IaaS Case Study: How the University of New Mexico

Improved Service Delivery Times Using vCloud

Automation Center

Rich Bourdeau, VMware

Jon Harris, vBrownbag

Brian Pietrewicz, University of New Mexico

VCM5114

#VCM5114

IaaS Case Study: How the University of New Mexico Improved Service

Delivery Times Using vCloud Automation Center

Brian Pietrewicz Director of Computing Platforms

Jon Harris Systems Specialist, IT Platforms

What we will cover

– UNM Environment

– Need for IaaS

– Overview of our current vCAC deployment and the components

– Challenges

– Demo

– Lessons Learned

– Next Steps

3 8/28/2013

UNM Environment

• Compute Infrastructure (Memory/CPU) – 800 Guest machines on 18 Production Hosting Servers. – Windows and Linux servers

• Storage Infrastructure (for virtualization) – NFS storage

• Easier to expand • Simpler management • Enhanced backup/recovery

– 100 TB of storage provisioned for virtual hosts.

• Virtual Networking – 14 VLANs – No Multi Tenancy

4 8/28/2013

UNM Environment

• Decentralized IT

– Departmental lacks resources to manage infrastructure

– Servers under desks and in closets

– Little to no backup or DR

– Security is often insufficient

• Departments need IaaS

8/28/2013 5

IaaS

• Central IT needed to improve services

– ITIL

– Process Map for IaaS

– Service Descriptions and Definitions

– SLAs

– Cost Recovery

8/28/2013 6

Process Automation

• Process Map

– Over 100 manual step to provision a VM

– 2 to 3 week deployment times

• Automate manual processes

– Using vCAC to automate manual processes

8/28/2013 7

IT VM Provisioning Flow Chart Sample workflow for creating virtual file server

Storage Group

Add to

Pinnacle Billing

System

1. Customer request

Server via Field Agent

2. Field Agent opens Service Request

Incident for new Virtual Server

3. Service Reuest goes

to Hosting Intake

4. Req For Server

5 Request for Specs

7.

7a.. If storage

Needed

7e.

8. Notify Customer server

is ready for use.

6. Specs

7b. If additional capacity need

Request LUN from storage

7c.

7d Notify VI

LUN is Ready

Hosting Intake

System Group

(DSYS/WES)

VI Group

Customer

Field Agent

Information Assurance

Accounting

Service Request

Monthly Bill

Build Virtual

Server Using

Templates

Create Storage

LUN

Add Storage to

Virtual Server

Spreadsheet

Modify Firewall

Firewall

Server Specs

Virtual Server

Networking

9 Notify Hostin intake when Ci=omplete

7f. Notify System Group Storage is added to Virtual Guest

8 8/28/2013

User Driven consumption and management

• Self Service Portal

– Deployment

– Management

• Cost Control

– Al la cart catalog/menu of services

– Flexible sizing of systems

– Reduced management cost for Central and departmental IT.

8/28/2013 9

The Problem

• Despite all the awesomeness of virtualization technology – Quicker provisioning of servers – Templates provide standardized systems – More robust environment – Automated Performance Management – Improved Management Functionality – Central Management of Virtual Infrastructure

• Still taking 2 – 3 weeks of manual processes to deliver VM to our customers

10 8/28/2013

The Solution we chose

• vCloud Enterprise Suite

– Needed to deploy under rapid timelines

– “Easy Button” type Self Service Portal (vCAC)

– Existing VMware investment

– Familiarity with products

– Ease of integration into existing products

– Added features i.e. Capacity Management, Monitoring, and Security

11 8/28/2013

vCAC Components

12 8/28/2013

Application Layer

vCAC Server

Manager ServiceDistributed Execution

Manager (DEM) Orchestrator

Database Layer

DB Server

SQL Server

Web Layer

Web Server

Model Manager (Web/Data)

Portal WebsiteReports Website

Self Service Website

vCAC Core Integration and Distribution

DEM

DEM Server

Distributed Execution

Manager (DEM) Worker

Agent

Agent Server

vCenter AgentHyper-V Agent

EPI Agent(POSH/VB)

End Points

Note: All communication between the vCAC

components is over 443 with the exception of Database

traffic that is on 1433DTC is also used which uses TCP 135 and 50000 – 50200 because I limited RPC range.

vCAC : University of New Mexico

13 8/28/2013

End Users End Users End Users

F5 Firewall Context only allowing 80/443 traffic

F5 only allowing 80/443. Also have SSL oflloading and HTTPS redirect

vCAC Web Front End 1Model Manager (Data/Web)

Portal WebsiteReports Website

Self Service Website

vCAC Web Front End 2Model Manager (Data/Web)

Portal WebsiteReports Website

Self Service Website

DEM Workers 1&2

VM MGMT Context. Only traffic to and from the Web Frontends on 443, 135, and RPC 50000-

50200 allowed

Manager Service (Cold Standby)DEM Orchestrator (Cold Standby)

Manager Service

DEM Orchestrator

vCenter Agent

MS SQL EPI Agent (POSH/VB)

Production vCenter

Challenges

• Business Process

• Chargeback / Billing

• IP Assignment

• DNS

14 8/28/2013

Demo

8/28/2013 15

8/28/2013 17

8/28/2013 22

[ABC-Approvers] Your Approval is required Name abc153test496 [abc153test496.colleges.ad.unm.edu] Owner COLLEGES\vcacuser2 Cost Center Cost Blueprint Windows 2008 R2 $100 Additional Components Memory(MB) 0 $ Cpu's 0 $ Storage(GB) 0 $0.00 Total Daily Cost $3.29 Total Monthly Cost $100 Total Yearly Cost $1,202 For a breakdown of costs please visit http://it.unm.edu/servicecatalog/service.php?service=230 In order to approve or reject this request, please browse to the following link. Remember, by approving, you are accepting full responsibility the charges to your Banner dept code. To complete this processes please browse to this link

8/28/2013 23

8/28/2013 24

8/28/2013 26

Chargeback by Group by Allocated Resources Cost per provisioning group of machines provisioned during the specif ied period, including breakdow n by machine.

Filter Criteria

Provisioning Group = (All) AND Start Date = 7/7/2013

AND End Date = 8/6/2013 AND Machine Type = (All)

As of 8/6/2013 4:55 PM Page 1 of 1

8/28/2013 27

8/28/2013 28

8/28/2013 29

8/28/2013 31

8/28/2013 32

Lessons Learned

• Its ok to not get it all right or done the first time

• IT is easy, redefining the business processes and aligning them with technology is more challenging

33 8/28/2013

Next Steps

• Design and implement SDDC strategy based on vCloud Director

• Migrate existing customers into Virtual Data Centers

• Expand offerings i.e. SQL, Oracle, etc.

• Provide Public Cloud offerings via vCAC

– DR in the cloud

8/28/2013 34

Questions

Brian Pietrewicz:

• BPietrewicz@unm.edu

Jon Harris:

• Harris06@unm.edu

• @JonHarrisNM

• Blog: http://virtumaster.com/

8/28/2013 35

36 36

Other VMware Activities Related to This Session

HOL:

HOL-SDC-1307

vCloud Automation Solutions

Group Discussions:

VCM1003-GD

Cloud Automation with Naomi Sullivan

VCM5114

THANK YOU

IaaS Case Study: How the University of New Mexico

Improved Service Delivery Times Using vCloud

Automation Center

Rich Bourdeau, VMware

Jon Harris, vBrownbag

Brian Pietrewicz, University of New Mexico

VCM5114

#VCM5114