vsphere and private cloud - marek bražina
TRANSCRIPT
© 2009 VMware Inc. All rights reserved
Customer Presentation
vSphere 5 and private cloud
Marek Brazina
Senior Systems Engineer
2
Cloud is Changing the New IT Landscape…
Existing Apps New Enterprise Apps SaaS Apps
Existing Datacenters Public Cloud Services
The Challenge for IT:
Weave all this together into a cohesive,
secure, compliant whole
Evolve the Infrastructure
Modernize Application Development
Re-think End-User Computing
3
Datacenter without virtualization ?!
Power
Cooling
Rack space
Installation
Configuration
Management
Support
All servers:
4
With VMware Virtualization
Flexibility
Fast deployment
Disaster Recovery
High Availability
Automation
Central management
Adaptive Datacenter
5
VMware vMotion
- Živá migrace operačních systémů mezi fyzickými
servery
- Naprostá eliminace výpadků služeb při plánovaných
odstávkách
- Integrita dat při migracích
- Bez jakéhokoliv přerušení činnosti operačních systémů a aplikací nebo ztráty síťových
spojení
6
VMware DRS/Storage DRS
- Využívá automaticky vMotion a poskytuje operačním systémům a aplikacím potřepnout hardwarovou kapacitu za běhu
7
VMware DPM
- Využívá automaticky vMotion a minimalizuje počet běžících fyzických serverů – eliminace nákladů na napájení a chlazení
8
VMware HA
- Chrání operační systémy a aplikace proti selhání fyzických serverů
- Zajišťuje vysokou dostupnost bez nutnostu clusteringu
9
VMware Fault Tolerance
- Zajišťuje 100% vysokou dostupnost bez nutnostu clusteringu
10
Enable Fault Tolerance with a Single Click
Primary Virtual Machine > Summary Tab
After you turn on Fault Tolerance, the Status tab on the primary virtual machine shows Fault
Tolerance information.
Availability Security Scalability
11
VMware vStorage
- Optimalizace a automatizace úložišť pomocí Thin Provisioning a Storage vMotion
12
VMware vCloud InitiativeEvolving Virtualized Datacenters to a Cloud Infrastructure
13
IT must respond to custom requests and LOBs face queues
Users
May I have a LAMP stack,
please?
Infrastructure Admin
Approval processes and queues
Custom request strain IT Hardware acquisition Capacity management
14
Developers went around IT, alarming CIOs
CIO
End User
Third PartyCloud ProviderUncertainty
On-demand, self-service Concerns about security,
compliance, intellectual property, uptime and productivity
15
VMware offers a private cloud to grant self-service access
End User
Cloud Admin CIO
VMware vSphere
VMware vCloud Director
On-demand, self-service IT maintains control Trustworthy, secure,
compliant
16
vCloud enables IT to leverage public cloud resources
Cloud Admin
End User
On-demand, self-service IT maintains control Trustworthy, secure,
compliant
CIO
VMware vSphere
VMware vCloud Director
Third Party Cloud Provider vClouds
17
In the cloud, IT becomes a service provider to the business
IT becomes a service provider, enabling true business agility
Users are given an alternative to the public clouds, eliminating the need for unauthorized deployments
Achieve the benefits of cloud computing without sacrificing security or control
Self-Service
Service Catalog
Resource Pools
18
This new model also enables IT to consolidate and standardize
From managing a highly customized, siloed datacenter
To a standardized and pooled datacenter
App Stack A App Stack B
DB2
App Stack C
Process A Process B Process C Standardized Processes
vSphere vSphere vSphere vSphere
Virtual Datacenter 1 (Gold) Virtual Datacenter 2 (Silver)
19
Evolve Your Existing Datacenter to a Private Cloud
Compute
Storage
Network
Leverage virtualization to transform physical silos into elastic, virtual capacity Increase automation thru built-in policy-driven management Move from static, physical security to dynamic, embedded security
20
Evolve Your Existing Datacenter to a Private Cloud
Leverage virtualization to transform physical silos into elastic, virtual capacity
Compute
Storage
Network
Increase automation thru built-in policy-driven management Move from static, physical security to dynamic, embedded security Enable secure, self-service to pre-defined IT services, with pay-for-use
Organization: Marketing Organization: Finance
Organization VDCs CatalogsOrganization VDCs CatalogsUsers & Policies Users & Policies
$75
USEUSEUSEUSE
21
Evolve Your Existing Datacenter to a Private Cloud
Compute
Storage
Network
Organization: Marketing Organization: Finance
Organization VDCs CatalogsOrganization VDCs CatalogsUsers & Policies Users & Policies
$75
USEUSEUSEUSE
Private CloudCloud Infrastructure
Compute Storage NetworkingIntegratedSecurity
ManagementAutomation
22
Apps
Only VMware Offers the Best of Both Worlds with Hybrid Cloud
Cloud Infrastructure
Apps
Cloud Infrastructure Management
Security
Common platform
Common management
Common security
Cloud Computing Moves from a Technology Discussion to a Business Decision
vCloudService Provider
Private CloudVMware
Enterprise Hybrid Cloud
******
user
Connecting…
Monte Carlo vApp
VM created in seconds with a friendly user experience
28
But IT Never Loses Control With...Strict Controls and Approvals
Strict access controls• RBAC: Access privileges restricted by
roles within LDAP
• vApp creation/modification
• Catalog creation/modification
• Cross-organization sharing
• Resource allocation
Approvals and workflows• IT can require pre-approval if necessary
using vCloud Request Manager
• IT can create provisioning workflows
Customizable allocation models• Pay-as-you-Go
• Allocation Pool
• Reservation Pool
29
VMware vShield offers defense in depth
VMware vSphere + vCenter
Securing the Private Cloud End to End: from the Edge to the Endpoint
Edge
vShield Edge
Secure the edge of the virtual datacenter
Security Zone
vShield App and Zones
Application protection from network based threats
Endpoint = VM
vShield Endpoint
Enables offloaded anti-virus
Virtual Datacenter 1 Virtual Datacenter 2
DMZ PCI compliant
HIPAA compliant
Web ViewVMwarevShield
VMwarevShield
VMware vShield Manager
30
Integrated vShield features simplify security and compliance
vShield for vCloud Director is a virtual appliance providing essential perimeter network and security services including:
• Port-level stateful firewall
• Network Address Translation
• DHCP services
Enables fast, secure and automated provisioning of multitenant Org VDCs in private clouds
• Simpler, easer to operate
• Improved visibility, control and compliance
DHCP Services
firewall
VMware vSphere
vShield
31
This Fundamentally Changes User Behavior, Benefiting Both Sides
Dynamic scaling and capacity management invisible to user, ensuring SLAs are met
IT can hot add capacity to the virtual datacenter without user disruption
As a result, users no longer feel the need to hoard or overprovision resources• Aligns incentives to provision
• Eliminates over-provisioning
• Voluntary de-provisioning
32
Delivering and Managing a Cloud Infrastructure
Deep Dive Module