Download as PDF, PPTX
Uploaded byGAMO a.s.
GAMO VMware vCloud Air
The document presents VMware's vCloud Air network, focusing on customer benefits including hybridity, security, compliance, and data sovereignty. It emphasizes the importance of software-defined data centers (SDDC) and NSX for optimizing network functions and improving data center efficiency and security. Additionally, it highlights VMware's hyper-converged infrastructure solutions that integrate compute, storage, and networking for enhanced scalability and lower costs.
More Related Content
Similar to GAMO VMware vCloud Air
![Getting Started with Apache Spark: Big Data Made Simple [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/apachesparkgettingstarted-260203175547-8361bcc3-thumbnail.jpg?width=640&height=640&fit=bounds)
GAMO VMware vCloud Air
- 1. © 2016 VMware Inc. All rights reserved. Slovak Defined Data Center GAMO - VMware vCloud Air Network Customer Presentation Frantisek Ferencik, Systems Engineer 10.5.2016 Hosted infrastructure services based on vSphere, the leading server virtualization platform IaaS Powered
- 2. GAMO Cloud Customer Benefits Hybridity Security & Compliance Data Sovereignty CONFIDENTIAL 2
- 3. Unlock the flexibility to move existing and future workloads from on- premises environments to public clouds and back again for a true hybrid cloud experience Ensure compatibility with services based on the same VMware platform you already use Customer Benefits: Hybridity CONFIDENTIAL 3
- 4. Bypass risk and uncertainty with clouds offering compliance certifications and built-in standards for security and reporting to meet business and industry requirements Trust the inherent isolation provided by vSphere as well as the network virtualization and per VM security policies provided by NSX Customer Benefits: Security & Compliance CONFIDENTIAL 4
- 5. National cloud give you the peace of mind of knowing exactly where your data is being stored and transferred Cloud provider keep data and applications local for simplified adherence to national data security and privacy regulations Customer Benefits: Data Sovereignty CONFIDENTIAL 5
- 6. Pre-Hypervisor Challenges 6 • OS : Physical Hardware mapping is 1:1 • Higher Scale = More Hardware • Resources Mostly Underutilized • Network Configurations are mostly Manual • Security = Perimeter Pre-Hypervisor L2 + L3 Application OS x86 Storage Network Interface Physical Gateway + Router Firewall, VPN
- 7. Virtualization of x86 resolves some issues… 7 1:1 mapping between OS & Hardware Scale = more hardware Under Utilized resources Manual Configurations Perimeter Security Pre-Hypervisor L2 + L3 Application OS x86 Storage Network Interface Physical Gateway + Router Firewall, VPN 1:X mapping between OS & Hardware Scale != more Hardware Optimized Resource Consumption Addition of Manual Routes ‘X’ # Firewall Rules Choke Points No Cross vSwitch Security Perimeter Security Post-Hypervisor Virtual L2 L3 Hypervisor x86 Storage Network Interface Physical Gateway + Router Firewall, VPN VM VMVMVM vSwitch
- 8. Hypervisor + NSX Virtual L2 + L3 Hypervisor x86 Storage Network Interface Physical Gateway + Router Firewall, VPN VM VMVMVM vSwitch Abstracts Physical Networking Services 8 Pre-Hypervisor L2 + L3 Application OS x86 Storage Network Interface Physical Gateway + Router Firewall, VPN Virtual Gateway + Router Virtual Firewall, VPN Hypervisor NSX Post-Hypervisor Virtual L2 L3 Hypervisor x86 Storage Network Interface Physical Gateway + Router Firewall, VPN VM VMVMVM vSwitch Decouple Network Services
- 9. NSX is fundamentalto the SDDC 9 The software-defined data center (SDDC) is crucial to the long-term evolution of an agile digital business, according to Gartner, Inc. Gartner predicts that the programmatic capabilities of the SDDC will be considered a requirement for 75 percent of Global 2000 enterprises by 2020. • Static • Rigid / fragile • Prone to security issues • Expensive • Hard to change • Manual Data centers of today Benefits of the SDDC NSX is fundamental to the SDDC VMware and NSX are best positioned to deliver the SDDC to organizations because we are positioned at the right place in the data center to enable the benefits of the SDDC. Without NSX, the benefits of the SDDC can’t be realized. Dramatically higher efficiency and lower costs Application provisioning in minutes The right availability and security for every application App and workload mobility
- 10. Provides A Faithful Reproduction of Network & Security Services in Software Switching Routing Firewalling Load Balancing VPN Connectivity to Physical What is NSX? 11
- 11. Construct Network Services in Virtual Layers 12 Provider Peripheral Network Infrastructure SwitchingRouting Firewalling Load Balancing VPN Decouple Network Services Decouple Network Services • Core infrastructure backbone is agnostic of network demands at the virtual data centers • Flexibility of Operations − Consumer serviced networks − Defined Micro-segments for various workloads Consumer End Customer Network Infrastructure Virtual Data Center VM VM VM Priv ate Network (192.168.50.0/24) VM VM VM DMZ Network (192.168.52.0/24) Virtual Data Center VM VM VM Priv ate Network (192.168.50.0/24) VM VM VM DMZ Network (192.168.52.0/24) Virtual Data Center VM VM VM Priv ate Network (192.168.50.0/24) VM VM VM DMZ Network (192.168.52.0/24) Provider
- 12. Physical Firewall Rules VM’s in Data Center VM VM VM VM VM VM VM VM VM With NSX DFW Lower Perimeter Firewall requirements and cost 13 Lower # of Physical Firewalls VM’s in Data Center VM VM VM VM VM VM VM VM VM Physical Firewall Without NSX DFW Distributed Firewall Rules VM with Security Policy VM with Default Security Policy VM VM Rules
- 13. Lower Routing equipment requirements and cost 14 Lower # of Routers VM’s in Data Center Physical Routers VM VMVM vSwitch3 VM’s in Data Center Physical Routers VM VMVM vSwitch3 VM VMVM vSwitch1 VM VMVM vSwitch2 Distributed Routing + Edge Gateway VM VMVM vSwitch1 VM VMVM vSwitch2 Distributed Routers
- 14. Distributed Logical Router .1 .1 .1 .1 App Logical Switch 172.16.20.0/24 DB Logical Switch 172.16.30.0/24 .2 Perimeter Gateway Control Center 192.168.110.10 Web Logical Switch 172.16.10.0/24 Micro-Segmentation/Inside Perimeter Security Zero Trust Model VM fin-web- sv-02b .12.11 fin-web- sv-01a VM VM hr-web- sv-02b .22.21 hr-web- sv-01a VM VM .11 fin-app-sv-01a VM .21 hr-app-sv-01a VM .11 fin-db-sv-01b VM .21 hr-db-sv-01b VM Finance HR TCP 1234 SSH Traffic from WEB tier to APP tier (per organization) protected by DFW MySQL Traffic from APP tier to DB tier (per organization) protected by DFW HTTP HTTPS Traffic from USER to WEB Tier protected by DFW 15
- 15. Distributed networking services allow better performance and modelling 16
- 16. NSX and vCloud Director Use Cases • NSX functionality can be consumed out of band from vCD to enable provider side use cases • Enables providers to deliver value added services to their cloud consumers • Does not require direct product integration • Can be automated for rapid provisioning or even self-service CONFIDENTIAL 17 Use Case Benefit NSX Components L2VPN & L2 Bridging • Cloud Bursting • Cloud Migration • Network Extension • Disaster Recovery as as Service NSX Edge Gateway NSX L2 Bridging Micro-segmentation of provider managed networks • Securely provide network based services to tenants, eg: • Backup • Monitoring • Patching NSX Distributed Firewall SpoofGuard Guest/Network Introspection NSX Partners Services • Agentless guest and network based services from NSX Partners, eg: • Anti Virus • IDS/IPS NSX Service Composer Partner Ecosystem Gateway Virtualization • Virtualize network functions on commodity x86 hardware • Common interface and vendor across all services NSX Edge Gateway VXLAN
- 17. Y • SSL secured L2 extension technology over any IP network • Separate NSX Edge GWs run as server & client • Independent of vCenter Server boundaries • Managed and Unmanaged options • UI and API based configuration • Able to bridge any combination of VLAN or VXLAN networks • No specialized hardware required (will leverage AES-NI CPU instruction set where available) • Supports both Enterprise and Hybrid Cloud use cases Features Benefits NSX and vCloud Director – L2 VPN CONFIDENTIAL 18 Internet / WAN Enterprise NSX Edge Services GW L2VPN Client NSX Edge Services GW L2VPN Server Internet / WAN Public Cloud Hybrid Cloud NSX Edge Services GW L2VPN Client NSX Edge Services GW L2VPN Server
- 18. NSX and vCloud Director – L2 Bridging • NSX L2 Bridging – Physical to Virtual connectivity – Intra-DC Migration & IP Mobility CONFIDENTIAL 19 Tenant 1 Servers & VMs (VLAN 10) Tenant 2 Servers & VMs (VLAN 20) Bridging Instance Tenant 1 (VXLAN 5000 to VLAN 10) Bridging Instance Tenant 2 (VXLAN 5001 to VLAN 20) VXLAN 5000 VXLAN 5001 vCloud Director & NSX Managed Resources Colocation Resources VXLAN VLAN L3 Physical Network
- 19. NSX and vCloud Director – Secure Provider Services • NSX enables Provider managed services to be attached to VMs (Monitoring, Backup, etc.) • All VMs are attached to a common Service Network • NSX Distributed Firewall and SpoofGuard enforce security and isolation CONFIDENTIAL 20 Edge Gateway VM VM VM VM VM VMVM VM Org 2 Org 1 Net Org 2 Net App X Net Provider Routers App Y Net App Z Net App K Net vApp X vApp Y vApp Z vApp K NSX Edge NSX Edge Internet/WAN External Net Monitoring Service Backup Service Patching Service Common Services Net Tenant 1 Managed Org 1 Tenant 2 Managed Provider Managed
- 20. NSX and vCloud Director – Value Added Services • Both native NSX and 3rd party Solutions can be added as Value Added Services (VAS) • NSX Service Composer allows Providers to deliver VAS on a per-Tenant or per-VM basis 21 Data Security Firewall Activity Monitoring Anti VirusVulnerability Management IPS/IDS Different service categories from several vendors are supported
- 21. Hyper-Converged Infrastructure Architecture 22 HYPER-CONVERGED SOFTWARE Compute, storage and networking Tightly integrated software stack INDUSTRY-STANDARD HARDWARE Convergence of physical storage on x86 hardware Building-block approach
- 22. Industry-Leading Hyper-Converged Software 23 From the market leader in virtualization software and management VMware Hyper-Converged Software x86 Server Hardware vSphere vCenter Virtual SAN VMware Hyper-Converged Software Market-leading hypervisor Radically simple enterprise-class storage Most flexible deployment options Unified management
- 23. The Best Building Block for the Software-Defined Data Center 24 NSX: Leading network virtualization platform for the SDDC vRealize Operations: Advanced storage management and planning vRealize Log Insight: Real-time log management of Virtual SAN Horizon: Single platform for virtual and hosted desktops x86 Server Hardware vSphere vCenter Virtual SAN VMware HCS SDDC software
- 24. Why VMware Hyper-Converged Software? 25 Radically Simple >100 Pre-Certified Ready Nodes to Match Existing Infrastructure 1 Integrated SW stack <1ms Latency with all-flash systems >100K IOPS per node $1/GB As low as $1 per usable GB of all-flash Virtual SAN 50% Lower TCO 1 Platform for business critical apps, Openstack and containers >6M IOPS per cluster Highest Performance Lowest Cost $ Any App, Any Scale
- 25. Most Widely Deployed HCI Solution in the Market Total Customer Count Q2’13 Q2’14 Q2’15 VMware HCS #2 HCI Vendor** VMware HCS #1 >20,000 CPUs in Q4’15 Units Deployed* >3,000 customers >500 new/quarter Customer Adoption* #1 ~200% YoY in Q4’15 Revenue Growth* #1 * Source: VMware internal analysis, January 2016. Compared to leading HCI vendors only. ** Source: IDC MarketScape Hyperconverged Market, Dec 2014. SEC S-1 Form, December 2015.
- 26. VMware Virtual SAN 27 Radically Simple Hypervisor-Converged Storage for VMs • Software-defined storage optimized for VMs • Embedded in the hypervisor • Runs on any standard x86 server • Supports hybrid and all-flash configurations • Delivers enterprise-level scalability and performance • Managed through per-VM storage policies • Deeply integrated with the VMware stack Overview Virtual SAN Datastore … vSphere + Virtual SAN VM VM VMVM VM VM
- 27. Accelerating Innovation 28 VSAN 5.5 March 2014 VSAN 6.0 March 2015 All Flash 64 Node Cluster X2 Hybrid Performance VSAN Snapshots VSAN Clones Rack Awareness VSAN 6.2 March 2016 VSAN 6.1 September 2015 Stretched Cluster Replication - 5 Min RPO Root Cause Analysis Health Monitoring Deduplication Compression Erasure Coding (RAID 5/6) Quality of Service Performance & Capacity Monitoring Expanded Virtual SAN Ready Nodes
- 28. Virtual SAN Simplifies and Automates Storage Management 29 Per-VM Storage Service Levels From a Single Self-tuning Datastore Storage Policy-Based Management Virtual SAN Shared Datastore vSphere + Virtual SAN SLAs Software Automates Control of Service Levels No more LUNs/Volumes! Policies Set Based on Application Needs Capacity Performance Availability Per VM Storage Policies
- 29. Efficiency of a Single, Hyper-Converged Software Stack Storage VM vSphere vSphere + Virtual SAN One in every server ü Kernel-embedded for optimized I/O data path ü Major advantage in resource utilization • 2x CPU efficiency and 3x memory efficiency ü All features work natively • Native vMotion and DRS ✖ Overhead of virtual appliance ✖ Long data paths ✖ Bolted-on integration
- 30. Tiered All-Flash and Hybrid Options 31 Caching Data PersistenceVirtual SAN All-Flash 100K IOPS per Host + sub-millisecond latency Writes cached first, Reads from capacity tier Capacity Tier Flash Devices Reads primarily from capacity tier SSD PCIe NVMe Hybrid 40K IOPS per Host Read and Write Cache Capacity Tier SAS / NL-SAS / SATA SSD PCIe NVMe
- 31. Virtual SAN Delivers Enterprise-Grade Scale 32 6M+ IOPS 6,400 VMs 8.8 Petabytes Maximum Scalability per Virtual SAN Cluster 64 Hosts “I am looking for cost-savings, efficiency and the ability to expand when we need to, quickly. And that’s something the Virtual SAN lets us do in every case. For the Doe Fund, you know, it is the holy grail of storage.” — Ryan Hoenle Director of IT, The DOE Fund, Inc. Notes: based on IOMeter 100% Read benchmark
- 32.