Friday, July 17, Huawei FusionSphere 5.1 virtualization Technical Promotional Theme Slides (Detailed Version)

Friday, July 17, 2015 Huawei FusionSphere 5.1 virtualization Technical Promotional Theme Slides (Detailed Version)

Contents 1 2 3 FusionSphere 5.1 Overview FusionSphere 5.1 Features Product Support 5

Huawei FusionSphere 5.1 Architecture Huawei Open API Cloud Storage API SNMP/REST NBI FusionManager Resource Management Configuration API Adapter Cloud Storage Management VDC/VPC Open API Third-party Virtualization Architecture VMware vsphere Huawei Virtualization Architecture FusionCompute FusionStorage FusionNetwork Backup & DR UltraVR ebackup FusionSphere SOI RBAC Portal Alarm Physical Infrastructure Server Storage Network & Security Log 6

FusionSphere 5.1 Enhancements Category Feature Enhanced/New Computing virtualization VM Lifecycle Management Shared Nothing VM Live Migration VM Cloning Large VM Memory CPU Virtualization Large-Scale Physical Server Support for 1024 Powered-On VMs on a Single Server Support for UEFI Firmware on VMs Online CPU and Memory Resource Modification Host-based Replication DR Backup and disaster recovery (DR) VM Backup Self-Service and Self-Maintenance, Service Catalog and Service Service Definition, Out-of-the-Box Service Catalog, Service Application Approval, Application Form Management, Custom Approval Procedure FusionSphere SOI Root Cause Analysis Capacity Report Enhanced Enhanced Enhanced Enhanced Enhanced Enhanced Enhanced New Enhanced Enhanced Enhanced New New New 7

What's New in FusionSphere 5.1 Computing Virtualization VM Lifecycle Management (Enhanced) In FusionSphere 5.0, a VM can start only after the BIOS successfully starts. FusionSphere 5.1 eliminates this restriction and allows a VM to start even when the BIOS has not waited, thereby reducing VM startup time by 5 seconds. Shared Nothing VM Live Migration (Enhanced) The VM migration enhancements allow you to: Change both the host and data store of a VM with snapshots created. Specify the destination disk mode. The destination disk can be in the common, thin provisioning, or thick provisioning lazy zeroed mode and can be in the same or different modes with the source disk. Query the progress of a migration task. Cancel a migration task. VM Cloning FusionSphere supports cloning of either a running or stopped VM when FusionStorage is used. Support for UEFI Firmware on VMs FusionSphere 5.1 supports use of Unified Extensible Firmware Interface (UEFI) firmware on VMs. With this function, you can migrate a system disk larger than 2 TB from a physical server to a VM by setting UEFI boot firmware and the GPT partition. Online CPU and Memory Resource Modification (Enhanced) FusionSphere 5.1 allows you to add CPU and memory resources to or reduce the resources from a running VM. For some OSs, you need to restart the VM for the CPU and memory resource modification operations to take effect. 8

What's New in FusionSphere 5.1 Backup and DR Host-based Remote Replication DR (Enhanced) FusionSphere 5.1 enables one-click service switchover between the production and DR sites. VM Backup (Enhanced) FusionSphere 5.1 provides the LAN-free mode backup and file-level data restoration. 9

What's New in FusionSphere 5.1 Self-Service Capabilities Self-Service and Self-Maintenance FusionSphere 5.1 enables users to perform common service operations using service catalogs and enables VDC administrators to perform routine operation and maintenance (O&M) on the portal provided for tenants. Out-of-the-Box Service Catalog Featuring out-of-the-box, the service catalog pre-defined in the FusionSphere system enables you to quickly deploy resources and applications based on service requirements. Service Application Approval, Application Form Management, and Custom Approval Procedure FusionSphere 5.1 allows you to view administrator-defined services in service catalogs on the self-service portal. You can select services based on your service requirements and submit service applications. When applying for a service, you can also specify service specifications and the validity period. Tenants and administrators can query application form status and progress and approve service applications. Users can customize the approval procedure based on service requirements. 10

What's New in FusionSphere 5.1 FusionSphere SOI Root Cause Analysis FusionSphere 5.1 introduces a new component, FusionSphere SOI, to perform in-depth analysis of performance anomalies, to quickly identify the cause for performance deterioration, and to locate workload that may adversely affect performance. FusionSphere SOI also provides historical information about health status indicators associated with an event and displays the performance change trend in graphics to facilitate fault locating and rectification. Capacity Report FusionSphere 5.1 allows reports to be generated by different granularities to display VM, host, and cluster performance and capacity data and prediction results. A report can contain graphics, tables, and text descriptions. 11

Industry-Leading Comprehensive Virtualization Performance SPECvirt_sc2010 Test Results Published by SPEC in 2014 http://www.spec.org/virt_sc2013/results/specvirt_sc2013_perf.html Hypervisor Server Processor Number of SPECvirt VMs SPECvirt Score Ranking Huawei FusionSphere 5.0 ProLiant DL380p Gen8 Intel Xeon E5-2690 37 632 1 Red Hat Enterprise Linux 6.4 (KVM) Flex System x240 Intel Xeon E5-2690 37 625 2 VMware ESXi 5.1 ProLiant DL380p Gen8 Intel Xeon E5-2690 27 472 3 Oracle DB Performance Test: Huawei vs. VMware Key Technologies for High I/O Provided by FusionSphere Oracle Database Performance Test Result (Average Value) VM Configuration Huawei TPM VMware TPM Difference Single VM (8 vcpus and 8 GB RAM) without multipathing Two concurrently running VMs (each with 8 vcpus and 8 GB RAM) Single VM (8 vcpus and 16 GB RAM) without multipathing Single VM (8 vcpus and 16 GB RAM) Two concurrently running VMs (each with 8 vcpus and 16 GB RAM) 179474 175580 +2.20% 109710 111447-1.56% 198404 185858 +6.75% 177765 175580 +1.24% 128302 117520 +9.17% I/O request optimization Optimized storage multipathing I/O scheduling optimization FusionCompute automatically increases the number of I/O requests that a VM can process based on the Oracle database read/write capacity and reduces service load by a half. Storage multipathing is optimized to greatly reduce the latency caused by I/O path selection for VMs. The virtualization I/O scheduling algorithm is optimized to reduce the overheads of the virtualization platform in computing scheduling, thereby improving VM I/O processing capabilities. 12

Huawei FusionSphere 5.1 Key Performance Indicators Physical Server/VM Performance Indicator Value Max. number of vcpus (virtual SMP) per VM 128 Max. memory size per VM 4 TB Max. virtual disk capacity per VM 64 TB Max. number of virtual disks per VM 60 Max. number of virtual NICs per VM 12 Max. number of logical CPU cores per physical server 480 Max. memory size per physical server 12 TB Max. number of powered-on VMs per physical server 1024 13

Huawei FusionSphere 5.1 Key Performance Indicators Management Indicator Value Max. number of physical servers per logical cluster 128 Max. number of VMs per logical cluster 3000 Max. number of logical clusters supported by a VRM node 32 Max. number of hosts supported by a VRM node 1024 Max. number of VMs supported by a VRM node 10,000 Max. number of VRM nodes that can be cascaded 16 Max. number of physical servers supported by cascaded VRM nodes 4096 Max. number of VMs supported by cascaded VRM nodes 80,000 (best practice in the industry) 14

Contents 1 2 3 FusionSphere 5.1 Overview FusionSphere 5.1 Features Product Support 15

FusionSphere 5.1 Features 2 FusionSphere 5.1 Features 1 2 3 4 5 6 7 8 9 10 Computing Virtualization Storage Virtualization Network Virtualization Migration and Availability Backup and Disaster Recovery Installation and Deployment Security Compatibility and Interconnectivity Cloud Management Virtual Data Center Services 16

Compatible with OSs Intended for Special Application Scenarios FusionCompute control domain VM VM VM VM VM VM Custom PV backend driver PV driver PV driver PV driver PV driver PV driver PV driver FusionCompute Vendors must provide applicable PV drivers to enable FusionCompute to be compatible with a new OS. Huawei is capable of developing applicable PV drivers. In addition to mainstream Windows and Linux OSs, FusionCompute is compatible with the NeoKylin OS. (Certain OSs may need customized drivers.) 17

Flexible Management and Optimal Scalability FusionCompute Web Client FusionCompute Web Client VRM nodes for cluster management (active/standby) VM VM VM VM VM VM VM VM VM VM VRM nodes for cluster management (active/standby) VRM nodes for cluster management (active/standby) CNA CNA CNA CNA CNA VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM SAN Local storage CNA SAN CNA CNA CNA CNA Local storage CNA CNA Local storage CNA CNA SAN CNA Logical cluster 1 Technical features & benefits Logical cluster 2 Logical cluster 10 Logical cluster 11 Logical cluster 20 Logical cluster 21 Each logical cluster supports up to 128 physical servers, which is the industry best practice. FusionSphere reduces the number of redundant physical servers and is suitable for deploying large-scale service clusters requiring high performance. Each logical cluster supports up to 3,000 VMs, which makes FusionSphere applicable to scenarios requiring a large number of VMs that do not have high performance requirements, such as in desktop cloud scenarios. VRM nodes can be deployed in active/standby mode on both physical servers and VMs to ensure system availability. Up to 16 VRM nodes can be cascaded. Cascaded VRM nodes support up to 4,096 physical servers and 80,000 VMs, which is the industry best practice. 18

GPU Virtualization VM 1 VM 2 VM 3 vgpu driver vgpu driver vgpu driver vcpu support Huawei UVP vgpu vgpu GPU vgpu Implementation GPU virtualization is to create multiple vgpus on a physical GPU that supports virtualization. vgpus can be attached to each VM to allow the VM to directly access hardware resources of the physical GPU. Technical features Provides GPU virtualization based on NVIDIA GRID and improves user experience on graphics-intensive applications. Supports vgpu management and scheduling to balance load of physical GPUs. Supports the OpenGL and DiretX multimedia application programming interfaces (APIs). Supports AERO visual effects, multiple monitors, and hardware-based performance acceleration for DXVA videos. Application scenarios VMs running engineering drawing software, such as Pro/ENGINEER, CATIA, and AutoCAD, and graphics rendering software, 3D games, and GIS applications Industrial design, multimedia editing, energy industry, financial service and trade, medical imaging, and education industry Benefits Improves user experience on graphics-intensive applications in a virtual environment. 19

Flexible VM Configuration Modification VM Virtual resource pool App FusionCompute Function details vram: Hot and cold add and remove vcpu: Hot and cold add and remove Technical features FusionSphere 5.1 enables you to change the number of vcpus on a VM and its memory size when the VM is running. The changes take effect immediately and do not need the VM to be restarted. For a VM running an OS that does not support vcpu or vram hot add or remove, you must restart the VM to make the modifications take effect. Application scenarios The number of vcpus on a VM and the VM memory size need to be flexibly adjusted based on service requirements. Benefits Flexibly adjust VM configurations based on service requirements. Add vcpus and vram to expand capacity of a VM based on VM QoS requirements. Add VMs to expand capacity of a cluster based on cluster QoS requirements. 20

Memory Overcommitment, Improving VM Density by 30% Memory sharing and copy-on-write VM 1 VM 2 VM 3 VM Memory swapping VM Memory ballooning VM 1 VM 2 Idle Memory ballooning Idle Used Physical memory Disk Used Memory sharing: Multiple VMs share the same physical memory block (marked in blue), and the VMs only read data from the memory block. Copy-on-write: When a VM needs to write data to its memory block, another memory block (marked in red) is allocated to the VM to write the data and the mapping between the allocated block and the VM is created. Technical features 21 Memory swapping: The memory data that is not retrieved by the VM for a long time is swapped to a disk, and a mapping between the memory data and the disk is created. When the VM needs to access the memory data again, the memory data is swapped out from the disk back to the memory block. Memory ballooning: The hypervisor uses the memory ballooning mechanism to release the idle memory on a VM and allocate the memory to another VM with high memory usage, thereby improving memory utilization. By leveraging the preceding memory overcommitment techniques, Huawei FusionSphere increases the memory overcommitment ratio by 130%, which makes Huawei overtake its competitors in terms of memory utilization, such as Citrix. Benefits With the same memory resources, the VM density of the FusionSphere platform increases by 130%, which helps to reduce procurement costs on memory components by 30%.

NUMA Affinity-based Scheduling Implementation The NUMA topology is presented to VMs to enable the guest OS to allocate resources to applications running on it based on logical NUMA nodes, thereby improving application performance. Technical features Guest NUMA implements NUMA-topology-based optimizations and enables a CPU to preferably use memory resources on one NUMA node. Application scenarios Large-size and high-performance VMs are required. VMs run key applications, such as Oracle and SQL Server databases. Benefits Reduces memory access latency and improves VM access efficiency, thereby improving application performance. 22

Thin Provisioning, Cutting Storage Investments VM VM VM VM Common 20 GB FusionCompute Physical storage device Thin provisioned 40 GB 20 GB 20 GB 100 GB Thin provisioned 80 GB 40 GB Virtually allocated: 120 GB Actually allocated: 80 GB Physical space: 100 GB Implementation Thin provisioning operates by allocating disk storage space to users based on the minimum space required by each user at any given time. Only the disk space actually used by a user is allocated to the user, and FusionCompute increases disk space allocated to users with the increase of data on user disks until all disk space requested by the users are allocated to them. Technical features The configured capacity is displayed for VM users. However, the allocated disk space is dynamically adjusted based on actual usage. Disk usage is monitored, and alerts are generated if the allocated disk space is about to become insufficient. Disk space reclamation is supported. Application scenarios Large storage capacity and low IOPS are required. Benefits Improves storage space utilization and lowers storage costs. 24 Page 24

Online Virtual Disk Capacity Expansion VM VM VM VM FusionCompute FusionCompute SCSI Implementation This function enables you to expand disk capacity without stopping or restarting the VM. Technical features This function is based on Virtual Hard Disks (VHDs). The newly added virtual disks take effect without requiring the VMs to be restarted. Application scenarios On-demand, scalable disk capacity expansion is required. Benefits This feature avoids unnecessary service interruption and ensures service continuity. 25

RDM for SAN Devices VM VM VM VM Implementation Raw device mapping (RDM) provides a mechanism for a VM to have direct access to a LUN on IP SAN or FC SAN devices. RDM enables VMs to identify SCSI disks. FusionCompute Technical features VMs can read data from or write data to physical storage devices through SCSI commands. Supports both IP SAN and FC SAN devices. SCSI SCSI Application scenarios Applications requiring high storage performance, such as Oracle RAC SAN storage device Benefits LUN LUN LUN RDM enables applications requiring high storage performance to be deployed on VMs. 26

VM Snapshot Memory CPU Disk Read/write redirection CPU and memory snapshot Delta disk VM VM snapshot 1 VM snapshot 2 VM snapshot N Technical features Incremental and memory snapshots store all information about a VM. Snapshots can be created for a running VM. Snapshots can be used to restore any VM. Snapshots of running VMs can be merged. Application scenario VM data backup and recovery 27

Virtual Cluster File System VIMS VM VM VM VM FusionCompute VIMS SAN Local disk NAS Implementation The Virtual Image Management System (VIMS) is a high-performance cluster file system. Data stores are first converted into the VIMS format and then attach to CNA nodes for VMs to use. Technical features Supports FC SAN, IP SAN, and NAS storage as well as local disks. Supports fixed, dynamic, and differencing disks. Application scenarios VMs that require advanced storage features, such as storage live migration, snapshot, and linked cloning Benefits Simplifies storage resource management and improves administrator working efficiency. Supports heterogeneous storage devices and is reliable and easy to use. 28

Auto-Sensing NIC Performance Optimization, Improving Network Processing Efficiency by 30% Item 2000 1500 1000 500 0 Pre-Optimization (Virtualization Platform) Preoptimization (Virtualization Platform) Post-Optimization (Virtualization Platform) Pre-Optimization (VM) Postoptimization (Virtualization Platform) Post-Optimization (VM) Preoptimization (VM) Postoptimization (VM) Rx (kpps) 538.9 1676.0 314.2 508.4 CPU (%) 306.4 607.3 506.1 527.2 CPU(% ) Rx(kp ps) Implementation The NIC uses the auto-sensing interruption aggregation technology for receiving network packets. Therefore, the NIC can receive small packets in batches, reduce the number of interrupts, and improve the receive and send speed of 10% of small packets. Technical features Single-thread network packet handling is optimized. The multiple-threads-and-no-lock technology is used to improve the concurrency performance, and the receive and send performance of 30% small packets can be improved. Application scenarios Network games and instant messaging that have large numbers of network packets smaller than 512 bytes and that require low latency Benefits Increases the real-time processing efficiency of small network packets by 30%. 30

Support for Trunk Ports by vnics VM VM... vnic 0 vnic 1 vnic 7 Access port vnic 0 Trunk port VLAN 100 VLAN 101 VLAN 107 Virtual switch FusionSphere 3.0 A VM supports up to 8 vnics. Therefore, a maximum of 8 VLANs and 8 subnet gateways are supported. VLAN 100 to VLAN 200 Virtual switch FusionSphere 3.1 vnics support trunk ports so that a vnic can support multiple VLANs. Benefits Because vnics support trunk ports, a vnic can support multiple VLANs for more flexible networking and for more complex service scenarios. 31

10GE Gateway for Key Applications and I/O-Demanding Scenarios Control domain VM VM Control domain VM VM Control domain VM VM VIF Bridge VIF Bridge PF driver VF driver VF driver FusionCompute FusionCompute FusionCompute queue queue queue PF... Differences Characteristics Common vnic Domain 0 bridge queue One-time data copy High CPU overhead which adversely affects VM density Smooth VM live migration and snapshot VMDq-enabled NIC Independent VM packet queue One-time address translation implemented by the hypervisor, which consumes little computing resources Little CPU overhead Smooth live migration, snapshot, IP-MAC address binding (VMware cannot provide this function.) SR-IOV-enabled NIC (Enhanced in FusionSphere 5.0) Address translation implemented by the SR- ROV technology The hypervisor does not need to implement address translation, which reduces computation consumption. Little CPU overhead Limitations: Smooth live migration and snapshot features are unavailable (the same as VMware) NIC throughput: 9.1 Gbit/s (TCP) NIC throughput: 9.15 Gbit/s NIC throughput: 9.5 Gbit/s 32

Distributed Virtual Switch (DVS) VM 1 VM 2 VM 3 VM 11 VM 12 VM 13 FusionCompute FusionCompute Virtual switch 1 (Web) Virtual switch 2 (App) Server A Server B Implementation Application scenarios Enables the virtualization administrator to configure and maintain physical and virtual ports of the DVSs on multiple hosts. Technical features Enables centralized configuration and management and helps customers understand the network structure. Supports VLAN configuration, layer 2 network security policies, and network bandwidth control. 33 Virtual switching networks of a large number of hosts need to be centrally managed. Benefits Provides more flexible network policy control.

Support for IPv6 for the Service Plane IPv4 (external network) Load balancer Switch (L3) External network Switch [L2] Direct network VMs (IPv4/IPv6) IPv6 (external network) Firewall/VPN DHCPv6 Benefits VMs support both IPv4 and IPv6. Each VM NIC can have an independent IPv4 or IPv6 address or have both of them configured. The provided service plane network services, such as security groups, network port binding, network QoS, and VPC external network management, also support both IPv4 and IPv6. The system service plane supports IPv6, which provides more IP addresses than IPv4 and enables more flexible and convenient networking. 34

DVS Uplink Port Bonding Server System priority, port priority, and active port LACP PDU LACP PDU LACP PDU Access switch LACP vswitch inic Implementation Implemented based on the standard LACP protocol included in IEEE 802.3ad Technical features Supports manual link aggregation and static LACPbased link aggregation. The static LACP-based link aggregation can only be manually configured. (The system will not automatically create or delete aggregation groups.) The static LACP-based link aggregation detects links through LACP packets and can discover link faults, such as ports in errordisable mode. Application scenarios High server bandwidth and high reliability are required. Benefits Increases server network bandwidth and improves network link reliability. Automatically detects the faults at the link layer and incorrectly connected links and performs link switchover, significantly reducing the network access failure rate. 35

Enhanced ARP Attack Defense Capability VM 1 VM 2 VM 3 VM 1 VM 2 VM 3 VM1 VM2 Benefits ARP req ARP rsp Normal condition: If VM 1 wants to communicate with VM 2, the ARP requests of VM 1 broadcasts at layer 2 and the VM 2 IP address is contained in the request. Therefore, only VM 2 responds to the request. ARP attack defense avoids ARP spoofing that uses faked IP or MAC addresses. The ARP attack defense capacity provides protection against a malicious VM from encrypting other VMs' data packets using a fake gateway address, causing network interruptions, or interrupting VM communication at layer 2 by initiating flood attacks. ARP req ARP rsp ARP rsp Man-in-the-middle attack If VM 1 wants to communicate with VM 2 and VM 3 wants to intercept the conversation, then VM 3 sends a fake message to VM 1 and claims to be VM 2. Therefore, VM 1 actually sends data packets to VM 3. Flood attack To initiate a flood attack, VM 3 sends a lot of ARP packets to the system, eventually interrupting the network communication. 36

VM Network QoS Control 256 Kbit/s Token 128 Kbit/s Queue Traffic classification Token Bucket FR inic 128 Kbit/s Implementation Network QoS provides traffic shaping and bandwidth priority control for virtual NICs and system ports. Technical features QoS control can be implemented for both inbound and outbound traffic. Traffic shaping can be implemented for outbound traffic based on the token bucket algorithm. Application scenarios High-quality network communication between the network plane and user VM network is required. Benefits QoS control on inbound traffic avoids resource contention and ensures traffic fairness. The burst size and peak bandwidth can be configured to allow a burst when the system has significant idle resources. Traffic shaping avoids packet loss, network jitter, and other adverse impacts on services caused by rate limiting. 37

Virtual Service Appliance (VSA) Application Gateway Interface VSA DHCP NAT ACL Router VIF 1 VIF 2... VIF N Technical features Based on trunk ports and the sub-interface mechanism, the VSA supports unlimited number of VLANs. The VSA provides comprehensive services, such as NAT, ACL, routing, DHCP, and load balancing. The VSA supports VXLAN and can function as the VXLAN gateway of a DVS. Benefits vnic 1 vnic 2 vnic 3 vnic 4 Trunk DVS VXLAN interface The VSA can function as a software gateway and provide application services to implement flexible network control and software-defined networking (SDN). 38

VM Live Migration (VM Motion) App App FusionCompute Server A FusionCompute Server B App Technical features VM live migration efficiency is improved one-fold by leveraging the memory compression technology. The source and destination hosts involved in live migration can use CPUs of different generations. Application scenarios Short-time service interruption is tolerable and services must be quickly restored, such as lightweight database services and desktop cloud services. VM live migration does not interrupt VM services and is insensible to users. 40

VM Cloning Technical features App OS App OS App OS App OS App OS App OS VM cloning is to quickly create a copy of an existing VM. The new VM has the same specifications and storage content as those of the original VM. FusionCompute FusionStorage Application scenarios Quick VM creation is required and VMs to be created need to have the same specifications as existing VMs. FusionSphere allows online and offline VM cloning when VIMS or FusionStorage is used. 41

Enhanced VM HA Mechanism App OS OS X App App OS ŸPhysical server A App App App OS OS OS ŸPhysical server B Technical features Fault detection for hosts, virtualization platforms, and VMs is supported. Supports both VM HA and VRM-independent HA. The network plane used for HA heartbeat monitoring can be configured, which helps to lower the network pressure. Multiple fault diagnosis mechanisms are supported to ensure fault diagnosis accuracy and completeness. HA of VMs using shared or local storage is supported. Benefits APP OS APP OS APP OS N hours 3 minutes ŸPhysical server C ŸHA resources (reserved) Physical host VM Significantly reduces the time for fault rectification and service downtime, and ensures service continuity. 42

Fault Tolerance (FT) Technical features Switchover takes only a few seconds and has no Transaction service Settlement service Transaction service Settlement service impact on IT services. (Packet loss rate < 1%) FT can be enabled for VMs that has two vcpus. App Real-time data synchronization App (VMware vsphere supports FT for four-vcpu VMs.) Performance loss is between 5% to 30%. FusionCompute FusionCompute X FT (no service interruption) Server A Server A' Application scenarios Systems with high reliability requirements, such as the transaction system and enterprise resource planning (ERP) system 43

Dynamic Resource Scheduling (DRS) App App App App App App App App FusionCompute FusionCompute FusionCompute FusionCompute Technical features Automatically balances cluster loads based on the scheduling policies. Provides optimized scheduling algorithms and performs scheduling based on the VM load change trend to avoid VMs from being repeatedly migrated among hosts. Provides the unique scheduling baseline threshold configuration function to avoid unnecessary migration. Allows FusionCompute to be configured so that it does not migrate specific VMs or manually migrates specific VMs. Allows manual migration performed by administrators or automatic periodic migration based on configured policies. Automatic migration can be implemented at specified intervals by day, week, or month. Application scenarios & benefits VM load dramatically changes and VM users have high performance requirements. DRS helps to balance load on hosts to fully utilize host computing resources and improves efficiency of service systems running on VMs. 44

Distributed Power Management (DPM) App App App App App App FusionCompute FusionCompute FusionCompute FusionCompute Technical features The system automatically migrates VMs on light-load hosts to other hosts and powers off the light-load hosts based on user-defined DPM policies. If the loads on hosts in the system exceed the configured threshold, the system automatically selects hosts and powers on them to balance the host loads in the cluster. The system can select one or multiple hosts to power on or power off. The system powers on or powers off hosts based on both the DPM and DRS policies to avoid mutual influence. The scheduling policies can be configured at a specified interval by day, week, and month. Application scenarios & benefits VM loads dramatically change and VM users need to reduce power consumption. When hosts are light-load, some VMs on the hosts are migrated to other hosts and idle hosts are powered off to reduce system power consumption. The prerequisite is that each VM must have sufficient resources for running after being migrated. When hosts are overloaded, some hosts are automatically powered on and VMs are migrated to these hosts to ensure VM performance and customer experience. 45

Refined Resource QoS Control, Ensuring High Availability of VIP Services BT download Web Oracle Common user Silver VIP Gold VIP FusionCompute FusionCompute QoS control based on service priority Set the QoS priority based on the importance of enterprise or carrier applications. QoS control based on user priority Set the resource priority based on the importance of customers. Supports QoS control by CPU, memory, network, and storage and meets customers' requirements for flexible QoS control. 46

Management node (standby) Management node (active) Data Protection for Management Nodes Real-time synchronization Daily backup Technical features All management nodes work in FusionCompute FusionCompute FTP server active/standby mode, and the active and standby nodes are deployed on two independent physical servers. Multiple backup mechanisms are Daily backup designed for system configuration data so that all the management data can be restored in the event of a failure. Benefits Ensures high reliability and disaster Local disks of management node recovery capability of management systems. 47

ebackup-based VM Backup Plan LAN/VLAN VRM cluster 1 Logical cluster Logical cluster VRM cluster 2 Logical cluster Logical cluster Computing resource VM VM VM VM Computing resource VM VM VM VM ebackup backup server... ebackup backup agent 1-N Storage resource SAN/iSCSI/NAS Storage resource Storage resource SAN/IP-SAN/IP connection Technical features Supports permanent incremental backup, reducing backup storage space occupation. Flexible data restoration. Backups can be used to restore the original VM or a specific VM. An ebackup system can protect up to 10,000 VMs. An ebackup system supports up to 64 backup servers. Supports backup of data at multiple sites. Supports SAN or LAN-free data transfer mode. (New function) Supports file-level restoration. (New function) 49 LAN-free backup/restoration data flow Implementation Huawei ebackup backup software works together with FusionCompute snapshots and the Changed Block Tracking (CBT) function to implement VM data backup. Application scenarios Provides flexible data backup. Improves management efficiency of the data backup system. Benefits If important data is lost, the data can be quickly restored using backups, preventing data loss.

Host-based Remote Replication DR Production site DR site Implementation UltraVR (DR management software) UltraVR (DR management software) The host-based I/O replication function is used to copy VM data from the production site to the DR site. The DR management software on the DR site registers VMs that use DR storage with the virtualization platform and automatically starts the VMs. VM 1 VM 2 VRG VRG VRG VM 2 VRG VM 1 Application scenarios FusionSphere (virtualization platform) FusionSphere (virtualization platform) Application-level DR between virtual sites that meet the following requirements: The sites use virtualized or distributed storage, the sites are interconnected over IP networks, and the RPO is greater than 10 seconds. VM VM Huawei virtualized or distributed storage Host-based I/O replication Huawei virtualized or distributed storage Technical features & benefits Supports DR and restoration of a whole VM. No agent needs to be installed on VMs. Supports heterogeneous storage devices. DR administrators can implement one-click DR switchover, DR dills, and scheduled migration, simplifying manual operations. Supports multiple DR modes: Active-standby DR, active-active DR, and shared DR (multiple-to-one). 50

Storage-based Remote Replication DR UltraVR (DR management software) Site A Control channel UltraVR (DR management software) Site B Application scenarios DR of VMs in the application systems that have small write pressure, and low bandwidth, IOPS, and latency requirements VM VM VM VM Technical features & benefits Supports DR and restoration of a whole VM (including VM system and disk volumes). No agent needs to be installed on VMs. FusionCompute FusionCompute DR administrators can implement oneclick DR switchover, DR dills, and scheduled migration, simplifying manual operations. Supports both synchronous and Remote array replication asynchronous replication. Supports multiple DR modes: Activestandby DR, active-active DR, and shared DR (multiple-to-one). 51

Storage-based Remote Replication DR Key Indicators Item Indicator Host-based Replication DR Synchronous replication RPO N/A 0 Storage-based Replication DR Remarks Overall indicators Synchronous replication RTO N/A <4 hours 1000 VMs Asynchronous replication RPO >10 seconds 15 minutes to 24 hours Asynchronous replication RTO <4 hours <4 hours 1000 VMs Max. number of managed sites Max. number of disk arrays Local site: 32 Remote site: 32 High-end: 2 Medium-range: 8 Low-end: 32 Max. number of protection groups 64 64 Local site: 32 Remote site: 32 High-end: 2 Medium-range: 8 Low-end: 32 UltraVR technical specifications Max. number of VMs protected by a protection group 500 500 Max. number of protected VMs 3000 3000 Max. number of protection policies 64 64 Max. number of time schedules of a protection policy 3 3 Max. number of recovery plans 64 64 Max. number of recovery plans that can be concurrently executed 10 10 52

Installation Procedure Install FusionSphere. Install FusionCompute. Install FusionManager. Install VSAM if required. Configure alarm reporting. Connect and configure resources. Connect resources. Configure resource pools. Prepare templates. Create VDCs. Create networks and VMs. Create VPCs and networks. Provision VMs. VDC administrator System administrator 54

Physical Device Networking 192.168.100.200 VLAN 100 Internet Management NIC 1 Management NIC 2 Service NIC 1 Service NIC 2 BMC FusionCompute FusionCompute BMC network Management network Service network Storage network Storage link Storage network 55

Service Deployment Plan FusionManager FusionManager FusionCompute Zone 1 Zone 2 Create zones. Connect resources... Cluster 1 Cluster 2 Cluster N Connect the hypervisor. Zone FusionManager Availability zone 1 Availability zone 2 Zone Resource cluster 1 Resource cluster 2 Create availability zones. Associate resource clusters with zones. 56

Professional Support Tool Rainbow Server where the migration tool is running Network Cloud data center based on Huawei virtualization platform Source server Agent Replicate data Destination disk VM FusionSphere Restart Source disk Snapshot Traditional physical data center or third-party virtual data center Online and offline service migration Partition format Create bootloader. Modify registry (driver and boot configuration) Supports smooth application migration to the cloud based on service methodology and the state-of-the-art migration tool, reducing migration risks and improving migration efficiency. 57

Complete User Data Deletion Virtual disk Virtual disk 1. Rent 1. Rent User A 2. Use User A 2. Use 3. Release 3. Release The virtual disk is formatted, but data is not deleted. Permanently delete data on the virtual disk. 4. Rent Risks 4. Rent Secure User B 5. Use software to obtain the data. User B Others: Delete data by formatting virtual disks, and the data can be restored using software. There are high risks of information leakage. Huawei: The physical bits of the released virtual disks are overwritten by 0. Data on the disks cannot be restored, and there are no security risks. 59

System Tailoring and Hardening OS tailoring OS component tailoring: Remove OS components that may cause security risks to decrease potential security vulnerabilities, and the software package size is reduced to about 370 MB. Kernel tailoring: Remove 14 kernel modules that may cause security risks, including the bluetooth and WiMAX. System hardening SRay System security hardening: Harden ports and access to the system and comply with the industry security standards. Protect system integrity using AIDE, an invasion detection tool. Implement security hardening based on industry best practices. The hardened CNA nodes scores over 80 after being scanned by security scanner, CIS-CAT. 60

Antivirus Virtualization SVM GVM GVM GVM Interface for memory sharing FusionSphere Implementation FusionSphere provides an open API for antivirus virtualization, and antivirus software vendors provide virtual antivirus solutions based on the API. Technical features & benefits Antivirus management server Antivirus application deployment Unified policy configuration Scan Interface Host 1 SVM GVM GVM GVM Interface for memory sharing FusionSphere Host 2 Interface provided by antivirus service provider for functional modules 61 Internal interface for Huawei virtualization software modules Leverages the next-generation DPI technology. Uses the industry-leading agent-free mode. Leverages the state-of-the-art antivirus engine. Displays overall system security conditions in an easy-to-understand way. Provides high reliability. Provides comprehensive virus log collection and analysis functions. Provides accurate and efficient file monitoring. Open APIs provided by the Huawei virtualization platform

Network Isolation Management VM Management VM User VM User VM User VM User VM User VM User VM Management VLAN User VLAN 1 Virtual switch User VLAN 2 User VLAN 3 SAN storage Storage VLAN Switch Cloud data center Technical features The management plane, storage plane, and service plane are isolated from one another. User VMs in different groups are isolated from one another using VLANs. The firewall is used to ensure access security of users and administrators. Firewall Administrator User 62

Account Security Management VRM cluster 1 Forbidden operation VM VM VM VM VM VM Administrator of cluster 1 Management network Forbidden operation FusionCompute Firewall VRM cluster 2 VM VM VM VM VM VM FusionCompute Administrator of cluster 2 Technical features Support role-based management for operations, such as creating VMs and volumes, and domain-based management for logical clusters. Support lifecycle management of accounts and roles. Support password complexity management, such as password length and validity period configuration. 63

Compatible with Mainstream Hardware and OSs x86 server VM OS Dozens of OSs 9 mainstream vendors and 115 server models Network 18 switch models Storage Application 12 mainstream vendors and 89 storage device models 65

Compatible with a Wide Range of Huawei Hardware Devices Storage 5300/5500 V3 5600/5800 V3 N8500 OceanStor 9000 SAN Big data storage system Server RH2288 Rack server RH5885 E9000 8-processor server E9000 High-performance server FusionCube Appliance Network S57XX Access switch CE12804 CE12808 CE12812 Cloud Engine core switch 66

Open APIs FusionSphere open APIs VM management API VM snapshot management API VPC management API Virtual storage API Virtual network API Virtual firewall management API 67

SNMP Northbound Interface Provides the SNMP northbound interface for alarm and performance data reporting and for interconnection with the existing SNMP network management system. 68

Open esdk for Integration FusionSphere User Management Cloud Operating (Business Center) Product and Service Catalog Management Order Management Cloud management Resale Management Resource Management (VRM) Resource Service Management (Resource Center) FusionSphere Resource Pool Management (FusionManager) Automation & Orchestration Resource Scheduling Global Resource Service Application Automation & Orchestration VDC Automation & Orchestration Retailer Management Template and Image Management Physical Device Automation (server/storage/network devices) Billing Management FusionSphere API Service SLA Self-Service Resource Management Cloud Basic O&M Installation and Deployment Authentication Service catalog Performance Topology Alarm FusionCompute ustorage FusionNetwork esdk: REST JAVA API Python API VM management Image/snapshot management Virtual storage management Virtual firewall management Virtual network management Resource monitoring Automation plug-ins Elastic Computing API Computing Resource Scheduling (HA/FT/DR) Bare Metal UVP/ KVM Third- Party VMM Elastic Storage API Storage Resource Scheduling Distributed Software-Defined Storage Elastic Network API Network Resource Scheduling SDN Controller vswitch VSA Platform capability plug-in Pre-integrated workflow plug-in Huawei Server Third-Party Server Huawei Storage Device Third-Party Storage Device HDD/SSD Huawei Switch and DC Gateway Third-Party Switch and DC Gateway 69

Open esdk Application Scenario esdk Application Scenarios and Benefits State Grid project: The resource orchestration center invokes open APIs of FusionSphere to obtain virtual resources. 1. Apply for VMs and handle applications. Cloud management SDK: VM management Image/snapshot management Virtual storage management Virtual firewall management Virtual network management Resource monitoring 2. Disassembly and assembly from services to resources. The resource orchestration system uses SDK or APIs of resource pools. Open Cloud Management Capability 3. Obtain resources. Cloud resource management portal Resource orchestration center IT infrastructure supplier Automation plug-in SDK: Platform capability plug-in Pre-integrated workflow plug-in Note: Plug-ins are used in the Resource Center. Technical features Open cloud management capability: provides multi-api aggregation and multi-language adaption, and hides version differences to open cloud management and resource virtualization capabilities. Process automation: supports ISV quick orchestration of the resource allocation procedure based on automation plug-ins provided by the Resource Center. Benefits Centralized O&M: Third-party business operation/o&m system interconnects with the cloud platform to obtain virtual resources. Streamlined process: Virtual resources can be automatically allocated based on virtual resource management service requirements. 70

Huawei FusionManager 5.1 Key Features Feature Multi-Tenant VDC Application Template VPC Resource SLA Multi-Data Center Management Third-Party Virtualization Platform Management Description Consists of a collection of resources for customer organizations or for specific use and is the basis to vapp and network resource allocation. Enables the system to create applications using VM images and software components. Provides comprehensive VPC services to meet complicated service networking requirements. Allows users to define resource SLA, and the system attaches tags to resource pools based on the user-defined SLA and allocates VM resources based on the SLA. Enables FusionManager to manage both the local data center and the data centers in other regions. Can manage VMware vsphere virtualization platforms. 72

FusionManager Cloud Management System 1 2 3 Centralized Management Centrally manages hardware devices, virtualization platforms, and applications. Uniformly manages virtualization platforms, as well as hardware and software from different vendors. Manages multiple data centers and enables rights- and domain-based management. Automatic Management Enables template-based, automatic application deployment Enables on-demand scheduling of resources required by applications. Intelligent Fault Diagnosis Centrally manages hardware and software systems. Provides comprehensive resource, topology, alarm, and log management and monitoring functions. 73

Centralized Management of Hardware and Software from Multiple Vendors x86 servers from multiple vendors vsphere, FusionCompute, XenServer Huawei FusionCube SUSE Linux Red Hat Linux CentOS Windows7 and Windows 8 Windows Server 2008 Huawei EMC NetApp IBM Hyper-converged infrastructure OS Storage Physical servers Huawei FusionManager Network Cisco, Huawei, Juniper... Virtualization platform Application Security Database Huawei Microsoft Exchange Microsoft SharePoint Oracle7+ Microsoft SQL Server 7+ FusionManager centrally manages computing, storage, network, and security resource, VMs, OSs, databases, middleware, and applications. 74

Unified Management of Multiple Data Centers Unified management across regions FusionManager can manage both resources in a local data center and those across different data centers. FusionManager can use a uniform management procedure and model to centrally manages multiple data centers across regions. An organization can use resources at different data centers across regions. DC 1 Local FusionManager DC 2 Local FusionManager DC 4 DC N Rights- and domain-based management FusionManager supports rights- and domain-based management for administrators to prevent unauthorized management operations. DC 3 Local FusionManager Ultra-large management scope FusionManager can centrally manage up to 16 data centers, and each data center can accommodate up to 1024 physical hosts. 75

Rights- and Domain-based Management User System administrator Service administrator Default username: admin Administrator 1 Administrator 2 Service administrator 1 Service administrator 2 Authorization Authorization Administrator Operator Default domain: Domain 1 default Organization 1 Organization 2 Auditor User Domain 2 Organization 3 Orgmanager Self-defined role 1 Role Domain Organization 76

Graphical, Automatic, Template-based Application Deployment 1. Supports commonly-used vapp template design by dragging and dropping required objects on the center pane. 2. Supports automatic resource application, service deployment, and resource reclamation based on vapp templates. Technical features Convenient vapp template design: You can design a vapp template by dragging and dropping required objects on the center pane, greatly reducing the complexity of service design. Automatic service deployment/resource reclamation: One-click service deployment allows quick deployment of enterprise IT services and resource reclamation. Policy-based elastic resource capacity expansion and reduction: Flexible policies are designed to enable automatic resource capacity expansion and reduction, adapting to everchanging service requirements in a prompt manner. VM VM VM VM CNA CNA VDC resource pool 3. Supports service cluster capacity expansion and reduction based on userdefined policies. VM VM VM VM VM VM CNA CNA CNA VDC resource pool 78

Resource SLA VM VM VM Gold SLA Silver SLA Copper SLA Technical features Administrators can customize resource SLA tags that define service performance, reliability, and other required service indicators. The system automatically attaches the SLA tags to different resource pools based on customers' customization. When users create VMs, they can select resource SLA tags. The system then will automatically allocate resources to the VMs from the resource pools that meet the needs of the SLA tags. Gold resource pool Silver resource pool Bronze resource pool Benefits Resource pools can be managed using tags, simplifying resource management. Users can customize the tag names, which makes management convenient. 79

0% 50% 0% 50% 0% 50% 100% 100% 100% Elastic Scaling of Application Resources App A App B App C Utilization: 20% 60% Utilization: 60% 20% Utilization: 60% 20% Provides an elastic scaling mechanism for application resources, which avoids a waste of resources and improves resource utilization. 80

FusionManager Cloud Management System 1 2 3 Centralized Management Centrally manages hardware devices, virtualization platforms, and applications. Uniformly manages virtualization platforms, as well as hardware and software from different vendors. Manages multiple data centers and enables rightsand domain-based management. Automatic Management Enables template-based, automatic application deployment Enables on-demand scheduling of resources required by applications. Intelligent Fault Diagnosis Centrally manages hardware and software systems. Provides comprehensive resource, topology, alarm, and log management and monitoring functions. 81

Centralized, Scalable Infrastructure O&M 1 Automatically detects connected devices to improve O&M efficiency. 2 3 Hides device peculiarities and provides user-friendly GUI, which simplifies O&M. Allows system dashboards to be customized and faults to be detected directly without the need to analyze huge amounts of data. 82

Top Fault Statistics for Quick Fault Locating 1 2 Top N faults and descriptions are clearly displayed on the management portal. Faults can be detected in a quick manner once occurring, and main services can be recovered in a timely manner. 83

Comprehensive Performance Analysis 1 2 Monitors performance changes of key services. Automatically analyzes and displays Top N statistics. 84

Capacity Analysis 1 2 Clearly displays resource usage data. Detects potential resource bottlenecks before services are adversely affected. 85

FusionSphere 5.1 Features 2 FusionSphere 5.1 Features 1 2 3 4 5 6 7 8 9 10 Computing Virtualization Storage virtualization Network virtualization Migration and Availability Backup and Disaster Recovery Installation and Deployment Security Compatibility and Interconnectivity Cloud Management Virtual Data Center Services 86

Self-Service Capability Self-service Self-O&M Service application Service change Service maintenance Service release Service approval O&M management Users can perform the following operations on their own: Query the resource usage, capacity, used resources, and available resources in a VDC. Query the number of obtained resources in a VDC by resource type. Apply for more VDC resource quotas. Manage VDC users. Manage VDC service catalogs. Configure VDC network environments. Approve service applications from service users. Self-service 87

Service Catalog Service catalog A service catalog contains the following content: Service name, description, and icon Service parameters that can be customized when users apply for services Service parameters that can be configured when administrators approve service applications Parameters for locking a service Service approval policies 88

Template Service App OS Application template (VM template+software package+network connection+scaling group) ISO image RAM CPU Disk VM logical template App OS VM template Software package Provides comprehensive template services to facilitate VM and application creation. 89

Multi-Tenant VDC Resource Pool Application service Email ERP WEB Organization 1 VPC A Organization 2 Organization 3 Organization management VDC 1 VDC 2 VPC B VDC 3 VDC 5 VDC 6 VDC 7 VDC 8 VDC 9 VDC 10 Resource cluster 1 Resource management Computing resource pool V M Zone A V M V M Resource Physical cluster 2 resource pool P M P M P M Network resource pool Storage resource pool Zone B VM VM VM Resource cluster 3 Computing resource pool Network resource pool Storage resource pool VM VM VM Resource cluster 6 Huawei FusionCompute VMware vsphere Device management Equipment room Subrack Cabinet Slot Equipment room Subrack Cabinet Slot 90

Virtual Private Cloud (VPC) VDC V M V VM M V M V M V VM M V M VPC 2 Employees on business trip Department A VPC 1 Internet Department B Technical features Isolated environment: The VPC provides isolated VM and network environments to meet isolation requirements of different departments. Comprehensive services: Each VPC can provide independent virtual firewall, elastic IP address, virtual LB, security group, super VLAN, IPsec VPN, and NAT gateway services. (Some of these functions can be provided by VSA.) Flexible networking: The VPC provides multiple networking modes, such as direct networks, routed networks, and internal networks. The VPC provides resource usage information that can be used in a billing system. 91

VLAN Aggregation (Super VLAN) Technical features Internet connection between VPCs can be configured on the same super VLAN, in which sub-vlans are created to implement layer 2 isolation. In the same VPC, the Super VLAN technology allows different internal sub- VLANs to share an IP address segment. Benefits Reduces the number of private and public IP addresses required. 92

Integrated CE128XX Series Agile Switches Virtual Private Network Solution Comparison Solution overview Gateway performance Firewall performance Software Gateway Uses softwarebased firewalls to provide virtual firewall and router functions. Firewall based Gateway Virtual firewalls and routers are created on hardware firewalls. Medium Medium High Medium Medium High Reliability Low High High Dependence on device selection None Medium High Switch-based Gateway Virtual firewalls are created on hardware firewalls, and virtual routers are created on switches. Solution Virtual firewalls and routers are created on different hardware devices, increasing throughput of VPC networks. Advantages Separate deployment and optimal performance Limitations Requires the hardware firewall virtualization function. Requires CE128XX series agile switches. 93

Contents 1 2 3 FusionSphere 5.1 Overview FusionSphere 5.1 Features Product Support 94

Product Support Click the following link to obtain product datasheets, success stories, and software: http://e.huawei.com/en/products/cloud-computing-dc/cloud-computing 95

Product Support Visit http://support.huawei.com/enterprise and choose > IT > FusionCloud > FusionSphere > FusionSphere to obtain after-sales support documentation involving installation, test acceptance, maintenance, and troubleshooting. 96

Product Support Visit http://support.huawei.com/ecommunity/bbs/ and choose IT Forum > FusionCloud to visit the Huawei cloud computing technical forum. 97

HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY Copyright 2015 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.