Building an Enterprise Hybrid Cloud with the VMware vCloud...

Post on 20-May-2020

5 views 0 download

Transcript of Building an Enterprise Hybrid Cloud with the VMware vCloud...

© 2009 VMware Inc. All rights reserved

Customer Presentation

Building an Enterprise Hybrid Cloud with the VMware vCloud SolutionGlenn Grabowski, Staff Systems Engineer, Senior Cloud Specialist, VMware

May 4, 2011

2

Agenda

VMware vCloud Initiative

IT Needs Cloud To Enable Efficiency and Agility

VMware’s Cloud strategy

VMware's vCloud solution stack

Conclusion and Q&A

3

Business

Owner

It’s all about “The App”

: Developers need more agile infrastructure…

We need to: •

Get capacity now•

Get s/w stacks deployed•

Simulate production

Once in prod, we need •

Plan capacity for app•

Place on Tier 1 capacity•

Provision the App Server, web, database

Set up the load balancer•

Set up the firewall•

Set up data protection•

Set up mgmt •

Manage the app•

…Operations

How do we get the h/w, manage the

app and deliver the SLA in production?

4

… and often leverage commodity clouds when IT doesn’t respond

Developers

May I have a LAMP stack,

please?

vSphere Admin

CIOs have concerns about…?

Security and Compliance?

Performance and SLAs?

Availability and Data Protection?

Intellectual Property

Queues Custom requests

Hardware acquisitionIndividual Approvals

5

Flexibility and agility are becoming increasingly important to IT

Source: CIO LinkedIn Market Pulse Survey, Oct 2010

6

Q9: Which of the following are top drivers of cloud computing initiatives at your organization? (Please check all that apply)

Business agility is the top driver for cloud computing

Base: 636 Total respondents; 234 US respondents; 202EMEA respondents; 200 APAC respondents Source: CIO Global Cloud Computing Adoption Survey January 2011

7

CIOs are facing public cost benchmarks…

Pushing IT to benchmark their own IT organization…

Public rate cards lead to tough questions about internal IT costs

8

Back to Reality -

Real life Provisioning example!

From:

9

Provisioning workflow with VMware's vCloud Director

To:

10

Agenda

VMware vCloud Initiative

IT Needs Cloud To Enable Efficiency and Agility

VMware’s Cloud strategy

VMware's vCloud solution stack

Conclusion and Q&A

11

Virtualization is the foundation of cloud, and it’s proliferating

Physical Hosts Virtual Machines

More VMs were deployed than physical servers starting 2 years ago

17.5

15.0

12.5

10.0

7.5

5.0

2.5

2006 2007 2008 2009 2010 2011 2012 20132005

Milli

ons

VM Cross Over

Gartner, Inc. Magic Quadrant for x86 Server Virtualization Infrastructure, Thomas J. Bittman, Philip Dawson, George J. Weiss, 26

May 2010. This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated

in the context of the entire report. The Gartner report is available upon request from VMware. The Magic Quadrant is copyrighted 2010 by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as

defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise

technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or

fitness for a particular purpose.

“Virtualization is a modernization catalyst and unlocks cloud computing.”

―Gartner, May 2010

VMware is alone in the Leaders Quadrant for x86 Server Virtualization

12

What is this Cloud Thing?

SaaS

Public CloudIaaS PaaS

Private Cloud

IT as a ServiceYour Cloud

Cloud Computing is an approach to computing that leverages the efficient pooling of on-demand, self-managed virtual infrastructure, consumed as a service.

13

Cloud is changing the new IT landscape…

Existing Apps New Enterprise Apps SaaS Apps

Existing Datacenters Public Cloud Services

The Challenge for IT:

Weave all this together into a cohesive,

secure, compliant whole

Evolve the Infrastructure

Modernize Application Development

Re-think End-User Computing

14

Evolve your existing datacenter to a private cloud

Leverage virtualization to transform physical silos into elastic, virtual capacity

Compute

Storage

Network

Increase automation thru built-in policy-driven management Move from static, physical security to dynamic, embedded security Enable secure, self-service to pre-defined IT services, with pay-for-use

Organization: Marketing Organization: Finance

Organization VDCs CatalogsOrganization VDCs CatalogsUsers & Policies Users & Policies

$75USEUSEUSEUSE

15

Evolve your existing datacenter to a private cloud

Compute

Storage

Network

Organization: Marketing Organization: Finance

Organization VDCs CatalogsOrganization VDCs CatalogsUsers & Policies Users & Policies

$75USEUSEUSEUSE

Private CloudCloud Infrastructure

Compute Storage Networking Integrated

Security

ManagementAutomation

16

Apps

Only VMware offers the best of both worlds with hybrid cloud

Cloud Infrastructure

Apps

Cloud Infrastructure Management

Security

Common platform

Common management

Common security

Cloud Computing Moves from a Technology Discussion to a Business Decision

vCloud

Service Provider

Private CloudVMware

Enterprise Hybrid Cloud

17

VMware offers a secure hybrid cloud for enterprises

Private Cloud

Portability

Cloud Consumption

vCloud

Cloud Consumption

vCloud

Operations and Management

vCenter

Operations and Management

vCenter

Security and Compliance

vShield

Security and Compliance

vShield

Virtualization

vSphere

Virtualization

vSphere

Public Cloud

Cross-Cloud Standards

vCloud API

Open Virtualization Format

Cross-Cloud Standards

vCloud API

Open Virtualization Format

Cross-Cloud Management

vCloud Connector

Cross-Cloud Management

vCloud Connector

vCloud Solution

vCloud Powered Broad array of

VMware-compatible clouds for any business need

vCloud Datacenter Security & performance

for enterprises

vCloud Express Rapid, credit card payment

for developers

Co-Branded vCloud Services

18

The leading public clouds all partner with VMware

Source: Gartner (December 2010)

4,000+ vCloud IaaS Partners

App Cloud

PaaS Partners

19

VMware offers two co-branded public cloud services

vCloud Express•

Rapid Signup with Credit-card Billing

Utility “pay as you go”

Pricing•

Lowest cost with high QoS

Interoperability across providers

vCloud Datacenter Services•

Guaranteed quality of service

Certified adherence to ref. architecture

Secure and compliant

Workload mobility across providers

vShield

vSphere

vCloud Director

vShield

Private Cloud

Common platform

Commonmanagement

Common security

vSphere

vCloud Director

Public Cloud

vCloud

Datacenter

Certified

Service

20

Extensions, notifications, and APIs enable third-party integrations

Easily orchestrate vCloud actions•

vCloud API

vCenter Orchestrator Plug-in

VMware Service Manager Plug-in

JMX Interfaces can be monitored using existing monitoring systems

Existing systems are supported•

In-Guest agents are fully supported

Existing IT request systems, approval management systems can be configured to use the vCloud API

VM Request

Policy

21

Cloud Foundry -

World’s first open Platform as a Service (PaaS) offering

Multiple Frameworks

22

Optimize not only how IT is delivered and managed, but

also how it is consumed

Increase business agility by empowering users to rapidly deploy services on-demand with self-service portals

Improve security and compliance within multi-tenant environments

with strong access controls and vShield security

Reduce costs by more efficiently delivering resources and by consolidating and standardizing your infrastructure

Enable application portability and interoperability across clouds

while leverage existing investments

Build a hybrid cloud with vCloud to resolve IT’s challenges

Consuming Infrastructure as a Service

Producing Infrastructure as a Service

23

Intercontinental Hotels built a hybrid cloud to offer global access

InterContinental Hotels Group•

More than 4,500 hotel properties, 650,000 guest rooms in more than 100 countries/ territories worldwide

Business Drivers•

Need for elasticity•

Use of current IT configurations•

Ability to charge back applications•

Cost effective; no CapEx

Solution Offering:•

Membership rewards program•

Exported vApp and uploaded into Verizon CaaS enabled by vCloud Datacenter

Used vCD to manage and configure application for use

24

Agenda

VMware vCloud Initiative

IT Needs Cloud To Enable Efficiency and Agility

VMware’s Cloud strategy

VMware's vCloud solution stack

Conclusion and Q&A

25

Cloud requires elasticity, on-demand access, resource pooling

Cloud Infrastructure

Cloud Application

PlatformEnd-User

Computing

vCloud Solution

Enterprise

Hybrid Cloud

Only VMware addresses all three

Only VMware enables the hybrid cloud

Only VMware offers true pooling with

Virtual Datacenters

Private Cloud

vCloud Powered

Community Cloud

26

Requirements for Building a Private Cloud

Abstraction

User Facing

IT Facing

Pooling

Elasticity

Mgmt Automation

SLA’s

Secure Multi-Tenancy

Service Catalog

Self-Service

Pay by consumption

Ubiquitous Access

27

VMware Offers a Complete CLOUD Solution

Abstraction

User Facing

IT Facing

vCloud DirectorvCloud Director

vSphere

vCenter ManagementvCenter Management

vShield SecurityvShield Security

Pooling

Elasticity

Mgmt Automation

SLA’s

Secure Multi-Tenancy

Service Catalog

Self-Service

Pay by consumption

Ubiquitous Access

28

vCloud API

Public CloudsProgrammatic Control and Integrations

VMware vCloud Director

Builds on vSphere and scales

up to 10,000 VMs and 25 vCenter Servers

Creates virtual datacenters, by pooling resources into new units of consumption

Securely enables the cloud

with vShield, LDAP authentication, and RBAC

Provides self-service portals and standardized infrastructure catalogs

Isolates users into organizations

with unique catalogs, policies, and LDAP

VMware vCloud Director builds on vSphere to transform IT

vCloud API and extensions enables cloud portability, orchestration, and integrations

Users

Organization 1 Organization m

VMware

vShield

Secure Private Cloud

VMware vCenter Server

VMwarevCenter Server

VMware vSphere VMware vSphere

User Portals

Virtual Datacenter n (Silver)Virtual Datacenter 1 (Gold)

SecurityCatalogs

29

VMware vCloud Director

vCloud Director introduces new multi-tenant resource abstractions

Secure Private Cloud

Organization: Marketing Organization: Finance

Organization VDCs CatalogsOrganization VDCs Catalogs

VMware vSphere

VMware vCenter Server

Resource Pools Datastores Port Groups

(Gol

d)

(Bro

nze)

Provider Virtual Datacenters

(Silv

er)

Users & Policies Users & Policies

30

IT must become an internal cloud service provider

IT becomes a service provider, enabling true business agility

Achieve the economics and agility of cloud computing without sacrificing security or control

Users are given an alternative to commodity public clouds, eliminating the need for unauthorized deployments

Self-Service

Portals

Virtual Data Centers

Catalogs

31

Java Stack Database on Linux

Provisions“hardware”

Needsservices

First standardize services with vApps and place into a catalog

32

Directory

Services

Group users into organizations and delegate access to the catalog

Organizations are completely isolated and secure•

Isolated virtual resources•

Independent LDAP-authentication•

Specific policy controls•

Unique catalogs

Catalogs can be customized by organization or shared•

Users can be given permission to create organization-wide catalogs

Organizations can be given permission to create datacenter-

wide catalogs

Enables a multi-tenant environment•

IT can serve multiple organizations from common infrastructure

(More on this later)

33

Users deploy into logical containers of tiered resources with SLAs

One Size Fits All

Datacenter

Directory

Services

34

Users deploy into logical containers of tiered resources with SLAs

Business-Driven SLAs

Gold

Silver

Bronze

Directory

Services

Virtual Datacenters

35

These virtual data centers can be on premise or in public clouds

Business-Driven SLAs

Gold

Bronze

Directory

Services

Virtual Datacenters

Silver

36

Gold

Bronze

Directory

Services

IT can charge users on a pay-as-you-go model with Chargeback

37

Directory

Services

$100

$ 50

$150

$ 35

$175

$ 50

$275

$ 75

Pay for Use

GoldSLA

$100 per VM

BronzeSLA

$50 per VMUSE

USEUSE

USE

Pay for SLA

IT can charge users on a pay-as-you-go model with Chargeback

38

IT maintains control with Chargeback and user limits

Strict user limits•

Leases: Set maximum time period VMs can exist; IT can select renewal policies

Quotas: Maximum number of VMs per user within in organization

Chargeback integration•

Financial transparency for users and IT

Resources like broadband network traffic, public IP addresses, DHCP, and NAT can be metered and billed

Customizable allocation models•

Pay-as-you-Go

Allocation Pool

Reservation Pool

VMware vSphere

39

IT maintains control with strict controls and approvals

Strict access controls•

RBAC: Access privileges restricted by roles within LDAPo vApp creation/modificationo Catalog creation/modificationo Cross-organization sharingo Resource allocation

Approvals and workflows•

IT can require pre-approval if necessary using Service Manager or pre-existing suites

IT can create provisioning workflows

40

Shared vApp catalogs enable collaboration & workload portability

vApps contain all of the information required to deploy a service

Development Cycle Example: •

Developer end user submits a vApp to QA by publishing to the shared catalog

QA tester checks out the vApp from the shared catalog

Network isolation between vDCs allows VMs to have identical network settings without conflicts

vApps can be easily migrated to other clouds using vCloud Connector

Dev Build Virtual Datacenter

Dev Build Virtual Datacenter

Dev Build Virtual Datacenter

Sandbox Testing Virtual Datacenter

Functional Testing Virtual Datacenter

Functional Testing Virtual Datacenter

Test OrganizationDevelopment Organization

41

This fundamentally changes user behavior, benefiting both sides

Dynamic scaling and capacity management invisible to user, ensuring SLAs are met

IT can hot add capacity to the virtual datacenter without user disruption

As a result, users no longer feel the need to hoard or overprovision resources•

Aligns incentives to provision

Eliminates over-provisioning

Voluntary de-provisioning

42

LabCorp developers have instant access to VMs

Objectives•

Speed provisioning•

Provide self-service capacity on demand to IT teams•

Ease regulatory compliance, reduce risk, speed time to market

VMware Solution•

VMware vCloud Director provides secure cloud environment for controlled self-service to developers and admins

Business Impact•

Absorb acquired labs quickly, maintaining legacy systems •

Developers get VMs in seconds•

Meet constant demand for new tests, upgrades, regulatory reports

Build path to SaaS for agile, competitive business operations

Industry

Headquarters

Employees

Annual Revenue

“LabCorp grows by acquisition. Virtualization and the cloud environment enable us to absorb new labs and

speed time to market.”―

James P. Jones, IT Manager, Virtual/Cloud Services, LabCorp

VMware vSphere 4

VMware Site Recovery Manager (SRM)

VMware vCloud Director

vCloud Accelerator Service

PROFILE

Medical testing

Burlington, N.C.

28,000

$5.2 billion

VMWARE PRODUCTS & SERVICES

43

Only VMware offers defense in depth for your cloud infrastructure

Virtualizes common network services such as NAT and DHCP

vShield Endpoint protects the individual VM with offloaded anti-virus

vShield App protects the applications with multi-VM trust zones

vShield Edge protects the virtual data centers with port-

level stateful firewalls

44

VDC Gold VDC Bronze

Security profiles remain intact in the dynamic cloud environment

45

Security profiles follow workloads in the Hybrid Cloud model, too

vCloud Datacenter

VDC SilverVDC Gold VDC Bronze

Secure Private Cloud

Secure VPN

46

Cross cloud management makes hybrid cloud real

Visualize resources across hybrid clouds inside the vSphere Client •

See VMs, vApps and templates across vSphere and private and public vClouds

Delivered as a vSphere Client Plugin

Copy & operate on resources across clouds•

Copy resources between vSphere and vClouds

Perform power operations on workloads•

Access console of vApps running in vClouds

Deliver enterprise level security•

Data managed by onsite server•

Security scope set by vSphere Client

vCloud ConnectorConnect, visualize and operate on multiple clouds

vSphere

Verizon

vCloud

Colt vCloud

Bluelock

vCloudPrivate

Cloud

47

VMware provides continuous compliance within & across clouds

vCenter Configuration Manager •

Continuous Compliance

Assessment & Enforcement

Policies built from Out-of-the-box compliance templates•

SOX, HIPAA, FISMA, DISA, GLBA, ISO 27002, NIST, PCI DSS, NERC, CIS, FERC

Harden the hypervisor configs for ESX, network, storage, etc.

Harden the hypervisor guest

Harden the Guest OS

Build Golden Image / Standards

48

The US government trusts their vCloud deployment with vShield

View Users View UsersView Users

Scientific Apps

Build and maintain a secure network that isolates highly sensitive scientific applications from the rest of the environment without creating “airgaps”

Customer Need

Reduced provisioning time from 30 days to 30 minutes

Lower Capex & Opex by replacing hardware appliances with virtual appliances

Business Benefits

Create adaptive trust zones on the same shared infrastructure to control access to o highly sensitive scientific appso shared serviceso business critical appso and the DMZ

Restrict inbound and outbound traffic to the trust zones

Restrict access to applications in a trust zone to View users in the subgroup within the zone

Automatically move infected VMs to a remediation zone

Solution with vShield App

.Shared Svrs Business Apps

49

Secure multi-tenancy and VDCs allow BUs to share infrastructure

Secure Multi-tenancy with vShield•

Virtual networking technologies segregate network traffic

Policy-based management eliminates “noisy neighbor”

concerns

Enables shared infrastructure•

Formerly silo’d infrastructures (either separate clusters or entire datacenters) can be migrated to virtual data centers and share the

No airgapped pods/silos•

Eliminates the need for physical separation for security or compliance

Maximizes consolidation ratio

Healthcare

OrganizationAerospace

OrganizationConsumer

Organization

Healthcare

VDCAerospace

VDCConsumer

VDC

Healthcare

InfrastructureAerospace

InfrastructureConsumer

Infrastructure

50

VMware is the leader in enterprise hybrid cloud infrastructures

VMware is the leader in the cloud platform

VMware offers the products and services to build a hybrid cloud

VMware has the expertise and services to build clouds

VMware powers the industry’s largest cloud ecosystem

Private Cloud

Portability

Service Consumption

vCloud

Request Manager

vCenter

Chargeback

Service Consumption

vCloud

Request Manager

vCenter

Chargeback

Service Delivery

vCloud

Director

Service Delivery

vCloud

Director

Security and Compliance

vShield

Security Family

vCenter

Configuration Manager

Security and Compliance

vShield

Security Family

vCenter

Configuration Manager

Virtualization

vSphere

vCenter

Management Family

Virtualization

vSphere

vCenter

Management Family

Public Cloud

Cross-Cloud Standards

vCloud

API

Open Virtualization Format

Cross-Cloud Standards

vCloud

API

Open Virtualization Format

Cross-Cloud Management

vCloud

Connector

Cross-Cloud Management

vCloud

ConnectorvCloud

Powered Broad array of

VMware-compatible clouds for any business need

vCloud

Datacenter Security & performance

for enterprises

vCloud

Express Rapid, credit card payment

for developers

Co-Branded vCloud

Services

“Virtualization is a modernization catalyst and

unlocks cloud computing.”

Gartner, May 2010

VMware vCloud

Director Security

Hardening GuideWHITEPAPERv

C

e

nt

er

D

at

a

b

as

e

vCente

r

Server

E

n

d U

se

rs

v

C

D

P

or

tal

VMwar

e vCloud

Directo

r

v

C

D

D

a

t

a

b

a

s

e

v

C

e

nt

er

C

h

ar

g

e

b

ac

k D

at

a

b

as

e

vCenter

Chargeback Server

ESX/E

SXi

HostsD

at

as

to

re

s

N

et

w

or

ks

vCenter

Chargeback Web Interface

vCenter

Char

geback Col

lector

s (

vCenter, vCD, vSE)

vShield

Manager and vShield

Edge Virtual

Appliances

L

D

A

P

VMware vCloud

Director

vCenter

Chargeback

vShield

Manager w/ Edge

VMware vSphere

4 Enterprise Plus

vCloud

API v

Cl

o

u

d

A

PI

VMware vCloud

Director Security

Hardening GuideWHITEPAPER

VMware vCloud

Director 1.0 Performance and Best PracticesWHITEPAPER

51

Agenda

VMware vCloud

Initiative

IT Needs Cloud To Enable Efficiency and Agility

VMware’s Cloud strategy

VMware's vCloud

solution stack

Conclusion and Q&A