Benefits of Virtualization in the Water/Wastewater ICS ... · TYPE 2 HYPERVISORS May 20, 2015...

Benefits of Virtualization in the Water/Wastewater ICS Environment By:

Steve Murphy Industrial Networking Specialist

Juliana Oyeniyi Sr. Automation Specialist

May 20, 2015

AGENDA

May 20, 2015 Benefits of Virtualization in the Water/Wastewater ICS Environment

Virtualization Defined

Types of Hypervisors

Industry Adoption Rates

VMware vs. Hyper-V

Type 2 Hypervisors

Type 1 Hypervisors

Conclusion

WHAT IS VIRTUALIZATION

• The creation of a virtual version of an Operating System (OS), storage device, or networking resource

• A virtual machine (VM) is a set of files that can be utilized to run an OS on a computer running on a hypervisor

• A hypervisor is a software that runs on a host machine that creates and runs virtual machines

• A hypervisor allows multiple OS to share a single hardware computer


TYPE 2 HYPERVISORS


Host Operating System

Application

Hypervisor

OS

App

OS

App

• Runs on a host machine with an existing OS

• Often referred to as “Hosted” or “Desktop”

Virtualization

• Host machine is utilized for more functions

than just running VMs

• Typically used in application development

• Software examples: VMware Player,

VMware Workstation, Oracle VirtualBox and

Parallels for Mac

TYPE 1 HYPERVISORS


OS

App

OS

App

OS

App

Hypervisor

• Runs directly on a host machine

• “Bare Metal” or “Server” Virtualization

• Dedicated server only used for running and

managing VMs

• Typically used for an ICS server

• Examples: VMware vSphere, MS Hyper-V,

Citrix XenServer


INDUSTRY ADOPTION RATE

30%

36%

36%

44%

46%

48%

50%

53%

61%

71%

20%

20%

21%

41%

30%

23%

11%

22%

8%

12%

30%

16%

21%

11%

15%

19%

25%

12%

20%

8%

20%

28%

21%

4%

9%

10%

14%

14%

11%

8%

0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%

Transportation/Logistics (N=20)

Retail/Wholesale (N=25)

Government (Federal, N=28)

Communications & Media (N=27)

Financial (N=79)

Government (State & Local, N=48)

Professional Services (N=36)

Health Care (N=51)

Manufacturing (N=74)

Education (N=59)

Server virtualization adoption by industry

Using server virtualization in a production environment

Using server virtualization, but in a test environment only

Have not yet deployed server virtualization, but plan to

Have not deployed and have no current plans to


VIRTUALIZATION SOFTWARE LEADERS


vSPHERE vs HYPER-V

COMMON FEATURES

• Snapshots • Live Migration of VM’s • VM Mgmt Console • Account Mgmt / Group

Policy Security • Antivirus for Virtual

Environments


vSPHERE vs HYPER-V

vSPHERE

• Data Backup • Hot Add

HYPERVISOR TYPES


OS

App

OS

App

OS

App


Application

Hypervisor

OS

App

OS

App

TYPE 2 TYPE 1

Hypervisor

TYPE 2 HYPERVISORS



Application

Hypervisor

OS

App

OS

App

• Runs on a host machine with an existing OS

• Often referred to as “Hosted” or “Desktop”

Virtualization

• Host machine is utilized for more functions

than just running VMs

• Typically used in application development

• Software examples: VMware Player,

VMware Workstation, Oracle VirtualBox and

Parallels for Mac

PLC Programming Software

HMI Client

Windows XP

Windows 7


APPLICATION OF TYPE 2 HYPERVISORS

• System Integration

– Application development and testing

– Off-site troubleshooting

• SCADA System Administration

– Engineering workstation

– Client workstation

ADVANTAGES OF TYPE 2 HYPERVISORS


Run system tests

Gain fast access to entire plant applications

Relatively inexpensive and easy to maintain

Run multiple OS/SW on one machine

TYPE 1 HYPERVISORS


OS

App

OS

App

OS

App

Hypervisor

• Runs directly on a host machine

• “Bare Metal” or “Server” Virtualization

• Dedicated server only used for running and

managing VMs

• Typically used for an ICS server

• Examples: VMware vSphere, MS Hyper-V,

Citrix XenServer

HMI I/O Driver

Historian

MS Active Directory

Application Server

Server 2012

Server 2008

Server 2003

TYPICAL ICS CONFIGURATION


Multiple SCADA servers in a control room

2 Domain Servers

2 Historian Servers

2 I/O Servers

1 Application Server


…all consolidated into a single server with multiple VMs

I/O

Ser

ver

1

I/O

Ser

ver

2

His

tori

an 1

His

tori

an 2

Ap

p S

erve

r

Do

mai

n

Serv

er 2

VMs

Domain Server 1 (physical)

ALTERNATE VIRTUALIZED SOLUTION

http://images.google.com/imgres?imgurl=http://www.intelliadmin.com/images/Dell Server.gif&imgrefurl=http://www.intelliadmin.com/index.php/2006/12/dell-to-produce-green-machines/&usg=__Afm2gRKbe3rOEjfUa9rPBuJ9b2s=&h=250&w=250&sz=28&hl=en&start=4&um=1&itbs=1&tbnid=eri9wSLDeyefnM:&tbnh=111&tbnw=111&prev=/images?q=dell+server&um=1&hl=en&tbs=isch:1

ADVANTAGES OF TYPE 1 HYPERVISORS


HARDWARE CONSOLIDATION

POWER CONSUMPTION

PORTABILITY

REDUNDANCY

DISASTER / DATA RECOVERY

CYBERSECURITY

SAVES TIME AND MONEY

LEADS TO SERVER EFFICIENCY




Average SCADA Server

5% CPU Utilized

95% CPU Unutilized

Virtualized SCADA Server

5% I/O Server 1

5% I/O Server 2

5% Historian 1

5% Historian 2

5% Domain Server 2

5% Application Server

70% Unutilized



FEWER SERVERS REDUCE ENERGY COSTS

• Average server uses about 12 kW per day

– 4380 kWhr per year

– At 10 cents/kWhr → $438 per year

• Fewer servers = less cooling cost

• Savings is directly proportional to # of physical servers virtualized


PROMOTES SUSTAINABILITY

VIRTUALIZATION PROMOTES SERVER PORTABILITY

• Simplify server upgrades

• Run systems on dissimilar hardware

• Vendor portability


VM Copy

Dell Server HP Server

ENHANCES SERVER FAILOVER

• Migrate a running VM between compatible physical servers

– VMware vMotion / MS Live Migration

• Automate VM migration

– High Availability

– Fault Tolerance


Hypervisor

VM

Server

Hypervisor

VM

Server

VM

IMPROVES DISASTER RECOVERY SPEED

• Use snapshots to save system states

• Use third-party software for granular data recovery


Configure hardware

Install OS

Configure OS

Install/Configure Application Software

Restore VM

Power on VM

Physical

Virtual 16+ hrs

< 2 hrs

Simplifies Disaster Recovery Process

Recover Application

LEVERAGES MONITORING AND ANTIVIRUS PROTECTION

• Third-party antivirus products can scan at the host / cluster level

– VMware's vShield Endpoint

– MS System Center Endpoint

• Isolation of VMs

– Virtual VLANs & virtual switches

– Intrusion Detection Systems (port mirroring)

• Group policy security

– Account lockout

– Account timeout

– Password complexity options


VIRTUALIZATION SAVES TIME AND MONEY

• Reduce hardware maintenance

• Minimize live system failure

• Faster server addition and upgrades

• Easily create new VMs using templates


VIRTUALIZATION CONSIDERATIONS

• Virtualization may not be for everyone

• Virtualization requires detailed planning

• Requires specialized IT skills

• Licensing considerations

– Virtualization Software Licenses

– OS Licenses

– Application Licenses


OS

App

OS

App

OS

App

Hypervisor

Steve Murphy Industrial Networking Specialist

[email protected]

Juliana Oyeniyi Sr. Automation Specialist [email protected]

Benefits of Virtualization in the Water/Wastewater ICS ... · TYPE 2 HYPERVISORS May 20, 2015...

Documents

Transcript of Benefits of Virtualization in the Water/Wastewater ICS ... · TYPE 2 HYPERVISORS May 20, 2015...