Deploying Virtual Desktop Infrastructure (VDI) and Cisco Virtual experience Infrastructure (VXI)

Transcription

1

2 Deploying Virtual Desktop Infrastructure (VDI) and Cisco Virtual experience Infrastructure (VXI) Jim French, CCIE 4074, CISSP

3 Abstract Many companies are pursuing virtual desktops to enhance data protection, improve disaster recovery, increase agility, enable mobility, support bring your own, migrate to Windows 7, and more. Shortly, hosted virtual desktops are expected to exceed 10% of the current 500 million enterprise desktops. What will companies gain? What will they give up? To start off, we'll cover the application trends and VDI drivers behind the growth and the commonly used solutions and technologies with a review of Cisco Virtual experience Infrastructure (VXI). For enterprise Collaboration, we ll review the implications of deploying hosted virtual applications and desktops on interactive voice/video and corporate communications/streaming. For the enterprise workspace, we'll address thin, hybrid, and thick client strategies for various types of users addressing their general benefits and/or limitations. For Borderless Network, we ll look at the implications of deploying hosted virtual desktop on existing network services like call control, bridging, Quality of Service (QoS), Content Delivery Networks (CDN) streaming, multicast streaming, WAN acceleration, campus switching, printing, etc. We'll cover how to deliver the virtual desktops over the WAN using acceleration with details on the network bandwidth and latency requirements and expectations. For Data Center, we'll review how to plan design data center compute, storage, network, load balancing, and security for large scale hosted applications and desktops. Lastly, we ll put it all together with architectures for large scale highly available hosted virtual desktop deployments. The primary takeaways for attendees will be how to: 1. Scale the data center 2. Secure hosted virtual desktop 3. Preserve the user experience while centralizing client/server applications. 4. Reduce the Total Cost of Ownership (TCO)

4 Housekeeping We value your feedback- don't forget to complete your online session evaluations after each session & the Overall Conference Evaluation which will be available online from Thursday Visit the World of Solutions and Meet the Engineer Visit the Cisco Store to purchase your recommended readings Please switch off your mobile phones After the event don t forget to visit Cisco Live Virtual:

5 Meet the Engineer To make the most of your time at Networkers at Cisco Live 2013, schedule a Face-to-Face Meeting with a top Cisco Engineer. Designed to provide a "big picture" perspective as well as "in-depth" technology discussions, these face-to-face meetings will provide fascinating dialogue and a wealth of valuable insights and ideas. Visit the Meeting Centre reception desk located in the Meeting Centre in World of Solutions

6 Deploying Desktop Virtualization Agenda Overview Software Collaboration Borderless Network Data Center Architectures Strategy

7 Overview

8 Application O/S Desktop Overview Virtual Desktop Models Virtual Desktop Streaming Hosted Virtual Desktop App App Guest App Guest OS Main OS Synchronized Desktop Apps Apps Apps OS Apps OS OS OS Apps OS Apps OS Hypervisor Apps OS Display Data Server Application Streaming Terminal Services or Published Applications App OS OS App OS App Display Data Server OS Client Hosted Computing Presentation Server Server Hosted Computing

9 Overview The Network Is the Desktop Keyboard, Video, Mouse Thin Client Personal Computer is disaggregated Broker Network Keyboard, Video, and Mouse stay with user Compute and storage move to the data center Network availability is required for all application access Network performance is critical to user experience Large OS Many local applications Vulnerable Compute Storage Constant patching Data backup Complex management Software distribution delivery challenges Skilled local support staff required

10 Overview Hosted Application/Desktop Early Adoption Regulated Industries Task Workers Government Healthcare Finance Banking Retail Education Data Protection Disaster Recovery Capabilities Flexibility/Mobility/Ubiquity Faster application time to market Moves, Adds, Changes Real estate BYOD Cost of Ownership Use Cases Call centers Consultants Off shore development Partners/Extranet Windows 7 migrations

11 Overview Moving Through VDI Rather Than To VDI Distributed Client/Server Limited Networks Distributed Creation/Data Distributed Client Centralized Server WAN Acceleration Distributed Creation Centralized Data Distributed Client Efficient Server Pervasive Hypervisor Distributed Creation Centralized Data Centralized Client/Server Display Desktop Virtual Desktop Enterprise Centralized Creation/Data Distributed Cloud Web Desktop Pervasive Network, Flash, Ajax, JS, HTML5 Cloud Distributed Creation Integrated Data If you were to develop a new application today, would it be web or client/server based?

12 Software

13 Software Broker Desktop Entitlement Non-Persistent or Pooled - Generic virtual desktop assigned to users on a per session first come first server basis and then returned to the pool (possibly with profile removed) or destroyed Persistent or Assigned - Permanently assigned to a user statically or by first to connect Personalized Non-persistent Abstracted persona applied to non-persistent desktops Entitle Group to Desktop Desktops Assign Pool Pool of Virtual Machines Users and Groups Entitle User to Desktop Assign Individual Template

14 Software VMware and Citrix Components Function VMware View Citrix XenDesktop Display Protocol Client View Client Citrix Receiver Desktop Agent View Agent contains PCoIP and RDP with Wyse TCX Citrix Virtual Desktop Agent contains ICA and HDX Servers Broker Provisioning Composer / Thinapp Citrix Provisioning Server Broker Routing Connection Server Citrix Desktop Delivery Controller (DDC) Broker Proxy Security Server Citrix Access Gateway Portal View Portal Citrix Web Interface Administration View Administrator Citrix Management Console Personalization RTO Persona Management Ringcube Personal vdisk Hypervisor VSphere ESX XenServer Orchestration Virtual Center XenCenter

15 Software Desktop (OS) Virtualization Remote Connections Directed by Broker Agent Agent Agent Agent Agent Agent Agent Agent VM Guest #1 VMTools SCSI VM Guest #2 VMTools VM Guest #3 VMTools Virtual Machine (VM) Small Computer System Interface (SCSI) Storage Area Network (SAN) Virtual Machine File System (VMFS) VMware ESX Host VMKernel (ESXi Console) Fibre Channel SCSI, iscsi, FC SAN VMFS Block Data Store VM Guest #4 VMTools iscsi VM Guest #5 VMTools Cisco Nexus 1000v or Distributed Virtual Switch VMKernel VM Guest #6 VMTools Fibre Channel (FC) Network File System (NFS) Network Attached Storage (NAS) Virtual Center (VC) ESX Service Console 16 NFS NAS File VM Guest #7 VMTools VM Network LAN VM Guest #N VMTools Service Console VC Mgmt IP Data Networks

16 Software Display Protocol Server Components (Agent) VMware Tools Broker Agent Multimedia Redirector (Windows Media and Flash) Rich Sound Server (Analog Mic/Skr) USB Virtualization Server

17 Software Thick Desktop Display Protocol Clients Thick client devices refer to standard PC or Laptops running a standard OS but have similar software as the thin client installed as an application Thick client devices allow users to work offline and are often the choice of the Road Warrior user

18 Software Example Direct Mode Broker Exchange <broker version="3.0"> <broker version="3.0 > <?xml version="1.0"?> <configuration> <id>cn=dc1-p,ou=applications,dc=vdi,dc=vmware,dc=int</id> <broker version="3.0"> <result>ok</result> <name>dc1-p</name> <desktop-connection> <offlinessodisabled>false</offlinessodisabled> <type>sticky-lc</type> <result>ok</result> <broker-guid>c4b2711c-55aa-4b2a-9e5a-31f61e7ee566</broker-guid> <state>disconnected</state> <id>cn=dc1-p,ou=applications,dc=vdi,dc=vmware,dc=int</id> <authentication> <port>3389</port> <address> </address> <screen> <name>disclaimer</name> n=xxxx,ou=servers,dc=vdi,dc=vmware,dc=int:rdp:3389</session-id> <additional-listeners> <params> <reset-allowed>true</reset-allowed> <additional-listener name="mmr"> :9427</additional-listener> <param> <reset-allowed-on-session>true</reset-allowed-on-session> </additional-listeners> <name>text</name> <user-preferences> <protocol>rdp</protocol> <values><value>welcome <preference <user-name>jifrench</user-name> name="height">0</preference> to the Cisco Iselin NJ VDI Lab</value></values> </param> <preference <password>yzzmngflmtmt</password> name="width">0</preference> </params> <preference <domain-name>company</domain-name> name="useforthinclient">false</preference> </screen> <preference <enable-usb>true</enable-usb> name="alwaysconnect">false</preference> </authentication> <preference <enable-mmr>true</enable-mmr> name="screensize">windowed</preference> C1 </user-preferences> WAVE </desktop-connection> WAN WAE ACE </broker> </broker> Broker UCS NAS HTTP/HTTPS Request To Broker Welcome Response and Challenge VMFS via DAS, FC, NFS, iscsi Capabilities Exchange User Data CIFS Direct Connect RDP/PCoIP 20

19 Software Application Virtualization (Terminal Services) Remote Connections Directed by Broker Virtual App Instance #1 Virtual App Instance #2 Virtual App Instance #3 Virtual App Instance #4 Virtual App Instance #5 Virtual App Instance #6 Virtual App Instance #7 Virtual App Instance #8 Virtual App Instance #N SCSI SCSI, iscsi, FC SAN VMFS Block Data Store No device or kernel drivers No Windows services Fibre Channel No Windows class names or window name Installers cannot require a restart during install Host Operating System iscsi CIFS/NFS NAS File LAN Interface(s) Application Data IP Data Networks Support shared IP addresses No Inter-Process Communications No Distributed Component Object Model (DCOM) Registry/App Objects must link to USER32.DLL 21

20 Software Hosted Desktop with Streamed Virtual Application Display Connection #1 Display Connection #N Empty Windows Virtual Desktop #1 Agent Empty Windows Virtual Desktop #N Agent Windows OS VMTools Cisco UCS with Hypervisor Windows OS VMTools Desktop Application Streaming Server Profile Data Profile decoupled from desktop OS using tools like AppSense Desktop provisioned with minimal or fixed set of applications installed Applications reside on File (VMware) or Streaming Server (Citrix) Administrator manages one master copy of an application that is streamed at run time 22

21 Software MultiUser Hosted Shared Desktop (HSD) Desktop Challenge Windowing Display Desktop Broker Security (AAA) Monitoring Publishing Routing Data Center Storage Display Windows 2008 R2 Desktop Experience Co-Located Storage

22 Software Published Desktop Desktop Challenge Windowing Display Desktop Broker Security (AAA) Monitoring Publishing Routing Display Data Center Storage Display Display Display Display Display Terminal Services XenApp Hosted Applications Co-Located Storage

23 Software Presentation Desktop Presentation Publishing Access Hosting Data SIP/Web Interactive Voice/Video Display Display Display Hosted Client/Server Applications And Desktops Display Web Desktop Challenge Windowing Broker Security (AAA) Monitoring Publishing Routing Web HTML5 Web SAAS

24 Software Web, Collaboration, & Application Publishing

25 Virtual Experience Infrastructure (VXI) Cisco Validated Designs (CVD) Cisco Products Virtualized Data Center Borderless Network Collaborative Workspace Cisco Collaboration Apps Contact Center UC Mgr Client Apps SaaS Web Desktop OS DESKTOP VIRTUALIZATION Identity Services Engine AnyConnect Adaptive Security Appliance Cisco Jabber HYPERVISOR vasa vwaas WAAS Any Device Virtual Desktop End-points Nexus 1000v Routing (ISR) Unified Fabric Unified Computing System Network Services Wireless Wired STORAGE Unified Access Validated Designs, Services, Training and Support

26 Collaboration

27 Browser Client Display Client Telephony Client Collaboration Forms of Hosted Applications Communications Peer to peer Real time experience Call Admission Control Client/Server Client to server Mix of real time and bulk transfer Allow all Web/Streaming/SAA S Client to server Network tolerant Mostly bulk transfer VXC 6215 Call Control/Proxy Connection Broker/Proxy Quad/DMS Web/SAAS Ironport PX PY Google.com Media Services Presentation Server Virtual Desktop Salesforce.com Webex.com Azure.com Zoho.com Poor Experience Poor Experience

28 Collaboration History of Network Services Unified Communications Virtual Experience Client (VXC) Zero Client Cisco IP Hard Phone Branch Call Control, Voice Gateway, and Voice Mail Borderless Network Wireless Wide Area Application Services (WAAS) for better performance and user density WAN / PSTN Content Delivery System (CDS) for streaming video caching, splitting, and branch multicast WAAS WAAS Data Center Si Si Unified Compute System (UCS) Centralized Call Control with Cisco Unified Communication Manager (CUCM) on UCS Digital Media System (DMS) Partners Broker Storage Broker UCS CUCM Storage Si Stream Server Encoder Si Stream Server Storage CUCM Broker UCS

29 Collaboration Desktop Video Call Before VDI (BV) Unified Communications Cisco Unified Personal Communicator (CUPC) or any softphone Branch call control, voice gateway, and voice mail Media is peer to peer within sites or across MPLS sites Borderless Network WAN / PSTN QoS provides low latency queueing Si Si Call Admission Control (CAC) Business applications protected Data Center Si Si Centralized Call Control with Cisco Unified Communication Manager (CUCM) on UCS CUCM CUCM

30 Collaboration Virtual Desktop Video Call After VDI (AV) Unified Communications Centralized call control Broken call admission control High client CPU Poor video Out of Sync Audio WAN / PSTN Borderless Network Best effort queue Bandwidth up to 150 Mbps Si Si Media hair-pinned through data center Data Center Broker Si Si Broker Server farm network loaded High server CPU UCS Storage Storage UCS CUCM CUCM

31 Collaboration Live Streaming Video Before VDI (BV) Unified Communications PC has local browser with media player Borderless Network CDS and/or multicast split video in a display protocol resulting in one stream per user on the WAN Bandwidth/experience is native 100/300/700 kbps QoS protects business applications and other traffic Data Center Encoder sources a single stream to CDS which unicasts or multicasts to scale CDE Si Si Stream Server WAN / PSTN Encoder CDE Si Si Stream Server

32 Collaboration Live Streaming Video After VDI (AV) Unified Communications Zero/thin client with display protocol client only needs capacity to decode Borderless Network CDS and multicast cannot split video in a display protocol resulting in one stream per user on the WAN CDE CDE Bandwidth/experience varies depending on display protocol & streaming format WAN / PSTN No QoS so entire experience suffers if congestion Data Center Si Si Stream sourced from encoder Servers are loaded by transcoding and/or transrating Server farm is loaded by all streams Broker UCS Si Stream Server Si Stream Server Broker UCS Storage Storage Encoder

33 Collaboration Interactive Media Solution Leverages the existing network services for voice, video, data Automatically prioritizes voice and video traffic through existing network-based QoS with Cisco MediaNet Integration Optimizes network and server resources: bandwidth reduction from megabytes to kilobytes Supported by leading desktop virtualization partners, Citrix and VMware Data Center User Desktop Cisco UC Manager Desktop Virtualization Protocol Cisco VXME Media Flow Across All Devices Signaling

34 Collaboration Software Strategy for Virtual Environments Virtualization Experience Media Engine (VXME) Software that enables Jabber to run in virtualized environments Thin client and Windows PC Cisco Virtualization Experience Client (VXC) 6215 Windows-based 3rd party thin clients and PCs Enable the Jabber experience running on virtual desktop as available today on your PC Presence & IM High definition video & wideband audio Conferencing VXME for Cisco VXC 6215: March 2013 VXME for Dell Wyse Z50D: H VXME for Windows PCs: H VXME for Windows Thin Clients: H1 2013

35 Hardware OEM Operating System Platform Applications Collaboration VXC 6215 or Windows Based Software Stack Virtual Experience Media Engine (VXME) Display Web/HTML5 HVD Broker UI (Video Render/SRST/EM) OAM&P/ Serviceability CSF2G Enhanced Call Control SIPPC, CC API, Media Engine Accessories Manager Citrix Receiver RDP Client HVD Agent (Virtual channel Interface) VmWare View Browser A/V Device Manager AnyConnect VPN EnergyWise Client MediaNet Client Framework Blue Tooth* DECT USB CDP LLDP IPv4 IPv6 VXC 6215 Hardware GT56N Dual Core 1.6GHz Dual Display

36 Collaboration Any Device with Cisco Jabber Desktop Mobile Thin Clients Presence & IM Voice Video Conferencing Messaging

37 Collaboration What Do End Users Need? Call Center or Clerical Professional Design Professional Administrative Rich Media Graphics or Custom Remote/Task Worker Knowledge Worker Power User Thin Clients Capable Clients

38 Collaboration Client Strategy Depends On Hosted Applications User Hardware OS Software Execution Storage Security Life (Yrs) Zero Task Chip Firmware None All remote None Low risk 7-10 Thin Task/Knowled ge Hybrid Knowledge Capable (possible media offload) Limited Hardened Display All remote None Low risk 5-7 Hardened General (Linux or Windows Embedded) Display Rich Media Web Client/Server remote Rich media local Transient Encrypted Medium risk 5-7 Thick Knowledge or Power High End Open General (Windows, Linux, Mac) Unlimited Mostly local Some remote Persistent High risk Status-quo - Use whatever desktop/notebook/etc you already have 2. Recycle PC - Convert old PC hardware to a homebrew thin-client 3. New PC - buy new desktop/notebook hardware with HVD and application virtualization rollout 4. New thin/zero clients 40

39 Collaboration UC Accessories Exclusively Designed with Cisco Logitech UC Keyboard K725-C with Logitech Mouse M525-C Logitech Webcam C920-C Jabra Handset 450 for Cisco Jabra Speak 450 for Cisco Available March 2013

40 Collaboration VXC Feature Comparison Form Factor VXC 2100 Series VXC 2200 Series VXME VXC 6215 Backpack Integrated Tower Standalone Software Tower Standalone Platform Zero Client Zero Client Win7, Win7 Embedded Linux Thin Client HVD Protocol Support UC Protocol Support (add on) 2111 PCoIP 2112 HDX,RDP 2211 PCoIP 2212 HDX,RDP Citrix XenDekstop, VMware View N/A N/A Software HDX, RDP, PCoIP HDX, RDP PCoIP (Q1CY13) UC Client Support* CUPC, Connect CUPC, Connect CUPC, CUCILync CUPC, CUCILync Voice IP Phone 8961, 9951, 9971 N/A, can be used with IP Phone Yes Yes Video IP Phone 9971, 9951 N/A, can be used with IP Video Phone No Yes Monitor Support Single or Dual, 1920x1200 Single or Dual, 1920x1200 Varies based on underlying HW Single:2560x1600 Dual:1920x1200 PoE PoE PoE N/A No Encoding & Decoding Via IP Phone Via IP Phone Audio only. Video on the roadmap. Standard Video HD Capable*

41 Collaboration VXC Manager OR Wyse Device Manager (WDM) Centralized device and software management VXCM is automatically discovered through DNS and DHCP options Distributions may leverage WAAS or CDS in lieu of a local repository High availability policy and software delivery but not config changes

42 Collaboration Traditional Network Services Work For All Clients Unified Communications Softphone in VXI runs native locally Supports Survivable Remote Site Telephony (SRST) supported Use local services (gateways, call control, vmail, etc.) No voice hairpinning Borderless Network Use local internet access Use CDS/ACNS/WAAS to cache, split, and/or multicast streaming media Provide QoS for rich media Data Center Offload server CPU Offload server bandwidth WAAS Broker UCS Storage CDE Si Si Stream Server CDE Network Si Si Stream Server Storage WAAS Broker UCS CUCM Encoder CUCM

43 Borderless Network

44 Borderless Network Universal Power Over Ethernet (upoe) 60 Watts Global Common Power Cable Country Specific Wall Plugs with UPS OPEX High efficiency bulk power supplies are more efficient than power cubes Power regulation using EnergyWise Increase business productivity through reduced downtime Catalyst 4500 CAPEX Lower cost devices without power bricks Building construction savings Minimal power routing Lower maintenance for power cables

45 Borderless Network Decoding the VDI Protocol Stack Application VMware View Microsoft RDS Citrix XenDesktop Underlying Protocols PCoIP 4172 UDP RDP 3389 TCP ICA/HDX 2598/1494 Deployment Considerations Client-side hardware often used for optimal experience Server side hardware available MMR with Win7 desktops not supported TCP 4172 used for control AES-256 bit encrypted No Client-side hardware dependency Remote FX requires H/W assist (server GPU) Standards-based encryption model SSL encrypted No client-side or server-side hardware dependency Announced hardware specification for 3 rd parties Standards-based as well as proprietary encryption models RC5 or SSL encrypted

46 Borderless Network Display Protocol Considerations Checklist Network Transport TCP, UDP, RTP Behavior - bandwidth, congestion, latency, drop Channels Inband Out of band Acceleration Encryption Compression USB Headset Print Drive Security Voice USB headset Analog microphone/speaker Graphics/Video Quality Lossy or lossless Streaming - Windows Media, Adobe Flash, QuickTime, or SilverLight Telephony Jabber, Skype, Lync, Google, etc. Print Print server Printer location User mobility

47 Borderless Network Display Protocol Summary Protocol Vendor Transport Bandwidth without WAAS (Approx) Remote Desktop Protocol (RDP) Independent Computing Architecture (ICA) Microsoft TCP Kbps 96 Kbps Citrix TCP 2598 CGP TCP 1494 ICA 120 Kbps 60 Kbps Bandwidth with WAAS (Approx) PC over IP (PCoIP) Teradici / VMware Media UDP 50002/4172 Control TCP 50002/ Kbps 192 Kbps

48 Borderless Network Display Protocol Channels Display protocols operate at the session layer Display protocols were intended to remote applications and not desktops Desktop interactions require that some local client services be extended to the remote virtual desktop Channels provide a means to extend remote virtual desktop services Channels cannot leverage network services like QoS, security, media bridging, stream splitting, or multicast Display Protocol TCP USB Video Sound Print

49 Borderless Network Fundamental Problems with In-Band Channels Mixing interactive and bulk transfer traffic types in a single TCP connection Local Desktop Client copies file from local USB with packets #1 and #2 Client clicks with packet #3 Display Client If network could provide better service to packet #3, it would reach host before #1 and #2 Destination host TCP stack will wait for the rest of the TCP window to send to the application Display Server Remote Virtual Desktop Display Client Display Agents Tools

50 Borderless Network Wyse/VMware TCX (like Multistream ICA) Out of band media Rich Sound on UDP 6901 USB Redirection on TCP Multimedia Redirection on TCP 9427 URL Redirection Content Source accessed by Thin Client Complete network and CPU Offload on the Server Great for Multicast and URLs Very limited use cases are currently supported MultiMedia Redirection Rendering Redirection (Transcoding) Content opened and decoded by the Server Client renders multimedia Universal codec support (codec not required on the Thin Client) Least efficient for the Server (e.g. ~5x Bandwidth needed) Decoding Redirection (Bypass) Content opened by Server Client Decodes and Renders Multimedia Significant network and CPU Offload on the Server Requires Codec Support on the Client Local Desktop Decoder Display Client A Display Protocol TCP 3389 USB Redirection TCP Rich Sound UDP 6901 Multimedia TCP 9427 B Remote Virtual Desktop Display Agent Tools

51 Borderless Network WAN Acceleration Increases User Density 2 7x Data Redundancy Elimination (DRE) eliminates redundancy within or between flows LZ compression eliminates redundancy within flows TCP Flow Optimization (TFO) fills the pipe over high latency links Transport Data De-duplication No byte pattern crosses the network twice Unidirectional DRE for display protocols and video streaming Origin Connection Origin Connection WAN Optimized Connection DRE CACHE DRE CACHE LZ LZ Decode Window Scaling Large Initial Windows Congestion Mgmt Improved Retransmit Encode

52 Feature Function Impact to WAAS 4.5 Common Gateway Protocol (CGP) Session reliability Inserts varying data to each packet that pollutes the DRE cache and negatively affects server side flow control. Citrix Receiver client cache Receiver caches a substantial history Minimizes WAAS DRE to near 0 in a single user environment. Test in a multiuser environment. No MMR Borderless Network WAAS Citrix XenDesktop Feature Expectations Flash request made my hosted virtual desktop (HVD), media rendered in the HVD, and sent through ICA as bitmaps Increases bandwidth AND minimizes WAAS reduction to about 30% Flash MMR server side fetch Flash MMR client side fetch URL redirect Intelligent USB redirect Flash request made by hosted virtual desktop, media passes in ICA channel, and stream is decoded on the client URL is redirected to the client which then directly makes the video request bypassing the hosted virtual desktop Apply intelligent compressions on USB extension based on the device type >95% DRE hit between successive on demand video views but stream still be delivered through the desktop server farm. >95% DRE hit between successive on demand video views and stream does not pass through the hosted desktop WAAS not effective for real time media over USB but is effective for data transfer over USB

53 Borderless Network WAAS Citrix XenDesktop Situation Expectations Variable Implication Impact to WAAS 4.5 Print USB attached printer Print local print server Print hosted print server Print direct print from hosted desktop to branch printer 3 rd party print redirection USB redirection used to delivery print job CIFS/MSRPC accelerated from hosted desktop to branch print server PS/PCL file delivery from data center to branch printer CIFS/MSRPC accelerated from hosted desktop to branch printer >80% BW reduction and latency mitigation >80% BW reduction and latency mitigation >80% BW reduction and latency mitigation >80% BW reduction and latency mitigation Powerpoint presentation mode Bitmap graphics ~30% overall but WAAS DRE is zero

54 Borderless Network WAAS Citrix XenDesktop Experience Expectations Variable Implication Impact to WAAS 4.5 TCP flow control Client/Server operating system dependent Recent release client/server operating systems support more aggressive TCP stacks resulting in limited WAAS TFO latency benefits. High latency with recent OS Compression reduces data amount Interactivity improved by passing less data

55 Seconds (s) Kbps Borderless Network WAAS Performance Results for ICA and RDP Latency Reduction Native With WAAS Bandwidth Reduction Native With WAAS % faster 60% faster % Improvement 70% Improvement ICA RDP 0 ICA RDP Measuring response time improvements for internet browsing with IE

56 Borderless Network WAAS Reduces MMR Bandwidth up to 99% Rich Media Streaming w/ MMR (Direct Connect) BW Optimization for VIEW MMR Traffic Overall BW Consump.: 1.75 MB (After WAAS Optimization) Overall BW Consump.: 20 MB 0:50 0:53 0:56 0:59 1:02 1:05 1:08 1:11 1:14 1:17 1:20 1:23 1:26 1:29 1:32 Original (MB) Optimized (MB) Ratio = 20 MB: 1.75 MB BW Capacity = 11x PCoIP Session RDP Session S o l u t i o n s S e t u p 2 Concurrent View Clients Display Protocol: RDP and PCoIP View Deployment Mode: Direct Connection BW/Latency: T1/80 ms Play Time: 5-6 Minutes of Repeat Tracks Audio: Format: MP3 Bitrate/Size: 192 Kbps/8.3 MB Video: Format: WMV v.9 Bitrate: 1527 Kbps and 1772 Kbps Size: 18.8 MB and 62.4 MB WAAS Applied Policies: TFO, DRE, LZ WAAS Classification Map: - MMR TCP Port USB TCP Port Overall Compression: 79.8%

57 C1 Borderless Network Virtual Desktop Print Options 1. USB attached printer via display protocol USB extension 2. Centralized print server 3. Branch print server (physical machine or Windows on WAAS) 4. Direct print C2 P1 WAVE WoW WAN WAE UCS NAS Print Server 1 RDP with USB Extension Channel 2 RDP PS/PCL Files CIFS/MSRPC 3 PS/PCL RDP CIFS/MSRPC 4 CIFS/MSRPC Origin Connection Optimized Connection Origin Connection

58 Borderless Network Quality of Service in a Cisco VXI Network Protocol TCP/UDP Port DSCP /CoS Value Desktop Virtualization Protocols RDP7 TCP 3389 DSCP af21/cos 2 PCoIP* TCP & UDP TCP DSCP af21/cos 2 DSCP & UDP 4172 af21/cos 2 ICA/HDX Session Session Reliability Web Services TCP 1494 TCP 2598 TCP 80 DSCP af21/cos 2 DSCP af21/cos 2 DSCP af21/cos 2 USB Redirection (PCoIP) TCP DSCP af11/cos 1 MMR TCP 9427 DSCP af31/cos 4 Other Protocols found within Cisco VXI Network-based Printing (CIFS) TCP 445 DSCP af11/cos 1 UC Signaling (SCCP) TCP 2000 DSCP cs3/cos 3 UC Signaling (SIP) UC Signaling (CTI) TCP 5060 TCP 2748 DSCP cs3 /CoS 3 DSCP cs3/cos 3 UC Media (RTP, srtp) UDP DSCP ef/cos 5 Display protocols obscure multiple traffic types in a single TCP connection

59 Borderless Network Quality of Service in a Cisco VXI Network Ports Used During Classification for QoS ip access-list RDP permit tcp any eq 3389 any ip access-list PCoIP-UDP permit udp any eq any ip access-list PCoIP-TCP permit tcp any eq any ip access-list PCoIP-UDP-new permit udp any eq 4172 any ip access-list PCoIP-TCP-new permit tcp any eq 4172 any ip access-list ICA permit tcp any eq 1494 any! ip access-list View-USB permit tcp any eq any ip access-list MMR permit tcp any eq 9427 any! ip access-list NetworkPrinter permit ip any host permit ip any host ! ip access-list CUPCDesktopControl permit tcp any host eq 2748 permit tcp any host eq 2748 Cisco's Nexus 1000v deployed with its ability to safeguard against DHCP snooping, dynamic ARP inspection and IP source guard In testing done, the markings were done on the Nexus 1000v whenever possible

60 Borderless Network Quality of Service in a Cisco VXI Network These example provides a guideline for deploying QoS in a Cisco VXI Network Class-maps class-map type qos match-any CALL-SIGNALING match access-group name CUPCDesktopControl class-map type qos match-any MMR-STREAMING match access-group name MMR class-map type qos match-any TRANS-DATA match access-group name RDP match access-group name PCoIP-UDP match access-group name PCoIP-TCP match access-group name PCoIP-UDP-new match access-group name PCoIP-TCP-new class-map type qos match-any BULK-DATA match access-group name View-USB match access-group name NetworkPrinter Policy-map policy-map type qos pmap-hvdport class CALL-SIGNALING set cos 3 set dscp cs3! dscp = 24 class MMR-STREAMING set cos 4 set dscp af31! dscp = 26 class TRANS-DATA set cos 2 set dscp af21! dscp = 18 class BULK-DATA set cos 1 set dscp af11! dscp = 10

61 Borderless Network Quality of Service Validation with MMR Viewing QoS Policy Statistics DC-WAN#show policy-map interface GigabitEthernet0/0 Service-policy input: HQ-LAN-EDGE-IN Class-map: MMR-STREAMING (match-any) 3532 packets, bytes 30 second offered rate 9000 bps, drop rate 0 Match: dscp af31 (26) af32 (28) af33 (30) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name MMR 3532 packets, bytes 30 second rate 9000 bps QoS Set dscp af31 Packets marked 3532 Serial0/0/0:0 Service-policy output: WAN-EDGE Class-map: MMR-STREAMING (match-any) 5456 packets, bytes 30 second offered rate bps, drop Match: dscp af31 (26) af32 (28) af33 (30) 5456 packets, bytes 30 second rate bps Match: access-group name MMR 0 packets, 0 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 5456/ bandwidth 5% (76 kbps) Exp-weight-constant: 9 (1/512) Mean queue Cisco depth: Public 25 packets

62 Borderless Network DMZ Deployments AnyConnect aggregates enterprise display, telephony, and web DMZ secured with a firewall (ASA) SLB balances and offloads display protocol proxy/gateway SLB provides backend broker availability and scale Identity Services Engine (ISE) provides user/group policy enforcement Client Network ASA SLB Proxy ASA SLB Broker UCS ISE ISE AnyConnect Tunnel Display Protocol over HTTPS Display Protocol

63 Borderless Network Bring Your Own Device (BYOD) Use Case Requirements Design Requirements Telephony Client/Server Local Apps/Data VDI VPN MDM Yes Yes Yes Yes Yes Yes Yes Yes No Yes No No Yes No Yes No Yes Yes No Yes Yes Yes Yes Yes No No Yes No Yes Yes No Yes No Yes No No BYOD or Not Who cares who bought it? Company buys Employee buys Gift if you re lucky VDI or Not Offers access to legacy hosted client/server apps Allow display only access to client/server with no local data VPN generally not required Mobile Device Management (MDM) or Not Often coupled with local device apps/data and VPN VPN or Not Often used with local device apps/data beyond mobile mail and display client Cisco Communications or Not Local communications software commonly using VPN (future embedded VPN) 67

64 Borderless Network VDI Firewalls Non-Persistent desktops No direct network to network VPN Reduce data leakage risk Control access of consultants, contractors, developers, extranets connections, BYOD users, etc. ASA provides access gateway ISE provides user based access controls ISE may also provide access client user identity, location, and device access controls Apps OS Apps OS Internet Guest Net Intranet Identity Services Engine Apps OS Secure Hypervisor App OS App ASA Firewall / Access Gateway Display data only Extranet ISE

65 Data Center Compute

66 Data Center Considerations Compute Scale Cost Performance Power/Cooling Space Cabling Storage Scale Scale capacity (Linked and Flex Clones) Scale IOPS Client Network Services Security Monitoring IP address management

67 Data Center Statelessness For Automation & Efficiency Application virtualization decouples application from OS (i.e. ThinApp, AppV, Provisioning Server, etc.) Hypervisor decouples OS from compute hardware UCS Service Profile decouple server from BIOS Nexus Port Profile decouples cabling from server APP AppVirt APP APP AppVirt AppVirt OS OS Hypervisor Server BIOS (UCS Service Profile) Port Profile APP AppVirt Network (LAN/SAN)

68 Compute UCS Blade Servers B22 M3 B200 M3 B230 M2 B420 M3 B440 M2 Slots CPU E E E E E Cores DIMMs Max GB 384GB (with 32GB DIMMs) 768GB (with 32GB, coming soon) 512GB 1.5TB 1TB Disk 2 x x SSD 4 x x 2.5 Raid 0/1 0/1 0/1 0/1/5/6 0/1/5/6 Integrated I/O Dual 10Gb Dual 20Gb No Dual 20Gb No Mezz

69 Compute UCS Virtual Desktop Densities Blade14 Server CPU Server Memory Desktop Configuration Per Blade Per Chassis Per Domain 20 Chassis B200-M1 Xeon GHz 48 GB WinXP 512 MB 128 1,024 20,480 B200-M1 Xeon GHz 96 GB WinXP 512 MB 160 1,280 25,600 B200-M1 Xeon GHz 192 GB WinXP 1024 MB 150 1,200 24,000 B250-M1 Xeon GHz 384 GB WinXP 1024 MB 332 1,328 26,560 B250-M2 Xeon GHz 192 GB Win GB ,800 B230-M2 Xeon GHz 512 GB Win GB 175 1,400 28,000 B200-M3 Dual E / 8 Core CPU 384 GB Win GB 184 HVD 225 HSD 1,472 29,440

70 Compute CPU Considerations for Virtual Machine CPU class CPU class is affected by number of cores, CPU clock speed, amount of cache memory and CPU virtualization technology CPU core count CPU core count affects virtual machine scalability and performance CPU over commitment CPU over commitment occurs when the number of virtual CPUs assigned to the virtual machines exceeds the number of physical CPUs available to the host Virtual machine role priority Virtual machine role priority determines how CPU resources are distributed across virtual machines

71 Compute Example CPU Capacity Planning Win XP % Processor Time average 5% on 2 GHz core Requires 100 MHz per desktop (0.05 * 2 GHz) 10 desktops require 10 GHz processing (100 * 100 MHz) Add 10% to 25% overhead for virtualization, display protocol, and buffer for spike 100 desktops achieved with 12.5 Ghz via 4 cores at >=3.125 GHz per core Planning Windows XP MHz Windows MHz

72 Compute Example CPU Capacity Planning Win XP % Processor Time average 5% on 2 GHz core Requires 100 MHz per desktop (0.05 * 2 GHz) 100 desktops require 10 GHz processing (100 * 100 MHz) Add 10% to 25% overhead for virtualization, display protocol, and buffer for spike 100 desktops achieved with 12.5 Ghz via 4 cores at >=3.125 GHz per core Planning Windows XP MHz Windows MHz

73 Compute Example Memory Capacity Planning Vmware ESX Transparent Page Sharing to share master copy of memory pages among virtual machines Windows XP - 4 KB page sharing Windows 7-1 MB page sharing Planning Without Memory Oversubscription Windows XP MB Windows 7-32 bit GB Windows 7-64 bit GB

74 Compute Forms of Hosted Desktops Characteristic Hosted Virtual Hosted Shared Published CPU Use High Medium Low Low Memory Use High Medium Low Low Storage IOPS High Medium Low Low Personalization High Medium Low Low Cost High Medium Low Low Web Hosted Virtual Desktop (HVD) One user per VM Hosted Shared Desktop (HSD) Many users per VM Published Desktop One application per VM Web Desktop Many clouds per user 79

75 Compute C240 M3 Graphic Processing Unit (GPU) Support NVIDIA GVX K1 4x Entry Level Kepler GPUs 768 NVIDIA CUDA cores 130W 6pin aux power connector NVIDIA GVX K2 2x High-end Kepler GPUs 3072 NVIDIA CUDA cores 225W 8pin aux power connector C240 M3 Slot Support Slot 2 Slot 5 OS Support XenServer 6.0.2, 6.1 WinServer 2012 ESX 5.1 / VMWare View 5.2 (Q1 2013) Hypervisor Support Citrix Pass Through Windows Shared VMware Pass Through and Shared

76 Compute GPU Dedicated and Shared Hypervisor Virtual Machine Apps Guest OS Virtual Remote Machine Protocol NVIDIA Guest OS Driver Remote Apps Protocol NVIDIA Driver Hypervisor NVIDIA Driver Translation Execution Readback Virtual Machine Virtual Guest OS Machine Remote Apps Guest Virtual Protocol OS Machine Guest Remote API Capture Apps Driver OS Protocol (DX9) Remote API Capture Apps Driver (DX9) Protocol API Capture Driver (DX9) NVIDIA GPU Dedicated GPU per User Designer User Hypervisors NVIDIA GPU Citrix XenServer 6 Parallels Workstation 6 Vmware ESX Planned Shared GPU Knowledge User Hypervisors Microsoft Server 2008 Hyper-V with RemoteFX Vmware ESX with View Planned NVIDIA GPU

77 Compute Full NVIDIA VGX GPU Shared GPU Designer, Power or Knowledge User Hypervisors XenDesktop 5.x XenDesktop 6.x Microsoft TBD Vmware TBD Hypervisor Virtual GPU Manager Resource Manager State GPU MMU Hypervisor Device Emulation Framework NVIDIA GPU Virtual Machine Apps Virtual Guest OS Machine Remote Protocol Guest Virtual OS Machine Guest Remote NVIDIA Apps USM OS Protocol Remote NVIDIA Apps USM Protocol NVIDIA USM Graphics Commands Per-VM Dedicated Per-VM Channels Dedicated Per-VM Channels Dedicated Channels Remote Display

78 Data Center Storage

79 Storage Overview Type Virtual machine User data Profile Virtual applications Storage Storage Area Network (SAN) Network Attached Storage (NAS) Direct Attached Storage (DAS) File System NT File System (NTFS) File Allocation Table (FAT) Extended File System (ext3) Virtual Machine File System (VMFS) Raw Device Mapping (RDM) File Access Common Internet File System (CIFS) / Server Message Block (SMB) Network File System (NFS) Block Transport Small Computer System Interface (SCSI) Internet SCSI (iscsi) Fibre Channel (FC) FC over Ethernet (FCoE) SCSI over FC over IP (FCIP) Data Deduplication NetApp File Level Flex Clone VMware Linked Clone Atlantis Computing ilio Citrix Intellicache Cisco WAAS Transport

80 Storage Master, Replica, and Clone Full clone wastes storage and is slow to clone Replica is a full clone created from the gold master Master VM can be updated or replaced without affecting the replica The replica is a protected entity within Virtual Center Linked clones bloats over time Expect about a 50% savings depending on desktop type/use Operations Refresh Clean desktop, Pristine image Recompose Migrate existing desktops from one version to the other Re-Balance Re-locate desktops to enable efficient usage of the storage available (add more storage or retire existing array)

81 Storage NFS Linked Clone Storage Consumption Replica is a full clone Linked clone consumes <10% Linked clone bloats over time Expect about a 50% savings depending on desktop type/use

82 Storage Example Desktop Storage Planning IOPS are ~ 5 per second Capacity equals base OS/App/Data size (10 GB) plus suspend/resume (512 MB RAM), page files (100 MB), etc. ~ 11.1 GB For 100 desktops IOPS = 5 * 100 VMs = 500 IOPS Throughput = 500 * 4096 Bps = 2048 KBps Storage = 11.1 GB * 1.15 = TB (no storage reduction) Common 15K RPM drive provides 200 IOPS so 2.5 spindles are needed 4096 Bytes per IOP <1 Mbps average Planning Windows XP 5-10 IOPS Windows IOPS

83 Storage Acceleration Agent Agent Agent Agent VM Guest #1 VMTools Atlantis Computing ILIO Read/Write acceleration (RAM option) Citrix Intellicache Accelerated read with local write VMware Storage Accelerator (VSA) Accelerated read VM Guest #2 VMTools VM Guest #3 VMTools Hypervisor VM Guest #N VMTools Cache Optimizations Forms of optimization (~90%) Caching Deduplication Compression Coalescing Content-Awareness Shared Storage 89

84 Storage Planning Storage Requirements Total number of desktops Type of desktops (persistent, nonpersistent) Size per desktop OS for desktop Worker workload profile Storage growth horizon Disaster recovery, backup, and data protection requirements Size of NAS (CIFS) home directories Roaming profiles Transport De-duplication Transport workload mobility solutions Shared storage replication acceleration (SRDF, SnapMirror, etc.) Workload mobility acceleration (Clone, VMDK access, etc.) Planning Consider DAS for Non-Persistent Desktops Use shared storage with RAID and replication for persistent desktops and user data Use Linked Clones or File Level Flex Clones for storage capacity IOPS (4096 Bytes/IOP) WinXP 5-10 Win K RPM drive 200 IOPS SSD drive 10,000s IOPS Reads versus writes Consider hourly, daily, monthly, and quarterly workload Consider impact of antivirus Use storage caching to scale Consider data redundancy levels

85 Data Center Network and Security

86 Network Deployment Considerations WAN Edge WAN Edge DC-1 Core DC-2 Core VDI Apps Data VDI Apps Data VM 1 VM 2 VM 3 VM 4 VM 5 VM 6 VM 7 VM 8 VM 9 VM 10 VM 11 VM 12 VM 13 VM 14 VM 15 VM 16 VM 17 VM 18 Separate VDI from application environments Modular physical, network and compute infrastructure Predictable and repeatable scalability Campus security best practice IP address management Hosted virtual desktops in the server farm access considered east/west Hosted virtual desktops considered as a campus are north/south WAN edge in the access block is east/west? Data center core is becoming an any to any transport It s all relative

87 Back Plane Network Nexus 1000V Virtual Switch Architecture Virtual Appliance Network Admin VSM-1 (active) VSM-2 (standby) NX-OS Control Plane Supervisor-1 (Active) Supervisor-2 (StandBy) Linecard-1 Linecard-2 Linecard-N NX-OS Data Plane Modular Switch VEM-1 VEM-2 VEM-N VSM: Virtual Supervisor Module VEM: Virtual Ethernet Module Server Admin Hypervisor Hypervisor Hypervisor Hypervisors: vsphere (shipping); Win8/Hyper-V (planned) 93

88 Network Advanced Features of the Nexus 1000V Switching Security Network Services Provisioning Visibility Management L2 Switching, 802.1Q Tagging, VLAN/VXLAN Segmentation, Rate Limiting (TX) IGMP Snooping, QoS Marking (COS & DSCP), Class-based WFQ Policy Mobility, Private VLANs w/ local PVLAN Enforcement Access Control Lists (L2 4 w/ Redirect), Port Security, ACL Logging Dynamic ARP inspection, IP Source Guard, DHCP Snooping Virtual Services Datapath (vpath) support for traffic steering & fast-path off-load Virtual Security Gateway (VSG), vwaas, vnam, CSR Automated vswitch Config, Port Profiles, Virtual Centre Integration Optimised NIC Teaming with Virtual Port Channel Host Mode VMotion Tracking, NetFlow v.9 w/ NDE, CDP v.2 VM-Level Interface Statistics SPAN & ERSPAN (policy-based) Virtual Centre VM Provisioning, Cisco Network Provisioning, CiscoWorks Cisco CLI, Radius, TACACs, Syslog, SNMP (v.1, 2, 3) Hitless upgrade, SW Installer 94

89 Network Securing VDI with Cisco Virtual Security Gateway (VSG) Persistent virtual workspace for the doctor Flexible workspace for Doctor s assistant Maintain compliance while supporting IT consumerization Healthcare Portal Virtual Security Gateway (VSG) Server Zones Records Database Application Assistant IT Admin Doctor Guest HVD Zones ASA Leverage VM context (eg VM-name) to create VSG security policies it Admin Network Guest Doctor Reference Architecture: 1000V and VSG in VXI Reference Architecture Cisco AnyConnect 95

90 Network vwaas Out Of Path With vpath Interception based on port-profile policy configured in Nexus 1000v Bidirectional Interception Capture display traffic inbound Capture desktop protocol traffic outbound Pass-through traffic is automatically bypassed in Fastpath vpath aware VM movement Supports Vmware resource scheduling Automatic application of vwaas when new virtual desktop gets deployed vwaas Nexus 1000v VSM Virtual Desktop 1 Nexus 1000V vpath VMware ESXi Server Virtual Desktop 2 Cisco UCS x86 Server vcenter Server

91 Network Security Options Patching Persistent desktop versus non-persistent desktop Virus Scanning Virtual machine virus scanning VMSafe service in vsphere NAS (file server) based virus scanning Network or proxy based virus scanning (Scansafe/Ironport) Virtual desktop access Direct internally or proxied externally Zoning by User/Group Application Desktop

92 Storage Display Desktop Protocols IO Planning Sample Bandwidth Planning Storage (in and outbound) 20 IOPS per desktop at 4K Bytes EA 671 Kbps EA (assume 1 Mbps) 1 Gbps for 1000 HVDs in UCS blade chassis Assume 1 Mbps per HVD Network Display (mostly outbound) Assume 1 Mbps per desktop 1 Gbps for 1000 HVDs in UCS blade chassis Desktop Protocols (mostly inbound) Estimate 8 Mbps which opens 25MB in 25 seconds and handles streaming and interactive video 8 Gbps for 1000 HVDs in UCS blade chassis Total 10 Mbps per HVD for storage, display, and desktop protocols 10 Gbps for 1000 HVDs in UCS blade chassis UCS Chassis APP APP APP APP AppVirt AppVirt AppVirt AppVirt HVD-1 HVD-1000 Hypervisor Server BIOS (UCS Service Profile) Network (LAN/SAN)

93 Architecture

94 Architecture Large Scale Virtual Desktop Architecture Branch Thin Clients or display protocol clients WAN Acceleration (1 connection per HVD/HVA) Desktop Data Center WAN Acceleration From Thin Client (1 connection per HVD/HVA) Broker Virtual Desktops Limited applications WAN Acceleration to Application (10 connections per HVD) Application Data Center WAN Acceleration From HVD Centralized applications Disp Protocols Theatre Desktop Centers App Protocols Corporate Application Data Centers

95 Architecture Fault Domains Client 1 user Branch Switch Up to 250 Building or WAN 2 to 1,000 SLB 2,000 to 20,000 Broker Up to 1000 UCS Blade Up to 332 UCS Chassis Up to 1,328 Storage 1 to 10,000 Client LAN WAE WAN WAE ACE Broker UCS Storage

96 Architecture WAAS NFS Transport DeDuplication Storage NFS from ESX to NAS WAAS between ESX and NAS 99.6% compression (10 GB reduced to <100 MB) Client LAN attached terminal Native protocols over WAN Centralized VMDK and user data C1 C2 C3 UCS WAE Network WAE NAS RDP NFS Origin Connection Optimized Connection Origin Connection

97 Architecture Remote NAS WAAS NFS Storage Acceleration Display protocols are challenged by rich media Mitigate display protocol challenges by placing compute close to user Achieve data protection by placing vmdk in data center Minimize network impact with WAAS WinXP Action NFS Origin NFS Optimized Percent Optimized Boot % Login % Office % Web 5X % On demand Flash %

98 Availability and Mobility Virtual Desktop Architecture Normal Conditions Desktops provisioned to use local NFS Filer SnapMirror Replicates VMDK files through WAAS Netapp Flex Clones to reduce storage Event NAS fails over to replicated NAS using L2 extension or Route Health Injection (RHI) WAAS enables desktops to run from NAS in remote data center View Clients maintain display protocol connection with stationary compute VM Server Farm 1 f1 RDP NFS Replication c1 e1 e2 r1 r7 r8 WAN #1 Si Si r3 r5 r4 r6 Si Si WAN #2 r9 r10 r2 e3 e4 c2 Server Farm 2 f2

99 Availability and Mobility VMotion Acceleration WAAS reduces 512 MB transfer to just 31 MB if warmed with similar WinXP desktop WAAS enables bulk VMotion between data centers in the event storage moves WAAS enables efficient VMotion from/to private to/from public clouds VMotion uses TCP to reliably migrate the contents of memory from one compute to another Source host initiates a TCP 8000 connection to the destination host WAAS can be in the path using inline card or WCCP UCS WAE IP Network WAE UCS Vmotion TCP 8000

100 Availability and Mobility VMotion Compute Follows Storage Normal Conditions Desktops provisioned to use local NFS Filer SnapMirror Replicates VMDK files through WAAS Netapp Flex Clones to reduce storage Event NAS fails over to replicated NAS using L2 Extension or Route Health Injection (RHI) WAAS efficiently migrates desktop VMs to backup compute following storage Client VMs can preserve IP with RHI, L2MP, or request new IP through DDNS Server Farm 1 f1 RDP NFS Replication c1 e1 e2 r1 r7 r8 WAN #1 Si Si r3 r5 r4 r6 Si Si WAN #2 r9 r10 r2 e3 e4 c2 Server Farm 2 f2

101 Availability and Mobility View Offline Desktop Check Out/In Acceleration View Client includes VMware Player Client checks out (downloads) virtual desktop VMDK WAAS accelerates check out and check in

102 Strategy

103 Strategy Approach Centralized when you can Communications Productivity Office, Wiki Information Management File, Sharepoint, idisk, etc. Business applications Client/Server Business intranet web Local when you must Communications IP Telephony (interactive softphone) Video on demand (native encoding with local caching and prepositioning) Video streaming (broadcast) Rich media web Experience Branch split VPN with local web access Print

104 Strategy Considerations Business Identify worker types (i.e. Task, Knowledge, Power, etc.) Pursue when it makes business sense Address security and compliance requirements Consider the workspace (not just a desktop) Consider the employ onboarding and off-boarding workflow Design Fault domains Disaster recovery Shared storage scalability Application concurrency Per application requirements (One bad app ruins a bushel!) Rich media or graphic intensive applications have many caveats Stateless desktop is the goal

105 Automation Employee Onboarding Multiple requests from user for: ID, Desktop, Phone, , Applications etc. InfoSec Creates ID Server Admin Clone VM Manual Process take several days Before: Conventional VDI Citrix Admin Configure PVS & DDC Desktop Admin Install Applications Manual provisioning Hard to control utilization High provisioning & ops cost Extended provisioning time Configuration risk Communication Group provision s Phone Secure it Ready for use With Automation Single request from user, using Cisco Cloud Portal (CCP) Approved by Manager Automated Self-service On-demand within minutes After: Automated VXI Solution CCP order goes to Cisco Process Orchestrator (CPO) CPO creates User ID Self-service; automated provisioning Elasticity (capacity-on-demand) Optimized provisioning & ops cost Rapid provisioning Increased Resiliency and Availability Configure Citrix PVS, DDC, CUCM, VMware, CUPS Install Applications Secure it Ready for use

106 Cisco VDI Benefits Value Proposition Summary Scale Secure Experience Unify Operate Cisco Validated Designs (CVD)

107 Cisco Validated Designs (CVD) Virtual Desktops Deployments with VXI 2.6 Customer Needs Reduce virtual desktop implementations costs Simple and flexible authentication Troubleshooting virtual desktops Virtualized collaboration Reduce TCO through server technology advancements UCS B200M3 (1600MHz memory), VIC 1240 (80 Gbps I/O), UCS 2.0.2, Fabric Interconnect 6296UP Increase virtual desktop server density XenApp 6.5 hosted shared desktop, including Jabber for Windows Decrease storage costs for View and XenDesktop Solid State Drives with Citrix PVS VSA View Storage Accelerator (leverages CBRC hypervisor caching technology)

108 Cisco Validated Designs (CVD) Virtual Desktops Deployments with VXI 2.6 Customer Needs Reduce virtual desktop implementations costs Simple and flexible authentication Flexible remote access authentication Single or dual VPN tunnel from VXC Clientless Single Sign On (SSO) with ASA 9.0 Citrix XenDesktop Citrix XenApp Virtualized collaboration Troubleshooting virtual desktops

109 Cisco Validated Designs (CVD) Virtual Desktops Deployments with VXI 2.6 Customer Needs Reduce virtual desktop implementations costs Simple and flexible authentication Virtualized collaboration Realize OpEx benefits with virtualized contact centers Integration Contact Center in virtual desktops CTIOS tested and Finesse supported Citrix XenDesktop and VMware View VXC2xxx and VXC 6215 Pervasive Unified Communication Jabber for Windows in virtual desktops (both Hosted Virtual and Hosted Shared) Troubleshooting virtual desktops

110 Cisco Validated Designs (CVD) Virtual Desktops Deployments with VXI 2.6 Customer Needs Reduce virtual desktop implementations costs Simple and flexible authentication Lower OPEX & increase manageability MS Systems Center 2012 with Cisco UCS Manager Many other 3rd party plug-ins Cisco VXC Manager 4.9 Easier installation and operation Virtualized collaboration Troubleshooting virtual desktops

111 Cisco Validated Designs (CVD) Upcoming Releases of VXI 3rd party endpoint ecosystem WAAS 5.1 with Citrix Multistream ICA Storage acceleration with FusionIO VMware ESXi 5.1, Citrix XenServer, Microsoft Hyper-V hypervisor updates Jabber application and desktop virtualization VXME integration with Windows 7 and Windows 7 Embedded

112 Questions?

113 Welcome to Cisco VXI Jeopardy! Software Collaboration Borderless Network Data Center Pot Luck Ruins $100 a bushel Outside the display $100 protocol Up to 90% bandwidth $100 savings The best server for $100 VDI DAILY Wyse $100 DOUBLE Profile virtualization $200 $200 VXC 1494 $200 and 2598 $200 IOPS Task $200 worker $300 VXI Web, Telephony, $300 and Display 4172 and $ The best virtual $300 switch for VDI $300 $400 $400 $400 $400 $400 $500 $500 $500 $500 $500 $1000 $1000 $1000 $1000 $1000 $2000 $2000 $2000 $2000 $

114 Cisco Validated Designs (CVD) Links and Related Mailers Cisco VXI External Page (Solution Value Proposition and Marketing Collateral) Cisco Design Zone VXI Page (CVDs and Configuration Guide available here; Performance Guide follows in October)

115 Call to Action Visit the Cisco Campus at the World of Solutions to experience Cisco innovations in action Get hands-on experience attending one of the Walk-in Labs Schedule face to face meeting with one of Cisco s engineers at the Meet the Engineer center Discuss your project s challenges at the Technical Solutions Clinics 126

116 127

117