Building and Managing a Standard Operating Environment

Transcription

1

2 Building and Managing a Standard Operating Environment Dirk Herrmann Head of Strategic Consulting Central Europe, Red Hat Todd Warner Satellite Product Manager, Red Hat Milan Zázrivec Satellite Software Engineer, Red Hat June 13th, 2013

3 Part 1: Red Hat Satellite

4 Systems Management?...Systems!

5 Systems Management?...Systems! A machine? A definition of a machine? All the pieces and parts that make up that definition? All that... x100? x1000? x10,000?

6 Systems Management?...Systems! A machine? A definition of a machine? All the pieces and parts that make up that definition? All that... x100? x1000? x10,000?

7 Systems Management?...Management!

11

12

13

14

15

16

17 Red Hat DMZ Managed Systems x86 Red Hat Enterprise Virtualization Other Red Hat Network & CDN Internet Firewall Mainframe Workstation

18

19 Reporting System inventory Subscriptions Users Errata SCAP PCI-DSS...and more...

20 A bit of History Since 2002 First, Patch Management Then... Configuration and Provisioning APIs, Multiple Organizations and Federation Reporting and Compliance Bare-Metal Virtualization Cloud Consulting services to Standardize, Integrate and Streamline

21 We Are Here Satellite v5.5 Satellite v Satellite Satellite v5.7 v5.x 2017 Satellite v5.x

22 v5.5 Available Now! Themes Features Benefits Modernization / Compliance IPv6 Enablement Better positioning to manage large datacenters OpenSCAP support Ensure those systems adhere to internal & external compliance reqs Content Management Refinement Clone-By-Date IT Admins can control precisely by datestamp and content streams (channels) to adhere to application support requirements Infrastructure Complexity Management Provisioning over Bonded Network Interfaces We now address high-bandwidth systems more completely and can more readily manage multi-network IT deployments Support for Multi-NIC RHN Proxies IT Ecosystem (APIs) API Expansion Continuing to expand the ability for Satellite to integrate into 3rd party and automation tooling

23 v5.6 Fall 2013 Themes Features Benefits Reporting & Compliance Granular Customer Usage & Deeper / Richer client knowledge and Consumption Reporting reporting. Report per system expiration, SLA or contract. Client Troubleshooting ABRT (Automatic Bug Reporting Tool) Collect and report on critical crash information via the Satellite UI Uptime & Disaster Support for Zero Downtime Recovery Hot Backups Simple backup of the RHN Satellite does not require a scheduled outage window Choice of External Oracle or PostgreSQL Database Backend Freedom of choice between Oracle or PostgreSQL databases for those who require an external DBA-managed database for scaling or compliance Satellite Scaling Satellite across Two Servers Deploy Satellite & embedded DB across Installation Option two servers for significant scaling improvement. No DBA required!

24 v5 and v6 We Are Here v5 v Satellite v5.5 Satellite v Satellite Satellite v5.7 v5.x Satellite Satellite v6.0 v6.x 2017 Satellite v5.x

25 v5.7, v5.8, and beyond Prioritization... Scaling Reporting and Compliance Feature refinement 3rd party integration best practice Transition to Satellite6 tooling, process, best practice

26 v6 [Past session: Using Red Hat Satellite Today & Into the Future Wed June 12th 1:20pm] A tease about v6 GA in 2014! New architecture Vastly improved workflow Dramatic content and configuration management improvements Fast, efficient, scaling out... forever big Recipe-based configuration CloudForms integration best practice...and much much more...

27 Part 2: Demo

28 Standard Operating Environment Effective application lifecycle management: Operating system Custom system configuration Software updates Applications used within an organization Standard implementation of an operating system, its configuration and related software Reduction in costs and time to deploy, configure, manage and support computers within an organization

29 An example SOE Development QA / Testing Production Custom Custom Applications Applications Custom Custom Applications Applications Custom Custom Applications Applications Configuration Configuration Configuration Configuration Configuration Configuration Updates Updates Updates Updates Updates Updates OS OS OS OS OS OS

30 System Groups A system may belong to one or more system groups Work with unions and intersections

31 Software Content Channels as containers for packages (RPMS) and errata advisories (individual software updates)

32 Software Content: Custom Channels Cloning: spacewalk-clone-by-date Custom RPM pushes, spacewalk-repo-sync

33 Software Content: Custom Channels spacewalk-clone-by-date

34 Configuration Management Configuration Channels: containers for config. files Channel rankings Configuration Files Static or templated

35 Activation Keys Key to bootstrap a system to a Satellite

36 Activation Keys System Group link

37 Activation Keys Configuration Channel link

38 Provisioning Kickstart Profiles: executable system definitions Software content, configuration, custom applications linked together

39 Provisioning New system to be created in Development group

40 Provisioning New system created in Development group

41 Development QA Production Re-iterate procedure with spacewalk-clone-by-date, configuration channels, activation keys, kickstart profiles Automation using API

42 Part 3: Real Life Examples

43 4

44 Yearly Patch Cycles Many customer are not updating their servers more often than 4 times per year.

45 72

46 Compliance Requirements Most compliance guidelines demand that critical security issues will be fixed within 72 hours.

47 Software Lifecycle 72 hours

48 Major Customer in Financial Services * Emergency Change Handling in less than Release Testing (automated): Release Deployment (automated): Releases every 2 weeks in average 48 hours 8h 6h (1000 servers) Admin2Server Ratio: 1: RHEL server: 23 min Restore SAP server: 4 min Solaris2RHEL Migration of 74 systems: 4 days (1 admin) Provisioning of a full parallel banking environment: 3d What do they differently? * Public reference story will be published soon!

49 IDC Study Standardize on RHEL Platform A standardized environment is way more efficient Standardize on RHEL is the best option 82% less time dealing with downtime issues 92% less time dealing with Help Desk activities 20% of downtime of Mixed & Free Distributions 53% less hardware and software costs Source: Understanding Linux Deployment Strategies: The Business Case for Standardizing on Red Hat Enterprise Linux, IDC #227903, April 2011, Sponsored by Red Hat

50 Standardization 72

51 Standardization interfaces & risk Data Data Application Application Middleware Middleware Management ManagementTools Tools Operating OperatingSystem System Standardization does not mean homogenization! Standardization means Defined components Defined interfaces Defined processes HW HW//Virt VirtDriver Driver Virtualization Virtualization Hardware Hardware Knowing them and detecting deviations!

52 Standardize with RHEL Data Data 10 year Lifecycle Application Application Middleware Middleware ISV Certifications Management ManagementTools Tools Operating OperatingSystem System RHEL RHEL HW HW//Virt VirtDriver Driver ABI / API Stability Virtualization Virtualization Hardware Hardware OEM Certifications

53 Standardization - Core Build Data Data Application Application smallest common denominator Operating OperatingSystem System HW HW//Virt VirtDriver Driver Core Build Middleware Middleware Management ManagementTools Tools Virtualization Virtualization Hardware Hardware Defined core for all RHEL systems Integrates required RHEL, 3rd party and custom components (backup, monitoring, scheduling,...) typically based on minimal installation defines basic security & compliance configuration Flexible and complete to run in all target environments

54 Critical Success Factors Platform

55 72 Architecture

56 Architecture App Platforms / Messaging / Cache / Grid / SOA / Mobile PaaS Red Hat Enterprise Linux Management Systems Foundational Storage for Big Data Applications Physical Servers Virtual Servers Network & Storage Infrastructure Cloud Servers Open Hybrid Cloud Management IaaS

57 Red Hat Security Management 95 1

58 Red Hat Security Management 95 percent of all critical security issues in Red Hat Enterprise Linux are fixed within 1 day.

59 Software Lifecycle 24 hours 48 hours

60 Critical Success Factors To ol s Platform

61 72 Automation

62 Automated Server Provisioning Provision a server within a few minutes including OS (IaaS) and application platform (PaaS) No manual intervention required No manual postprocessing required Hardware / virtualization specific adaptions handled automatically System is fully integrated into ITSM tool chain After reboot the system is tested and production ready

63 I don't need this automated provisioning. Initial Provisioning Disaster Recovery Data Restore System Cloning Env specific adaptions Dynamic Scale-Out Load Balancer Mgt

64 One technology core multi-purpose usage Initial Provisioning Disaster Recovery Data Restore System Cloning Env specific adaptions Dynamic Scale-Out Load Balancer Mgt

65 Software Lifecycle 24 hours Remaining: 48 hours

66 Software Lifecycle 24 hours 4 hours Remaining: 44 hours

67 Fully automated QA cycles

68 Software Lifecycle 24 hours 4 hours 8 hours Remaining: 36 hours

69 Deployment Automation via Satellite Customer Example from a large financial customer in Germany Fallback Update Success Wave 0 (Test) no Success Criteria: 100 % within 60 min STOP yes Fallback STOP Wave 1 no Success Success Criteria: 95 % within 60 min Update yes Fallback Wave N Update Success no Actually < 3 % error rate Success Criteria: 95 % within 60 min STOP

70 Software Lifecycle 6h 24 hours 4 hours 8 hours Remaining: 30 hours

71 Control 72

72 Security & Compliance Management CVE Errata System Mapping Customized Security Reporting Daily / nightly verification checks OpenSCAP integration for compliance reporting Integration of existing compliance checking scripts Vulnerability Scanner Integration (Nessus) Software lifecycle tracking Documentation / Incident & Problem Mgt Integration

73 Software Lifecycle 6h 24 hours 4 hours 8 hours 2h Remaining: 28 hours

74 ~ 100 SPARC Solaris 25 unmanaged RHEL 25 % virtualized High operational costs Limited scalability Little automation Timeframe between: 1 year Major Customer in Financial Services * 40 HP x86 RHEL 850 fully manag. RHEL 99% virtualized low operational costs unlimited scalability Fully automation Release Creation QA Automation Deployment Automation How did they get there? * Public reference story will be published soon!

75 Critical Success Factors To ol s Platform

76 Red Hat Standard Operating Environment

77 Standard Operating Environment Implementation

78 Key Finding IDC Study Standardize on RHEL IDC Standardize on RHEL **: IT Productivity Key Performance Metrics IT productivity Metric Standardized on RHEL Mixed Primarily Nonpaid Servers per admin (virtual and physical) IT users per admin Hours to deploy a virtual server Days to deploy an application Higher server counts, higher user counts per admin when standardized on RHEL Deployment consistency, tools and lack of diversity as drivers for productivity * Public reference story will be published soon! ** Source: IDC White Paper sponsored by Red Hat, IDC #227903, April 2011

79 Major Customer in Financial Services * IDC Standardize on RHEL **: IT Productivity Key Performance Metrics IT productivity Metric Standardized on RHEL Mixed Primarily SOE Customer Nonpaid 250 Servers per admin (virtual and physical) IT users per admin Hours to deploy a virtual server Days to deploy an application Benefits Standardization hardware and software (no vendor lock-in) Significant license and HW maintenance cost reduction High operation reliability and flexibility Acceptance and trust in RHEL as a mission critical platform * Public reference story will be published soon! ** Source: IDC White Paper sponsored by Red Hat, IDC #227903, April 2011

80 Key Components Control Standardization Knowledge Automation Architecture

81 Other Red Hat Satellite-related Sessions Wednesday, June 12 1:20 pm - 2:20 pm Using Red Hat Satellite Today & Into the Future 1:20 pm - 2:20 pm Controlling Clouds Beyond Safety 3:40 pm - 4:40 pm Red Hat Satellite Power User Tips & Tricks: System Deployment 4:50 pm - 5:50 pm Managing SELinux in the Enterprise

82 Other Red Hat Satellite-related Sessions Thursday, June 13 3:40 pm - 4:40 pm War Stories from the Cloud: Lessons from US Defense Agencies 4:50 pm - 5:50 pm Building & Managing a Standard Operating Environment 4:50 pm - 5:50 pm Managing Updates on Red Hat Enterprise Linux 4:50 pm - 5:50 pm Real-world Perspectives: Gaining Competitive Advantages with Red Hat Solutions

83 Other Red Hat Satellite-related Sessions Friday, June 14 9:45 am - 10:45 am Real-world Perspectives: Optimizing Infrastructures with Red Hat Satellite 11:00 am - 12:00 pm Begin Programming Your Red Hat Satellite Server

84 28 hours remaining what to do with it? Efficiency means doings things right. Effectiveness means doing the right things.