Dell/Google Joint Offerings · Nima leads the Anthos Partnership team at Google, responsible for...

Dell Customer Communication - Confidential

© Copyright 2020 Dell Inc.

• This call is being recorded. Both the material and the recording will be made available afterwards

• We recommended that you use the Zoom application to view this session as polls may not function correctly if you are viewing via a browser

• Please raise any question in the Q&A

• There will be an opportunity to provide feedback via a poll at the end; your feedback helps us improve these sessions in the future

• Please also opt-in in Partner Preferences page (to ensure that you receive further information and invites to upcoming sessions



Dell/Google Joint Offerings

PowerScale for

Google Cloud

Data Protection

Services for GCPPowerFlex for Anthos

Latitude

Chromebook

Enterprise

Selling

Motion

Description

Status

Dell Technologies

managed service

connecting with Google

compute. Designed for

high performing and high

value workloads; a GCP

cloud storage play taking

advantage of AI/ML.

A part of Dell’s Cloud

Service provider program

and acquired through

Google Marketplace as a

utility consumption model

A Google Marketplace

sell through. Can also be

a Bring Your License

model fulfilled through

Google Marketplace

Enables on premise

Kubernetes orchestration

and management

connect to any other

public or private cloud

instances

Data Domain Virtual

Edition for GCP

workloads managed with

Networker

Anthos sold separately

(today) but validated and

connected to PowerFlex

platform and FlexOS

operations

Chrome OS on Dell

Latitude combined with

G-Suite

Direct distribution by Dell

Google Cloud

VMware

Engine (GCVE)

Google Cloud Services

for VMware operating

environments on the

Google Cloud Platform

Part of Dell Technologies

Cloud Service Provider

program and available via

Google Marketplace

Available NOWAvailable NOWAvailable Now: BYOL

Marketplace 2H 2020Available NOW Available NOW

Next Generation Google

Anthos

& Dell Technologies

Nima Badiey

Leader – Anthos Partnership Team

John BaconCloud Partner Engineering Lead


“To go fast, go alone. To go far, go

together”

Anthos Partnership Philosophy

Dell Heroes WebinarNext Generation Google Anthos and Dell TechnologiesDecember 9, 2020

Nima Badiey - Head of Anthos Partnerships

John Bacon - Cloud Partner Engineering Lead


Google confidential & proprietary

All slides are SHARED UNDER NDA and for discussion purposes only. Please do not screen-shot or share on social media.


Nima leads the Anthos Partnership team at Google, responsible for

ecosystem strategy, recruitment and go to market success with our

technology, consulting and platform partners. He is a 20+ year veteran of

the computer industry with various leadership, product, marketing, and

operations roles at Pivotal, VMware, Joyent, SixApart, Flickr, Deloitte, Sun

Microsystems and Boeing. Nima is a graduate of Stanford, UC Berkeley

and UCLA with degrees in Engineering and Business.

John is the AppMod lead within the Partner Engineering organization at Google Cloud. He has 10+ years of experience working with cloud technologies from on-premise private clouds to large multi-cloud deployments. He previously held architect and engineering positions at Redapt and Dell. He is a graduate of the University of Texas at Austin and currently working on a Masters degree in computer science with a focus on information security.


Google Scale: Nine products with over one billion users each


A Leader in Multi-cloud Container Development PlatformsGoogle demonstrated excellent developer and

operator experience across the cloud-native

application lifecycle through powerful DevOps

automations. Forrester has found that customers

value Anthos’ automated cluster lifecycle operations,

control plane management, logging, and policy-driven

security features. Google is the best fit for companies

that want automated cloud- native platform

experience across clouds.

The Forrester Wave™: Multicloud Container Development Platforms 2020.


15+ years experience in application orchestration“Secret Sauce” now available as Kubernetes!

July 15K8s 1.0

Jun 14First Github commit for Kube

Public Beta of Solaris Containers

Birth of Borg, 3-4 Google Engineers working to automate cluster management.

20182009 20152012

Work begins to opensource Google’s Borg as Kubernetes

Process Containers launched by Google now known as cgroups and merged with Linux Kernel.

LXC launched, complete Linux container manager

2013Docker launched

GKE on Prem Announced

Gvisor

Knative

Istio 1.0

Istio 0.1

Envoy 1.0

Aug 15GKE GA

Nov 14GKE Alpha

2019

Anthos

2003 2006 2009 2012 2015 2018 2019

Google has contributed to 2600+ open source projects across 70,000 repos(Chrome, GoLang, Android…)


We bring Google’s technology and innovation to

companies of every size

We bring two decades of experience using data to solve hard problems

Accelerate every organization'sability to digitally transform and reimagine their business through data-powered innovation


“The future of applications, and the infrastructure that they run on, is created with containerized microservices, managed through a declarative system with a single control experiencethat uses a service mesh to spans all application locations.”

Google’s point of view on Modernization

Where to start? How can we become “cloud native”?


On-

prem

Clo

ud

There are multiple paths to modernize

Traditional/legacy apps Cloud-native apps

Rebuild

Move& improve

Improve & move

Lift-and-shiftapps

Lift-and-optimize apps


Infrastructure Modernization

Secure and reliable infrastructure to cost-effectively migrate and modernize systems


Unlock the value of your data with a suite of fully managed commercial and open-source databases, smart analytics, and AI

Data Management & Analytics


Flexibly build, connect, modernize, and operate applications across cloud and on-premenvironments

Application Development


GIFEE


GoogleCloudPlatformOur global infrastructure

PLCN (HK, LA) 2019

Faster (US, JP, TW) 2016

Unity (US, JP) 2010

Dunant (US, FR) 2020

Monet (US, BR) 2017

Junior (Rio, Santos) 2018

Tannat (BR, UY, AR) 2018

SJC (JP, HK, SG) 2013

Indigo (SG, ID, AU) 2019

HK-G (HK, GU) 2019 JGA (AU, GU, JP) 2019

Curie (CL, US) 2019

Havfrue (US, IE, DK) 2019

Network

Edge pointsof presence

CDN nodes

Mumbai

Singapore

Kuala Lumpur

Sydney

Tokyo

ChennaiTaipei

Seattle

San Francisco

Montréal

Hamburg

Zurich

Madrid

Paris

London

HongKong

Osaka

Toronto

Chicago

Los Angeles

Denver

Dallas

Miami

Atlanta

Washington DC

New York

Rio de Janeiro

São Paulo

Buenos Aires

MunichMilan

Marseille

Amsterdam

Stockholm

Frankfurt

Dedicated Interconnect

Current regionsand number of zones

Future regionsand number of zones Mumbai

Singapore

Jakarta

Sydney

Tokyo

Osaka

Hong Kong Taiwan

3

3

3

3

3

3 3

3

3 33

3

3

34

3

3Oregon

Los AngelesIowa

S. Carolina

N. Virginia

Montréal

São Paulo

Finland

Frankfurt

Zurich3

Belgium

London

Netherlands

3Seoul

3

3Salt Lake City3 3

GCP offers 24 regions with 73 total zones. There are three zones per region, with the US-Central1 region having 4 zones.


Anthos is cloud for everywhere the clouds aren’t

59.9% of global GDP is outside of public cloud HQ countries


90% of Enterprise workloads do not run on the cloud


Anthos for remote and branch offices


Anthos for remote locations


Anthos for Telco


Anthos for Retail


Partners help us address top 3 customer concerns

Technology Partners Platform & Multi-Cloud

100+ Kubernetes ready solutions on GCP Marketplace. Embedded OS (Ubuntu), SDN (Calico/eBPF), and integrated LB (F5) for a “batteries included” unified customer experience

Integrated HW & SW platforms for solution completeness. Anthos runs on HPE, Cisco, Dell, Lenovo and Netapp as well as multi-cloud. Validation via Anthos Ready program

Service Partners

70+ GSI/RSI, Reseller and MSP partners are active with ~2,000+ developers/practitioners trained on Anthos. GSI/RSI partners support hybrid & multi-cloud deployments for enterprise transformation and cloud-native application development

Can I use my favorite third party sw with Anthos?”

Can I run Anthos on my own servers and on other clouds?”

Who can help install Anthos. How do I move and modernize my apps? ”

http://go/cloudmanagedpartners


Leverage our broad ecosystem of partners to deliver best of breed offerings

ISVs & SaaS VARs, VADs, MSPs System IntegratorsTechnology Partners


Anthos Ready Programhttps://cloud.google.com/partners/anthos-ready

● Identify, validate and promote partner solutions that adhere to Google

Cloud’s interoperability requirements for Anthos.

○ Platform: 9+ validated compute and server providers

○ Storage: 6+ HW and SW Kubernetes-ready storage solutions

○ Networking: SDN and Layer 7 ADC

○ Software: 85+ solutions on GCP Marketplace

TechTarget

“The Anthos Ready Storage program is significant because it shows a major public cloud provider understood the need to work with traditional on-

premises storage providers -- rather than the other way around -- to simplify and expedite deployments for enterprise hybrid clouds”


Anthos Platform Partners14 published reference architectures for Anthos on HW, HCI, Storage platforms

https://cloud.google.com/anthos/gke/docs/on-prem/partner-platforms


Anthos on Dell PowerFlex



Anthos Reference Architectures on Dell



Google CAMP - Cloud App Modernization Program

Data-driven assessment & benchmarking

Proven, scalable DevSecOps practices

Modern, extensible platform


Our Channel Partner Mission:

Accelerate GCP/Anthos adoption by partnering

with Channel Partners to develop and and take

to market Application Modernization solutions &

offerings that meaningfully drive partner and

customer success.Leverage AppMod Solution Plays and Channel partners on turnkey motions Success depends on customer

adoption of Anthos for all workloads. We need partners to drive migration/modernization


Identifying Anthos Opportunities

01Market Pressure for

Agility

Pressures from

competitors, shifts in

consumer expectations

or regulatory conditions.

02Cost Reduction

initiatives

Customer is undergoing

initiatives to reduce IT

costs and has traditional

software that can be

modernized.

042nd Generation Cloud

Native

Using existing container

and orchestration

solution but ready to

upgrade to enterprise-

class solution for global

hybrid/multi-cloud

operations

03Cloud Adoption

Initiatives

Your customer is

actively or planning to

move workloads from

on-premises to cloud.


So What is Anthos?


IT is forced to make trade-offs

Security vs Agility Reliability vs Cost Portability vs Consistency

● Development wants to use the latest tools, languages and plugins

● Security wants verified tools and validated systems before putting it into production

● Redundancy is the way to minimize downtime

● Redundancy means underutilized resources

● Lock-in gives you consistency

● Lock-in keeps you from using the best tools, negotiating better prices, or being as flexible as you want


Personas

Application Owner/ DeveloperService level visibility

Service automation

Traffic control

Service management

Devops

Platform Operator

Frequent upgrades

Uses existing hardware

Consistent between On-Prem and Cloud

Implements open APIs, portable to any cloud

Google supported

Security Admin

Secure platform, upgrades, access, identity, inside VPC

Secure container pipeline

Service to service mTLS, secure by default

Centralized policy as code

Compliance both in the cloud and on-prem


Cluster management

Servicemanagement

Serverless & App Development

Policy management

Operations management

Google CloudEdge Other clouds Attached clustersOn-prem


GKE

Anthos Service Mesh

Cloud CodeCloud Run

Anthos Config Management

Cloud Logging, Cloud Monitoring

Google CloudBaremetal Other public clouds: AWS EC2, Azure

VMs

Attached clusters: EKS, AKS

On-prem hypervisor


Anthos gives you freedom to modernize without being locked in

Infrastructure OperatorKubernetes Anthos GKE

Service Operator / SREIstio Anthos Service Mesh

DeveloperKnative Cloud Run


Managed Kubernetes


Anthos clusters

Container Management

Turn-key, production-grade, conformant Kubernetes with best-practice configuration

Access to container services on GCP such as Cloud Build, Container Registry, Audit Logging, and more

Get Started Quickly: Use the Cloud Console to easily create a cluster and view your workloads

Easy upgrade path to the latest Kubernetes releases that have been validated and tested by Google

Integration with Istio, Cloud Run, marketplace solutions

Reliable and Available: Anthos automatically repairs, upgrades, and scales your cluster with a high-availability control plane

01

02

03

04

05

06


Anthos Deployment Options

Google Cloud Platform

(GA)

vSphere

(GA)

Bare Metal & Edge(GA)

Connected Clusters

(GA)

Azure

(Wider preview H2)

AWS EC2

(GA)


Unified Management HubSingle pane of glass across Google Cloud & on-premises & other public cloud

Container Management

01 Orchestrate and manage on-prem containersjust like GKE in the cloud

02 Consistent operating model with access to GCP services across hybrid environments

03 Single-pane-of-glass for multiple Kubernetes clusters, no matter where


Cloud ↔On-Premises Consistency

GKE GKE On-Prem

Kubernetes Version Upstream OSS Kubernetes with very minimal patches

Operating System Ubuntu or COS Ubuntu(vmware)

Management Tools GCP Console, kubectl, gcloud GCP Console, kubectl, gkectl

Network Policies CNI Plug-In

Logging Cloud Logging Cloud Logging or EFK

Monitoring Cloud Monitoring Cloud Monitoring or Prometheus

+ Grafana


Anthos Bare Metal (Product Overview) Customer Provided & Managed

Google Provided, Customer Managed

Run Anthos component on customer provided Operating System

Virtual OpenStackPhysical

Install ● Customer deploys and manages OS lifecycle and provides ssh access to locally executed Anthos installation/lifecycle tooling

● Integrated preflight check to validate min system requirement

● Idempotent & declarative installer for all Anthos components

Compute ● Can be deployed on physical or virtual infrastructure

● Support RHEL, CentOS, Ubuntu (Specific versions)

Network ● Google provided overlay networking & L4/L7 load balancing

Storage ● CSI integration with customer storage infra

Upgrade ● In-place upgrades

Observability ● Out of the box Stackdriver metrics and logs

● Can integrate with customer provided observability tools

VM Lifecycle Mgmt ● VM Management “Kubevirt”


On-Prem Server

vSphere

User Cluster 1

Admin Cluster

Cluster creation, upgrade, teardown

GKE On-Prem Components

F5 BIG-IP LTM

Virtual Machine

Workload

Admin Workstation

gkectl

kubectl

Virtual Machine

kubelet

Virtual Machine

kubelet

vCenter APIs

User Control Plane

Virtual Machine

Admin Control Plane

kubelet

kubelet

Workload

Admin Cluster: A set of VMs that run the

control plane of the user cluster(s).

Admin Control Plane: Runs the kubernetes

API server, manages gkectl requests, generates

vCenter API calls, manages the user cluster(s)

control plane.

User Cluster(s): A set of VMs that run the user

cluster

User Control Plane(s): Environment to be

configured for the lab.


Deployment Models

Anthos Bare Metal (Admin) Cluster

(Single) Anthos Bare Metal Cluster

K8s WorkerK8s Worker


K8s Worker(s)K8s Worker

K8s WorkerK8s Master(s)

K8s Worker(s)

K8s Master(s)

Workstation

CLI

Anthos Bare Metal Cluster #1





Workstation

CLI

Anthos Bare Metal Cluster #2





Anthos Bare Metal Cluster #N





● Single Cluster Model● CLI Based Lifecycle Management

● Multi Cluster Model● CLI & API Based Cluster Lifecycle Management


Anthos Connected clusters ( like EKS)

+ no need to migrate if you're already running EKS

+ best integration with AWS

- different tooling for cluster lifecycle management

- no integration with GCP, e.g. accessing GCS, Cloud Operations (Stackdriver), etc.

Use Anthos on AWS

+ consistent management across multiple clouds: Web UI, Anthos CLI, GitOps

+ consistent authn for all Anthos clusters across clouds

+ seamless access to GCP services (H2 2020)

- migration effort for existing EKS users

- may lag EKS on AWS integration

2 options to use Anthos for customers staying on AWS


Config and policy management


Anthos Config

Management

Who Platform, service, and security operators

What

Managing infrastructure and platform lifecycle

Implementing and executing platform governance

Not for managing applications

How Modern DevOps workflows


Pods

Pods

ns:app1 ns:app2

Pods

Pods

ns:app1 ns:app2

Pods

Pods

ns:app1 ns:app2

Operator team Imperative ops Multi-Platform environment

kubectl


Pods

Pods

ns:app1 ns:app2

Pods

Pods

ns:app1 ns:app2

Pods

Pods

ns:app1 ns:app2

Operator team Config repo Multi-Platform environment


Anthos Config Management

Monitors configs for drift every ~15s using annotations

Git repo can be On-Prem orCloud or SaaS

Use abstract Namespaces for config inheritance

Selectors allow scoping objects to specific clusters

https://cloud.google.com/anthos-config-management/docs/how-to/namespace-scoped-objects

https://cloud.google.com/anthos-config-management/docs/how-to/namespace-scoped-objects#clusterselectors


Require services to disable

unauthorized access

Example policy use cases

Only allow domain-restricted

Roles and RoleBindings

Require strict mTLS for all

clients/services in a namespace

Enforce specific labels for cost

accounting and chargeback

Require fine-grained service

authorization controls

Require access logging to be

enabled for a cluster / mesh


Service management


Istio

An open platform for

managing service

interactions across

containers and VMs

Service Mesh

A transparent and

language independent

way to automate

network functions

Anthos Service Mesh

A managed platform that uses Istio

APIs to provide service health tools,

complex traffic controls, and

managed security authority


Why do you need a service meshWithout Service Mesh With Service Mesh

App Encryption library

Tracing libraryIdentity support

Circuit breaking

Ingress control

Certificate authority

Egress firewall

Access control

Pod

AppEgressIngress

Circuit breakingFault injection

IdentityEncryption

Observability

Ingress/Egress Controls – Certificate Authority – Access Controls – Routing Rules

Control plane


How does Service Mesh help?

Secure Services

Policy driven security

Secure access and

communications between

some or all services

Manage Health

Uniform observability

Examine everything

happening with your services

with little instrumentation

Connect Services

Operational agility

Manage the flow of traffic

into, out of, and within your

complex deployments


Uniform observability

Application A Application B

Trace request

& response flows

Consistent flow

logs and metrics

Monitor customer

impacting behavior

Understand service

dependencies

Track SLOs and

error budgets


What gets measured gets improvedDeep visibility into your application

with service topology graph

Service Management


Operational agility

Traffic splitting Traffic steering

Fault injection

Circuit breaking Egress control

Frontend v1

Backend v1

Backend v2


Operational agility

Traffic splitting to canary services

Increase application resiliency with timeout, retries, fault injection and circuit breaking

Service A

service_b v2

service_b v1

service_b v1

service_b v1

Canary

95%

5%

apiVersion: networking.istio.io/v1alpha3

kind: VirtualService

metadata:

name: service_b

spec:

hosts:

- service_b

http:

- route:

- destination:

host: service_b

subset: v1

weight: 95

- destination:

host: service_b

subset: v2

weight: 5


Policy-driven security

Application A Application B

Traffic encryption Service auth Access policiesAuditing controls


Policy-driven security

Encryption in transit

Services authn/ authz using service identities

User or app identity propagation


BinAuth, CloudRun, Marketplace and Migrate


Binary Authorization

Run only what you trust. Ensures that only properly signed containers are deployed to production.

● Deploy policy enforcement integrated into GKE

● Supports signature verification as well as image whitelisting

● What to verify at deploy time

○ Images are built by trusted CI/CD pipeline

○ Images pass security / quality tests (vul. Scan, QA etc.)

○ Only deploy explicitly allowed 3rd party images


Cloud Run

Fully managed, deploy your

workloads and don’t see the cluster.

Cloud Run on GKE

Deploy into your GKE cluster, run

serverless side-by-side with your

existing workloads.

Cloud Run Everywhere Else

Use the same APIs and tooling

anywhere you run Kubernetes with

Knative.

Serverless on Kubernetes EverywhereNew


Marketplace for application development

Example Partners

Security, Database, Developer

Tools, Machine Learning,

Monitoring, Analytics, and more

Find

VMs, Kubernetes

applications, APIs,

container images, and

datasets for GCP’s AI, ML,

Big Data, and Cloud

Services Platform.

Deploy

Vetted solutions with

customizable deployment

templates, optimized to

run on GCP, CSP, or

anywhere Kubernetes

clusters are deployed.

Use

Aggregated with the rest

of your GCP spend,

transparent usage data,

and access to support

from commercial

solution providers.

Application Development


Move VMs directly into containers in GKEwith Migrate for Anthos

Migration service

● Low friction path for existing workloads to GKE○ Improve security and manageability without code change

● Accelerated migration, integration into modern infra○ Significant reduction in cost, time, labor, complexity compared

with upgrading manually, as is current norm.

○ Low touch migration to GKE, w/ minimal downtime

○ Migrate without deep knowledge of apps moved

● Modernization paths to add’l cloud services○ Enable multiple options: image extraction/generalization,

monolith breakdown, persistent data migration to 2nd hop

managed storage/databases


Questions?


Thank You



For more information -

● Anthos on PowerFlex– https://www.delltechnologies.com/en-rs/collaterals/unauth/white-papers/products/converged-infrastructure/vxflex-integrated-

rack-for-anthos-solution.pdf

– https://infohub.delltechnologies.com/section-assets/powerflex-for-anthos-at-equinix-solution-000071-1

● PowerScale for Google Cloud– https://www.delltechnologies.com/en-us/cloud/cloud-services/storage/powerscale-for-google-

cloud.htm#:~:text=PowerScale%20for%20Google%20Cloud%20provides,Big%20Data%2C%20and%20optimizes%20performance

– https://www.delltechnologies.com/en-us/collaterals/unauth/analyst-reports/products/storage/white-paper-esg-technical-review-performance-testing-onefs-google-cloud.pdf

● Questions/Information about the Dell/Google Alliance, Offerings, etc.– [email protected]

https://www.delltechnologies.com/en-rs/collaterals/unauth/white-papers/products/converged-infrastructure/vxflex-integrated-rack-for-anthos-solution.pdf

https://infohub.delltechnologies.com/section-assets/powerflex-for-anthos-at-equinix-solution-000071-1

https://www.delltechnologies.com/en-us/cloud/cloud-services/storage/powerscale-for-google-cloud.htm#:~:text=PowerScale%20for%20Google%20Cloud%20provides,Big%20Data%2C%20and%20optimizes%20performance

https://www.delltechnologies.com/en-us/collaterals/unauth/analyst-reports/products/storage/white-paper-esg-technical-review-performance-testing-onefs-google-cloud.pdf

mailto:[email protected]

Dell/Google Joint Offerings · Nima leads the Anthos Partnership team at Google, responsible for...

Documents

Transcript of Dell/Google Joint Offerings · Nima leads the Anthos Partnership team at Google, responsible for...