Private Cloud 201 How to Build a Private Cloud

Harold WongSr. IT Pro Evangelist Blogs.technet.com/haroldwong

al 1

“The Cloudscape”

Microsoft Confidential 2

Secure CloudFederation

Dedicated Cloud

PrivateCloud

International

ENTERPRISE

Publish to Cloud or Enterprise

Public Cloud

Cloud Definitions• Private cloud. The cloud infrastructure is operated

solely for an organization. It may be managed by the organization or a third party and may exist on premise or off premise.

• Public cloud. The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

• Hybrid cloud. The cloud infrastructure is a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load-balancing between clouds).

Cloud Computing CharacteristicsRef: The NIST Definition of Cloud Computing

http://csrc.nist.gov/groups/SNS/cloud-computing/cloud-def-v15.doc

On-demand self-service

Ubiquitous network access

Location transparent

resource pooling

Rapid elasticity

Measured service with pay per use

The *aaS’s

• IaaS Infrastructure as a Service (TBA)• SaaS Software as a Service (Office 365)• PaaS Platform as a Service (Windows Azure)• ITaaS IT as a Service (Private Cloud/HyperV

Cloud)

Service Across Devices and Platforms

Microsoft Confidential 6

PC Phone

Server Cloud

Tools and Cross-Platform Support

Client

TV

Really Big Datacenters

Private Cloud Build Options

• Build your own private cloud with help from the Hyper-V Cloud Deployment Guides and Hyper-V Cloud partners.

• Get a pre-validated private cloud configuration from Hyper-V Cloud Fast Track OEM partners. Hyper-V Cloud Fast Track partners have worked with Microsoft to combine hardware and software offerings based on a reference architecture for building private clouds.

• Find a service provider in the Hyper-V Cloud Service Provider Program who can host a dedicated private cloud for you.

Service Provider

Partner Country Offer

Adhost US Managed Hosting, Web Hosting

Agarik France Webhosting

AIMS Malaysia IaaS

Alog Brazil IaaS

Applied Innovations US IaaS, Public Cloud

Argeweb Netherlands Web Hosting, Managed Hosting

Aruba Italy Web Hosting

BlueFire Australia Telco, Managed Hosting, Applications - BI

BT France France Telco, Outsourcer, Managed Hosting

Chungwha Telecom Taiwan Managed Hosting

Cloudmore Sweden IaaS, Applications

Corpflex Brazil IaaS

Crystone Sweden IaaS

Doruk Turkey IaaS

eLabs A.G. Germany Managed Hosting

For Complete List of Hosting Partners please see http://www.microsoft.com/virtualization/en/us/hyperv-cloud-service-providers.aspx

Pre-Validated Private Cloud Configuration

• Hyper-V Cloud Fast Track partner offerings provide flexibility and choice while reducing risk and increasing the speed of deployment. Click on the partner tabs below to learn about the available options from each partner.

• Fujitsu Launches Global Cloud Platform Service Powered By Windows Azure By Larry Grothaus

Today, Fujitsu and Microsoft announced the upcoming August 2011 availability of the Fujitsu Global Cloud Platform service, which marks the first official production release of a Windows Azure platform appliance delivered by Fujitsu.  The new service offering has already been running in Fujitsu’s datacenter and available on a trial basis to companies since April 21, 2011.

Build Your Own Private Cloud

Build Your Own Private Cloud

• Your private cloud will deliver many of the benefits of public cloud computing– Self-service– Scalability– Elasticity– Resource Pooling

• The Hyper-V Cloud Deployment Guides are a collection of best practices based on a Microsoft Consulting Services framework. They are designed to help you deploy a private cloud solution using Windows Server 2008 R2 Hyper-V, System Center Virtual Machine Manager 2008 R2, and the Virtual Machine Manager Self-Service Portal 2.0.

Build Your Own Private Cloud

http://www.microsoft.com/virtualization/en/us/private-cloud-get-started.aspx

System Requirements

Hyper V R2 Host Limitations

Hyper V R2 Guest Limitations

Hyper V R2 Guest OS Processor Limitations

Storage

• Direct Attached Storage• iSCSI Storage Area Network• Fibre Channel Storage Area Network

Drive Types

• SCSI• SAS• SATA • Fibre Channel

Drive Redundancy

• Raid 1• Raid 10• Raid 5• Raid 50

Storage Controller Architecture

System Architecture

• Rack Mounted Servers• Blade Servers• Symmetric Multi Processor Servers

Standard Rack Mounted Servers

Blade Servers

Symmetric Multi Processor Servers

Processors

RAM

Network Architecture

Host Bus Adapter (HBA)

VM’s

VHD’s

• Dynamically Expanding• Fixed Size• Differencing• Pass Through Disks

Disk Access

iSCSI LUN

Virtual Networks

Security

DemoPrivate Cloud Infrastructure Walkthrough

System Center

System Center Virtual Machine Manager

• SCVMM Server• SCVMM Administration Console• SCVMM Self Service Portal• SCVMM Agent• SCVMM Library Server

SCVMM Server

• Runs SCVMM Service• Connects to a SQL Database• Is the Default Library Server

SCVMM Administration Console

• Create, deploy, and manage virtual machines and templates

• Monitor and manage hosts (Windows Server® 2008/ Windows Server® 2008R2 Hyper-V™, Microsoft® Virtual Server 2005 and VMware® Virtual Center managed ESX servers) and library servers

• Manage library objects and jobs • Manage global configuration settings

SCVMM Self Service Portal

Self Service Portal 2.0

• VMMSSP Website• VMMSSP Database• VMMSSP Server• VMMSSP Reporting Dashboard

Hardware Requirements

Software Requirements

Architecture (Single Server)

Architecture (Four Server)

Security Considerations

• Understanding and planning the default and custom user roles that are defined in the self-service portal.

• Planning and preparing the service accounts. • Understanding the ports and protocols required

for establishing communication channels between various self-service portal components.

• Hardening the Web server that will run the VMMSSP website component.

•

Security Considerations

• Accounts and Groups• Service Accounts• Firewall Exceptions

Hardening The SSP Website

• Configuring SSL for the Self-Service Portal• Disabling ISAPI Handlers That Are not Needed

ISAPI Handlers

How To Disable ISAPI Filters

1. On the Web server, in Administrative Tools, open Internet Information Services (IIS) Manager. 2. Expand Sites, and navigate to the IIS website configured for the self-service portal. 3. In the Features View pane, under IIS, open Handler Mappings. 4. For each handler that is not listed in the preceding table, select the handler, click Remove, and then click Yes.

VMSSP Dashboard

SCVMM Agent

Virtual Machine Host

Host Groups

• Set aside resources on the hosts for the use of the host operating system.

• Designate hosts that are used for self-service. • Designate which hosts are connected to a

storage area network (SAN). (This is a best practice.)

• Enable the automatic placement of virtual machines on the best host in a group of hosts.

SCVMM Library Server

SCVMM Server Placement

One is enough except…

• When the development and test environments are managed separately from the production virtual environment

• When the virtual environments grows—or is planned to grow—beyond the supported maximum of 400 hosts and 8,000 virtual machines

Network Considerations

• Connectivity • Bandwidth • Network traffic

Storage Considerations

• DAS• Fiber Channel• iSCSI

Monitoring and Reporting

• Provided through the Server Virtualization Management Pack for System Center Operations Manager 2007.

• Before reports can be viewed and used, Operations Manager must be installed and the Server Virtualization Management Pack deployed.

Physical 2 virtual Migrations

DemoPrivate Cloud System Center Tools and Automation

Resources

http://blogs.technet.com/haroldwong

Resources

• Trial Software Downloads– Windows Server 2008 R2– Hyper-V Server 2008 R2– Configuration Manager 2007 R3– Operations Manager 2007 R2– Virtual Machine Manager 2008 R2– Service Manager 2010– Opalis– System Center 2012

Release Candidates / Betas

Resources

• www.microsoft.com/virtualization– White Papers– Case Studies– Deployment Guides– Partners

• http://TechNet.microsoft.com/Virtualization – Links to webcasts– Videos– Whitepapers

• http://blogs.technet.com/haroldwong

© 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.

The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after

the date of this presentation.MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

66