Cisco Virtualization experience Infrastructure (Cisco VXI)

Size: px

Start display at page:

Download "Cisco Virtualization experience Infrastructure (Cisco VXI)"

Buddy Harrington
6 years ago
Views:

Cisco Virtualization experience Infrastructure (Cisco VXI) Tomáš

The thick-client PC has been the workhorse of desktop computing. It has offered the best available combination of price, performance, and capabilities.

2 The thick-client PC has been the workhorse of desktop computing. It has offered the best available combination of price, performance, and capabilities. However, for many use cases thick-client PCs are less than an ideal solution. Among their drawbacks: Difficult to manage High total cost of ownership Difficult to protect and secure data Inefficient resource utilization 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 2

Virtual Apps HVD HVD HVD WinXP WinXP Thick Client Zero Client Thin Client Mobile

3 Traditional Modernized Revolutionize Centralized provisioning, management and security for users and applications Virtual Apps Virtual Apps Virtual Apps Apps Apps Virtual Apps HVD HVD HVD WinXP WinXP Thick Client Zero Client Thin Client Mobile Client Virtualized Platforms 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 3

Desktop Virtualization (DV) - separates a thick-client PC

server model of computing Virtualized desktop hosted in DC The

instead of on the local storage of a remote client Users work

All programs, applications, processing, and data usage are kept

4 Desktop Virtualization (DV) - separates a thick-client PC desktop environment from a physical machine using a client server model of computing Virtualized desktop hosted in DC The model stores the "virtualized" desktop on a remote server, instead of on the local storage of a remote client Users work from their remote desktop Endpoint. All programs, applications, processing, and data usage are kept and run centrally in the Data Center 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 4

5 In principle, the business case is compelling. Desktop virtualization helps companies: Improved manageability Streamlined deployment Increased flexibility Platform independence (PC, Laptop, Tablet, Smartphone) Connection Broker Improved data protection Data within Data Center Controlling Local Storages Better resource utilization Reduced costs Hypervisor 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 5

6 There are also hundreds of vendors in the desktop and virtualization space. The big three desktop virtualization vendors are: Microsoft, Citrix, VMware Example of some others are Quest Software, Red Hat, Pano Logic and Leostream The virtual desktop market has evolved from a young, exciting technology to a mature desktop solution. Citrix XenDesktop, VMware View and Microsoft TS are the clear leaders 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 6

1 Connect to Connection Broker 2 Identify target VM 3 Query for

to endpoint 6 7 Successful connection Thin Client Active Directory

Client Authentication Virtual Infrastructure Management Display

7 1 Connect to Connection Broker 2 Identify target VM 3 Query for user policy 4 Start target VM 5 Return VM to endpoint Connect VM to endpoint 6 7 Successful connection Thin Client Active Directory Smartphone/iPad Connection Broker Virtual Infrastructure Thick Client Authentication Virtual Infrastructure Management Display Protocol 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 7

frame/sec HD ~ 6 Mbps Flash, Silverlight Video Animated 2D User input

8 Desktop composition 3D Graphics SW or HW (GPU) Rendering 2D Graphics (Vector Graphics) GDI on HVD & Remote client Bitmap (Raster Graphics) Video 25 frame/sec HD ~ 6 Mbps Flash, Silverlight Video Animated 2D User input (keyboard, mouse) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 8

ICA/HDX Citrix Proprietary Supports many advanced features 32 virtual channels TCP transport If the latency is

PCoIP/Teradici RDP VMware software and hardware Highly efficient Adaptive - compensates latency and bandwidth

Security servers support TCP only Protocol by Microsoft Multiple monitor support in span mode Citrix/VMware VDI

9 ICA/HDX Citrix Proprietary Supports many advanced features 32 virtual channels TCP transport If the latency is greater than 30ms, Flash content is rendered on the server Encryption and compression on by default PCoIP/Teradici RDP VMware software and hardware Highly efficient Adaptive - compensates latency and bandwidth variations Supports 4 monitors and resolution up to 2560 x bit AES (On by default) UDP Transport Most Security servers support TCP only Protocol by Microsoft Multiple monitor support in span mode Citrix/VMware VDI deployment support TCP transport and 128-bit AES support 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Desktop virtualization solves some of IT s most persistent problems. But it also moves thick-client PC into the datacenter. This places new demands on networks Key challenges of desktop virtualization Improved user experience User input response time (mouse, keyboard) Application response time Interactive multimedia (Flash, Audio, Collaboration, VoD, Application Streaming,...) VD protocol display quality (Lossless vs. lossy) Local Devices (KVM, USB Storage/Audio/Video/Security/Printer/...) Network latency tolerance Bandwidth provisioning 64 kbps ~ 1,5 Mbps per VD Multicast not supported QoS issue ~ no visibility into VD protocol Effective provisioning and patch management Agility and availability Flexibility Survivability 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 Video Source Video processed on HVD causing bandwidth and server compute overload Branch Office End-users see pixelization as media is rendered from the data center Branch Router T1 Increasing bandwidth might not help Data Center Campus End-users experience no pixelization on LAN 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Branch Office Video Source Branch Router T1 Routing Protocol Data Center Protocols in the virtual desktop environment appear monochrome to QoS Video Display Protocol Lack of flow differentiation prevents prioritization within a display protocol stream Video stream competes with other flows in class (e.g.: P2P) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

Deliver a superior collaboration and rich media user

open and validated desktop virtualization Cisco VXI is an

virtualized data center, borderless network and endpoint

validation Desktop Virtualization + Optimized User

13 Deliver a superior collaboration and rich media user experience with best in class ROI in a fully integrated, open and validated desktop virtualization Cisco VXI is an end-to-end system for desktop virtualization Including virtualized data center, borderless network and endpoint with design guidance (CVD released) and end-to-end validation Desktop Virtualization + Optimized User Experience 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Virtualized Collaborative Workspace Cisco Clients Virtualization-Aware Borderless Network CDN Branch Virtualized Data Center Cisco Collaboration MS Applications Office Microsoft OS Desktop Virtualization Software Cius Business Tablets Cisco Virtualization Experience Clients ISR WAAS Si Access Switching w/poe WAAS Nexus Hypervisor Virtual Unified CM Thin Client Ecosystem Virtual Quad ACE 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 Virtualized Collaborative Workspace Campus Virtualization-Aware Borderless Network Virtualized Data Center Campus Endpoints Branch Office Security Datacenter Branch Endpoints Mobile Teleworker VPN Mobile Teleworker Endpoint Fixed Teleworker Fixed Teleworker Endpoint Display protocol over the Network Bandwidth Requirements and Scale Local Area Network Wide Area Network Nat/No-Nat VPN Tunnel/GRE MPLS EIGRP Survivability Optimization Availability High Available Compute Provisioning and automation 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 Housing the Virtual Desktops in the Data Center Cisco VXI virtualized data center comprises components from both Cisco and thirdparty technology partners VXI data center configuration includes these mandatory components: Cisco WAAS CUPC Office Windows 7 VMs Citrix XenDesktop Vmware View Citrix Xenserver VMware ESXi App Compute (Cisco) Hypervisor (Technology Partner) VDI Desktop Software (Technology Partner) ASA Nexus 7K CUCM UCS Storage Cisco ACE 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 16

Unified Fabric FCoE Cost savings due to reduced components Reduced power & cooling

existing management frameworks Service Profiles Rapid provisioning through automation Rapid

Higher server consolidation & larger VM density Virtualized Adapters & VN-Link VM visibility

17 Unified Fabric FCoE Cost savings due to reduced components Reduced power & cooling requirements UCS Manager (Embedded Management) Reduced operational costs Easy integration with existing management frameworks Service Profiles Rapid provisioning through automation Rapid infrastructure repurposing Memory Expansion Reduces CPU, power/cooling and SW licensing costs Higher server consolidation & larger VM density Virtualized Adapters & VN-Link VM visibility to the network Network policy follows VM 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Cisco UCS is an ideal platform for Desktop Virtualization UCS Extended Memory Memory More virtual desktops per blade = Lower power per VM Lower cooling per VM Lower cost per VM Latest high-performance CPUs CPU Unified Fabric (FCoE) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Scale Desktop Virtualization Software Cisco ACE provides detailed health monitoring and load balancing functions for the connection broker Mobile Teleworker Thick client Thin Client ACE Load Balancer Virtual IP Endpoint (LAN user) Connection Broker Serverfarm Cisco ACE is capable of offloading SSL processing for the connection broker while also providing an HTTP 302 moved temporarily response to a endpoints HTTP GET or Head request 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Scale Desktop Virtualization Software The Cisco ACE supports device partitioning where a single physical load balancer is provisioned into multiple logical devices Citrix XenDesktop Cisco UCS VMware View 4.5 This virtualization function allows system administrators to assign a single virtual Cisco ACE context for both Citrix and VMware 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 20

Video Source Branch Office End-users see pixelization as media is rendered from the data center Branch Router Edge Router T1 Branch WAE WAN Acceleration for Display Protocol Data Center WAE

21 Video Source Branch Office End-users see pixelization as media is rendered from the data center Branch Router Edge Router T1 Branch WAE WAN Acceleration for Display Protocol Data Center WAE Virtualized Data Center End-users experience no pixelization Optimization of virtual desktop protocols e.g Citrix ICA and RDP through - latency mitigation - reduction of bandwidth, - optimization for MMR and USB Redirect for rich media and USB peripherals (Printing) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

22 Branch Endpoint 1 Branch Office Branch Router 2b 7 WAN Data Center WAN Edge Router 2a 3 6 Cisco WAE 4 Cisco ACE Branch Cisco WAE Endpoint to Connection Broker Connection Broker to Thin Client 4 5 Application Specific Accelerators (CIFS, NFS, HTTP, SSL, MAPI, and Video-RTSP) Cisco WAAS enhances the performance and accelerates the operation of a broad range of these chatty application protocols, thus improves end-user access over the WAN Connection Broker 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 22

Bandwidth Reduction and Protocol Optimization Data Redundancy Elimination (DRE) provides advanced compression to eliminate redundancy from network flows LZ compression provides generic compression

23 Bandwidth Reduction and Protocol Optimization Data Redundancy Elimination (DRE) provides advanced compression to eliminate redundancy from network flows LZ compression provides generic compression TCP Flow Optimization (TFO) fills the pipe over high latency links FILE.DOC Optimized Connection FILE.DOC LZ LZ Encode Window Scaling Large Initial Windows Congestion Mgmt Improved Retransmit Packet Aggregation Decode 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Should a endpoint choose to send a document to a printer, the request actually takes place within the data center where the virtual desktop and print server are located The print data going to the network printer, actually travels outside the desktop display protocol, and can therefore be optimized with WAAS Print Server Network Printer Branch Office Print Job Edge Router HVD Display Protocol WAN Acceleration for Display Protocol WAN Acceleration for Print Job Branch WAE Data Center WAE 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 24

25 The VXI system provides a virtualized collaboration workspace allowing employees the flexibly to work from any location securely With solutions such as the Cisco ASA and the Cisco AnyConnect client, an end-user is able to connect from any location using an encrypted connection to the datacenter where their hosted virtual desktop resides Campus Endpoints Campus Branch Endpoints Branch Office Mobile Teleworker VPN Mobile Teleworker Endpoint Fixed Teleworker Fixed Teleworker Endpoint 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 Deployment Models using Network Authentication Authenticating desktop virtualization endpoints with IEEE 802.1X Standard for link layer authentication and access control Uses Extensible Authentication Protocol (EAP) Provide location awareness in the network using MAC Authentication Bypass (MAB) Fallback option for desktop virtualization endpoints that do not support 802.1X. Match MAC address with database for corporate devices Campus Supplicant Campus Endpoints 802.1X MAB Cisco Catalyst Switch Campus Network Radius Server Directory Service 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

using Cisco AnyConnect Client Mobile Teleworker Endpoint WAN VPN Tunnel Cisco ASA Connection Broker Hosted Virtual Desktop Data

27 Deployment Models using AnyConnect Mobile Client Someone that can connect to their virtual desktop from any endpoint Mobile teleworkers are typically in unsecure network locations Advantages of Cisco VXI allows mobile teleworkers to connect securely using Cisco AnyConnect Client Mobile Teleworker Endpoint WAN VPN Tunnel Cisco ASA Connection Broker Hosted Virtual Desktop Data is still secure, even if the endpoint is stolen, damaged or lost 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 27

virtual desktop using the New Cisco Desktop Virtualization endpoint UC Fixed Teleworker Integrated Unified IP Phone 9900 providing PoE

28 Deployment Models using Cisco Virtual Office Solution Workers connecting securing from locations outside of the traditional corporate office Using the Cisco Integrated Services Router (ISR) to provide secure and rich network services Uses connect to their hosted virtual desktop using the New Cisco Desktop Virtualization endpoint UC Fixed Teleworker Integrated Unified IP Phone 9900 providing PoE and desktop phone control WAN VPN Tunnel Cisco ASA Connection Broker HVD 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 28

29 Data security and compliance Business continuity / agility Reduced TCO Standardized IT experience, customizable user experience Video and voice Interactivity Mobility Real time, high quality experience Range of devices IT Standardization Rich Media Experience 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 29

30 Hairpin Effect causing undesirable results Data Center Virtual Desktop Signalling (SIP) CUCM Signalling (SIP) Display Protocol Media Flow WAN Thin Client Monolithic data flows Voice/Video in the display protocol Media flow goes all the way back to data center and back Heavy processing on virtual desktop in data center Bandwidth explosion Display protocol and possible endpoint become unstable Virtual Desktop Media Flow Display Protocol Thin Client 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 30

Supported setup for Cisco VXI Phase Two Data Center Virtual Desktop Signalling (CTI) CUCM Signalling (CTI) Display Protocol UC Signalling WAN Zero Client

Signaling of CUPC back to CUCM is still inside the display protocol QoS can be used on media Path is optimized Virtual Desktop UC Signalling Display

31 Supported setup for Cisco VXI Phase Two Data Center Virtual Desktop Signalling (CTI) CUCM Signalling (CTI) Display Protocol UC Signalling WAN Zero Client Media Flow Zero Client Unified Communications using desk phone control which allows RTP (UC media voice/video ) to flow outside the display protocol Signaling of CUPC back to CUCM is still inside the display protocol QoS can be used on media Path is optimized Virtual Desktop UC Signalling Display Protocol Location Awareness and 911, Codex selection, CAC, SRST Reference, Time Zone, Dial-Plan 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 31

Avoiding the Hairpinning Problem CUCM Data Center Signalling (SIP) Signalling (SIP) VM-User 1 Desktop Virtualization Protocol Media Flow VXI Cloud

all soft the way client back on virtual to data desktop center in and data back center Heavy processing on virtual desktop VDI communicator in data

increase in VM blade density High quality voice and video VM-User 2 Media Flow Desktop Virtualization Protocol Thin Client VXC Communicator Network

32 Avoiding the Hairpinning Problem CUCM Data Center Signalling (SIP) Signalling (SIP) VM-User 1 Desktop Virtualization Protocol Media Flow VXI Cloud Signalling (SIP) Signalling (SIP) Thin Client VXC Communicator Media Flow The Future Hairpinning Solution Problem Media User interacts flow goes with all soft the way client back on virtual to data desktop center in and data back center Heavy processing on virtual desktop VDI communicator in data center provides local client-to-client streaming Latency of video / voice Benefits Jitter Bandwidth reduction Reduced processing in data center, increase in VM blade density High quality voice and video VM-User 2 Media Flow Desktop Virtualization Protocol Thin Client VXC Communicator Network handling real-time data (QOS, CAC) Eliminates hairpinning of media through data center 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

typically slated toward the task worker since it provides no enhancements for media streaming Because there is no exposed OS,

34 Zero clients are the simplest devices They have embedded operating systems that are not exposed to the user Zero clients have reduced local capabilities and depend heavily on the resources available within the virtual desktop This class of devices is typically slated toward the task worker since it provides no enhancements for media streaming Because there is no exposed OS, there is no virus infection, making them a very secure endpoint 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Thin client devices usually contain more local capabilities and often have a customizable local embedded operating system (usually Linux or Windows) This class of endpoint provides greater

35 Thin client devices usually contain more local capabilities and often have a customizable local embedded operating system (usually Linux or Windows) This class of endpoint provides greater flexibility They are generally customized by the system administrators and then locked down Thin clients are typically used by power users who need access not only to browsers, clients and office automation tools, but also additional features such as streaming audio and video 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

client devices allow users to work offline and are often the choice of the Road

36 Thick client devices refer to standard PC or Laptops running a standard OS, but have similar software as the thin client, installed as an application Thick client devices allow users to work offline and are often the choice of the Road Warrior user 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 36

9900 Cisco VXC 2200 is a standalone unit Both units support PoE (Power over Ethernet) Cisco

37 Introducing the Cisco VXC 2100 and 2200 Support for PCoIP and ICA/RDP display protocols Cisco VXC 2100 is a compact device that integrates with the Cisco Unified IP Phone 8900 and 9900 Cisco VXC 2200 is a standalone unit Both units support PoE (Power over Ethernet) Cisco VXC 2200 Cisco VXC Cisco and/or its affiliates. All rights reserved. Cisco Public 37

Integrated form factor for Cisco Unified

38 Integrated form factor for Cisco Unified IP Phone 8900/9900 Series Power via Phone Leverages existing Power over Ethernet (PoE) Supports 2 monitors, USB keyboard & mouse, 4 USB ports, Audio Mic in / Speaker out VXC 2111 Supports PCoIP VXC 2112 Supports ICA and RDP 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 38

Key board and Mouse Audio Mic and Speaker 4 USB ports 2010

39 VXC 2211 Supports VMware View PCoIP VXC 2212 Supports Citrix XenDesktop ICA Power over Ethernet (POE) Supports 2 monitors Key board and Mouse Audio Mic and Speaker 4 USB ports 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 39

40 Supports external USB mouse & keyboard Supports external display in mirror mode Base supports POE 1024 x 600 scaled up to display size 1024 x 600 Display Port Dedicated chip to improve external display quality 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

41 Persistent mode: Independent VDI session in external displays with mouse and keyboard control Virtual Desktop Cisco Cius Keyboard/ Mouse 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Thank you.

Cisco Virtualization experience Infrastructure (Cisco VXI)

Cisco Virtualization experience Infrastructure (Cisco VXI) Replacing Photos in Template Step 1: Click on Insert Picture icon in center of gray rectangle to place photo Step 2: Use Crop tool on photo to cover gray guideline Step 3: Send photo to back Cisco Virtualization