVI, VC, and AD

PRESENTED BY VMWARE

33












View 4.5 / Composer 2.5 Developer Notes (DNotes)

• Major Efforts- Sysprep support

- Storage savings

- Enhanced refresh operations

- In the past recompose and refresh were the same; now the refresh is much quicker, we use an internal snapshot and roll back to that

- This is a snapshot of a snapshot that makes rollbacks easier

- Added disposable disk

- Whenever the clone gets rebooted that disk gets refreshed

- What goes to the disposable disk: c:\temp, c:\windows\temp, and pagefile

- We just change registry paths to redirect the files to the disposable disk

PRESENTED BY VMWARE

34












DNotes: Recompose Steps in Quickprep

1. On initial power on, set some dependencies that depend on computer name to be dependent on us

2. Set computer name

3. Do a reboot

4. Then remove some service dependencies (services that depend on us like tcpip)

5. Then join domain

6. Then enable upnp, check driver compatibility and then reboot if necessary

7. Then setup temp disk and udd

8. Then run postsync script

9. Then notify view manager that we are ready

10. Then view powers computer off and takes our internal snapshot

PRESENTED BY VMWARE

35












DNotes: Tiered Storage

• Linked Clone Limits - There is no hardcoded limit as to how many linked clones can be built against 1 replica

- The 8 hosts limit is going to be the max not the code

- The broker figures out which clones point to which replicas; the composer just gets told a clone and replica to use

• UDD Enhancements - Eliminated the need to make a backup copy of the profiles on the udd

- Before we copied the default and all users profiles to the udd

- Now we don’t have to do that and we can point a hard link back to the path on c:

PRESENTED BY VMWARE

36












DNotes: Tiered Storage Improvements

• Error Reporting Improvements - A lot better error reporting

- Make the errors more visible to the admins

• Misc Improvements - At the platform there has been work to prevent boot storms and other performance enhancements

- There is a feature request to allow disposable disks on separate volumes but not in this release

- Some research on how windows uses storage and determined what services should be disabled

• They may be putting a guide together on what services should be disabled and provide a way to disable them or have these in the admin guide

- Local storage is a new feature

• Allows users to configure disk storage to place a replica

DNotes: Windows Licensing Issues

• Guest customization side added license activations - Don’t support MAK activations, only KMS

- Master must be KMS licensed before snapshotting

PRESENTED BY VMWARE

37












Storage Considerations

• There are a lot of factors to consider - How many master images will be used?

- How many total unique linked clone VMs are needed?

- What is the IO pattern of the VMs?

- What types of tasks do the users do?

• Any info are suggestions that need to be verified with lab testing

How to Find

• Image sizes for the VMs - Ask the current desktop admins for the size of their current “ghost/acronis” images.

They can probably recite it from memory

- Have a partner run a VDI Assessment and get some real data

• Number and size of applications - Usually no one knows all the applications and how large they are


• Number of average IOPs per desktop - Most likely, no one will have a clue


- For a quick and dirty answer, stick a test VDI desktop on a dedicated LUN and ask the SAN team for a report on the IOPs

PRESENTED BY VMWARE

38












Some Standard Numbers

These are rough guesses — please run a VDI Assessment for real data

• Storage Info (from http://en.wikipedia.org/wiki/IOPS) - IOPs

- 7200RPM SATA drives - ~80 IOPS

- 10kRPM Serial Attached SCSI drives - ~ 140 IOPS

- 15kRPM Serial Attached SCSI drives - ~180 IOPS

- Simple SLC SSD - ~400 IOPS

- Enterprise Flash from EMC - ~2500 IOPS

Desktop Guesstimate Stats - Lite User ~ 6 to 8 IOPS

- Medium User ~ 8 to 20 IOPS

- Heavy User ~ 20 to 30 IOPS

Datastore Stats for ESX 4.0 - Max VMs per VMFS Datastore ~ 90 safer at 60

- Max VMs per NFS Datastore ~ 170 safer at 150

http://en.wikipedia.org/wiki/IOPS

PRESENTED BY VMWARE

39












Decisions To Make

• Dedicated/Persistent vs. Floating/Non-Persistent - This can effect how often the linked clone is refreshed which can effect how big they grow

• UDD or Not - If using Dedicated desktops, will you use UDD’s for what percent of users?

- For flexibility, it’s better to avoid them

- Effects how much space is needed in the VDI environment vs. on file servers

- The data still needs to be stored — the question is just about where to allocate it

Click here for Additional Resources

PRESENTED BY VMWARE

40












Network Considerations and Best PracticesShannon McFarland CCIE# 5245, VCP Corporate Consulting Engineer, Office of the CTO/CE, Cisco

PRESENTED BY VMWARE

41












Agenda

Solution Overview

Solution Design- General Considerations

- Optimizing the VMware View Environment

- View Security Servers/View Connection Servers

- QoS for View

- WAN Optimization

Conclusion

PRESENTED BY VMWARE

42












Solution Overview

http://bit.ly/8sC9RY


PRESENTED BY VMWARE

43












Matching View Requirements with Network Capabilities

View Requirements Network Capabilities

Unified Solution

User Experience QoS/HA/Performance

Availability End-to-End High Availability

Access Any Device/Anywhere

Performance Network/Compute

Security Defense-in-Depth

E2E Management Service Mgmt

PRESENTED BY VMWARE

44












Addressing Common Assumptions “I deal with desktops, servers and applications and I don’t get why the network matters”

It is critical to have a hierarchical, scalable and flexible network architecture that can meet your demands regardless of application and service

The network provides end-to-end security, availability, QoS and many other elements that improve user experience

“Do I really need to buy a bunch of networking gear to get VMware View deployed?”

You probably already have a pretty robust network that supports existing applications and services that can be used for VMware View

PRESENTED BY VMWARE

45












Network Overview for VMware View

PRESENTED BY VMWARE

46












Solution Design General Considerations

PRESENTED BY VMWARE

47












Direct Mode and Tunnel Mode (1)

• Direct Mode – When a View Client establishes a direct connection to the View Agent over RDP or PCoIP

• Advantages- Significantly less load (CPU/Memory/Network) on the View CS

- More granular application visibility for QoS and WAN optimization

- Flexibility to run either RDP or PCoIP

- Higher availability for in-progress sessions

• Disadvantages- Without comprehensive security policies users can access the View Agent VM via Microsoft RDC and

bypass the View CS and associated policies – “AllowDirectRDP” Registry setting is used to help solve this issue.

- Cannot be used in an environment where only HTTP or HTTPS is permitted

PRESENTED BY VMWARE

48












Direct Mode and Tunnel Mode (2)

• Tunnel Mode or “proxy mode” is when a View Client establishes a connection to the View SS/CS for all phases of communication

• Tunnel Mode is based on the encapsulation of RDP in HTTP or HTTPS

• Advantages - Tighter access control and policy enforcement

- Allows for an HTTPS connection from any IP-based connection into the View environment

- Both HTTP and HTTPS can be optimized by WAN Optimization solutions

• Disadvantages - Significantly more load (CPU/Memory/Network) on the View CS

- It becomes much more difficult to differentiate traffic on the network when it is all HTTP or HTTPS

- The use of HTTP proxies may interfere with the View Client connections

PRESENTED BY VMWARE

49












Remote Access Options

• You can use your existing VPN solution to provide remote access to the View environment - i.e IPSec or SSL VPN solutions

• View Security Servers – RDP-in-HTTPS

• Combination of the two – Contractors may use View SS while full-time employees use VPN solution (or those wanting to use PCoIP remotely [short-term limitation with View SS being TCP only]

Bandwidth Considerations

• Bandwidth consumption can vary wildly depending on display protocol, workload and auxiliary connections (i.e.USB redirection)- This makes capacity planning difficult

- Not every connection yields the same consumption rate

- Tunnel mode connections make View sessions ‘look’ like browser traffic

• Thorough testing with live applications and users or at least with RAWC is critical to capacity planning

• WAN optimization is a priceless asset for bandwidth conservation via compression and reduction of redundant data

• QoS will make or break the deployment as it helps manage congested links

PRESENTED BY VMWARE

50












Protecting VMware View – Layer 2 Attacks

• DHCP client access has been a campus and branch thing – View now brings common client requirements to the DC

• DHCP Snooping – Acts like a firewall between un-trusted hosts (View Agents) and trusted DHCP servers

– Helps prevent VM from acting as an unauthorized DHCP server

• Dynamic ARP Inspection (DAI) – Validates ARP requests and responses

– Uses DHCP snooping bindings

– Helps prevent ARP-poisoning based MITM attacks

• IP Source Guard (IPSG) – Filters traffic on vEthernet interfaces and permits only traffic where IP and MAC address match

(DHCP bindings/static)

– Helps prevent a VM from spoofing the IP address of another VM

PRESENTED BY VMWARE

51












Solution Design Optimizing the

VMware View Environment

PRESENTED BY VMWARE

52












VMware View Network-Based Optimization – Summary

SERVER LOAD BALANCING SSL WAN OPTIMIzATION

View Client N/A N/A *Yes

View Connection Server Yes Yes **Yes

View Security Server Yes Yes **Yes

*Depending on the remote display protocol used and features (MMR, USB-Redirection, etc.)

**Optimization to View Administrator, View Portal and Tunneled RDP Sessions

PRESENTED BY VMWARE

53












Firewall Port Layout – View Security Server

Outside Interface RulesSOURCE PROTOCOL PORT DESTINATION

Any HTTPS 443 SLB Virtual IP

DMZ/Inside Interface RulesSOURCE PROTOCOL PORT DESTINATION

Security Servers AJP13 8009 Connection Servers

Security Servers JMS 4001 Connection Servers

Security Servers USB-Redirection 32111 View Agent VMs

Security Servers RDP 3389 View Agent VMs

Security Servers MMR 9427 View Agent VMs

PRESENTED BY VMWARE

54












Traffic Flow – Internet-to-View Agent

PRESENTED BY VMWARE

55












SLB Deployment Options for View

1. SLB only - Performs L4-7 SLB but offers no SSL services

2. SLB + SSL End-to-End – Option 1 + SSL termination (Client) and SSL initiation (Server)

3. SLB + SSL Termination – Option 1 + SSL termination (Client) and HTTP to server

PRESENTED BY VMWARE

56












View Security Server Configuration

View SS in View Administrator Console

4.0 4.5

“External URL” Field for View SS

SECURITY SERVER SERVER NAME FIELD ExTERNAL URL FIELD

View4-sec1 view4-sec1 https://view-ext.cisco.com:443

View4-sec2 view4-sec2 https://view-ext.cisco.com:443

“locked.properties” file in “C:\Program Files (x86)\VMware\VMware View\Server\sslgateway\conf”

clientProtocol=https

clientHost=view-ext.cisco.com

clientPort=443

serverPort=80

serverProtocol=http

PRESENTED BY VMWARE

57












View Connection Server Configuration

• L4-7 SLB and SSL mostly the same as with View SS

• View CS with SSL does not use “locked.properties” file for SSL-Offload configuration

• Need “External URL” field defined External URL: http://view-int-vip.ese.com:443 Example: https://myServer:myPort

• For SSL Offload – don’t require SSL for Client/View connections Require SSL for No client connections and View Administrator

Persistence and Redirection

• Persistence - VMware View does not support persistence in the form of JSessionID or similar so the only means of persistence support is sticky

Source IP - Not ideal especially with Internet clients as many may connect via a NAT/PAT/Proxy and this causes uneven distribution of load based on sticky entry

Cookie with “location.id” – Value sent by View Client = Client MAC address Cookie: com.vmware.vdi.broker.location.id=00-14-A5-6F-12-F0

• Redirection - Redirect HTTP sessions to HTTPS using redirect policy http://blah.cisco.com ---- > https://blah.cisco.com

PRESENTED BY VMWARE

58












Validation for View SS – Health Probe (1) Tiered Checks

Cisco ACE Health Probe – Success for View SS

Wireshark Output – ACE Probes SS – SS checks CS via AJP13

PRESENTED BY VMWARE

59












Validation for View SS – Health Probe (2) Tiered Checks

Cisco ACE Health Probe – Success for View SS

CS is Down – Fails Check – Probe Fails

PRESENTED BY VMWARE

60












Deploying QoS for VMware View

• QoS for View allows for differential treatment of View traffic during times of congestion

• Without classifying/marking, queuing and policing View traffic it will be placed into class-default or other lower priority policy

• During times of congestion the QoS policies can protect View traffic from less important flows or prevent View traffic from impacting more important flows (i.e. Voice)

• Tunnel mode flows will all look like any other HTTP/HTTPS flow. Classification on source/destination (i.e. View CS or Agent IP address(s)) can help distinguish flows

• Direct mode is ideal for proper classification

PRESENTED BY VMWARE

61












WAN Optimization for VMware View

• Overcome limitations with TCP in WAN environments, remove/reduce redundant data and provide optimal compression

• Optimization in a View environment for: - HTTP/HTTPS

- Microsoft RDP

- USB Redirection

- MMR

WAN Optimization Deployment Examples: http://bit.ly/8sC9RY


PRESENTED BY VMWARE

62












Conclusion

• The combination of VMware View plus a well designed and implemented end-to-end infrastructure offers improved security, optimal server utilization and increased availability

• The end result of these combined solutions and a well thought-out design is a more streamlined user experience and increased productivity

• The critical network elements for a successful VMware View deployment include: - Hierarchical and scalable network design

- Network and application-focused defense in-depth approach to security

- End-to-end network-based Quality of Service

- Server Load Balancing and resource optimization

- WAN optimization for display and other supporting protocols (RDP, USB redirection, MMR, etc.)

- Network intelligence that is capable of identifying and properly dealing with rich media flows

PRESENTED BY VMWARE

63












Reference InformationCisco Validated Design for VMware View 4 http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/vmware/cisco_VMwareView.html

Cisco VDI and VMware View 4.5 http://www.cisco.com/en/US/netsol/ns971/index.html#~virtual

Cisco Virtual eXperience Infrastructure http://www.cisco.com/en/US/netsol/ns1102/index.html

VMware View http://www.vmware.com/products/view/

VMware View Documentation http://www.vmware.com/support/pubs/view_pubs.html


http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/vmware/cisco_VMwareView.html

http://www.cisco.com/en/US/netsol/ns971/index.html#~virtual

http://www.cisco.com/en/US/netsol/ns1102/index.html

http://www.vmware.com/products/view/

http://www.vmware.com/support/pubs/view_pubs.html

PRESENTED BY VMWARE

64












Optimizing the Base Image for VMware ViewTodd Dayton, Staff Product Manager, Desktop Product Management, VMware

PRESENTED BY VMWARE

65












Virtual Desktops Are Similar to Physical Desktops

• Things that would cause poor performance in a physical PC, will cause problems in a VM

PRESENTED BY VMWARE

66












Key Areas for Basic OS Tuning

• Keep the amount of installed software down to an absolute minimum

• Understand what each component of your image does and why it’s in there

• Update to the latest (or best) version of the software you are using

• Know when enough tuning is enough

PRESENTED BY VMWARE

67












Virtual Desktops Are Different than Physical Desktops

• Some things that don’t cause poor performance on a physical PC, may cause problems in a VM

PRESENTED BY VMWARE

68












Key Areas for Basic Virtual Desktop Tuning

• Understand the ramifications of shared resources

• Work to reduce or eliminate “background” processes that run when the user is not present

• Putting extra effort into getting the master image right means a lot less work patching, updating, or replacing deployed desktops

• Tune your images for both performance and for user acceptance

PRESENTED BY VMWARE

69












3 Areas for Quick, Easy, and Substantial Improvement

• Storage Reduction - Hibernation File

- Debug Logs

• Background Performance - Indexing Services

- Virus Scanning

- Screensavers

• Remote Display Performance - Disable Wallpaper/Sounds

- PCoIP Tuning Parameters

PRESENTED BY VMWARE

70












VMware View Storage Reduction Disable Hibernation

• The Hibernation feature will generally not be used in a View environment

• The size of the Hibernation file is typically at least 2/3 the size of allocated system memory, typically close to 1GB or more

• Hibernation files are generally unique and may appear in each linked clone, further increasing disk use

• Disable Hibernation with “powercfg /hibernate off”

• http://support.microsoft.com/kb/920730

http://support.microsoft.com/kb/920730

PRESENTED BY VMWARE

71












Turn Off Debug Logging

• Debug Logging is on by default in the VMware View Agent

• Debug Logs are typically 10MB+ per log and can add up quickly

• The logs appear in the linked clones and increase overall write operations during use

PRESENTED BY VMWARE

72












Turn Off Debug Logging

• Make the following registry changes: - HKLM\SOFTWARE\VMware, Inc.\VMware VDM

- DebugEnabled = False

- TraceEnabled = False

PRESENTED BY VMWARE

73












VMware View Background Performance Background Indexing

• Indexing and search tools typically use “idle time” on a desktop to catalog files

• The idea of “idle time” is much different in a VDI environment, as it takes resources away from other users who aren’t idle

• This indexing can be very disk intensive from a read/write perspective

• When images are recomposed, the indexing may start over, compounding the issue

PRESENTED BY VMWARE

74












Disable Background Indexing

• Disable the “Windows Search” service to prevent background indexing.

• Don’t install desktop search tools such as Google Desktop in a View image.

• Be careful of toolbars and other add-in software that may contain similar functionality from various vendors

PRESENTED BY VMWARE

75












Disable Scheduled Virus Scans

• Pre-scan your master image with your virus scanner before deployment

• Disable “Full Scan” Scheduling

• Your “On-Access Scanner” should catch any changes made after the image is deployed

• Pre-scan before a recompose operation to ensure no malware sneaks into your master image

PRESENTED BY VMWARE

76












Stagger Virus Scan Signature Updates

• In a View environment, it’s important to prevent all of your VM’s from updating their virus signatures at once causing an “update storm”

• Provide a larger randomization window (4+ hours) to ensure that updates are distributed across a larger time window

• This setting can be pushed from most enterprise Virus Scan management consoles

PRESENTED BY VMWARE

77












Disable Screensavers

• In a View environment, screensavers should generally be disabled in favor of screen blanking and/or locking

• Screensavers can be forced to the blank “scrnsave.scr” and users can be blocked from making changes through GPO

• User Configuration Policies - Administrative Templates

- Control Panel

- Personalization

PRESENTED BY VMWARE

78












VMware View Remote Display Tuning Remove Wallpaper and Audio

• In a View environment, high resolution, high color wallpaper can cause spikes as it’s loaded and uncovered by other windows

• Switching to a solid color background allows for smoother transitions and more consistent bandwidth utilization

• Windows sounds consume additional bandwidth in the protocol stack, and should be disabled if not needed

PRESENTED BY VMWARE

79












PCoIP GPO Settings Affecting Bandwidth

• You can now make modifications to the PCoIP protocol

• Settings which directly affect bandwidth have been highlighted here

• Maximum Frame Rate is a separate registry setting

PRESENTED BY VMWARE

80












PCoIP Details: Ceiling

• The Ceiling caps the amount of bandwidth a single PCOIP session can use. It will not go above this level, but can reach and sustain the ceiling for as long as necessary

(This may affect display performance for some workloads)

PRESENTED BY VMWARE

81












PCoIP Details: Floor

• The Floor sets the lowest bandwidth that PCoIP will tune down to; under network congestion, it will “fight it out” up to the floor; this is not a minimum — PCOIP still concedes bandwidth below the floor when not needed

PRESENTED BY VMWARE

82












PCoIP Details: Min/Max Initial Image Quality

• Min/Max initial image quality (along with available bandwidth) determines how far from lossless the first load of the screen will be; higher values mean a better picture but higher bandwidth and potentially choppier display in constrained environments

PRESENTED BY VMWARE

83












PCoIP Details: Framerate

• Framerate determines how many times per second the display will be updated; higher framerates appear smoother to a point, but require more bandwidth

PRESENTED BY VMWARE

84












PCoIP Details: Framerate

• The default framerate for PCOIP sessions is 6fps higher than Citrix HDX; a good desktop experience can use even lower values.

PRESENTED BY VMWARE

85












PCoIP Details: Maximum Frame Rate

• Framerate does not currently have a policy, and must be set manually in the registry at the following location:

PRESENTED BY VMWARE

86












Image Tuning – Final Thoughts

• Not meant to be the “last word” on tuning

• Weigh the benefits of tuning against the experience that your users will expect

• There are many resources for detailed tuning through GPO, registry, and file system culling which can further shrink the footprint

• Tools like nLite can drastically reduce the size of your disk images, but may remove critical features or cause intermittent issues that are difficult to troubleshoot

Image Tuning – Other ResourcesVMware View Optimization Guide for Windows 7 http://www.vmware.com/files/pdf/VMware-View-OptimizationGuideWindows7-EN.pdf

VMware Windows XP Deployment Guide http://www.vmware.com/files/pdf/resources/vmware-view-xp-deployment-guide.pdf

myvirtualcloud.net: Mastering VDI Templates for Win7 & PCOIP http://myvirtualcloud.net/?p=929

VMware View Resources http://www.vmware.com/technical-resources/products/view.html


http://www.vmware.com/files/pdf/VMware-View-OptimizationGuideWindows7-EN.pdf

http://www.vmware.com/files/pdf/resources/vmware-view-xp-deployment-guide.pdf

http://myvirtualcloud.net/?p=929

http://www.vmware.com/technical-resources/products/view.html

PRESENTED BY VMWARE

87












PCoIP Tuning Chuck Hirstius, Senior Systems Engineer, PSO Advanced Services WW, VMware

PRESENTED BY VMWARE

88












Agenda

PCoIP Protocol Background

PCoIP Deployment Best Practices

Tuning PCoIP

Tunable Parameters

Tuning Guidelines

Conclusion/Recap

Further Reading/Additional Resources

PRESENTED BY VMWARE

89












PCoIP Protocol Background

PRESENTED BY VMWARE

90












PCoIP Protocol

• Designed to address the highest-end workloads- CAD/CAM

- Video/Multimedia

- Medical Imaging

• Began as a hardware-to-hardware solution

• Encryption inherent to the protocol

• WAN enhancements added in May, 2009

• Implemented as software-to-software solution in View 4.0

PRESENTED BY VMWARE

91












Host-based Pixel Encoding

• “Pixels only” approach

• Simplifies end-points (and hence, endpoint management)

• Greater compatibility and immediate support for “the next big thing”

• Network optimization

• No impact to application performance – not required to wait for client-side rendering

PRESENTED BY VMWARE

92












UDP Transport

• Ideal for real-time protocols

• Less overhead than TCP

• Reliability at the application layer, not the network layer

• Perfect fit for “pixels only” approach

• UDP is the basis for: VoIP, Telepresence, IPTV

PRESENTED BY VMWARE

93












Special Features

• Build to lossless- Gradually build static screen areas to pixel-perfect

• Image Decomposition- Utilize multiple codecs depending on screen content

• Adaptive bandwidth consumption

PRESENTED BY VMWARE

94












PCoIP Deployment Best Practices

PRESENTED BY VMWARE

95












Best Practices

• PCoIP is a real-time protocol- Insure proper QoS/CoS classification

- Classify PCoIP traffic as real-time interactive, typically just below VoIP

- Insure that QoS/CoS mappings are preserved across WAN links

• Utilize the PCoIP Security Gateway for remote access- Most efficient remote access solution

- Allows remote access for zero-clients

• If you must use VPN, avoid SSL-based solutions- Use IPSEC, L2TP/IPSEC, GRE, DTLS

• Insure that PCoIP is bypassed on all WAN acceleration devices

• Insure that PCoIP is bypassed or trusted on any IDS/IPS devices in the network path and in endpoint protection software

PRESENTED BY VMWARE

96












Best Practices

• Prefer fixed bandwidth WAN circuits over “burstable” circuits - Make sure you understand your use case well and perform accurate measurements to allow for proper

circuit sizing

• If you must use “burstable” circuits- Insure that the CIR is high enough to cover all existing high-priority traffic and the total average traffic

for all PCoIP sessions

- PCoIP may see high packet loss when it consumes burst bandwidth

- Carriers tag burst packets as “out of contract” and low priority

- May artificially limit the total bandwidth PCoIP “sees” across the circuit

• Utilize WRED for congestion avoidance- Avoid tail-drop

- Do not configure WRED on the physical interface as it will override all other QoS policies

• Avoid use cases where round-trip latency is greater than 300ms

PRESENTED BY VMWARE

97












Best Practices

• Do not utilize per-packet load balancing- This will cause out of order packet delivery leading to PCoIP perceived packet loss

- Insure that affinity or session “stickiness” is enabled

• Utilize desktop VM optimization guides to configure visual settings

• Optimize PCoIP tunable parameters for your use case

PRESENTED BY VMWARE

98












Tuning PCoIP

PRESENTED BY VMWARE

99












Tuning PCoIP

As with any performance tuning you must:

• Identify and understand the problem you are trying to solve

• Be diligent about benchmarking and recording data

• Only modify one variable at a time and track the changes you make

In short – have a plan and methodology.

Don’t pull levers and turn dials just to see what happens!

PRESENTED BY VMWARE

100












PCoIP Tunable Parameters

Can be adjusted via GPO with pcoip.adm file

• pcoip.adm located on any Connection Server at the following path:

C:\Program Files\VMware\VMware View\Server\Extras\GroupPolicyFiles

Can be set directly within the Windows Registry at the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Teradici\PCoIP\pcoip_admin_defaults\

PRESENTED BY VMWARE

101












PCoIP Network Parameters

• Maximum PCoIP session bandwidth (1000000Kbps)

pcoip.max_link_rate

This setting will cap the maximum bandwidth PCoIP is allowed to use for any one session

• PCoIP session bandwidth floor (0Kbps)

pcoip.device_bandwidth_floor

This setting determines the lower bound PCoIP will throttle down to when bandwidth is required but there is congestion detected on the network. PCoIP will still concede bandwidth below this value when it is not needed. At the default setting PCoIP will determine the actual value based upon network conditions

• PCoIP session MTU (1300bytes)

pcoip.mtu_size

Adjust (reduce) this value if you are seeing packet fragmentation due to VPN or other encapsulation

PRESENTED BY VMWARE

102












PCoIP Image Quality Levels

• Minimum Image Quality (50%)

pcoip.minimum_image_quality

Determines the lower bounds of image quality “compression” when network congestion triggers increased build-to-lossless

• Maximum Initial Image Quality (90%)

pcoip.maximum_initial_image_quality

A lower bound on the image quality that PCoIP tries to deliver “immediately” when screen updates occur. The higher this setting the more “pixel perfect” initial screen updates will be at the cost of higher bandwidth peaks

• Maximum Frame Rate (30 fps)

pcoip.maximum_frame_rate

This setting determines the maximum frequency of client screen updates. Lower values will reduce bandwidth when there are high rates of motion that need to be rendered

PRESENTED BY VMWARE

103












PCoIP Audio Parameters

• Enable/Disable Audio in the PCoIP Session (Enabled)

pcoip.enable_audio

This setting enables or disables the transmission of audio entirely. If the desktop use case does not require audio it can be disabled here to insure that no bandwidth is wasted transmitting it

• PCoIP session audio bandwidth limit (500Kbps)

pcoip.audio_bandwidth_limit

This setting will limit the maximum bandwidth that audio traffic can consume. PCoIP can still dynamically adjust this setting down based upon current network conditions. Setting this value below 50Kbps may result in no audio being transmitted at all

PRESENTED BY VMWARE

104












When to Tune

• Cover the best practices first- Confirm network environment is properly configured and sized

- Confirm that desktop image optimizations have been done

• Remember PCoIP already adapts- Altering parameters can have unexpected results

PRESENTED BY VMWARE

105












Tuning Guidelines

PRESENTED BY VMWARE

106












PCoIP Tuning Guidelines

• Configure the maximum session bandwidth- For low bandwidth links set the limit at or slightly below (10%) the maximum link rate

- Even on the LAN it may make sense to apply a limit

• Configure the session floor when…- PCoIP is experiencing packet loss but the network link has plenty of headroom

- May not always improve user experience – YMMV

- When packet loss is seen on WiFi networks

- Be careful to avoid unintentional oversaturation

PRESENTED BY VMWARE

107













• Configure the maximum frame rate- In almost all cases the maximum frame rate can be reduced to 20-24fps with little noticeable impact –

but also little gain

- Settings below 15fps may be noticeable in use cases which require rich media

- Task workers without media requirements can often utilize settings as low as 6-8fps without significant visual impact

- Examine the PCoIP Server log files for the following values:

MGMT_IMG:log:cur_s0max_s30tbl2bwc0.01bwt4.39fps2.60fl_ps5.03

MGMT_IMG:log:cur_s7max_s33tbl2bwc0.15bwt4.39fps2.67fl_ps5.53

• Configure the maximum initial image quality- When on a WAN link with constrained bandwidth reduce this setting to 60-70%

- Setting this value too low may result in noticeably “fuzzy” or “blurry” images

PRESENTED BY VMWARE

108













• Configure the minimum image quality- This value must be below the maximum initial image quality setting

- The default value of 50% is acceptable for most cases

• Configure the audio bandwidth limit- For use cases that utilize significant amounts of audio – legal/medial transcription for example –

reducing audio bandwidth may increase user density

- Audio bandwidth limit is a target, not a literal value

- Vary the audio bandwidth limit between 450Kbps – 50Kbps until the desired mix of bandwidth savings and audio intelligibility is achieved

PRESENTED BY VMWARE

109












Conclusion

• Always start with the basics before resorting to PCoIP tuning- Majority of PCoIP issues are external to the protocol

- Optimize VDI Base image

- Insure proper implementation of network configuration QoS/CoS, UDP tunneling through VPN, etc.

- Proper network sizing for desired use case

• Utilize the information in the PCoIP logs to determine where the trouble spots are

• Determine proper settings to adjust- Vary one item at a time, make as few changes as possible

- Test, test, and re-test against the intended use case. Utilize a repeatable set of users actions and/or a scripted set of actions to validate the impact of changes

• If all else fails reach out for help to VMware/Teradici

PRESENTED BY VMWARE

110













Learn more about tuning PCoIP with Optimization guides for Desktop images and PCoIP

PCoIP Tuning ResourcesPCoIP Scenario-Based Network Sizing Guide http://www.vmware.com/files/pdf/VMware-View-PCoIP-Network-Sizing-Guide-IG-EN.pdf

PCoIP Zero Client Optimization Guide http://www.vmware.com/files/pdf/VMware-View-PCoIP-Zero-Client-Optimization-Guide-TN-EN.pdf

Desktop Optimization GuidesWindows XP + 7: http://myvirtualcloud.net/?p=929

Windows 7: http://www.vmware.com/resources/techresources/10157


http://www.vmware.com/files/pdf/VMware-View-PCoIP-Network-Sizing-Guide-IG-EN.pdf

http://www.vmware.com/files/pdf/VMware-View-PCoIP-Zero-Client-Optimization-Guide-TN-EN.pdf

http://myvirtualcloud.net/?p=929

http://www.vmware.com/resources/techresources/10157

PRESENTED BY VMWARE

111












PCoIP Protocol Bandwidth Improvements Incorporated in VMware View 5.0 Ron Wang, Systems Engineer VMware

PRESENTED BY VMWARE

112












PCoIP Protocol Bandwidth Improvements Incorporated in VMware View 5.0

Bitmap Caching• Client memory cache of recent bitmaps

• Hits send cache index only

Enhanced Text CODEC• ~2x better compression on anti-aliased/ClearType text

• >2x better compression on Adobe 10.x LCD font

GPO Control of Build to Lossless• Default is build-to-lossless enabled

• When disabled, builds to “perceptually lossless”

PRESENTED BY VMWARE

113












PCoIP Optimization Controls Detail

SETTING DEFAULT CONFIG PARAMETERS DESCRIPTION

Client Side Caching On Cache Size Caches image content on client to avoid retransmission

Disable Build to Lossless Off On or Off Enables the ability to enable or disable build to lossless

PRESENTED BY VMWARE

114












Remoting Scenario – Fully Lossless

Step 1 – Initial composition sent to client

Step 2 – Built to perceptually lossless

Step 3 – Built to fully lossless over time

PRESENTED BY VMWARE

115












Step 1 – Initial composition sent to client

Step 2 – Built to perceptually lossless

Remoting Scenario – Perceptually Lossless

PRESENTED BY VMWARE

116












PCoIP Protocol Bandwidth Improvements VMware View 5.0 shows >75% improvement vs. 4.6

0

50

100

150

200

250

300

350

400

FOPA O�ce 2007 Average Bandwidth

View 4.6 lossless 30fps

FOPA O�ce 2010 Average Bandwidth

View 5.0 lossless 30fps

View 5.0 perceptually lossless 24fps

PRESENTED BY VMWARE

117












Best Practices Recommendations

SETTING DEFAULT RECOMMENDATION DESCRIPTION

Client Side Caching On Leave Default Caches image content on client to reduce retransmission

Build to Lossless On Turn Off Enables the ability to enable or disable build to lossless

Session Audio BW Limit 500Kbps 50–100Kbps Reduces BW usage of audio with usable quality

Maximum Frame Rate 30 Change to 10–15 based on network settings

In WAN conditions, this will be helpful for video playback and fast graphics operations

Maximum Link Rate — Set it as per network conditions

Good for better bandwidth estimation

PRESENTED BY VMWARE

118












Delivering ApplicationsHeath Doerr, Senior Systems Engineer, VMware

PRESENTED BY VMWARE

119












Agenda

View and ThinApp – Benefits Overview

Application Virtualization

Reference Architecture

Integrating ThinApp and View

Demonstration

Q & A

PRESENTED BY VMWARE

120












Turning a Monolithic System to Modular

• Virtualization breaks the bond between each layer

• Allows IT to manage each layer separately

• Increases flexibility and reduces costs

PRESENTED BY VMWARE

121












Simplify Application Delivery with View & ThinApp

• Reduce Storage - Reuse templates

- Reduce image size and complexity

• Simplify Software Delivery (no agents/infrastructure) - Multiple versions of same

app installed on desktop image

- Plugs into existing environment without requiring server hardware or software

• Streamline Patch Updates - Modify 1 app for an entire environment

- In place upgrades

• Migration Readiness - OS and app in single image

PRESENTED BY VMWARE

122












ThinApp Key Benefits

• Agentless architecture - Single file – EXE, MSI

- No installation or changes to registry

- Zero management required on end point device

• Seamlessly fits into any environment - No streaming server hardware or software needed

- Plugs into any existing management framework

• Run virtually any application from any device - Desktop, USB, flash, terminal services, Citrix

- Any windows application – simple to complex

- Supporting components can be run side by side (java, .NET)

• Ensuring security without compromising user flexibility - User-Mode execution

- Virtual Registry protects underlying host OS

- No device drivers installed on underlying OS

PRESENTED BY VMWARE

123












How ThinApp Works

VMware ThinApp Links the Application, Virtual Operating System (VOS), File System and Registry into a Single EXE MSI File

• Application encapsulation and Isolation

• Intercepts file and system calls

• Process Loading – start exe from VOS, Launch from host OS (Virtual/Physical)

• DLL Loading. loads DLL dependencies the EXE/DLL/OCX files from archive

• Thread and process management. VOS tracks all processes and threads inside virtual registry (COM & Utility)

PRESENTED BY VMWARE

124












Creating ThinApp Packages

Steps for packaging an application with ThinApp

• The Setup Capture utility creates a baseline snapshot before the application is installed (pre-scan)

• The application is traditionally installed

• The Build phase of Setup Capture creates the virtualized application package (post-scan)

• Set package “entry points” and package options

• Finish by browsing and building the project

PRESENTED BY VMWARE

125












Application Link – Connecting ThinApps

Seamless Interoperability - ThinApp packages can talk together and with OS

- Enables interoperability between virtual applications and underlying OS

Enhance License Management - Reduces package size to ease deployment and delivery

- Enhances software license management tracking via current inventory tools

PRESENTED BY VMWARE

126












Package Once, Deploy Everywhere

PRESENTED BY VMWARE

127












ThinApp Reference Architecture – Corporate Users

PRESENTED BY VMWARE

128












ThinApp Reference Architecture – Remote Users

PRESENTED BY VMWARE

129












ThinApp Reference Architecture – Mobile Users

PRESENTED BY VMWARE

130












View Composer with ThinApp

• Redirect all application “writes” to the user data disk, by default

• Reduce the number of master images and size of base disk

• Provide simplified entitlement, deployment, and management of applications

• Seamlessly update users

• Reduce storage costs

“Application updates are kind of a non-event now...” - Norton Healthcare

PRESENTED BY VMWARE

131












ThinApp with Terminal Server – Reduce Server “Silos”

Improved Utilization and Streamlined Management

• ThinApp single files are not installed – no changes to OS

• Full isolation allows for multiple versions of the same application or multiple applications to reside on the same server to be streamed to end point devices

• Single image files fit into existing management framework

PRESENTED BY VMWARE

132












View 4.5 Requirements for ThinApp Applications

1. You must create MSI’s

2. You must use ThinApp 4.6 or later

3. Configure the Package.INI options to support either Streaming or Local installs

PRESENTED BY VMWARE

133












Package.INI Options for Use with View 4.5

MSIStreaming=1is the new option in 4.6!

PRESENTED BY VMWARE

134












Package.INI Options for Use with View 4.5

Note the size difference of the MSI file.

Small MSI files mean that Streaming is enabled!


PRESENTED BY VMWARE

135












Leveraging Security Server for PCoIPMark Benson, View Architect, Enterprise Desktop, VMware

PRESENTED BY VMWARE

136












Setting up PCoIP Remote Access with View 4.6

An Introduction to View Remote Access

The View Security Server

Configuring View for PCoIP Remote Access • A Single Security Server deployment

• A multiple Security Server deployment with load balancing

Setting up the Firewalls to Allow PCoIP

Basic Troubleshooting

PRESENTED BY VMWARE

137












View Security Server Access with RDP Connection Sequence

• User connects to View Connection Server and authenticates

• If successful, a secure HTTPS tunnel is established between the client device and the Security Server

• When a desktop is selected, the remote desktop protocol goes via the secure tunnel

PRESENTED BY VMWARE

138












View Security Server

View Security Server Security Features

• Recommended for DMZ deployment or environments with separated networks

• Only authenticated users can gain access through it

• Can ensure that virtual desktop access is only possible for authenticated users. The only desktop protocol that can enter the data center is on behalf of authenticated users

• Ensures users can only access resources (virtual desktops) they are authorized to access

• Zero administration

• Offloads the HTTPS processing and all desktop protocol traffic away from the View Connection Server

• Multiple View Security Servers are used for scalability and HA

PRESENTED BY VMWARE

139












View Access – with PCoIP

Connection Sequence• User connects to View Connection Server and authenticates

• When a PCoIP desktop is selected, the PCoIP protocol attempts to go directly to the virtual desktop

PRESENTED BY VMWARE

140












View Security Server Access – with PCoIP


• When a PCoIP desktop is selected, the PCoIP protocol attempts to go directly to the virtual desktop

PRESENTED BY VMWARE

141












View Security Server Access – with PCoIP Support (View 4.6)


• When a PCoIP desktop is selected, the PCoIP protocol goes to the Security Server

• If the PCoIP session is on behalf of an authenticated user it is forwarded to the correct desktop

PRESENTED BY VMWARE

142












Security Server with PCoIP Support – Firewall Rules

• PCoIP between View Client and Security Server - TCP 4172 from Client to Security Server

- UDP 4172 from Client to Security Server

- UDP 4172 from Security Server to Client

• PCoIP between Security Server and virtual desktop - TCP 4172 from Security Server to virtual desktop

- UDP 4172 from Security Server to virtual desktop

- UDP 4172 from virtual desktop to Security Server

PRESENTED BY VMWARE

143












View Security Server Access and High Availability

Connection Sequence• User connects to View Connection Server via load balancer and authenticates

• If successful, an HTTPS tunnel is established between the client device and the Security Server

• When a PCoIP desktop is selected, and the Connection Server is configured to gateway PCoIP, PCoIP goes via the Security Server

PRESENTED BY VMWARE

144












The 3 Setup Steps for PCoIP Remote Access with View 4.6

1. Turn on PCoIP Gateway Functionality on the Connection Server

2. Set up the two External URLs on each server (usually the Security Server) - “External URL” used by View Clients to establish the HTTPS Tunnel

- “PCoIP External URL” used by View Clients to establish the PCoIP connection through the PCoIP Gateway

3. Set the firewall rules to allow PCoIP - PCoIP between View Client and Security Server

- TCP 4172 from Client to Security Server

- UDP 4172 between Client and Security Server in both directions

- PCoIP between Security Server and virtual desktop

- TCP 4172 from Security Server to virtual desktop

- UDP 4172 between Security Server and virtual desktop in both directions

PRESENTED BY VMWARE

145












View PCoIP Remote Access and Local Access Scenario

PRESENTED BY VMWARE

146












Setting the Security Server External URLs at Installation Time

PRESENTED BY VMWARE

147












PCoIP Remote Access with VMware View 4.6 – Troubleshooting

Common Issues

• Make sure the Connection Server is configured to gateway PCoIP connections- The default setting when you install or upgrade to View 4.6 is to perform direct PCoIP connections

to the virtual desktops. For remote access without a VPN, this will not work unless you configure the Connection Server to “Use PCoIP Secure Gateway for PCoIP Connections to desktop”

• Make sure the external URLs are set correctly- The External URLs are used by the View Clients to connect to the Security Servers or Connection

Servers. If these specify incorrect addresses or ports then the Secure Tunnel and PCoIP connection will not work. The external URLs must not be load balanced – they must represent access to the specific servers

• Check that PCoIP is not blocked by any firewall or web proxy etc.- Look at View Client logs and Firewall logs

- Test from other locations

PRESENTED BY VMWARE

148












PCoIP Remote Access with VMware View 4.6 – Summary

• Use View 4.6 on Connection Servers and Security Servers

• Plan your deployment and consider the needs for local access and remote access- Make sure you know the external IP addresses used to access the environment from remote locations

• Perform the three steps for configuration- Turn on PCoIP Gateway Functionality on the Connection Server

- Set up the two External URLs on each server

- Set the firewall rules to allow PCoIP


PRESENTED BY VMWARE

149












Design Consideration Guidelines for VMware ViewJohn Dodge, Sr. Manager PSO Services, VMware

PRESENTED BY VMWARE

150












Agenda

View Design• The View Design Methodology

• Design Objectives

• Logical Design and Technical Specifications

• Designing Large-Scale View 4.6 Implementations

PRESENTED BY VMWARE

151












View Design Methodology

PRESENTED BY VMWARE

152












Use Cases

Customer Requirements

Use Case 1AppsOSDevices

AppsOSDevices

Workload Category

ConnectivityCategory

Workload Category

ConnectivityCategory

Use Case 2

Use Case Definition

PRESENTED BY VMWARE

153












Use Case Attributes

ATTRIBUTE DEFINITION

Workload category Standard worker

Connectivity classification LAN

Location(s) London

Time of use 7am-7pm GMT, Mon-Fri

Core applications Adobe Acrobat ReaderAdobe Flash PlayerMicrosoft Office 2010Microsoft IE6

User access device(s) Thin client, iPad

Use of video/multimedia No

Printers Follow me printing

Monitors and connection 1xVGA

Devices USB: Networks scanner

Authentication (e.g., Smartcard, SSO) Standard Windows logon

Persona Application and user profile persistence

PRESENTED BY VMWARE

154












Workload Categories


Task worker user Limited privileges in OS

Cannot install applications or device drivers

Session will run few applications in total and a limited number of applications concurrently

User is not guaranteed session persistence except with redirected user persona

Standard worker user May have limited or granted full access privileges within the OS May be able to install applications and devices May or may not be guaranteed session and profile persistence

Power user Full privileges to the local operating system

Expected to install applications and devices

Expects session and profile persistence

May expect shared profile in multiple sessions simultaneously

PRESENTED BY VMWARE

155












Connectivity Classification


Low bandwidth User access via display protocol over moderate to low bandwidth connection with moderate to high latency (e.g., WAN, Internet).

Local mode Workload runs locally, whether connected to the LAN, connected to the corporate network via a WAN, or disconnected from the network

LAN User access over a high-speed (1GBE or higher), low latency (5ms>) network with low overall utilization

PRESENTED BY VMWARE

156












Persona, Desktop, and Pool Design

Persona, desktop & pool

Use cases and volume

PersonaNone (no persistence)

Native OSExternal

DesktopOS

Virtual hwLocal apps

Pool typesFloating

DedicatedLocal mode

Non-LC

ApplicationsVirtual

TraditionalSaaS

PRESENTED BY VMWARE

157












Pod and Block Design

Pod and Block

Pool design

Pod(s)Locations

Security boundariesBCDR requirements

P1 Block 1Pool types

AdministrationProvisioning frequency

Px BlockyPool types

AdministrationProvisioning frequency

PRESENTED BY VMWARE

158












vSphere Infrastructure Design

vSphere Infrastructure

Pod and block design

Mgmt blockConn SrvsSec Srvs

Infra Srvs

Block 1vCenter

ESX/ESXiNetworking

VMs + images

Px BlockyvCenter

ESX/ESXiNetworking

VMs + images

PRESENTED BY VMWARE

159












Storage Design

Storage

vSphere Infrastructure

Mgmt blockServer workloads

DR

VMs datastoresOS

Disposable disksWorkload IOPSMax footprint

RepositoriesHome directoriesPersistent disks

Pro�le storesTransfer server

TemplatesApplication

PRESENTED BY VMWARE

160












Shared Storage Example for a View Building Block

PRESENTED BY VMWARE

161












User access device

Pre-existing equipment

ClientsOS

MonitorsDevices

Software

Client mgmtPatching

Software distribution

User Access Device Design

PRESENTED BY VMWARE

162












Related Design Considerations

PRESENTED BY VMWARE

163












Design Objectives

PRESENTED BY VMWARE

164












Design Objectives

PRESENTED BY VMWARE

165












Non-Functional Specifications (Service Qualities)

• Manageability- Desktops: FTE

- Time to provision

- Time to recompose or refresh

• Security- Unauthorized access prevention

- Data integrity and confidentiality

- Logging and granular administration

• Availability- Uptime SLA

• Recoverability- RTO and RPO

• Performance- IOPS, MB/s, Transaction/sec

- VMs/core

PRESENTED BY VMWARE

166












Constraints

PRESENTED BY VMWARE

167












John Dodge Design Checklist

• Simplicity

• Customer involvement

• Balance business and technical (best practices)

• Design rationales

• Clarity over ambiguity

• Reusable

• SimplicityFollow this

checklist to create lasting designs

PRESENTED BY VMWARE

168












Logical and Technical Specs In the quest for simplicity, keep similar aspects of the design together

- Group logical design elements with other logical elements

- Combine technical specifications with other technical (or detailed) specifications

Avoid repeating details whenever possible

- Label a logical component once and consistently

- Describe the technical specifications once and completely

Avoid repeating configuration items or specifications

Make high-level logical designs easy to find and understand

Keep technical specs separate for interested parties

PRESENTED BY VMWARE

169












Design Changes in View 4.6

• View Security Server with PCoIP support

• Tiered Storage

• View Local Mode

PRESENTED BY VMWARE

170












PRESENTED BY VMWARE

171












View Security Server Access – with PCoIP Support

Connection Sequence• User connects to View Connection

Server and authenticates

• When a PCoIP desktop is selected, the PCoIP protocol goes to the Security Server

• If the PCoIP session is on behalf of an authenticated user it is forwarded to the correct desktop

PRESENTED BY VMWARE

172












Security Server with PCoIP Support PCoIP between View Client and Security Server

- TCP 4172 from Client to Security Server

- UDP 4172 from Client to Security Server

- UDP 4172 from Security Server to Client

PCoIP between Security Server and Virtual Desktop- TCP 4172 from Security Server to virtual desktop

- UDP 4172 from Security Server to virtual desktop

- UDP 4172 from virtual desktop to Security Server

No Client Changes- All View 4.5 supported clients (including Teradici Zero Clients) will work

No Agent Changes

Simple Upgrade of Connection Server and Security Server from 4.5

Won’t work for all use cases!- Blocked ports (e.g. when going through certain web proxies)

- Deprioritized UDP

- For these situations, a VPN may still be required

PRESENTED BY VMWARE

173












View Composer Improvements

Storage Performance and Optimization

• Tiered storage support resulting in lower cost

• Leverage different tiers of storage to maximize performance vs. cost

PRESENTED BY VMWARE

174












Placing the Replica Disk on Separate Storage View 4.5 Offers the Ability to Use Tiered Storage

- The replica disk is placed on a separate datastore than the one used for the linked clones

• Although there is a slight savings in storage the primary benefit is faster read I/O operations (for example, by using SSD)

- Replica disk storage must be shared so that all ESX/ESXi hosts running linked clones in a pool can access the replica disk

- Requires that all hosts are ESX/ESXi 4.x and above because vSphere mode must be enabled

- If the datastore with the replica fails, all linked clones in the pool will be unavailable

- If the replica disk is placed on local storage, all the linked clones in the pool must be placed on local storage

PRESENTED BY VMWARE

175












View Client with Local Mode

• Check-out virtual desktop to physical devices

• Support devices like laptops that can lose network connectivity

• Extend security and encryption policies to offline users

• “Heartbeat” back to the datacenter

- Synchronization

- Update

- Remote Expiration

PRESENTED BY VMWARE

176












Designing for Local Mode Storage Requirements

- Network-based repository for base images (Transfer Server repository)

- VMFS storage for replicated OS and persistent disks

ESX Requirements - Local mode VMs don’t require any compute resources, so you can dedicate an ESX host and

“run” up to 500 VMs on a single ESX host

Network Requirements - Initial check-out is a huge file transfer, ongoing block-level replication is very low

- Assume the network will be saturated when checking out 20 VMs at once (1GBE)

Transfer Server Requirements - At least two (for redundancy) per vCenter instance (Block)


PRESENTED BY VMWARE

177












Troubleshooting and Monitoring VMware ViewDavid Messina, VP Marketing/Product Management, Xangati

Ron Wang, Desktop Specialist, VMware

PRESENTED BY VMWARE

178












Typical Problems with View that Span the End-to-End Infrastructure

PRESENTED BY VMWARE

179












Agenda

Infrastructure performance problems which affect View End-User Experience (EUX)

Introduction to Xangati VDI Performance Management Dashboard

Demonstration

• Proactive monitoring all infrastructure “moving parts” affecting View EUX

• Troubleshooting performance issues live and to-the-second

• EUX problem recordings

PRESENTED BY VMWARE

180












xangati Performance Management for VDI

360O tracking of cross-silo interactionsEnsures the right team solves a problem quickly

Proactive health scoresUp-to-the-second aggregate score VDI

RecordingsLive and continuous UI with instant replay

No guest agentsQuick install, immediate value

PRESENTED BY VMWARE

181












VDI: Trading a Configuration Management Challenge for a Performance Challenge

VDI performance must be as good or better than that of a physical PC.

PRESENTED BY VMWARE

182












“Smoking Guns” xangati Has Found Affecting View User Experience

• Storage latency fluctuations

• AV updates bogging down desktop

• Back-ups running in middle of day

• Mis-configured IP storage traffic

• DHCP servers failing intermittently

• Outliers affecting VM density

• Mis-configured security gateway

• Congested WiFi network

• YouTube clogging VPN connection

• vSwitch introducing network latency

• Sessions routed over too many hops

• AV solution with architectural flaws, making solution non-viable for VDI

• And many more…

PRESENTED BY VMWARE

183












Dynamic Interactions Must Be Visible —or Else the Performance Ripple Effect Can’t Be Tracked

PRESENTED BY VMWARE

184












Tracking Interactions in 360o Delivers Context

PRESENTED BY VMWARE

185












xangati Goes As Deep into Storage As Network

PRESENTED BY VMWARE

186












CB Richard Ellis

Challenge

• 2,500 VDI users

• Intermittent performance issues

• Needed to win over user support for 100% desktop virtualization

Xangati Solution

• Found storage latency issues even though they invested in storage I/O optimization

• Uncovered network congestion

“Everyone doing VDIshould be using Xangati.” — Rory Clements, VI Admin

Source of Performance Issues in 2 Days

PRESENTED BY VMWARE

187












Case Study for Large Petrochemical Company – Identified Major Architectural Scaling Issue

Challenge

• 600 VDI users planning to expand to 2000

• Performance problem sources not being found

Xangati Solution

• Captured network bottleneck tied to AV

• Live and continuous insight capturing storage latency issues

PRESENTED BY VMWARE

188












Demo

PRESENTED BY VMWARE

189












xangati’s Joint Work with Teradici

Key session statistics presented through a real-time viewer

• End-to-end latency, packet loss, etc.

• PCoIP composition: Image quality, audio and USB-redirect workloads

Up to 10 sessions viewed live and continuously at once

“DVR recordable”

• Both ad hoc and user-driven recordings

• Removes the need to revert to logs

PRESENTED BY VMWARE

190












Seeing Inside the PCoIP Protocol

PRESENTED BY VMWARE

191












Going Deeper into Guest VM Without Adding Agent

Xangati pulls Window Management Interface (WMI) stats

Provides context of what processes are driving resources

Both ad hoc drill-in and linked to DVR recordings

• Ad hoc/event driven not continuous polling of all devices

• Context coupled with an alert

PRESENTED BY VMWARE

192












Visual Trouble Ticket — End-User Experience Recordings

Visual Trouble Tickets™

Record Actual User Activity

• DVR enables playback/rewind

• Great for intermittent problems

• Users can submit directly

PRESENTED BY VMWARE

193












Fast Deployment

PRESENTED BY VMWARE

194












Additional ResourcesDesign Consideration Guidelines for VMware View http://www.vmware.com/technical-resources/products/view.html http://www.vmware.com/pdf/view-46-architecture-planning.pdf

Network Considerations and Best Practices http://www.vmware.com/files/pdf/VMware_View_4_to_PCoIP_Client_WAN_Network_Guidelines.pdf http://www.shannon-mcfarland.com/

Storage Deep Dive – Considerations and Best Practices http://www.vmware.com/files/pdf/view_storage_considerations.pdf

Optimizing the Base Image for VMware View http://www.vmware.com/files/pdf/view-operational-aspects.pdf

PCoIP Architectural Overview http://www.vmware.com/files/pdf/VMware_View_4_to_PCoIP_Client_WAN_Network_Guidelines.pdf http://www.vmware.com/files/pdf/VMware-PCoIP-Zero-Clients-Host-Cards-TN-EN.pdf

Delivering Applications http://www.vmware.com/resources/techresources/1098 http://www.vmware.com/files/pdf/VMware-DG-ThinApp-AppRegistration-EN.pdf

Leveraging Security Server for PCoIP http://communities.vmware.com/community/cto/desktop/blog/2010/12/13/secure-remote-access-with-view-and-pcoip

Automating View with Powershell http://www.vmware.com/files/pdf/techpaper/PowerShell-Integration-View45-WP.pdf

VMware View’s Stateless Reference Architecture http://www.vmware.com/files/pdf/VMware-View-45-Stateless-RA.pdf

http://www.vmware.com/technical-resources/products/view.html

http://www.vmware.com/pdf/view-46-architecture-planning.pdf

http://www.vmware.com/files/pdf/VMware_View_4_to_PCoIP_Client_WAN_Network_Guidelines.pdf

http://www.shannon-mcfarland.com/

http://www.vmware.com/files/pdf/view_storage_considerations.pdf

http://www.vmware.com/files/pdf/view-operational-aspects.pdf

http://www.vmware.com/files/pdf/VMware_View_4_to_PCoIP_Client_WAN_Network_Guidelines.pdf

http://www.vmware.com/files/pdf/VMware-PCoIP-Zero-Clients-Host-Cards-TN-EN.pdf

http://www.vmware.com/resources/techresources/1098

http://www.vmware.com/files/pdf/VMware-DG-ThinApp-AppRegistration-EN.pdf

http://communities.vmware.com/community/cto/desktop/blog/2010/12/13/secure-remote-access-with-view-and-pcoip

http://www.vmware.com/files/pdf/techpaper/PowerShell-Integration-View45-WP.pdf

http://www.vmware.com/files/pdf/VMware-View-45-Stateless-RA.pdf

Presentation v mware desktop virtualization online bootcamp

Technology

Transcript of Presentation v mware desktop virtualization online bootcamp