EMC IT 最佳實踐 : 軟體定義雲端策略經驗談 EMC TAIWAN 資深技術顧問李文哲

Transcription

1 EMC IT 最佳實踐 : 軟體定義雲端策略經驗談 EMC TAIWAN 資深技術顧問李文哲 1

2 議程 EMC IT Overview Infrastructure Evolution Software Defined Data Center Enterprise Hybrid Cloud Summary Q&A 2

3 雲架構 Our global footprint 7 Data Centers STORAGE 40+ PBs storage COMPUTE 1,400 ESX servers NETWORKING 14,000 ports 3 vcloud Air Sites 70% Block 20% File 17,500 VMs 14.2:1 4,000 VIPs 1,000,000+ DNS entries 98% Virtualized 10% Object 9+ PBs protection 7,000 VDIs 43.2:1 3

4 EMC 全球資料中心 Cork, Ireland Santa Clara, CA Hopkinton, MA Durham, NC Bangalore, India Enterprise Data Center Regional Data Center Bunker vca Site 4

5 基礎架構演進 2008 Consolidated Ruthless Virtualization 2010 Virtualization Shared Converged Infrastructure 2012 Optimized Purpose-built Automation Cloud ITaaS PROMOTE TEST DevOps BUILD FIX TEST Tiered and shared virtualized servers and SANS X86 standard Project-driven Siloed organization Multi-tenant virtual hosting platform MC application transformation Capex & Opex savings Converged organization Service catalogue - Self and Auto IT Service and utilityfocused organization Cost transparency Software-defined storage Virtual networking and security Full chargeback Integrated network team Formal automation team Capex Opex 5

6 ON-PREMISES OFF-PREMISES 我們的混合雲策略 VIRTUALIZATION CLOUD 6

7 企業混合雲 VMware vcloud Suite + EMC ViPR Situation Over the last ten years since the transformation began, EMC has tripled in size and revenue, and its reliance on IT as measured by the size of the infrastructure, has grown at even a much higher rate. Solution Defined a Greenfield strategic platform standard that was consolidated, scaled-out, tiered, multi-tenant and 100% virtualized, while reinventing the IT Operating Model to a professional services business under the Federation Enterprise Hybrid Cloud solution. Expected Benefits Provisioning time reduced from 45 days to 1 day Delivery of standard usable services to customer Moving from VMaaS to IaaS+ or PaaS Single code stack to manage well run hybrid cloud 25 new services and growing 7

8 議程 EMC IT Overview Infrastructure Evolution Software Defined Data Center Enterprise Hybrid Cloud Summary Q&A 8

9 軟體定義資料中心架構 SERVICE CATALOG Operational Management vrealize Operations Self-Service & Automation vrealize Automation Financial Transparency vrealize Business CA & DR SRDF RecoverPoint VIRTUALIZED INFRASTRUCTURE Backup & Recovery Data Domain Avamar, Networker VCE CONVERGED INFRASTRUCTURE EMC TIERED STORAGE Powered by Intel Xeon Processors 9

10 企業混合雲軟體元件 VMware vsphere 6.0 NSX 6.2.x ViPR Controller 2.3 / ViPR SRM 3.6 SP4 vrealize Automation / vrealize Orchestrator / ViPR vrealize Orchestrator Plug-in 2.4 EMC Avamar VMware vrealize Log Insight vrealize Operations Manager vrealize Business VCE VxBlock RCM

11 企業混合雲架構 Compute Powered by Intel Xeon Processors 11

12 融合架構策略 Enterprise & Traditional Workloads Big Data & 3 rd Platform Workloads Edge and ROBO BLOCKS RACKS APPLIANCES Powered by Intel Xeon Processors 12

13 運算主機能力策略 vsphere Hypervisor as foundation for compute Existing Applications Future Applications App App App App App App App App VMware vcenter Suite VMware vsphere Availability Security Scalability Application Services vmotion Storage vmotion HA / Fault Tolerance Data Recovery vshield Endpoint NSX DRS Hot Add Compute Storage Network Infrastructure Services Hypervisor DRS and DPM Memory Over commit VMFS / RDM SPBM / SIO Controls Thin Provisioning VVOL / VSAN Distributed Virtual Switch Network I/O Control Cloud Resource Pools Hybrid Cloud 13

14 企業混合雲架構 Network VXRACK vblock Data Domain Avamar 14

15 網路策略 NSX Micro segmentation zero trust model LOGICAL SWITCHING, ROUTING, FIREWALL, LOAD BALANCING SEC GROUPS SECURITY POLICIES WEB VM VM VM DEFAULT Default Firewall Access shared services (DNS, AD, NTP, Patch Mgmt, Backup, Syslog) WEB Standard Web Firewall allow inbound HTTP/S, allow outbound ANY APP VM VM APP Standard App Firewall allow inbound TCP 8443, allow outbound SQL DATABASE VM DATABASE Standard Database Firewall allow inbound SQL 15

16 企業混合雲架構 Storage VXRACK vblock Data Domain Avamar Powered by Intel Xeon Processors 16

17 存儲策略 ViPR North Bound Service Layer Tenancy Projects RESTful APIs Service Definition Automation & Orchestration Self Service Security Automation Provision SERVICE MANAGEMENT Service Catalog Reports Incident GRC Dashboard Resource management South Bound Platform Layer Discovery Registration Resource Pooling Data Protection Platform Data Services SYMCLI VMAX SMI-S ViPR CONTROLLER VNX XML API Isilon PAPI Isilon REST API XtremIO ViPR SRM Powered by Intel Xeon Processors 17

18 ViPR 架構 VDC: HOPKINTON Tenant3: LOB Tenant2: VDI Tenant1: EHC Project 2: Virtual_Infra Project 1 : Atlas Block* File% Object^ Volumes Exports Buckets Identity SECURITY Roles VDC: DURHAM Tenant3: LOB Tenant2: VDI Tenant1: EHC Project 2: Virtual_Infra Project 1 : Atlas Block* File% Object^ Volumes Exports Buckets SERVICES Pools POOL_Gold POOL_Silver POOL_Bronze Capacity varray File System Networks FC Block Volume IP varray varray varray VMFS Data Store Clusters SERVICES Pools POOL_Gold POOL_Silver POOL_Bronze Capacity varray File System Networks FC Block Volume IP varray varray varray VMFS Data Store Clusters VMAX XtremIO Isilon VNX WAN VMAX XtremIO Isilon VNX Note: Fully deployed (*), Limited deployment (%), In Planning (^) 18

19 ViPR 目錄及服務 USE CASE OBJECTIVES SLA POLICY OPERATIONS IAAS Performance DIAMOND CREATE DBAAS Availability PLATINUM EXPAND 3 TIER APP RPO / RTO GOLD SNAP BOOT VOLUMES Compliance SILVER TIER VDI Security BRONZE EXPORT FILE Geography DEFAULT RESTORE Provider PROTECT Cost MIGRATE DELETE RETIRE 19

20 ViPR 控制器 VMware vrealize orchestrator Plug-in Default ViPR workflow. Modified with Volume, Data Store and Timeout to meet EMC IT needs. 20

21 Block 存儲 End-to-end provisioning ARRAY SAN ESX HOST Before ViPR 3 Element Managers 12 Manual Steps Fulfillment in Hours Create thin devices Create thin meta devices Create SG Add devices to SG Create Zones Add to a Zoneset Activate Zoneset Discover LUNs Create Data Stores Mount Data Stores Bind SG to pool Associate SG to FAST Policy 1 PB of Storage provisioned On demand provision After ViPR 500% increase in productivity VRO API Call to ViPR Provision in few mins Automation Standards One Catalogue Request Compliance 21

22 EMC IT ViPR 主控台 22

23 ViPR 標準 Volumes 23

24 ViPR 存儲開通訂單 24

25 ViPR 工作檢視 25

26 議程 EMC IT Overview Infrastructure Evolution Software Defined Data Center Enterprise Hybrid Cloud Summary Q&A 26

27 租戶建置 Automation and User Portal Converged and Hyper-Converged Infrastructure Tenant & Business Groups ITBM & Chargeback Services Library PaaS IaaS Cloud Team Software Defined Data Center ES Xi ES Xi vcloud Air Resource Endpoints Physical Resources Compute Storage Network Cloud 27

28 租戶建置 Automation and User Portal Tenant & Business Groups ITBM & Chargeback Services Library PaaS IaaS Cloud Team Software Defined Data Center ES Xi ES Xi vcloud Air Resource Endpoints Physical Resources Compute Storage Network Cloud 28

29 租戶建置 Automation and User Portal Tenant & Business Groups ITBM & Chargeback Services Library PaaS IaaS Cloud Team Software Defined Data Center ES Xi ES Xi vcloud Air Resource Endpoints Physical Resources Compute Storage Network Cloud 29

30 租戶建置 Automation and User Portal Tenant & Business Groups ITBM & Chargeback Services Library PaaS IaaS Cloud Team Software Defined Data Center ES Xi ES Xi vcloud Air Resource Endpoints Physical Resources Compute Storage Network Cloud 30

31 虛擬機開通訂單 31

32 存儲開通訂單 32

33 開通訂單完成 33

34 首頁 34

35 議程 EMC IT Overview Infrastructure Evolution Software Defined Data Center Enterprise Hybrid Cloud Summary Q&A 35

36 EMC IT 軟體定義資料中心 Outcomes and results Infrastructure Automation Resources can move further up value stack End to End Mapping 100% application & service mapping Application Chargeback 90% opex chargeback Utilization Optimization 80% utilization target Scale and Reuse Write once and use everywhere 125 component services Configuration Management High standards with zero variations SLA Achievement Faster provision and fewer escalations Driven by APIs 25 Standard services exposed in catalogue 36

37 五個經驗分享 CHALLENGE Building this yourself is hard ADAPT Adapt your team roles and structure RIGHT FIT Don t try to force this on all of your legacy infrastructure ADOPTION Instill a software mindset CUSTOMER It s all about the service 37

38