Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme

Size: px

Start display at page:

Download "Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme"

Shannon Webb
6 years ago
Views:

1 LHC3174BE ware Cloud on AWS: An Architectural and Operational Deep Dive J. Christopher Wagner Robert Bosch #world #LHC3174BE

2 Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from ware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. #LHC3174BU CONFIDENTIAL 2

3 ware Cloud on AWS Architectural Overview Level setting The big picture The Store Window The console The vcenter permissions model The Raw Materials The Factory Floor Day in the (death of) a host #LHC3174BU CONFIDENTIAL 3

servers, storage, networking AWS Cloud 1 2 3

not commodity s Installation, patching, and

Cloud-only deployment options Leverage cloud

cloud capacity lets customers scale on demand

4 C: SDDC as a Service on AWS Customer datacenter ware SDDC as a Service AWS cloud servers, storage, networking AWS Cloud Key Concepts Managed SDDC stack hosted on public clouds Converged compute (ESXi), storage (VSAN), network (NSX) SDDC clusters, not commodity s Installation, patching, and upgrades managed by ware Consistent operational model enables hybrid cloud Managed via vcenter including full API and CLI support Seamless workload mobility on-prem/cloud and cloud/cloud Hybrid and Cloud-only deployment options Leverage cloud economics aligning capacity & demand Elastic cloud capacity lets customers scale on demand Dedicated, single tenant, secure Single bill for ware software + Cloud capacity #LHC3174BU CONFIDENTIAL 4

5 The Store Window Console and vcenter

6 The C Console #LHC3174BU CONFIDENTIAL 6

7 Orgs (Organizations) Flexible Container for: Authentication (including federation) Authorization (OrgOwners control RBAC for OrgMembers) Service access and subscriptions Simply put: A user can be a member of one or more Orgs A user can have different roles in different Orgs An Org can be associated with one or more services A user can have different roles for different services within an Org UX Users work in the context of a single Org has switcher built in Currently not federated with SSO #LHC3174BU CONFIDENTIAL 7

8 #LHC3174BU CONFIDENTIAL 8

9 vcenter Permissions Guiding principles YES Retain control of all management and infrastructure components All else consistent with standard vcenter Ops, vapp Resource Customer Datastore* Network* (logical networks) SPBM Content Library Tagging Folder, System, Alarm* NO Host Datacenter Mgmt Datastore Network (physical) Cluster NO (in design) SMP-FT vmcrypt VIBS H5 Plugins #LHC3174BU CONFIDENTIAL 9

10 The Raw Materials

11 ware Cloud on AWS: Architecture vcenter On-Premises Hybrid Networking VPN Hybrid Linked Mode Single Pane of Glass UI, Hybrid Provisioning CSP SaaS Identity Billing Subscription C PoP NSX vcenter ware-owned VPC C Console AWS Driver Provisioning, Lifecycle, Operations ESX I3 ESX I3 vsan Fleet Mgmt Metrics, Logs, Events, Billing HA/DRS SRE/OI ESX ESX ESX ESX I3 I3 I3 I3 Metrics Logs Alerts ELB RDS S3 Customer- Owned VPC #LHC3174BU CONFIDENTIAL 11

12 #LHC3174BU CONFIDENTIAL 12

13 ware Cloud on AWS: The Cloud Data Center vcenter On-Premises Hybrid Networking VPN Hybrid Linked Mode Single Pane of Glass UI, Hybrid Provisioning CSP SaaS Identity Billing Subscription C PoP NSX vcenter ware-owned VPC Provisioning, Lifecycle, Operations ESX C Console AWS Driver Fleet Mgmt ESX HA/DRS vsan Metrics, Logs, Events, Billing SRE/OI ESX I3 I3 I3 Metrics Logs Alerts ELB RDS S3 Customer- Owned VPC #LHC3174BU CONFIDENTIAL 13

14 SDDC Deployment Architecture Single SDDC software stack per Cloud Data Center Management appliances run on the customer s cluster Protected using hard resource reservations and permissions Hosts organized into a HA/DRS/vSAN cluster Minimum of 4 hosts per cluster vcenter Server Appliance with Embedded Platform Services Controller Agent/PoP: Native EC2 deployed alongside the SDDC Service functionality that needs to run in the SDDC environment: deploy, log/metric filtering Jumpbox for accessing the management network for troubleshooting #LHC3174BU CONFIDENTIAL 14

15 New vcenter Features for C Hybrid Linked Mode Single pane of glass spanning on-premises and cloud Works across different administrative domains Works across different SDDC versions Pod Service Orchestration of operations that span vsphere/vsan/nsx Add/remove host Patch/update/upgrade SDDC Add/remove cluster (future) Backup/Restore Mgmt appliances prior to patch Mgmt appliances periodic #LHC3174BU CONFIDENTIAL 15

ware Cloud on AWS Default Networking Components Management Infrastructure Management GW (NAT, FW, VPN, DNS) Default Compute GW (NAT, FW, VPN, DHCP, DNS) Workloads on logical

16 ware Cloud on AWS Default Networking Components Management Infrastructure Management GW (NAT, FW, VPN, DNS) Default Compute GW (NAT, FW, VPN, DHCP, DNS) Workloads on logical networks DLR N-S Internet Traffic Internet GW AWS Network ware Cloud on AWS Networking (NSX) Default / / / /24 #LHC3174BU CONFIDENTIAL 16

17 The Factory Floor Day in the (death) of a host

18 The Players VPC/ESX vcenter + ESX VPC/PoP fm-monitoring-agent SaaS MQ SaaS Alert Processing Engine SaaS Service Desk (ticketing) SaaS Autoscaler SaaS Provisioning Engine VPC/ESX Pod VPC/ESX vcenter #LHC3174BU CONFIDENTIAL 18

19 Failed Host Remediation FMA -> ESX (/30s) (critical services) ESX -> VC (/minute) (misses 2 -> alert) VC POD Install FMA -> VC (/30s) (alerts) MQ world 2017 Content: Not for Console/provision Autoscaler ES Historical APE Stream + historical + debounce Checks: Verify Standby/maint Remediate: Reboot Add host Re-verify VSAN rebuild Garage old host for triage Service Desk publication AWS #LHC3174BU CONFIDENTIAL 19

20 Autoscaler Injecting vcenter Events #LHC3174BU CONFIDENTIAL 20

21 SDDC-SRE Team Dedicated team handling SDDC mgmt and infrastructure alerts Fully integrated with alerting, service desk RTS service: Automated runbooks Manual runbook accelerators Provides auditable access to customer infrastructure #LHC3174BU CONFIDENTIAL 21

Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme

Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme STO1498BU Tech Preview: Disaster Recovery with ware Cloud on AWS world 2017 Content: Not for publication Ben Meadowcroft, ware @BenMeadowcroft GS Khalsa, ware @gurusimran #world #STO1498BU Disclaimer This