Presentation v mware desktop virtualization online bootcamp

VMware Desktop
Virtualization
Online Bootcamp
Start Now

PRESENTED BY VMWARE
Table of Contents | VMware Desktop Virtualization Online Bootcamp
VMware End User Computing Vision and Journey .................................................................................. 3
by Matthew Hardman, VMware
Storage Deep Dive – Considerations and Best Practices ....................................................................... 23
by Jim Yanick, VMware
Network Considerations and Best Practices ............................................................................................ 40
by Shannon McFarland, Cisco
Optimizing the Base Image for VMware View ......................................................................................... 64
by Todd Dayton, VMware
PCoIP Tuning................................................................................................................................................ 87
by Chuck Hirstius, VMware
PCoIP Protocol Bandwidth Improvements Incorporated in VMWare View 5........................................ 111
by Ron Wang, VMware
Delivering Applications............................................................................................................................... 118
by Heath Doerr, VMware
Leveraging Security Server for PCoIP........................................................................................................ 135
by Mark Benson, VMware
Design Consideration Guidelines for VMware View ................................................................................ 149
by John Dodge, VMware
Troubleshooting and Monitoring VMware View....................................................................................... 177
by David Messina, Xangati and Ron Wang, VMware
Additional Resources................................................................................................................................... 194

PRESENTED BY VMWARE
3
VMware End User Computing
Vision and Journey
Storage Deep Dive –
Considerations and
Best Practices
Network Considerations
and Best Practices
Optimizing the Base
Image for VMware View
PCoIP Tuning
PCoIP Protocol Bandwidth
Improvements Incorporated
in VMware View 5.0
by Ron Wang, VMware
Delivering Applications
Leveraging Security
Server for PCoIP
Design Consideration
Guidelines for VMware View
Troubleshooting and
Monitoring VMware View
by David Messina, Xangati
and Ron Wang, VMware
Additional Resources
Vision and Journey
Matthew Hardman, VMware

PRESENTED BY VMWARE
4
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
People Are Working Differently and Have
High Expectations
ACCESS
• 37% use do-it-yourself tech
• 97% carry 2 devices
APPS
• 2015 Mobile App Market $38B
DEVICES
• 2010 Shipments
Tablets + Smartphones PC
• 2015 Shipments
1.1B cell phones, 300M tablets
Sources: Morgan Stanley 2011, Gartner 2011,
Forrester 2010, Pew 2011
Transition to the Post-PC Era Has Already Begun

PRESENTED BY VMWARE
5
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
IT Is Under Pressure from Every Direction

PRESENTED BY VMWARE
6
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Transition to the Post-PC Era –
A Process, Not an Event
Evolution, not revolution: Keep users working

PRESENTED BY VMWARE
7
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware EUC Platform for the Post-PC Era

PRESENTED BY VMWARE
8
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Where Are We Headed for the User?
My Apps, My Files, Native Device Experience

PRESENTED BY VMWARE
9
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Break the Cycle and Move to the Post-PC Era

PRESENTED BY VMWARE
10
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and

PRESENTED BY VMWARE
11
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View and ThinApp – Deliver Desktops as
a Managed Service

PRESENTED BY VMWARE
12
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and

PRESENTED BY VMWARE
13
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Horizon – Your Bridge to the Cloud and Mobile

PRESENTED BY VMWARE
14
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Horizon Mobile – Bridging Personal,
Enterprise Mobile Workspaces

PRESENTED BY VMWARE
15
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and

PRESENTED BY VMWARE
16
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Project AppBlast – Universal Application Access

PRESENTED BY VMWARE
17
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Project Octopus – Secure Data Sync and
Collaboration Service

PRESENTED BY VMWARE
18
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Horizon – Setting Application, Data,
and Device Policies

PRESENTED BY VMWARE
19
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware End User Apps – Connect Users via
Social Applications

PRESENTED BY VMWARE
20
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware End User Apps – Connect Users via
Social Applications

PRESENTED BY VMWARE
21
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Summary – The VMware Platform for the
Post-PC Era

PRESENTED BY VMWARE
22
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
The Power of VMware

PRESENTED BY VMWARE
23
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Considerations and
Best Practices
Jim Yanick, Senior Systems Engineer, VMware

PRESENTED BY VMWARE
24
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Agenda
Updates on View Composer
Storage Considerations

PRESENTED BY VMWARE
25
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer Improvements
Storage Performance
and Optimization
• Tiered storage support resulting in lower cost
- Leverage different tiers of storage to
maximize performance vs. cost

PRESENTED BY VMWARE
26
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer Enhancements
• Customization/Provisioning
- Sysprep support
- Refresh, Recompose and Rebalance [RRR] for Floating Pool
- In 4.5:
- Floating = Non-Persistent
- Dedicated = Persistent
• Storage Performance and Optimization
- Tiered support
- Optimization
- Disposable disk and Local swap file redirect
- Allow creation of linked-clones on local storage
• Management
- Full Management of Persistent Disk (formerly known as UDD)
- Garbage collection script to clean-up linked-clones

PRESENTED BY VMWARE
27
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer: Customization/Provisioning
• Sysprep support
- Sysprep : Optional New SID for each clone
• Refresh/Recompose/Rebalance

PRESENTED BY VMWARE
28
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer: Tiered Storage
• Allow master VM replica to reside in a separate data store
- Use high-performance storage to boost performance (e.g. reboot, virus scan)

PRESENTED BY VMWARE
29
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer: Tiered Storage
• OS Disk and View Persistent Disks
• Linked Clones vs. Replicas

PRESENTED BY VMWARE
30
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer: Disposable Disk
• Disposable Disk: Redirect paging and system temp files to a temporary disk
removed upon VM powered off

PRESENTED BY VMWARE
31
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer: Disposable Disk
• Disposable Disk: Redirect paging and system temp files to a temporary disk removed
upon VM powered off

PRESENTED BY VMWARE
32
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Composer: Other Storage Optimization
• Local swap file redirect
- Not reducing storage but allow the use of cheap local storage for individual VM swap file
• Allow creation of linked-clones using local data stores
- Wizard will not filter out local data stores for use of VM cloning
- Allow use of cheap local storage for non-persistent pool VMs
View Composer:
Enhanced Management Functions
• Persistent Disk (formerly known as UDD) Management
- Detach/Migrate/Archive/Reattach
- Managed as “first class object”
• Garbage collection scripts
- Remove one or more linked-clone VM(s) by name(s) from View, SVI, VC, and AD

PRESENTED BY VMWARE
33
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View 4.5 / Composer 2.5
Developer Notes (DNotes)
• Major Efforts
- Sysprep support
- Storage savings
- Enhanced refresh operations
- In the past recompose and refresh were the same; now the refresh is much quicker,
we use an internal snapshot and roll back to that
- This is a snapshot of a snapshot that makes rollbacks easier
- Added disposable disk
- Whenever the clone gets rebooted that disk gets refreshed
- What goes to the disposable disk: c:temp, c:windowstemp, and pagefile
- We just change registry paths to redirect the files to the disposable disk

PRESENTED BY VMWARE
34
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
DNotes: Recompose Steps in Quickprep
1. On initial power on, set some dependencies that depend on computer
name to be dependent on us
2. Set computer name
3. Do a reboot
4. Then remove some service dependencies
(services that depend on us like tcpip)
5. Then join domain
6. Then enable upnp, check driver compatibility and then reboot
if necessary
7. Then setup temp disk and udd
8. Then run postsync script
9. Then notify view manager that we are ready
10. Then view powers computer off and takes our internal snapshot

PRESENTED BY VMWARE
35
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
DNotes: Tiered Storage
• Linked Clone Limits
- There is no hardcoded limit as to how many linked clones can be built against 1 replica
- The 8 hosts limit is going to be the max not the code
- The broker figures out which clones point to which replicas; the composer just gets told a clone
and replica to use
• UDD Enhancements
- Eliminated the need to make a backup copy of the profiles on the udd
- Before we copied the default and all users profiles to the udd
- Now we don’t have to do that and we can point a hard link back to the path on c:

PRESENTED BY VMWARE
36
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
DNotes: Tiered Storage Improvements
• Error Reporting Improvements
- A lot better error reporting
- Make the errors more visible to the admins
• Misc Improvements
- At the platform there has been work to prevent boot storms and other performance enhancements
- There is a feature request to allow disposable disks on separate volumes but not in this release
- Some research on how windows uses storage and determined what services should be disabled
• They may be putting a guide together on what services should be disabled and provide a way to
disable them or have these in the admin guide
- Local storage is a new feature
• Allows users to configure disk storage to place a replica
DNotes: Windows Licensing Issues
• Guest customization side added license activations
- Don’t support MAK activations, only KMS
- Master must be KMS licensed before snapshotting

PRESENTED BY VMWARE
37
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Storage Considerations
• There are a lot of factors to consider
- How many master images will be used?
- How many total unique linked clone VMs are needed?
- What is the IO pattern of the VMs?
- What types of tasks do the users do?
• Any info are suggestions that need to be verified with lab testing
How to Find
• Image sizes for the VMs
- Ask the current desktop admins for the size of their current “ghost/acronis” images.
They can probably recite it from memory
- Have a partner run a VDI Assessment and get some real data
• Number and size of applications
- Usually no one knows all the applications and how large they are
• Number of average IOPs per desktop
- Most likely, no one will have a clue
- For a quick and dirty answer, stick a test VDI desktop on a dedicated LUN and ask the SAN team
for a report on the IOPs

PRESENTED BY VMWARE
38
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Some Standard Numbers
These are rough guesses — please run a VDI Assessment for real data
• Storage Info (from http://en.wikipedia.org/wiki/IOPS)
- IOPs
- 7200RPM SATA drives - ~80 IOPS
- 10kRPM Serial Attached SCSI drives - ~ 140 IOPS
- 15kRPM Serial Attached SCSI drives - ~180 IOPS
- Simple SLC SSD - ~400 IOPS
- Enterprise Flash from EMC - ~2500 IOPS
Desktop Guesstimate Stats
- Lite User ~ 6 to 8 IOPS
- Medium User ~ 8 to 20 IOPS
- Heavy User ~ 20 to 30 IOPS
Datastore Stats for ESX 4.0
- Max VMs per VMFS Datastore ~ 90 safer at 60
- Max VMs per NFS Datastore ~ 170 safer at 150

PRESENTED BY VMWARE
39
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Decisions To Make
• Dedicated/Persistent vs. Floating/Non-Persistent
- This can effect how often the linked clone is refreshed which can effect how big they grow
• UDD or Not
- If using Dedicated desktops, will you use UDD’s for what percent of users?
- For flexibility, it’s better to avoid them
- Effects how much space is needed in the VDI environment vs. on file servers
- The data still needs to be stored — the question is just about where to allocate it
Click here for Additional Resources

PRESENTED BY VMWARE
40
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
and Best Practices
Shannon McFarland CCIE# 5245,
VCP Corporate Consulting Engineer,
Office of the CTO/CE, Cisco

PRESENTED BY VMWARE
41
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Agenda
Solution Overview
Solution Design
- General Considerations
- Optimizing the VMware View Environment
- View Security Servers/View Connection Servers
- QoS for View
- WAN Optimization
Conclusion

PRESENTED BY VMWARE
42
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Solution Overview
http://bit.ly/8sC9RY

PRESENTED BY VMWARE
43
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Matching View Requirements
with Network Capabilities
View Requirements Network Capabilities
Unified Solution
User Experience QoS/HA/Performance
Availability
End-to-End High
Availability
Access Any Device/Anywhere
Performance Network/Compute
Security Defense-in-Depth
E2E Management Service Mgmt

PRESENTED BY VMWARE
44
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Addressing Common Assumptions
“I deal with desktops, servers and applications and I don’t get why the
network matters”
It is critical to have a hierarchical, scalable and flexible network architecture that can meet your
demands regardless of application and service
The network provides end-to-end security, availability, QoS and many other elements that improve
user experience
“Do I really need to buy a bunch of networking gear to get
VMware View deployed?”
You probably already have a pretty robust network that supports existing applications and services
that can be used for VMware View

PRESENTED BY VMWARE
45
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Network Overview for VMware View

PRESENTED BY VMWARE
46
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Solution Design
General Considerations

PRESENTED BY VMWARE
47
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Direct Mode and Tunnel Mode (1)
• Direct Mode – When a View Client establishes a direct connection to the
View Agent over RDP or PCoIP
• Advantages
- Significantly less load (CPU/Memory/Network) on the View CS
- More granular application visibility for QoS and WAN optimization
- Flexibility to run either RDP or PCoIP
- Higher availability for in-progress sessions
• Disadvantages
- Without comprehensive security policies users can access the View Agent VM via Microsoft RDC and
bypass the View CS and associated policies – “AllowDirectRDP” Registry setting is used to help solve
this issue.
- Cannot be used in an environment where only HTTP or HTTPS is permitted

PRESENTED BY VMWARE
48
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Direct Mode and Tunnel Mode (2)
• Tunnel Mode or “proxy mode” is when a View Client establishes a connection to the
View SS/CS for all phases of communication
• Tunnel Mode is based on the encapsulation of RDP in HTTP or HTTPS
• Advantages
- Tighter access control and policy enforcement
- Allows for an HTTPS connection from any IP-based connection into the View environment
- Both HTTP and HTTPS can be optimized by WAN Optimization solutions
• Disadvantages
- Significantly more load (CPU/Memory/Network) on the View CS
- It becomes much more difficult to differentiate traffic on the network when it is all HTTP or HTTPS
- The use of HTTP proxies may interfere with the View Client connections

PRESENTED BY VMWARE
49
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Remote Access Options
• You can use your existing VPN solution to provide remote access to the View
environment
- i.e IPSec or SSL VPN solutions
• View Security Servers – RDP-in-HTTPS
• Combination of the two – Contractors may use View SS while full-time employees use
VPN solution (or those wanting to use PCoIP remotely [short-term limitation with View
SS being TCP only]
Bandwidth Considerations
• Bandwidth consumption can vary wildly depending on display protocol, workload and
auxiliary connections (i.e.USB redirection)
- This makes capacity planning difficult
- Not every connection yields the same consumption rate
- Tunnel mode connections make View sessions ‘look’ like browser traffic
• Thorough testing with live applications and users or at least with RAWC is critical to
capacity planning
• WAN optimization is a priceless asset for bandwidth conservation via compression
and reduction of redundant data
• QoS will make or break the deployment as it helps manage congested links

PRESENTED BY VMWARE
50
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Protecting VMware View – Layer 2 Attacks
• DHCP client access has been a campus and branch thing
– View now brings common client requirements to the DC
• DHCP Snooping
– Acts like a firewall between un-trusted hosts (View Agents) and trusted DHCP servers
– Helps prevent VM from acting as an unauthorized DHCP server
• Dynamic ARP Inspection (DAI)
– Validates ARP requests and responses
– Uses DHCP snooping bindings
– Helps prevent ARP-poisoning based MITM attacks
• IP Source Guard (IPSG)
– Filters traffic on vEthernet interfaces and permits only traffic where IP and MAC address match
(DHCP bindings/static)
– Helps prevent a VM from spoofing the IP address of another VM

PRESENTED BY VMWARE
51
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Solution Design
Optimizing the
VMware View Environment

PRESENTED BY VMWARE
52
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware View Network-Based
Optimization – Summary
Server Load Balancing SSL WAN Optimization
View Client N/A N/A *Yes
View Connection Server Yes Yes **Yes
View Security Server Yes Yes **Yes
*Depending on the remote display protocol used and features (MMR, USB-Redirection, etc.)
**Optimization to View Administrator, View Portal and Tunneled RDP Sessions

PRESENTED BY VMWARE
53
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Firewall Port Layout – View Security Server
Outside Interface Rules
Source Protocol Port Destination
Any HTTPS 443 SLB Virtual IP
DMZ/Inside Interface Rules
Source Protocol Port Destination
Security Servers AJP13 8009 Connection Servers
Security Servers JMS 4001 Connection Servers
Security Servers USB-Redirection 32111 View Agent VMs
Security Servers RDP 3389 View Agent VMs
Security Servers MMR 9427 View Agent VMs

PRESENTED BY VMWARE
54
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Traffic Flow – Internet-to-View Agent

PRESENTED BY VMWARE
55
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
SLB Deployment Options for View
1. SLB only - Performs L4-7 SLB but
offers no SSL services
2. SLB + SSL End-to-End – Option 1
+ SSL termination (Client) and
SSL initiation (Server)
3. SLB + SSL Termination – Option 1
+ SSL termination (Client) and
HTTP to server

PRESENTED BY VMWARE
56
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Security Server Configuration
View SS in View Administrator Console
4.0 4.5
“External URL” Field for View SS
Security Server Server Name Field External URL Field
View4-sec1 view4-sec1 https://view-ext.cisco.com:443
View4-sec2 view4-sec2 https://view-ext.cisco.com:443
“locked.properties” file in “C:Program Files (x86)VMwareVMware ViewServersslgatewayconf”
clientProtocol=https
clientHost=view-ext.cisco.com
clientPort=443
serverPort=80
serverProtocol=http

PRESENTED BY VMWARE
57
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
View Connection Server Configuration
• L4-7 SLB and SSL mostly the same as with View SS
• View CS with SSL does not use “locked.properties” file for SSL-Offload configuration
• Need “External URL” field defined
External URL: http://view-int-vip.ese.com:443 Example: https://myServer:myPort
• For SSL Offload – don’t require SSL for Client/View connections
Require SSL for No
client connections
and View
Administrator
Persistence and Redirection
• Persistence - VMware View does not support persistence in the form of JSessionID or
similar so the only means of persistence support is sticky
Source IP - Not ideal especially with Internet clients as many may connect via a NAT/
PAT/Proxy and this causes uneven distribution of load based on sticky entry
Cookie with “location.id” – Value sent by View Client = Client MAC address
Cookie: com.vmware.vdi.broker.location.id=00-14-A5-6F-12-F0
• Redirection - Redirect HTTP sessions to HTTPS using redirect policy
http://blah.cisco.com ---- https://blah.cisco.com

PRESENTED BY VMWARE
58
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Validation for View SS – Health Probe (1)
Tiered Checks
Cisco ACE Health Probe – Success for View SS
Wireshark Output – ACE Probes SS – SS checks CS via AJP13

PRESENTED BY VMWARE
59
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Validation for View SS – Health Probe (2)
Tiered Checks
Cisco ACE Health Probe – Success for View SS
CS is Down – Fails Check – Probe Fails

PRESENTED BY VMWARE
60
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Deploying QoS for VMware View
• QoS for View allows for differential treatment of View traffic during times
of congestion
• Without classifying/marking, queuing and policing View traffic it will be placed into
class-default or other lower priority policy
• During times of congestion the QoS policies can protect View traffic from less important
flows or prevent View traffic from impacting more important flows
(i.e. Voice)
• Tunnel mode flows will all look like any other HTTP/HTTPS flow. Classification on source/
destination (i.e. View CS or Agent IP address(s)) can help distinguish flows
• Direct mode is ideal for proper classification

PRESENTED BY VMWARE
61
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
WAN Optimization for VMware View
• Overcome limitations with TCP in WAN environments, remove/reduce redundant
data and provide optimal compression
• Optimization in a View environment for:
- HTTP/HTTPS
- Microsoft RDP
- USB Redirection
- MMR
WAN Optimization Deployment Examples: http://bit.ly/8sC9RY

PRESENTED BY VMWARE
62
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Conclusion
• The combination of VMware View plus a well designed and implemented
end-to-end infrastructure offers improved security, optimal server utilization and
increased availability
• The end result of these combined solutions and a well thought-out design is a more
streamlined user experience and increased productivity
• The critical network elements for a successful VMware View deployment include:
- Hierarchical and scalable network design
- Network and application-focused defense in-depth approach to security
- End-to-end network-based Quality of Service
- Server Load Balancing and resource optimization
- WAN optimization for display and other supporting protocols (RDP, USB redirection, MMR, etc.)
- Network intelligence that is capable of identifying and properly dealing with rich media flows

PRESENTED BY VMWARE
63
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Reference Information
Cisco Validated Design for VMware View 4
http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/vmware/cisco_VMwareView.html
Cisco VDI and VMware View 4.5
http://www.cisco.com/en/US/netsol/ns971/index.html#~virtual
Cisco Virtual eXperience Infrastructure
http://www.cisco.com/en/US/netsol/ns1102/index.html
VMware View
http://www.vmware.com/products/view/
VMware View Documentation
http://www.vmware.com/support/pubs/view_pubs.html

PRESENTED BY VMWARE
64
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Optimizing the Base Image
for VMware View
Todd Dayton, Staff Product Manager, Desktop Product Management, VMware

PRESENTED BY VMWARE
65
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Virtual Desktops Are Similar to Physical Desktops
• Things that would cause poor performance in a physical PC, will cause
problems in a VM

PRESENTED BY VMWARE
66
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Key Areas for Basic OS Tuning
• Keep the amount of installed software down to an absolute minimum
• Understand what each component of your image does and why it’s in there
• Update to the latest (or best) version of the software you are using
• Know when enough tuning is enough

PRESENTED BY VMWARE
67
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Virtual Desktops Are Different than
Physical Desktops
• Some things that don’t cause poor performance on a physical PC, may cause
problems in a VM

PRESENTED BY VMWARE
68
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Key Areas for Basic Virtual Desktop Tuning
• Understand the ramifications of shared resources
• Work to reduce or eliminate “background” processes that run when the user
is not present
• Putting extra effort into getting the master image right means a lot less work patching,
updating, or replacing deployed desktops
• Tune your images for both performance and for user acceptance

PRESENTED BY VMWARE
69
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
3 Areas for Quick, Easy, and
Substantial Improvement
• Storage Reduction
- Hibernation File
- Debug Logs
• Background Performance
- Indexing Services
- Virus Scanning
- Screensavers
• Remote Display Performance
- Disable Wallpaper/Sounds
- PCoIP Tuning Parameters

PRESENTED BY VMWARE
70
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware View Storage Reduction
Disable Hibernation
• The Hibernation feature will generally not be used in a View environment
• The size of the Hibernation file is typically at least 2/3 the size of allocated system
memory, typically close to 1GB or more
• Hibernation files are generally unique and may appear in each linked clone, further
increasing disk use
• Disable Hibernation with “powercfg /hibernate off”
• http://support.microsoft.com/kb/920730

PRESENTED BY VMWARE
71
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Turn Off Debug Logging
• Debug Logging is on by default in the VMware View Agent
• Debug Logs are typically 10MB+ per log and can add up quickly
• The logs appear in the linked clones and increase overall write operations during use

PRESENTED BY VMWARE
72
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Turn Off Debug Logging
• Make the following registry changes:
- HKLMSOFTWAREVMware, Inc.VMware VDM
- DebugEnabled = False
- TraceEnabled = False

PRESENTED BY VMWARE
73
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware View Background Performance
Background Indexing
• Indexing and search tools typically use “idle time” on a desktop to catalog files
• The idea of “idle time” is much different in a VDI environment, as it takes resources away
from other users who aren’t idle
• This indexing can be very disk intensive from a read/write perspective
• When images are recomposed, the indexing may start over, compounding the issue

PRESENTED BY VMWARE
74
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Disable Background Indexing
• Disable the “Windows Search” service to prevent background indexing.
• Don’t install desktop search tools such as Google Desktop in a View image.
• Be careful of toolbars and other add-in software that may contain similar functionality
from various vendors

PRESENTED BY VMWARE
75
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Disable Scheduled Virus Scans
• Pre-scan your master image with your virus scanner before deployment
• Disable “Full Scan” Scheduling
• Your “On-Access Scanner” should catch any changes made after the image is deployed
• Pre-scan before a recompose operation to ensure no malware sneaks into your
master image

PRESENTED BY VMWARE
76
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Stagger Virus Scan Signature Updates
• In a View environment, it’s important to prevent all of your VM’s from updating their
virus signatures at once causing an “update storm”
• Provide a larger randomization window (4+ hours) to ensure that updates are distributed
across a larger time window
• This setting can be pushed from most enterprise Virus Scan management consoles

PRESENTED BY VMWARE
77
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Disable Screensavers
• In a View environment, screensavers should generally be disabled in favor of screen
blanking and/or locking
• Screensavers can be forced to the blank “scrnsave.scr” and users can be blocked from
making changes through GPO
• User Configuration Policies
- Administrative Templates
- Control Panel
- Personalization

PRESENTED BY VMWARE
78
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
VMware View Remote Display Tuning
Remove Wallpaper and Audio
• In a View environment, high resolution,
high color wallpaper can cause spikes as
it’s loaded and uncovered by other windows
• Switching to a solid color background
allows for smoother transitions and
more consistent bandwidth utilization
• Windows sounds consume additional
bandwidth in the protocol stack, and
should be disabled if not needed

PRESENTED BY VMWARE
79
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP GPO Settings Affecting Bandwidth
• You can now make modifications to the PCoIP protocol
• Settings which directly affect bandwidth have been highlighted here
• Maximum Frame Rate is a separate registry setting

PRESENTED BY VMWARE
80
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Details: Ceiling
• The Ceiling caps the amount of bandwidth a single PCOIP session can use. It will not go
above this level, but can reach and sustain the ceiling for as long as necessary
(This may affect display performance for some workloads)

PRESENTED BY VMWARE
81
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Details: Floor
• The Floor sets the lowest bandwidth that PCoIP will tune down to; under network
congestion, it will “fight it out” up to the floor; this is not a minimum — PCOIP still
concedes bandwidth below the floor when not needed

PRESENTED BY VMWARE
82
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Details: Min/Max Initial Image Quality
• Min/Max initial image quality (along with available bandwidth) determines how far from
lossless the first load of the screen will be; higher values mean a better picture but higher
bandwidth and potentially choppier display in constrained environments

PRESENTED BY VMWARE
83
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Details: Framerate
• Framerate determines how many times per second the display will be updated;
higher framerates appear smoother to a point, but require more bandwidth

PRESENTED BY VMWARE
84
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Details: Framerate
• The default framerate for PCOIP sessions is 6fps higher than Citrix HDX;
a good desktop experience can use even lower values.

PRESENTED BY VMWARE
85
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Details: Maximum Frame Rate
• Framerate does not currently have a policy, and must be set manually in the registry
at the following location:

PRESENTED BY VMWARE
86
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Image Tuning – Final Thoughts
• Not meant to be the “last word” on tuning
• Weigh the benefits of tuning against the experience that your users will expect
• There are many resources for detailed tuning through GPO, registry, and file system
culling which can further shrink the footprint
• Tools like nLite can drastically reduce the size of your disk images, but may remove
critical features or cause intermittent issues that are difficult to troubleshoot
Image Tuning – Other Resources
VMware View Optimization Guide for Windows 7
http://www.vmware.com/files/pdf/VMware-View-OptimizationGuideWindows7-EN.pdf
VMware Windows XP Deployment Guide
http://www.vmware.com/files/pdf/resources/vmware-view-xp-deployment-guide.pdf
myvirtualcloud.net: Mastering VDI Templates for Win7 PCOIP
http://myvirtualcloud.net/?p=929
VMware View Resources
http://www.vmware.com/technical-resources/products/view.html

PRESENTED BY VMWARE
87
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Tuning
Chuck Hirstius, Senior Systems Engineer,
PSO Advanced Services WW, VMware

PRESENTED BY VMWARE
88
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Agenda
PCoIP Protocol Background
PCoIP Deployment Best Practices
Tuning PCoIP
Tunable Parameters
Tuning Guidelines
Conclusion/Recap
Further Reading/Additional Resources

PRESENTED BY VMWARE
89
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Protocol Background

PRESENTED BY VMWARE
90
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Protocol
• Designed to address the highest-end workloads
- CAD/CAM
- Video/Multimedia
- Medical Imaging
• Began as a hardware-to-hardware solution
• Encryption inherent to the protocol
• WAN enhancements added in May, 2009
• Implemented as software-to-software solution in View 4.0

PRESENTED BY VMWARE
91
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Host-based Pixel Encoding
• “Pixels only” approach
• Simplifies end-points (and hence, endpoint management)
• Greater compatibility and immediate support for “the next big thing”
• Network optimization
• No impact to application performance – not required to wait for client-side rendering

PRESENTED BY VMWARE
92
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
UDP Transport
• Ideal for real-time protocols
• Less overhead than TCP
• Reliability at the application layer, not the network layer
• Perfect fit for “pixels only” approach
• UDP is the basis for: VoIP, Telepresence, IPTV

PRESENTED BY VMWARE
93
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Special Features
• Build to lossless
- Gradually build static screen areas to pixel-perfect
• Image Decomposition
- Utilize multiple codecs depending on screen content
• Adaptive bandwidth consumption

PRESENTED BY VMWARE
94
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
PCoIP Deployment
Best Practices

PRESENTED BY VMWARE
95
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Best Practices
• PCoIP is a real-time protocol
- Insure proper QoS/CoS classification
- Classify PCoIP traffic as real-time interactive, typically just below VoIP
- Insure that QoS/CoS mappings are preserved across WAN links
• Utilize the PCoIP Security Gateway for remote access
- Most efficient remote access solution
- Allows remote access for zero-clients
• If you must use VPN, avoid SSL-based solutions
- Use IPSEC, L2TP/IPSEC, GRE, DTLS
• Insure that PCoIP is bypassed on all WAN acceleration devices
• Insure that PCoIP is bypassed or trusted on any IDS/IPS devices in the network path
and in endpoint protection software

PRESENTED BY VMWARE
96
Vision and Journey
Considerations and
Best Practices
and Best Practices
Optimizing the Base
PCoIP Tuning
in VMware View 5.0
by Ron Wang, VMware
Leveraging Security
Server for PCoIP
Troubleshooting and
Best Practices
• Prefer fixed bandwidth WAN circuits over “burstable” circuits
- Make sure you understand your use case well and perform accurate measurements to allow for proper
circuit sizing
• If you must use “burstable” circuits
- Insure that the CIR is high enough to cover all existing high-priority traffic and the total average traffic
for all PCoIP sessions
- PCoIP may see high packet loss when it consumes burst bandwidth
- Carriers tag burst packets as “out of contract” and low priority
- May artificially limit the total bandwidth PCoIP “sees” across the circuit
• Utilize WRED for congestion avoidance
- Avoid tail-drop
- Do not configure WRED on the physical interface as it will override all other QoS policies
• Avoid use cases where round-trip latency is greater than 300ms

Presentation v mware desktop virtualization online bootcamp

Presentation v mware desktop virtualization online bootcamp

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (9)

Similar to Presentation v mware desktop virtualization online bootcamp

Similar to Presentation v mware desktop virtualization online bootcamp (20)

More from solarisyourep

More from solarisyourep (20)

Recently uploaded

Recently uploaded (20)

Presentation v mware desktop virtualization online bootcamp