Fujitsu On-demand Virtual System Service Service Catalogue

Transcription

1 Fujitsu On-demand Virtual System Service Service Catalogue Nov. 16 th, 2010 FUJITSU LIMITED

2 1

3 Service outline Fujitsu DC Provide the allocated private virtual system environment. Internet Resource pool Customers Virtual system Create a scaling system (from small to large ) to meet customers needs. Available to create system with a load balancer and firewall. Customers can login as an administrator of virtual machine (VM) s OS: no restriction to install any type of software as well as to develop applications. 2

4 4 features Simplified Design On-demand Select the best system configuration that meets your purpose of use from the System Template Library. Provide a secure environment which protects against any threat coming from Internet (DMZ, Firewall). Create/delete, and Increase/decrease servers/storages, at any time when necessary. Hourly-based charge system. Service Portal (Operate via browser) Safety & Reliability Create/customize servers/storages on the Service Portal. Monitor status/trend, start/stop VMs, and operate back-up/restore on the Service Portal. Data Protection by redundancy, Performance warranty for VM resources (CPU/Memory), and VPN connection 3

5 Simplified Design DMZ Secure System template System Template Library 1.Select Customer Private Environment 3.Deploy Virtual system VMs... Additional resources Firewall Windows Server CentOS Server WEB Server DB Server 2.Customize WEB Server CentOS Server 4

6 On-demand Example Customer Customer Setting Setting Normal hour Initial Operation Increase Business peak hour Business scale expansion Decrease Normal hour Performance reinforcement Able to increase/decrease the number of load-balance VMs corresponding to online business peak hour. Temporary use as development/inspection environment. Start with minimal initial investment. Scale up VM performance corresponding to business growth. Customer Setting Initial Operation Increase Increase Data reinforcement Start with small scale. Scale out the disk capacity to meet data volume. Easy to estimate disk capacity. * Costs of Windows OS / SQL Server / other software are units of licenses. 5

7 Provide Service Portal Design studio - Select and customize system templates. - Resource settings: Deploy and delete VMs Attach/detach additional disks, backup disks Set a firewall Dashboard - Information function - Operate VMs (Start/stop/restart/backup/restore) - Display status (Working, Stopping, Deploying) - Show resource usage (CPU, Disk, Network etc.) - Show charging information - Show trouble information (Entire service, provided resource) 6

8 Durability/reliability High-availability by fail-over and system redundancy. Performance warranty for VM resources (CPU/Memory). Secure connection with VMs by SSL-VPN connection. Complete redundancy of parts, components, and networks. VM VM Server Redundant power supply Storage Stocks of spare parts and repair parts Automatic fail-over in case of hardware trouble Redundant switch & router Redundant LAN network Redundant cabinet SSL-VPN VM Secure access to VMs by SSL- VPN connection Redundant disk Mirroring between cabinets 7

9 Flow of using service Customer Access via the Internet Service Portal 1. Select template 3. Connect via SSL-VPN, log-in to VM. Single Web Server System Template Library 2. Deployment Web Server x3 + AP/DB Server x1 + Interior FW/LB + Additional disk Web Server x3 + AP Server x2 + DB Server x1 + etc..... Patches of System template are updated regularly. Internet/Intranet 4. Set the firewall, then connect to the Internet or Intranet Deployed system can obtain the Internet connection, VPN, and the Intranet connection easily. Firewall/NAT (Network Address Translation) Virtual system 8

10 9

11 Service Menu Outline Category Menu Description Virtual Subnet Provide a private IP address. It enables communication between VMs in the system template. Network Firewall NAT (Network Address Translation) Update Servers Provide a Firewall function which controls the communication with the Internet and between virtual subnets. Provides a display of session logs. Provide a NAT function for global IP address communication. Provide accesses to both WSUS server for Windows update and yum repository server for CentOS update. Monitor Hardware monitoring VM Health Checking Monitor the failure of hardware. It automatically reboots VMs at different server and notifies by when failure is detected. Monitor the running status of the VM. Service Portal Design Studio Dash Board Modify configuration of the system, deploy the system, specify/changes the system settings. Operate the system and confirm the status of the system. 10

12 Network Layer Types Subnet Firewall-controllable traffic Conceptual diagram 1-Tier Internet <-> DMZ Internet DMZ 2-Tier Internet <-> DMZ DMZ <-> Internal netk1 Internet DMZ Internal net1 Internet DMZ 3-Tier Internet<->DMZ DMZ<->Internal net1 DMZ<->Internal net2 Internal net1<->internal net2 Internal net1 Internal net2 Provide firewall by default. One firewall can control traffic of not only between Internet and Intranet but also between intranets. 11

13 VM Type Type CPU Performance index *1 Number of virtual CPU *2 Memory (GB) Economy Standard Advanced High-performance *1:Appropriately Xeon 1.0GHz (in 2007) per CPU Performance index 1 *2:Number of virtual CPUs could be varied in future requirements Since CPU resource is statically assigned to each VM, VM usage does not affect other VM s performance. Disk Capacity(GB) System Disk OS is installed to the system disk. The space requirement varies by OS. (The capacity above is maximum before installing OS.) System disk will be deleted when VM is deleted. An additional disk is available for customer s data. Windows Installed OS Windows Server Windows Server 2003 R2 SE/EE SP2 32bit Windows Server 2008 SE 32bit SP2 Windows Server 2008 R2 SE 64bit Windows Server 2008 R2 EE 64bit (SP is continually-updated) Linux CentOS CentOS 5.x 32/64bit (free) Provide OS by selecting the System Templates. Version 12

14 System Template Service Service Menu Description System Template Service Provide templates to create multi-layer subnet system by a few clicks. OS and middleware are included and basic network settings are configured by default. Access to the system from the Internet only by firewall settings. Example for 3-Tier system template. Customers can deploy 3 Tier system as diagram below. Customers can select a wide variety of system templates. DMZ WEB WEB WEB Inside1 AP AP Templates Web/DB CentOS [5.4/32bit/2-tier] CentOS5.4 32bit OS/software Inside2 DB Web/DB Windows [2003 SE/SP2/2-tier] Web/DB Windows [2008 R2 SE/2-tier] Windows2003 R2 SE 32bit SQL Server 2008 SE Windows Server 2008 R2 SE 64bit SQL Server 2008 SE Examples of the Template 13

15 Middleware Service Service Menu Description Middleware Service Microsoft SQL Server 2008 SE Microsoft SQL Server 2008 EE Provide VMs with middleware installed. (*) * Provide installer file and media data. 14

16 Network Service Service Menu Internet Connection Service FENICS VPN Connection Service DC Internal Connection Service Description Provide the Internet connection for VMs. Provide the SSL-VPN connection via the Internet to the OViSS s virtual system. By using Fujitsu s FENICS service, provide a connection between OViSS and customer side by VPN. Provide Fujitsu DC internal connection for customers using Fujitsu DC Outsourcing Service.(*) Provide a connection between internal system in DC and OViSS system. Global IP address Service Load-balance Service Provide up to 10 global IP addresses to access from the Internet. Provide internally/externally load-balancing system. Load balancers maintain a session (with SSL) and Error page functionality. * This service is only available in Tatebayashi DC in Japan as of Oct

17 Internet Connection Service Image of Internet connection Internet Clients Configure firewall using Service Portal. Service Portal Global IP address G1 G2 G3 Address Translation P1 P2 P3 Private IP address Rapid to build a connection to the Internet Virtual system No requirement for customers. Translate global IP address into private IP address by the configuration of firewall. 16

18 FENICS VPN Connection Service Image of FENICS-VPN Service connection FENICS Network Customer Environment FENICS Business Network Business IP Business Ethernet Business VPN Virtual system Connect customer s local network with virtual platform in OViSS through FENICS Service. Customer can access to VMs as if they are located in local network. 17

19 DC Internal Connection Service Image of DC internal connection service Customer network in Fujitsu DC Internal network in Fujitsu DC Virtual system * Available DC : Fujitsu Tatebayashi DC 18

20 Load Balance Service Balancing Requests Dispatch requests according to balancing rule Maintain Session Request may be dispatched to different server, inconsistency in the reply may occur. Without session preservation Monitoring Load Balancer With session preservation Continuous Service Load Balancer Dispatch requests from the same user to the same server so that inconsistency does not occur. Monitoring server s health. Disconnect from load balancer when a failure Is detected. error Disconnect from load balancer manually for maintenance. Maintenance Join to load balancer after finishing maintenance. Online Load Balancer Load Balancer Load Balancer Load Balancer 19

21 Storage Service (1) Service Menu Description Additional Disk Service 10GB to 1TB capacity per an additional disk. (Data is encrypted when written on a physical disk) Easy to add another disk or switch connection when needed. Scale out/switch connection to another VM. DMZ Inside1 Attach/detach Add a disk when needed Additional Disk Service... Inside2 Re-attach to another VM. Example: Easily migrate data to higher performance server. Disk Stand-by area Reserved area for unconnected disks. 20

22 Storage Service (2) Service Menu Description Disk Service for System Backup Provide a disk for system backup. Backup VM system disk by copying the entire disk. (*1) This service is available when you perform backup operation from Web. It is possible to generate multiple generation backup files. (*2) Disk Service for Additional Disk Backup Provide a disk for additional disk backup. Backup additional disk by copying the entire disk. (*1) This service is available when you perform backup operation from Web. It is possible to generate multiple generation back up files. (*2) *1 : Backup files can only be restored to original volume. Backup files are deleted automatically when original volume is deleted. *2 : User can manage any generation of backup files. 21

23 22

24 Service Portal Outline Notices / Maintenance Info Menu List Login New Account Service Portal screen 23

25 Screen after login Service Portal Menu List Notice Window Start-up Window Minimized Windows Screen after login 24

26 Design Studio Initial System Deployment System template selection. VM addition, removal, spec change. Addition, removal and reconfiguration of firewalls, etc. Addition, creation and removal of options. Configuration Changes to Running Systems VM addition, removal and spec change. Addition, removal and reconfiguration of firewalls, etc. Addition, creation and removal of options. 25

27 Building a New System - Flow Step1 Search for system templates Select system template Step2 Name the system template Select connection type (Internet/private network) Step3 Create/delete/modify VMs Create/delete/modify options Step4 Confirm estimation Save the estimation Step5 Accept the service agreement Deployment process Start to deploy system after confirming. 26

28 Building a New System (Step 1 - Step 2) Step 1. Select a template by objective. Template Search Refine by keyword and approximate cost Template List Template Details Template Creation Screen System Name Input Network Type Selection Step 2. Specify network environment. 27 System Name Screen

29 Building a New System (Step 3 - Step 4) Step 3. Modify system config. as necessary. System Outline Diagram Details for Virtual Systems etc. VM spec change and VM deletion are possible. Attachable Appliance Group Attachable by drag & drop to the system outline diagram. System Build/Change Screen Estimation Results An estimate of the cost from 31 days continuous usage can exported to PDF or saved. Saved estimations can be re-opened. Step 4. Confirm estimate. 28 Estimate Confirmation Screen

30 Building a New System (Step 5 - Start Deployment) Step 5. Agree to service usage contract. Service Usage Contract Service Usage Contract Screen Ready to start deployment. 29

31 Dashboard Display Running Status Display Billing Status Resource Operations Reporting VM status display. Resource usage status display (CPU/disc usage, etc) Current and historical status can be displayed. Current month s charge details (Total, Per-VM). Historical details up to 12 months. Start/stop VMs. Execute backup/restore disks. Register Certificates in Load Balancing Service. Resource usage/billing status in CSV file. Monthly report in PDF format (configurable contents). 30

32 System Summary Screen Shot Operation Buttons Show system details System Summary System Summary (Composition View) VM Summary Operation Buttons VPN Console, System composition change, Return System Status 31

33 VM Summary Screen Shot Operation Buttons VM bootup/shutdown VM/Disk backup / restore VM Summary Displays various VM info. - VM status - VM name - IP address - Backup/restore status - Number of backups etc VM Summary Screen Backup Data Summary Summary of stored backup data Operation Buttons Start backup Start restore Delete backup data Backup History 32 Backup Screen

34 33

35 Cloud API Image of usage Development of original apps by the API The same operations as the Design Studio and the Dashboard can be executed via the API. (ex. VM deploy, shutdown, bootup, backup, etc) Developers System Virtual system Automation/systematization of operations is possible. Service providers can build original services. 34

36 API Usage Scenario User operation automation/systemized processing. Automation/systematization of Administrative operation - Scale up/down based on schedule or load, automated processing of backups, etc. - Develop new portals implementing only necessary functions. - Develop mobile-device-specific portals. Building of a branded service by a third-party. Selling via Original Brand - High-Level (PaaS/SaaS) service Operator System Administrator Service provider s clients Use of Only necessary function Mobile use Tool development Service use Service provide Original portal Portal for mobile Automation tools Service Provider Service (Third party) Service use (API) Service use (API) Service provide OViSS OViSS 35

37 Customer Benefits from Cloud API Standardization Due to the standardization of Cloud APIs, customers would be able to choose from a broad selection of cloud computing service vendors, or use their own facilities. They are not locked in one particular cloud provider. Cloud Computing has 2 types: Public/private cloud - Customer uses the ICT system resources as a service by a provider. Enterprise Cloud - Customer owns the ICT system and builds/installs/configures it. Many service providers offer these 2 types of cloud system. While Cloud Computing propagate throughout the world, it is possible to lose the ease of use for users because multiple cloud APIs exist. Therefore, to increase ease of taking advantage of cloud computing, The Open Cloud Standards Incubator" has been established to promote Cloud API standardization associated with the world's leading IT vendors. Fujitsu, today, has joined the leadership board of the Open Cloud Standards Incubator in the DMTF (Distributed Management Task Force). The Open Cloud Standards Incubator was formed as part of the DMTF Standards Incubation process, which enables like-minded DMTF members to work together and produce informational specifications that can later be fast-tracked through the standards development process. It now consists of 37 major IT companies such as IBM, Microsoft, VMware etc. By joining the leadership board, Fujitsu applies knowhow of the 'Trusted-Service Platform' the Cloud Service Infrastructure provided by Fujitsu, and is promoting Could Computing standardization, promoted by the 'Open Cloud Standards Incubator'. Fujitsu and Fujitsu Laboratories Ltd. has submitted a proposal Cloud API specification(interface for deployment of ICT resource in the cloud, configuration, deletion) to the DMTF. We will contribute to standardization of the API. 36

38 Examples of Cloud API (1) Operations of Virtual System Name of API Description Name of API Description DestroyVSYS GetVSYSStatus Delete the virtual system. All resources in the virtual system are discarded and becomes invalid. Obtain a status information of the virtual system. ListVServer CreateVDisk Obtain a list of all VM IDs in the virtual system. Create additional disks in the virtual data center. Users can attach those created additional disks to the VMs. GetVSYSConfiguration GetVSYSAttributes UpdateVSYSAttribute Obtain a configuration information of the virtual system. Obtain an attribute information of the virtual system. Update an attribute information of the virtual system. ListVDisk Obtain a list of all additional disk IDs in the virtual data center. The list indicates whether additional disks are attached to the VM or not. CreateVServer Create a VM in the virtual system. Specifying the ID of the disk image, which is used for initial contents of the boot disk, is required. Request message is encoded in UTF-8. 37

39 Examples of Cloud API (2) Operations of Virtual Machine Operations of Additional Disk Name of API Description Name of API Description DestroyVServer StartVServer StopVServer Delete a VM. Start OS of the VM. Stop OS of the VM. DetachVDisk BackupVDisk Detach an additional disk from the VM. Start a backup of additional disk. The created backup is copied to the newly-created backup disk. GetVServerStatus GetVServerAttributes UpdateVServerAttribute GetVServerInitialPasswor d AttachVDisk DestroyVDisk Obtain a status information of the VM. Obtain an attribute information of the VM. Update an attribute information of the VM. Obtain an administrator s initial password of the OS in the VM. Attach an additional disk to the VM. Delete an additional disk as well as the saved data in the disk. RestoreVDisk ListVDiskBackup GetVDiskStatus GetVDiskAttributes UpdateVDiskAttribute Copy the contents of additional disk s backup to the another additional disk. Obtain a list of the additional disk s backups. Obtain a status information of the additional disk. Obtain an attribute information of the additional disk. Update an attribute information of the additional disk. 38

40 Examples of Cloud API (3) Operations of Template Operations of Built-in Server Name of API Description Name of API Description UnregisterVSYSDescripto r GetVSYSDescriptorConfig uration GetVSYSDescriptorAttrib utes Cancel a registration of the template. Obtain a configuration information of the template. Obtain an attribute information of the template. CreateEFM ListEFM DestroyEFM StartEFM Create a built-in server. Obtain a list of the built-in server. Delete a built-in server. Start a built-in server. StopEFM Stop a built-in server. Operations of Disk Image Name of API UnregisterDiskImage GetDiskImageAttributes Description Cancel a registration of the disk image from the virtual disk center. Obtain an attribute information of the disk image. GetEFMStatus GetEFMAttributes GetEFMConfiguration UpdateEFMAttribute UpdateEFMConfiguration Obtain a status information of the built-in server. Obtain an attribute information of the built-in server. Obtain a configuration information of the built-in server. Update an attribute information of the built-in server. API of this version can update the built-in server name only. Update a configuration information of the built-in server. 39

41 Examples of Cloud API (4) Operations of Virtual DC ( * ) Operations of Global IP Address Name of API Description Name of API Description ListVSYSDescriptor CreateVSYS ListVSYS AllocatePublicIP Obtain a list of the template in the virtual data center. Create a virtual system based on the template. Obtain a list of the virtual system in the virtual data center. Allocate the global IP address. FreePublicIP AttachPublicIP DetachPublicIP GetPublicIPStatus Release a global IP address. Attach a global IP address to the virtual system. Detach a global IP address from the virtual system. Obtain a status information of the global IP address. ListPublicIP ListDiskImage Obtain a list of all global IP addresses in the virtual data center. Obtain a Disk Image ID in the virtual data center. GetPublicIPAttributes Other Operations Obtain an attribute information of the global IP address. Name of API StandByConsole Description Prepare a connection with the console. (*) A hypothetical data center on the cloud where users can create and use virtual systems. 40

42 41

43 Considerations of Charges and Payment Requests Charge for the usage of the various resources and functions. Refer to an attachment for each service s unit price. Operating time is rounded up to the next Hour. ex. Operating time : 1H 45M -> 2H Network traffic is rounded down to the previous GB. ex. Network traffic : 31.5GB -> 31GB Charge from the start point in usage of the resource/function. The same as when the resource type is changed. The charging system varies by the service used. (Details from next page onward.) Where several systems exist within one contract, per-system charge totals are calculated, then included in a single bill. 42

44 Charging System Type Charging System Description Service TYPE- I Rate-based (1-hour units) Charge corresponding usage time. For VMs, the unit price varies with type. - VMs - Global IP address Service - Load Balancing Service TYPE- II Rate-based (Monthly) Charging is performed even for a single usage. (Independent of number of VM CPU) TYPE- III Rate-based (Monthly and Number of CPUs) Charging is performed even for a single usage. (Dependent on number of VM CPU) TYPE- IV Rate-based (Time and Capacity) Perform charging according to [Usage period x Guaranteed capacity]. (Capacity is the guaranteed capacity) - VM OS Environment [Microsoft Windows Server] - VM Middleware Environment [Microsoft SQL Server] - System Disk Offer Service - Additional Disk Service - Template Storage Service - Disk Service for System Backup - Disk Service for Additional Disk Backup TYPE- V Usage amount Charging performed on the basis of usage. -Internet connection service (Include the usage amount of SSL-VPN connection service) TYPE- VI Usage counts Charging performed by each single use of the service. Unit price varies by template type (network class). - System Template Service (Only at first time of new system creation) 43

45 Usage Period Considerations [1-Hour Unit] Usage time is calculated by summing minutes of actual usage. Totals are rounded up to the next hour (1-59 min). Example : 15:10 15:35 16:20 17:10 20:00 20:30 15:00 16:00 17:00 18:00 19:00 20:00 21:00 25min 50min 30min Round up Usage Period : 25min + 50min + 30min = 105min (1H45M) -> 2 Hours 44

46 45

47 Service Level Coverage of redundancy Object Description VM Virtual Storage (System, Data) Provide automatic failover. In the case of a physical server fault, a new VM is automatically assigned and booted. Data being processed at the time of fault is not guaranteed. Copies of data are maintained across 4 physical disks. Even in the case of 3 simultaneous physical disk failures, data is not lost. All data is stored in the same DC. Internet connection Fully redundant. Switchover time for equipment failure within one minute. Target SLA Availability of offered virtual resource: 99.9% (except maintenance hour) 46

48 N.B. (Other Notes) On-Site operations Customers cannot perform installations or setups in the DC. All operation is remotely accessible. Maintenance The security on the VMs is responsible to the customers. Data deletion at time of deleting VM Data in the system disk will be deleted by deletion of the VM. Data in an additional disk will be deleted by deletion of the disk. Back up disks will be deleted when its system disk or additional disk deleted. We use zero write method to delete data,. Requirements (Service Portal) Resolution : 1280 x 1024 or better (recommended), 1024 x 768 (min.) OS : Windows XP SP3 (32bit), Windows Vista SP2 (32bit) Browser : Internet Explorer 7/8 Flash Player : Adobe Flash Player 10 Java Runtime Environment : JRE 6.0 or better 47

49 Security Stipulations Data center VMs run in Fujitsu in-country DCs. All data is stored internally to Fujitsu DCs. Administrator privileges Fujitsu does not retain administrator privileges on VMs deployed by the customers. Security updates Security updates for OS and middleware of the VM are applied by customer. Security updates for hypervisor, admin OS, network equipments, and storage are applied by Fujitsu. 48

50