The talk will show how the VMware ingestion feature uses existing VMware Zones, and ‘imports’ them into CloudStack. We will describe the process by which database entries of already existing components of an existing virtual machine are created and how it enables CloudStack to safely manage such instances even though they were not initially set up by CloudStack.

1. We Transform. Trust into Value
Cloudstack at itelligence Brown Fields
25.02.2020
Andre Paul

2. Agenda
1. Me & itelligence
2. Infrastructure
3. PVLAN
4. Ingestion
3/2/2020©2018itelligence
2

3. About Me
3
 Andre Paul
 Since 1998 at itelligence
 *AN (LAN, WAN, SAN)
 DC Infrastructure Architecture
 SAP
©2018itelligenceclassification:public5/18/2017
Andre Paul
Phillip-Reis-Straße 10
02625 Bautzen
+49 3591 2952 2125
andre.paul@itelligence.de

4. 48%
20%
14%
15%
2% 1%
itelligence Worldwide in Numbers
3/2/2020
1989 7,900+
(as of Dec 2018)
926.6 MEUR
(2018)
6,000+
German-Speaking Europe Western Europe Asia
OtherNorthern and Eastern Europe USA
Employees Development of Headcount Revenue
Revenue per Region (2018)
25 Countries
Customers
Founded
4
4140
4702
5677
6983
7904
20182014 2015 2016 2017
+
Ø13,6% Revenue Growth
CAGR over the past 5 years
557
696
778
872 927
20182014 2015 2016 2017
©2019itelligence

5. A Closer Look at the Market
3/2/2020
Our mission
With our full-service SAP portfolio we
reduce IT complexity and bring simplicity
to the IT landscape.
Our vision
To deliver powerful SAP solutions
to the world.
Global, regional,
and local capacities
and competencies
25+ years of
extensive process,
industry, and IT
expertise
Winner of numerous
SAP Pinnacle
Awards
5
©2018itelligence

6. Environment
3/2/2020©2018itelligence

7. Status CS based
3/2/2020©2018itelligence
7
 KVM/Ceph stack with Apache CloudStack orchestration – “it.cloud”

8. Status VMware
3/2/2020©2018itelligence
8
 Different vSphere based landscape (SDDC) running in the data
centre – “CustVirt”
 Partly automated processes (e.g. VM deployment) based on
ProcessMaker
 Highly customized and optimised infrastructure for the SAP
Businesses
 Medium to large classic and InMemory databases (SAP HANA;
Oracle, IBM DB2, …)
 2 Data Centre
 DWDM coupled on LAN and SAN
 2 main networks
 “Frontend” – customer VPC – VLAN - IPV4
 “Backup” – internal for high bandwidth data transfers e.g. backup/ restore
PVLAN – IPV6
VM
4900

9. itelligence GMS CIS Germany | Facts and Figures
3/2/2020
9
itelligenceGMSCISGermany©2019itelligence
Network
Switches
480+
360+
Managed VPN Connections
380+
WAN Connections
Physical Firewall Systems
50+
Server
ESXi Hosts
360+
64
Cluster
vCenter
16
RAM
500 TB
Storage
6.0+ PB
Storage
SAN Switches
80+
High Availability
Disaster Recovery
Dual Data Center
Storage Systems
50+
Data Protection
Backup Clients
3,200+
8
Libraries
400+ TiB
Data Volume (per day)
1,320+ TiB
Data Domain Capacity (raw)

10. CustVirt
3/2/2020©2018itelligence
10
 Network
 Customer virtual networks (CVN) based on Fortigate VDOM (vrf)/ stretched VLAN/ stretched PVLAN
 -> CS L2Network
 Compute
 vSphere vCenter -> CS Zone
 Clusters based on CPU/Mem hosts (workload optimisation) and OS (license cost optimisation)
 Storage
 Block storage, classical data store

11. Brownfield Network
3/2/2020©2018itelligence
11

12. Mission
3/2/2020©2018itelligence
12
 Migrate the vSphere landscape into CloudStack + portal?
 How to?
 For the network we use CS feature L2Network
 Each vCenter into one CS Zone on the existing L2 infrastructure
 -> new features needed
 Community PVLAN configs for distributed vSwitches
 Ingestion for importing virtual machines from existing landscape
 A alternative way to manage DR (SRM)
 A way to manage CS controlled and vCenter managed VM in parallel
 Dedicated vCenter/ Cluster/ or mixed

13. PVLAN
3/2/2020©2018itelligence

14. Private VLAN
3/2/2020
14
 PVLAN concepts (rfc5517)
 Extends a classical VLAN the primary VLAN with different types of secondary VLAN
 Isolated – ports can reach the primary but no other secondary
 Community – ports can reach the primary and the secondary but no other secondary
 There are 3 port configurations available
 Promiscuous; Isolated; Community
©2018itelligence
promiscuous isolated community 1 community 2
promiscuous    
isolated    
community 1    
community 2    

15. CloudStack Support for Community PVLAN
3/2/2020
15
 CS already supports isolated and promiscuous
 Community port configuration with secondary VLAN was added
 Available via createNetwork isolatedpvlantype=community API and UI
©2018itelligence

16. Ingestion
3/2/2020©2018itelligence

17. Cloudstack Ingestion
3/2/2020
17
 API
 listUnmanagedInstances
 importUnmanagedInstance
 ToDo: exportManagedInstance
 Prepare
 Setup a new project
 Create networks and relevant
offerings templates/ service-/
network-offerings
©2018itelligence

18. importUnmanagedInstance
3/2/2020
18
 Source parameter
 Clusterid
 Naming parameter
 name (vSphere instance name)
 displayname
 hostname (= name if not set)
 Tenant/ project configuration parameter
 account (An optional account name for the virtual machine. Must be used with domainid parameter);
 domainid (An optional domain ID for the virtual machine. Must be used with account parameter) projectid
 Projectid
©2018itelligence

19. importUnmanagedInstance
3/2/2020
19
 Technical parameter
 templateid
 serviceofferingid – compute offering
 recommended “Custom Constrained” + [details[0].cpuSpeed if CPU reservation is not set]
 Fixed compute offering needs to align to the VM
 diskofferingid (disk offering for root disk)
 Map for data disk ID and corresponding disk offering UUID
 datadidatadiskofferinglist[0].disk
 datadiskofferinglist[0].diskOffering
 Map for NIC ID and corresponding Network UUID
 nicnetworklist[0].nic=
 nicnetworklist[0].network=
 Map for NIC ID and corresponding IP address for for non-L2NetworkOffering
 nicipaddresslist[0].nic=
 nicipaddresslist[0].ipAddress= [IP Address]|auto
©2018itelligence

20. Requirements for importUnmanagedInstance
3/2/2020
20
 All VM properties controlled by CS will change
 Console access is possible only after stopping and starting a imported VM
©2018itelligence

21. Andre Paul
Phillip-Reis-Straße 10
02625 Bautzen
+49 3591 2952 2125
andre.paul@itelligence.de
We Transform. Trust into Value
3/2/2020©2018itelligence

22. Copyright itelligence AG - All rights reserved
3/2/2020©2018itelligence
22
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of itelligence AG. The information contained herein may be changed without prior notice.
Some software products marketed by itelligence AG and its distributors contain proprietary software components of other software vendors. All product and service names mentioned and associated logos displayed are the
trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.
The information in this document is proprietary to itelligence. This document is a preliminary version and not subject to your license agreement or any other agreement with itelligence. This document contains only
intended strategies, developments and product functionalities and is not intended to be binding upon itelligence to any particular course of business, product strategy, and/or development. itelligence assumes no
responsibility for errors or omissions in this document. itelligence does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is
provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.
itelligence shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in
cases of intent or gross negligence.
The statutory liability for personal injury and defective products is not affected. itelligence has no control over the information that you may access through the use of hot links contained in these materials and does not
endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages.