Suse provides Linux solutions for public clouds like Amazon Web Services, Microsoft Azure, and Google Cloud Platform. Customers can use Suse images with either a pay-as-you-go model (PAYG) or bring-your-own subscription (BYOS) model. For PAYG images, Suse manages the update infrastructure to provide patches, while for BYOS, customers manage their own update process. Suse works with cloud providers to optimize offerings for applications like SAP and HPC workloads.

1. SUSE Lösungen für die
Public Cloud
Brighttalk Webinar 21.4.2010
https://www.brighttalk.com/webcast/11477/394071
Ralf Dannert
Sales Engineer
ralf.dannert@suse.com

2. 2
Where to start?
e.g. simply at
• Amazon https://aws.amazon.com/​
• Azure https://azure.microsoft.com/​
• Google https://cloud.google.com/​
​
​
MSFT has a nice webpage to show the difference/joint concepts
https://docs.microsoft.com/en-us/azure/architecture/aws-professional​

3. 3
Enterprise Cloud Cost Optimization
Cloud cost savings is the top initiative for year in a
row
3rd

4. 4
Azure Regions
56 Regions worldwide / 140 countries
Source: https://azure.microsoft.com/en-us/global-infrastructure/regions/

5. 5
AWS Regions
22+5 Regions worldwide / 69 AV Zones
Source:

6. 6
GoogleCloud Regions
21 Regions worldwide / 64 Zones

7. 7
GoogleCloud Regions
21 Regions worldwide / 64 Zones
https://www.blog.google/products/google-cloud/expanding-our-global-infrastructure-new-regions-and-subsea-cables/
https://cloud.google.com/about/locations/

8. 88
On-Demand vs. BYOS

9. 9
Concepts
There are two general concepts

On-Demand or Pay-As-You-Go (PAYG)

This is the “real” cloud model

Bring-Your-Own-Subscription (BYOS)

This is the idea to move your on-premise machines into the cloud

10. 10

Bring Your Own Subscription

Easily migrate your existing
subscriptions into Cloud

Direct access to SUSE Support.

Patching: Uses SUSE Customer
Center or you can provide your
own local update infrastructure.

Support agreement transfers
subscription to public cloud.

Provides the ability to purchase
add-on (Live patching etc.)

Fire up and use.

Pay as you go, for the time that
the instance is running.

Support initially (L1,L2) provided
by CSP. SUSE and CSP work
closely together (L3).

Repositories automatically
configured at boot.

Managed Lifecycle

Registered with and Updates via
local regional update server.
On-Demand(PAYG) BYOS

11. 11
A Word of Caution
There is no switching between BYOS and PAYG possible!
This means workloads that start with on-demand are stuck with on-demand. A desired switch
requires a re-build of the application landscape.
This is a limitation of the CSP—we have no influence on this.
BYOS and on-demand are not equal consumability. It must be taken into consideration. (e.g.
LTSS, Live Patching etc.)
VM VM
PAYG BYOS

12. 12
Using and Finding Images
AWS
• In AWS images are found in the AWS Marketplace (SLES for SAP on-demand), the Quick
Launcher (SUSE Linux Enterprise Server on-demand), and the General Catalog (Community
AMIs) (all BYOS images and SUSE Linux Enterprise Server on-demand).
• Instances are created on the command line by specifying the AMI ID, part of the pint output.
Azure
• All images are found in the Azure Marketplace.
• Instances are created on the command line by specifying an URN, part of the pint output.
Google
• All images are in the Google Marketplace; also, on-demand images can be found in the Quick
Launcher.
• Instances are created on the command line by specifying the image name, part of the pint
output.

13. 13
Launching SUSE on AWS
• SUSE Linux Enterprise
Server for SAP Applications
• SUSE Linux Enterprise
Server
• All BYOS SUSE Products

14. 14
Launching SUSE on Azure
• SUSE Linux Enterprise
Server for SAP Applications
• SUSE Linux Enterprise
Server
• All BYOS SUSE Products

15. 15
Launch SUSE on GCP
• SUSE Linux Enterprise
Server for SAP Applications
• SUSE Linux Enterprise
Server
• All BYOS SUSE Products

16. 16
Other ways to find images
New workloads should always be started with
the latest images we have published.
• How to find the latest image with CLI?
- Pint [1] is a command-line tool to find images, provided
by python3-susepubliccloudinfo package.(Cloud:Tools
Repo)
- Also provides a python library that can be used by
customers to embed in their own in-house tooling.
- Accesses a REST API; customers can also access this
API directly.
- Server [2] and client [3] are in GitHub.
[1] https://www.suse.com/c/riddle-me-this/​
[2] https://github.com/SUSE-Enceladus/public-cloud-info-service/
[3] https://github.com/SUSE-Enceladus/public-cloud-info-client

17. 17
Pint cmdline examples

18. 18
Reserved Instances
Reduce Cost
- significant discount (up to 75%)
- Pre-pay one-year or three-year terms
- flexibility to change the Availability Zone(AZ), the
instance size and networking type
- provide a capacity reservation(in specific AZ)
Different Naming
- Azure Reserved VM Instances (RIs)
- Amazon EC2 Reserved Instances
- GCP Committed Use Discounts(CUDs)

19. 1919
The SUSE Image Lifecycle

20. 20
Image Lifecycle
1
2
3
Instance (product) lifecycle and the image lifecycle are different.
All active images are updated continuously on a rolling refresh
cycle.
All active images have an update process they follow,
but the details vary by license type (BYOS // On-Demand)
and product type (SLES for SAP // SLES).
3 Points

21. 21
Your Security in Mind
3-month Image Rolling Update for PAYG images
May June July Aug NovSept
SLES Image 1.0
Dec Jan
SLES Image 1.1
PAYGSLES
Image
Lifecycle
SLES Image 1.1
SLES Image 1.2
It resets the rolling
upgrade schedule
SLES
Image
1.0
SLES Image 1.2
Security issue

22. 22
SUSE Image Lifecycle Process in
the Public Cloud
Image Key
Active
Inactive
Deprecated
Deleted
Fully supported, duration lasts until the image is replaced.
Supported under the rules of Long Term Service Pack Support
(LTSS): Duration term is defined by the product.
Supported for only security updates: Duration is for 6 months.
Removed, no longer supported.

23. 23
Image Lifecycle – Summary
https://www.suse.com/c/suse-public-cloud-image-life-cycle/​
Release of new SP​
 SLES on-demand: Previous SP image becomes deprecated.​
 SLES BYOS: Previous SP image becomes inactive.​
 SLES For SAP on-demand and BYOS: Previous SP image
becomes inactive​.
Critical security issue​
 All images (active and inactive) get refreshed
and all replaced images become deprecated.​
Image refresh​
 All replaced images become deprecated.​
Bug fix for basic image functionality​
 Only on-demand images get refreshed,
replaced images become deprecated.​

24. 2424
CSPs and Our Offerings

25. 25
A Bit about Our Partner CSPs
CSP Update Infra for on demand Image building Image types
Azure SUSE runs and maintain it SUSE builds images PAYG and BYOS
AWS SUSE runs and maintain it SUSE builds images PAYG and BYOS
GCP SUSE runs and maintain it SUSE builds images PAYG and BYOS
Oracle Cloud
Infrastructure (OCI)
SUSE builds images BYOS only
IBM IBM builds images PAYG only
Alibaba Alibaba builds images PAYG only
Other CSPs CSP builds images PAYG only (BYOS is
negotiable)

26. 26
Region Server
• Maps guest instance to region
• Hands out update server Info
RMT Server
• Provides region local updates
• No network charges
• Low latencies
Region
Cloud Framework
Region
Server
Guest
Instance
Update
Server
Region Local Update Infrastructure
(on-demand)

27. 27
What do the CSPs offer?
https://aws.amazon.com/products/?nc2=h_ql_prod
https://azure.microsoft.com/en-us/services/
https://cloud.google.com/products/
AI / ML
Analytics
APIs
Backup/Archive
Compute
Container
ContentDeliveryNetwork
GamingDev
Databases
Developertools
DevOps
•
Integration
•
Identity
•
IoT
•
Management
•
Media Services (encoding/streaming)
•
Migration / DR
•
Mobile Services
•
Network
•
Security
•
Storage
•
Web
•
...

28. 28
Instance Types (= VM’s)
Usage Types
General purpose
Compute optimized
Memory optimized
Storage optimized
GPU
HPC
https://aws.amazon.com/ec2/instance-types/
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/series/
https://cloud.google.com/compute/docs/machine-types
Special features
Networking (AWS: ENA, AZURE: Accel.Networking) -> SR-IOV
• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html
•
https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-cli
Azure HPC RDMA using Infiniband, Intel-MPI (OpenMPI coming)
MPI = Message Path Interface.
MPI is a standardized API typically used for parallel and/or distributed computing

29. 29
Storage Types
AWS
•
Disk
• Amazon Elastic Block
Store(EBS)
•
non-persistence Disk
• Amazon EC2 Instance Store
•
File
• Amazon Elastic File System
(Amazon EFS) (=NFS)
•
Blob
• Amazon Simple Storage
Service (Amazon S3)
•
Archive
• Amazon Glacier - low cost
•
...
Azure
•
Disk
• disk capabilities used by
virtual machines
•
Files
• Managed file shares (=CIFS)
•
Blobs
• object store
•
Archive Storage
• Low cost
•
Queues
• messaging store
•
Tables
• A NoSQL store for schema-
less storage of structured
data.
•
Data Lake
• HDFS compatible
•
...
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Storage.html
https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction
https://docs.microsoft.com/en-us/azure/storage/common/storage-decide-blobs-files-disks?toc=%2fazure%2fstorage%2fblobs%2ftoc.json
GCP
•
Disk
• disk capabilities used by
virtual machines
•
Files
• Managed file shares (NFS)
•
Blobs
• object store for text and
binary data.
•
Archive Storage
• Low cost
•
Storage for Firebase
•
Drive Enterprise
•
...

30. 30
SLES HPC
• Available on-demand.
• SR-IOV drivers and Infiniband supported
for enhanced server and storage
connectivity and advanced I/O
processing.
• First supported Linux HPC solution on
Microsoft Azure.
Azure CLI
• Enables Linux users to manage
Microsoft Azure public cloud services
from the command line.
• Azure Python SDK and CLI Packages
available in SUSE Public Cloud Module.
Kernel Azure
• Kernel tuned specifically for Microsoft
Azure.
• SLES and SLES for HPC include kernel-
azure by default.
SUSE + Microsoft Azure
SUSE Best practices (SAP)
• Co-developed with Microsoft and SUSE.
• Provide a number of ways to deliver HA
concepts in Azure.
• Provide resource templates to easily
deploy SAP workloads.

31. 31
SUSE HAE Best practices
• EC2 Fencing and Move IP Agent
included
• Numerous best practice guides for
deploying SAP co-developed with
SUSE
AWS Systems Manager Agent (SSM
Agent)
• Package available in
SUSE Public Cloud module.
AWS CLI
• Package available in
SUSE Public Cloud module.
SUSE + Amazon Web Services

32. 32
SUSE Offerings Today
Product Images On-demand BYOS STD Alone App CSP
SLES x x AWS, Azure, GCP, OCI ***
SLES for SAP x x AWS, Azure, GCP, OCI ***
SLES for HPC * x x AWS, Azure
SUMA Server x AWS, Azure, GCP
SUMA Lifecycle
Management Module
x x Tier 2 only
CAP x (x) All CSPs
CaaSP In roadmap AWS, Azure, GCP
* HPC is on AWS, Azure
*** OCI is BYOS only

33. 3333
SAP on SUSE
in the public cloud

34. 34
• Get the right
baseline
infrastructure
• Minimize setup
time for the
infrastructure
• Simplifed
Sizing (T-Shirt)
Jointly Engineered Solution Templates
for SAP Landscapes on Azure Built on Microsoft’s
Best Practice Architecture
ARM templates used, are on github too:
https://github.com/SUSE/azure-resource-manager-sap-solution-templates
Speed of
deployment on
Azure Marketplace
Speed of
deployment on
Azure Marketplace

35. 35
AWS Quick Start: Multi-AZ, single node SAP HANA
https://aws.amazon.com/quickstart/architecture/sap-hana/
Production ready:
Deployed in minutes
Production ready:
Deployed in minutes

36. 36
Automation
Cloud Native methods
AWS - Cloudformation (json/Yaml)
https://github.com/awslabs/aws-cloudformation-templates
Azure – AzureResourceManager (ARM) (json)
https://github.com/Azure/azure-quickstart-templates
https://github.com/SUSE/azure-resource-manager-sap-solution-templates
Google - Cloud DeploymentManager (python/jinja2)
https://github.com/GoogleCloudPlatform/DeploymentManager-samples
Other methods
terraform // salt / ansible
https://github.com/SUSE/ha-sap-terraform-deployments
https://github.com/Azure/sap-hana

37. 37
Terraform and Salt
Our engineering goal: Improved user
experience for our SAP customers.
Fast and secure way to deploy your SUSE
HANA Cluster in minutes or hours instead of
days.
Customizable and modular “blocks” allowing
customers to reuse it and adjust for their
specific needs on premises, in clouds or hybrid-
clouds.
It can be integrated into existing solutions like
SUSE Manager or existing Terraform and Salt.
https://github.com/SUSE/ha-sap-terraform-deployments/projects

38. 38

39. 39
Terraform
Variables
Instance
Size
Image
Storage /
File Share

40. 40
cluster.sls
Pillar file used to
configure the SUSE
HAE Cluster
instance on the
Azure VMs

41. 41
hana.sls
Pillar file used to
configure the SAP
HANA instance on
the Server.
Most of these are
preset, you can
customize as
required.

42. 42

43. 43

44. 44
New / Upcoming Solutions

Marketplace Installer for SUSE CAP

Monitoring of SAP HANA and SUSE Clusters based on
 Prometheus

hanadb-exporter, node-exporter, ha-cluster-exporter
 Grafana

Opensource Dashboard
 Integration to
Azure Monitoring
Azure HANA monitoring
Azure LogAnalytics
running as a pilot customer PoC project right now.

45. 45
Cluster monitoring
with Prometheus and Grafana

47. 47
Enable LTSS for On-demand Amazon Web
Services Images

SLES 11 SP4 reached end of General Support on March 31, 2019

LTSS provides continued access to technical support, maintenance and security patches

SLES 11 SP4 on-demand subscription image does not include LTSS

SUSE Public Cloud Update Infrastructure does not provide LTSS repositories

SUSE Public Cloud Update Infrastructure can no longer register newly created SLES 11 SP4
instances because it uses RMT

Solution: Enable LTSS for On-demand Amazon Web Services Images
 Deploy and Configure SMT server in PubCloud

48. 49
Roadmap

SLES 15.2 images (BYOS+PAYG)

SUMA 4.1 images (BYOS)

CaaSP in all Marketplaces (BYOS)

49. 50
Upgrade SLES11 SP4 until June 1st
2020

Blog Posts: Upgrading your running on demand instances in the Public Cloud

Step 2 Toward Enhanced Update Infrastructure Access

enable Cloud -> DC -> Cloud traffic routing

50. 51
Useful Links

SUSE Blog: Enable LTSS for On-demand Amazon Web Services Images
 Deploy and Configure SMT server in PubCloud

Short Youtube Video
 How to Combine Reserved Instances and Annual Subscriptions for SAP