HBC1533 How to Build a Hybrid Cloud - Steps to Extend Your Datacenter Chris Colotti, VMware, Inc David Hill, VMware, Inc
Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. 2
VMware vcloud Hybrid Service VMware vcloud Air CONFIDENTIAL 3
2014 VMware Inc. All rights reserved.
2014 VMware Inc. All rights reserved.
Agenda 1 What Makes it a Hybrid Datacenter? 2 Use Cases and Starting Points 3 Understanding the vcloud Air Structure 4 vcloud Air Core Offerings 5 The Five Steps to Extending Your Data Center into vcloud Air 6 Putting it all Together 7 Questions CONFIDENTIAL 6
About the Speaker(s) Chris Colotti Principal Technical Marketing Architect, vcloud Air VCDX #37, vexpert, VCAP-DCD, VCP Blog: ChrisColotti.us Twitter: @CColotti David Hill Senior Technical Marketing Architect vcloud Air VCAP-DCD, VCP, vexpert Blog: DavidHill.co Twitter @davehill99 CONFIDENTIAL 7
What Makes it a Hybrid Datacenter? 8
What Defines a Hybrid? hy brid noun The offspring of two plants or animals of different species or varieties, such as a mule (a hybrid of a donkey and a horse). A thing made by combining two different elements; a mixture. Adjective of mixed character; composed of mixed parts. 9
What Makes It a Hybrid Data Center? Blur the lines between Users and applications Applications and infrastructure Hardware and resources Operations and management Support and operations Simplify access to resources Faster time to market More geographic options faster Create a global architecture Treat it like any other physical location 10
Use Cases for the Hybrid Data Center 11
5 Starting Points to Hybrid Cloud Dev/Test Take a low-risk first step and free up valuable on-premises data center capacity by hosting dev/test workloads in hybrid cloud Extend Existing Applications Facilitate pre-production testing for upgrades and host new apps, e.g., Microsoft Exchange in hybrid cloud Disaster Recovery Deliver disaster recovery and extend the data center for dev/test, seasonal workloads, and additional geo locations Modernize Enterprise Applications Build and host business-critical applications and virtual desktops in hybrid cloud, including new applications in traditional 3-tier architectures (Java) Build next Generation Applications Evolve from traditional applications to next generation applications (Spring, Ruby on Rails) to deliver on any platform, anywhere 12
Think Outside the Box - Free Your Mind If you built a new Physical Data Center what steps are there? Networking Infrastructure Applications Always remember the definition of Hybrid Focus on applications not infrastructure Get out of the break fix business Get into the application business Don t focus on it being Cloudy Just because it s In the cloud means little Forget everything you know about ESXi (to a point) Wait, What?! Current administrators need to elevate role Most any use case applies if you treat as any other Data Center 13
Understanding the vcloud Air Structure 14
How vcloud Air is Structured Tenant Portal Dedicated Cloud Las Vegas vcloud Director API VPC Virginia vcloud Director API Edge Networking Edge Networking Edge Networking 15
The vcloud Air Tenant Portal Single Sign-on to all your clouds View the type of cloud View by Region Same login for any access vcloud API Disaster Recovery Manage additional users First user is always the uber-admin Manage Data Protection Options Access MyVMware Order additional resources Open support tickets 16
vcloud Air IaaS Offering Comparison Dedicated Cloud Dedicated Hosts More ISV Licensing options Over Commit Built-In Ideal for both Test and Development Production workloads needing reservations User controlled per machine settings Sub-divide pool of resources Create multiple vdc s Multiple Edge Gateway capability Get more than 9 Interfaces Virtual Private Cloud Shared Hosts Limited ISV Mobility Cost Effective Shared API endpoint Fully reserved resources No over commitment of resources Eliminates the Noisy Neighbor Ideal for initial POC and testing Single Edge Gateway per vdc Used for vcloud Air Disaster Recovery 17
Treat the Edge Gateway as an Advanced Core Switch Familiar networking design 10 total Interfaces per Edge 1 Edge per VPC Multiple Edges in Dedicated Static routes between interfaces automatically 5-tupple firewall rules Deny all by default Advanced features DHCP Load Balancing Static routing Test/Dev Network Isolated Network (Logging) INTERNET EDGE GATEWAY DMZ Network Private (Corp) Network 18
vcloud Air Structure Core Offerings 19
The vcloud Air Primary Services to Mix and Match IaaS DaaS RaaS 20
Infrastructure as a Service (IaaS) (192.168.3.0/24 Desktop-NET) DT01 66.45.200.34 EDGE EDGE 69.194.137.139 GATEWAY GATEWAY DT02 (192.168.1.0/24 Corp-NET) IPSec VPN view.vmtm.org PCoIP and Blast (192.168.2.0/24 Public-NET) ViewSS.5 (192.168.20.0/24 Public-NET) ViewSS.5 New applications built on standard Operating Systems Migration of existing applications From P2V to V2C Build infrastructure in the cloud and on premises View Security Servers SharePoint Exchange Web Servers ViewCS.5 AD01.41 AD02.42 WDC (On Premises) vcloud Air Las Vegas (IaaS) 21
Desktop as a Service on vcloud Air (DaaS) Windows desktops and apps as a cloud service. Backed by VMware. Simple cloud desktops at a predictable cost, without sacrificing security and control Remote Office Corporate Office Mobile Workers Corporate Wi Fi VMware Horizon DaaS Virtual desktop infrastructure, built on vcloud Air 22
Recovery as a Service(RaaS) Replication to vcloud Air: Warm standby capacity on vcloud Air Self-service protection, failover and failback workflows per VM 15 min 24 hr. recovery point objective (RPO) Initial data seeding by shipping a disk Can be done without Downtime! Remote management and monitoring, with Production-level support Flexible subscription options Data Protection Option for IaaS Machines Self Service or full vdc backup 365 day retention vsphere Replication 23
Recovery as a Service(RaaS) Replication to vcloud Air: Warm standby capacity on vcloud Air Self-service protection, failover and failback workflows per VM 15 min 24 hr. recovery point objective (RPO) Initial data seeding by shipping a disk Can be done without Downtime! Remote management and monitoring, with Production-level support Flexible subscription options Data Protection Option for IaaS Machines Self Service or full vdc backup 365 day retention vsphere Replication 24
The Five Steps to Extending Your Data Center Building Your Hybrid Data Center 25
Step 1 Size Your Resources (vdc) CPU: 30 GHZ RAM: 120GB Storage: 6TB Virtual Private Cloud Dedicated Cloud 26
Step 1 Size Your Resources (vdc) CPU: 5GHZ (burst 10GHZ) RAM: 20GB Storage: 2TB CPU: 30 GHZ RAM: 120GB Storage: 6TB Virtual Private Cloud Dedicated Cloud 26
Step 1 Size Your Resources (vdc) Define Reservations and Limits Over Commitment Ratio What s your comfort level today? 5:1? 10:1? Maybe 20:1? 26
Step 1 Size Your Resources (vdc) Define Reservations and Limits Over Commitment Ratio What s your comfort level today? 5:1? 10:1? Maybe 20:1? 26
Step 1 Size Your Resources (vdc) Define Reservations and Limits Over Commitment Ratio What s your comfort level today? 5:1? 10:1? Maybe 20:1? 26
Step 1 Size Your Resources (vdc) CPU: 5GHZ (burst 10GHZ) RAM: 20GB Storage: 2TB 26
Step 1 Size Your Resources (vdc) CPU: 5GHZ (burst 10GHZ) RAM: 20GB Storage: 2TB 26
Step 1 Size Your Resources (vdc) CPU: 5GHZ (burst 10GHZ) RAM: 20GB Storage: 2TB 100% Memory Reservations 50% vcpu Reservation Lets think about the math 26
Step 1 Size Your Resources (vdc) 26
Step 1 Size Your Resources (vdc) We haven t forgotten about On Premises its coming 26
Step 2 Design Your Networks Private Network (10.0.0.0/24) DC01 DC02 EMAIL vcc Node 36
Step 2 Design Your Networks ON- PREMISES ROUTING DEVICE EDGE GATEWAY Private Network (10.0.0.0/24) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 2 Design Your Networks EDGE GATEWAY ON- PREMISES ROUTING DEVICE EDGE GATEWAY Private Network (10.0.0.0/24) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 2 Design Your Networks How many External routed IP networks? ON- PREMISES ROUTING DEVICE 9 Interfaces to utilize EDGE GATEWAY Create multiple networks for different services VPN Configuration Network Settings considerations Firewall Rules Firewall rules are always reciprocal EDGE GATEWAY Private Network Impact on (10.0.0.0/24) my current environment Move my templates to the cloud Other considerations Backup Networks DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 2 Design Your Networks EDGE GATEWAY ON- PREMISES ROUTING DEVICE EDGE GATEWAY Private Network (10.0.0.0/24) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 2 Design Your Networks Internet 69.194.137.231 69.194.137.139 EDGE GATEWAY ON- PREMISES ROUTING (192.168.20.0/24 Public-NET) DEVICE EDGE GATEWAY Private Network (10.0.0.0/24) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 2 Design Your Networks Internet 69.194.137.231 69.194.137.139 EDGE GATEWAY ON- PREMISES ROUTING (192.168.20.0/24 Public-NET) DEVICE EDGE GATEWAY (192.168.10.0/24 Corp-NET) Private Network (10.0.0.0/24) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 2 Design Your Networks ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 36
Step 3 Establish Network Connectivity ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 37
Step 3 Establish Network Connectivity INTERNET ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 37
Step 3 Establish Network Connectivity VPN INTERNET ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 37
Step 3 Establish Network Connectivity Private Line ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 37
Step 3 Establish Network Connectivity INTERNET ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 37
Step 4 Deploy Supporting Infrastructure VPN INTERNET ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 38
Step 4 Deploy Supporting Infrastructure VPN INTERNET EDGE GATEWAY ON- PREMISES ROUTING (192.168.20.0/24 Public-NET) DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) (192.168.10.0/24 Corp-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 38
Step 4 Deploy Supporting Infrastructure VPN INTERNET EDGE GATEWAY ON- PREMISES ROUTING (192.168.20.0/24 Public-NET) DEVICE EDGE GATEWAY DNS SMTP (192.168.20.0/24 Public-NET) (192.168.10.0/24 Corp-NET) Private Network (10.0.0.0/24) (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 38
Step 4 Deploy Supporting Infrastructure VPN INTERNET EDGE GATEWAY ON- PREMISES ROUTING (192.168.20.0/24 Public-NET) DEVICE EDGE GATEWAY DNS SMTP (192.168.20.0/24 Public-NET) (192.168.10.0/24 Corp-NET) Private Network (10.0.0.0/24) DC03 DC04 APP01 APP02 (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node Dedicated or Virtual Private Cloud 38
Step 4 Deploy Supporting Infrastructure VPN INTERNET ON- PREMISES ROUTING DEVICE EDGE GATEWAY (192.168.20.0/24 Public-NET) (192.168.10.0/24 Corp-NET) Private Network (10.0.0.0/24) DNS SMTP (192.168.10.0/24 Corp-NET) DC01 DC02 EMAIL vcc Node DC03 DC04 APP01 APP02 Dedicated or Virtual Private Cloud 38
Step 5 Expand Your Footprint Further 39
Step 5 Expand Your Footprint Further Dedicated IaaS vdc LV IPSec VPN VPC RaaS TX vdc DaaS vdc 39
Putting It All Together Technical Marketing Lab Use Case 56
Global Technical Marketing Architecture One Physical Site Cloud to Cloud VPN Cloud to Cloud VPN 3 Virtual Private Clouds RaaS in Dallas, TX Dedicated IaaS vdc LV IPSec VPN vmtm.org IaaS Sterling, VA IaaS Las Vegas, NV Cloud to Cloud VPN 2 Dedicated Clouds Cloud to Cloud VPN VPC RaaS TX vdc IaaS in Las Vegas, NV DaaS in Las Vegas, NV IPSec VPN in Use DYN.com hosting all external DNS Zone records Dedicated DaaS vdc LV DaaS Secure Tunnel IPSec VPN vcloud Air- DR Replication VPC IaaS Sterling VA vdc vmtm.org VPC IaaS LV vdc (DaaS Provider) IPSec VPN 57
VMware vcloud Air - Virtual Private Cloud OnDemand Interested in participating in the vcloud Air OnDemand Beta Progam? The Product Team from vcloud Air is now accepting candidates interested in participating in the Fall 2014 beta program vmware.com/go/ondemand Visit vmware.com/go/ondemand to sign up 58
Learn the fundamentals on vcloud Air by attending any or all of our 5 Starting Point breakout sessions within the Hybrid Cloud Track VMware vcloud Air 5 Starting Points Program VMworld 2014 Starting Point Session ID TOPIC Attend any of these breakout sessions and earn a free vcloud Air Dilbert t-shirt. Dev/Test HBC2577 Hybrid Sandboxing Create the Ultimate On and Off Premises Test/Dev Factory Extend Existing Applications HBC2066 Architect the Hybrid Cloud for Exchange and Lync Disaster Recovery HBC 1534 Recovery as a Service (RaaS) with vcloud Hybrid Service Modernize Enterprise Applications HBC 2609 Smells Like Team Spirit: Achieve Hybrid Operations Nirvana with vcloud Hybrid Service Create Next Generation Applications HBC 1917 Build Your First Mobile Application In the Cloud In 60 minutes CONFIDENTIAL 59
Hybrid Cloud Hands On Labs Check out the Expert Led and Self Paced vcloud Air Hands on Labs Session ID Title Learn the fundamentals on vcloud Air by attending any HOL: Expert-Led Workshop ELW-HBD-1481 Hybrid Cloud Jumpstart Workshop or all of our 5 Starting Point breakout sessions within the HOL: Expert-Led Workshop ELW-HBD-1484 Disaster Recovery to the Cloud Workshop Hybrid Cloud Track as well as our Hands on Labs HOL: Self Paced Lab SPL-HBD-1481 vcloud Hybrid Service - Jump Start for vsphere Admins HOL: Self Paced Lab SPL-HBD-1482 HOL: Self Paced Lab SPL-HBD-1483 vcloud Hybrid Service - Networking & Security vcloud Hybrid Service - Manage Your Cloud Try any of these HOLs and earn a free vcloud Air Dilbert t-shirt. 60
Questions
Hybrid Cloud Theater Schedule - VMware Booth (Solutions Exchange) Sunday 5:00pm - What is this Hybrid Cloud Thing Anyway? In addition to the breakout sessions within the Hybrid Cloud track, check out our THEATER schedule for the week from the VMware booth at the Solutions Exchange Monday 12:15pm - Getting Started with Hybrid Cloud - 5 Use Cases Monday 1:30pm - vcloud Air OnDemand Monday 3:45pm - What is this Hybrid Cloud Thing, Anyway? Monday 5:30pm - Hybrid Cloud DevOps: How to keep your Devs from Running Wild Tuesday 12:15pm - Project NEE - Delivering Hands-on Education at Cloud Scale Tuesday 1:00pm - vcloud Air Network Tuesday 2:45pm - Disaster Recovery with vcloud Air Tuesday 4:00pm - Getting Started with Hybrid Cloud - 5 Use Cases Tuesday 5:30pm - Hybrid Management on vcloud Air Wednesday 10:15am - vcloud Air OnDemand Wednesday 12:45pm - The Internet of Things: Virtual Machines, vcloud Air, vcenter Operations and the Intel IoT Gateway Wednesday 2:15pm - Disaster Recovery with vcloud Air Wednesday 3:30pm - Another Day in Paradise...Going Full Hybrid with vcloud Air Wednesday 4:30pm - RAD in the Hybrid Cloud CONFIDENTIAL 62
Thank You
Fill out a survey Every completed survey is entered into a drawing for a $25 VMware company store gift certificate
HBC1533 How to Build a Hybrid Cloud - Steps to Extend Your Datacenter Chris Colotti, VMware, Inc David Hill, VMware, Inc