1 ware vcloud Implementation Example Public vcloud Service Provider TECHNICAL WHITE PAPER
2 Document Title Table of Contents 1. Purpose and Overview Executive Summary Business Requirements Use Cases Document Purpose and Assumptions ware vcloud Architecture Design Overview vcloud Definition vcloud Component Design Overview vsphere Architecture Design Overview High Level Architecture Site Considerations Design Specifications vsphere Architecture Design Management Cluster Compute Logical Design Datacenters vsphere Clusters Host Logical Design Network Logical Design Shared Storage Logical Design Management Components Management Component Resiliency Considerations vsphere Architecture Design Resource Groups Compute Logical Design Datacenters vsphere Clusters Host Logical Design Network Logical Design Shared Storage Logical Design Resource Group Datastore Considerations Datastore Sizing Estimation vcloud Provider Design Abstractions and ware vcloud Director Constructs Provider vdcs Organizations TECHNICAL WHITE PAPER / 2
3 6.4 Networks External Networks Network Pools Networking Use Cases Catalogs vcloud Security vsphere Security Host Security Network Security vcenter Security ware vcloud Director Security vcloud Management vsphere Host Setup Standardization ware vcloud Director Logging vsphere Host Logging ware vcloud Director Monitoring Appendix A Bill of Materials TECHNICAL WHITE PAPER / 3
4 1. Purpose and Overview 1.1 Executive Summary ACME Service Provider will be implementing a service provider cloud built on ware technologies. The objective of this project is to create a consumer-oriented self-service model to allow ACME Service Provider s customers to individually consume its aggregated resources. This document defines the vcloud architecture and provides detailed descriptions and specifications of the architectural components and relationships. This design is based on a combination of ware best practices and specific business requirements and goals. 1.2 Business Requirements The vcloud for ACME Service Provider will have the following characteristics and provide: Compute capacity to support 1,500 virtual machines, which are predefined workloads. Secure multi-tenancy, permitting more than one organization to share compute resources. In a public cloud, organizations typically represent different customers, and each customer may have several environments such as development or production. A self-service portal where Infrastructure as a Service (IaaS) can be consumed from a catalog of predefined applications (vapp Templates). A chargeback mechanism, so that resources can be methodically allocated, their consumption metered, and the associated cost provided back to the appropriate consumer. Refer to the corresponding Service Definition for further details. 1.3 Use Cases The target use cases for the vcloud include the following workloads: Development and test Pre-production Demos Training Tier 2 and Tier 3 applications 1.4 Document Purpose and Assumptions This vcloud Architecture Design document is intended to serve as a reference for architects, and assumes they have familiarity with ware products, including ware vsphere, vcenter, and ware vcloud Director. The vcloud architecture detailed in this document is organized into these sections: TECHNICAL WHITE PAPER / 4
5 SECTION DESCRIPTION vcloud Definition vsphere Management vsphere Resources Management and Security vcloud Logical Design Inventory of components that comprise the cloud solution vsphere and vcenter components that support running workloads Resources for cloud consumption Design organized by compute, networking, and shared storage Detailed through logical and physical design specifications and considerations Considerations as they apply to vsphere and ware vcloud Director Management components ware vcloud Director objects and configuration Relationship of ware vcloud Director to vsphere objects This document is not intended as a substitute for detailed product documentation. Refer to the installation and administration guides for the appropriate product as necessary for further information. 2. ware vcloud Architecture Design Overview 2.1 vcloud Definition The ware vcloud is comprised of the following components: VCLOUD COMPONENT DESCRIPTION ware vcloud Director ware vsphere Abstracts and coordinates underlying resources Includes: ware vcloud Director Server (1 or more instances, each installed on a Linux and referred to as a cell ) ware vcloud Director Database (1 instance per clustered set of ware vcloud Director cells) vsphere compute, network and storage resources Foundation of underlying cloud resources Includes: ware ESXi hosts (3 or more instances for Management cluster and Resource Group) vcenter Server (1 instance managing a management cluster of hosts, and 1 instance managing a resource group of hosts reserved for vcloud consumption) vcenter Server Database (1 instance per vcenter Server) TECHNICAL WHITE PAPER / 5
6 VCLOUD COMPONENT DESCRIPTION ware vshield Provides network security services including NAT and firewall Includes: vshield Edge (deployed automatically as virtual appliances on hosts by ware vcloud Director) vshield Manager (1 instance per vcenter Server in the cloud resource groups) ware vcenter Chargeback Provides resource metering, and chargeback models Includes: vcenter Chargeback Server (1 instance) Chargeback Data Collector (1 instance) vcloud Data Collector (1 instance) VSM Data Collector (1 instance) 2.2 vcloud Component Design Overview The components comprising the vcloud are detailed in this document in the following sections: DESIGN SECTION VCLOUD COMPONENT(S) vsphere Architecture Management Cluster vsphere Architecture Resource Group vcenter Server and vcenter Database vcenter Cluster and ESXi hosts vcenter Chargeback Server and Database vcenter Chargeback Collectors vshield Manager and vshield Edge(s) ware vcloud Director Cell(s) and Database (Oracle) vcenter Server(s) and vcenter Database(s) vcenter Cluster(s) and ESXi hosts 3. vsphere Architecture Design Overview 3.1 High Level Architecture vsphere resources are organized and separated into: A management cluster containing all core components and services needed to run the cloud. One or more resource groups that represent dedicated resources for cloud consumption. Each resource group is a cluster of ESXi hosts managed by a vcenter Server, and is under the control of ware vcloud Director. Multiple resource groups can be managed by the same ware vcloud Director. Reasons for organizing and separating vsphere resources along these lines are: Facilitating quicker troubleshooting and problem resolution. Management components are strictly contained in a relatively small and manageable management cluster. Otherwise, running on a large set of host clusters could lead to situations where it is time-consuming to track down and manage such workloads. TECHNICAL WHITE PAPER / 6
7 Management components are separate from the resources they are managing. Resources allocated for cloud use have little overhead reserved. For example, cloud resource groups would not host vcenter s. Resource groups can be consistently and transparently managed, carved up, and scaled horizontally. The high level logical architecture is depicted as follows. Management Cluster Resource Groups Compute Resources vsphere4.1 Shared Storage Provider vdc Basic Compute Resources Provider vdc Committed Compute Resources SAN Virtual Machines vsphere4.1 Shared Storage vsphere4.1 Shared Storage VCD vsm vcenter AD/DNS Oracle 11g Chargeback SAN SAN NFS MSSQL Log/Mon Figure 1 vcloud Logical Architecture Overview The following diagram depicts the physical design corresponding to the logical architecture previously described. TECHNICAL WHITE PAPER / 7
8 Figure 2 vcloud Physical Design Overview 3.2 Site Considerations The management cluster resides in a single physical Datacenter. Resource groups all reside within a single physical Datacenter. This ensures a consistent level of service, as it avoids potential latency issues if workloads need to be moved Datacenter to another over a slower or less reliable network. Neither secondary nor DR sites are in the scope of this project. 3.3 Design Specifications The architecture is described by a logical design that is independent of hardware-specific details. The focus is on components, their relationships, and quantity. Additional details are found in Appendix A. TECHNICAL WHITE PAPER / 8
9 4. vsphere Architecture Design Management Cluster 4.1 Compute Logical Design The compute design encompasses the ESXi host clusters. In this section the scope is further limited to only the infrastructure supporting the management component workloads Datacenters The management cluster is contained within a single vcenter datacenter vsphere Clusters The management cluster will be comprised of the following vsphere clusters. ATTRIBUTE SPECIFICATION Number of ESXi Hosts 4 ware DRS Configuration ware DRS Migration Threshold ware HA Enable Host Monitoring ware HA Admission Control Policy Fully automated 3 stars Yes Cluster tolerances 1 host failure (Percentage based) ware HA Percentage 25% ware HA Admission Control Response ware HA Default Restart Priority ware HA Host Isolation Response ware HA Enable Monitoring ware HA Monitoring Sensitivity Prevent s from being powered on if they violate availability constraints N/A Leave Powered On Yes Medium Table 1 vsphere Clusters Management Cluster Host Logical Design Each ESXi host in the management cluster will have the following specifications. ATTRIBUTE SPECIFICATION Host Type and Version Processors Storage Networking Memory ware ESXi Installable x86 Compatible Local for ESX binaries Shared for virtual machines Connectivity to all needed VLANS Sized to support estimated workloads Table 2 Host Logical Design Specifications Management Cluster TECHNICAL WHITE PAPER / 9
10 4.2 Network Logical Design The network design section defines how the vsphere virtual networking will be configured. Following best practices, the network architecture will meet these requirements: Separate networks for vsphere management, connectivity, vmotion traffic, and Fault Tolerance logging ( record/replay) traffic Redundant vswitches with at least 2 active physical adapter ports each Redundancy across different physical adapters to protect against NIC or PCI slot failure Redundancy at the physical switch level SWITCH NAME SWITCH TYPE FUNCTION # OF PHYSICAL NIC PORTS vswitch0 Standard Management Console vmotion FT 2 x 5 GigE vswitch1 Distributed s, & NFS 2 x 5 GigE Table 3 Virtual Switch Configuration Management Cluster When using the distributed virtual switch, dvuplink ports are the number of physical NIC ports on each host. The physical NIC ports will be connected to redundant physical switches. The following diagrams depict the virtual network infrastructure designs: Management Cluster vswitch0 Management VLAN U vmnic0 vmotion VLAN V vmnic1 Distribution Switch1 Core Switch1 vswitch1 DMZ VLAN W vmnic2 Mgmt VLAN X vmnic3 Distribution Switch2 Core Switch2 dvswitch1(optional) vmnic4 FT VLAN Y vmnic5 Figure 3 vsphere Logical Network Design Management Cluster TECHNICAL WHITE PAPER / 10
11 PARAMETER SETTING Load Balancing Failover Detection Notify Switches Failover Order Route based on NIC load (for vds) Link status Enabled All active except for Management Network Management Console: Active, Standby vmotion: Standby, Active Table 4 Virtual Switch Configuration Settings Management Cluster 4.3 Shared Storage Logical Design The shared storage design section defines how the vsphere datastores will be configured. The same storage will be used for both the Management cluster as well as the ware vcloud Director Resource groups. Following best practices, the shared storage architecture will meet these requirements: Storage paths will be redundant at the host (connector), switch, and storage array levels. All hosts in a cluster will have access to the same datastores. ATTRIBUTE SPECIFICATION Number of Initial LUNs 2 LUN Size Zoning 500GB Single Initiator single Target zones FS Datastores per LUN 1 s per LUN 12 (distribute redundant s) Table 5 Shared Storage Logical Design Specifications Management Cluster 4.4 Management Components The following components will run as s on the management cluster hosts: vcenter Servers vcenter Database vcenter Update Manager Database vcloud Director Cells vcloud Director Database vcenter Chargeback Server vcenter Chargeback Database vshield Manager ware vcloud Director Cells are stateless in operation with all information stored in the database. There is some caching that happens at the ware vcloud Director cell level, such as SSL session data, but all refreshes and updates are done to information stored in the database. As such, the database is critical to the operation of ware vcloud Director. In a production environment, ware recommends the database be housed in either a cluster configuration, or at the very least have a hot standby available. TECHNICAL WHITE PAPER / 11
12 ESXi ESXi vcenter Database vcenter Server JDBC VIM API Data Collector Chargeback Database vcenter Chargeback Load Balancer JDBC HTTPS VSM Data Collector vcloud Data Collector vcenter Chargeback UI HTTPS JDBC VSM vcd Database Figure 4 vcenter Chargeback Logical Diagram 4.5 Management Component Resiliency Considerations The following management components will rely on HA and FT for redundancy. MANAGEMENT COMPONENT HA ENABLED? FT ENABLED? vcenter Server Yes No ware vcloud Director Yes No vcenter Chargeback Server Yes No vshield Manager Yes Yes Table 6 Management Component Resiliency TECHNICAL WHITE PAPER / 12
13 5. vsphere Architecture Design Resource Groups 5.1 Compute Logical Design The compute design encompasses the ESXi host clusters. In this section the scope is further limited to only the infrastructure dedicated to the cloud workloads Datacenters Resource groups can map to different datacenters and are managed by a single vcenter server vsphere Clusters All vsphere clusters will be configured similarly with the following specifications. ATTRIBUTE SPECIFICATION ware DRS Configuration ware DRS Migration Threshold ware HA Enable Host Monitoring ware HA Admission Control Policy ware HA Admission Control Response ware HA Default Restart Priority ware HA Host Isolation Response ware HA Enable Monitoring ware HA Monitoring Sensitivity Fully automated 3 stars Yes Percentage-based Power on even if they violate availability constraints Medium for all s Leave Powered On No N/A Table 7 vsphere Cluster Configuration Resource Groups The resource groups will have the following vsphere clusters. CLUSTER NAME VCENTER SERVER NAME # OF HOSTS HA PERCENTAGE RG01COMM01 stg-vcvshield.acme.com 4 50% RG01PAYG01 stg-vcvshield.acme.com 4 50% Table 8 vsphere Clusters Resource Groups TECHNICAL WHITE PAPER / 13
14 Host Logical Design Each ESXi host in the resource groups will have the following specifications. ATTRIBUTE SPECIFICATION Host Type and Version Processors Storage Networking Memory ware ESXi Installable x86 Compatible Local for ESX binaries Shared for virtual machines Connectivity to all needed VLANS Enough to run estimated workloads Table 9 Host Logical Design Specifications Resource Groups 5.2 Network Logical Design The network design section defines how the vsphere virtual networking will be configured. Following best practices, the network architecture will meet these requirements: Separate networks for vsphere management, connectivity, vmotion traffic, traffic Redundant vswitches with at least 2 active physical adapter ports Redundancy across different physical adapters to protect against NIC or PCI slot failure Redundancy at the physical switch level SWITCH NAME SWITCH TYPE FUNCTION # O F PHYSICAL NIC PORTS vswitch0 Standard Management Console vmotion 2 x 3.4 GigE dvswitch1 Distributed External Networks 2 x3.3 GigE dvswitch2 Distributed Network Pools 2 x 3.3 GigE Table 10 Virtual Switch Configuration Resource Groups When using the distributed virtual switch, dvuplink ports are the number of physical NIC ports on each host. The physical NIC ports will be connected to redundant physical switches. The following diagram depicts the virtual network infrastructure design. TECHNICAL WHITE PAPER / 14
15 Management Cluster vswitch0 Management VLAN U vmnic0 vmotion VLAN V vmnic1 Distribution Switch1 Core Switch1 vswitch1 DMZ VLAN W vmnic2 Mgmt VLAN X vmnic3 Distribution Switch2 Core Switch2 dvswitch1(optional) vmnic4 FT VLAN Y vmnic5 Figure 5 vsphere Logical Network Design Resource Groups PARAMETER SETTING Load Balancing Failover Detection Notify Switches Failover Order Route based on NIC load (for vds) Link status Enabled All active except for Management Network Management Console: Active, Standby vmotion: Standby, Active Table 11 Virtual Switch Configuration Settings Resource Groups 5.3 Shared Storage Logical Design The shared storage design section defines how the vsphere datastores will be configured. Following best practices, the shared storage architecture will meet these requirements: Storage paths will be redundant at the host (connector), switch, and storage array levels. All hosts in a cluster will have access to the same datastores. TECHNICAL WHITE PAPER / 15
16 ATTRIBUTE SPECIFICATION Number of Initial LUNs 34 LUN Size Zoning 1 TB Single initiator, single target FS Datastores per LUN 1 s per LUN 12 Table 12 Shared Storage Logical Design Specifications Resource Groups 5.4 Resource Group Datastore Considerations The most common aspect of LUN/datastore sizing is what limit should be implemented regarding the number of s per datastore. The reason for limiting this number is to minimize the potential for SCSI locking and to spread the I/O across as many storage processors as possible. Most mainstream storage vendors will provide warespecific guidelines for this limit, and ware recommends an upper limit of 25 s per FS datastore, regardless of storage platform. In many cases it is forgotten that the number of s per LUN is also influenced by the size and I/O requirements of the but perhaps more importantly the selected storage solution and even disk types. When ware vcloud Director provisions s it automatically places the s on datastores based on the free disk space of each of the associated datastores in an organization virtual data center (Org vdc). Due to this mechanism, we will need to keep the size of the LUNs and the number of s per LUN relatively low to avoid possible I/O contention. When considering the number of s to place on a single datastore, some of the following factors should be considered in conjunction with any recommended s-per-lun ratio: Average workload/profile (in particular, the amount of I/O) Typical size (including configuration files, logs, swap files, and snapshot files) FS metadata Max requirement for IOPs and throughput per LUN, dependency on storage array and design Max RTO, if a LUN is lost, i.e. your backup and restore design If we approach this from an average I/O profile it would be tempting to create all LUNs the same, say as RAID 5, and let the law of averages take care of I/O distribution across all the LUNs and s on those LUNs. Another approach would be to create LUNs with different RAID profiles based on anticipated workloads within an Organization. This would dictate creating Provider virtual datacenters (vdcs) that took into account the allocation models as well as the storage profile in use. We would end up with the following types of Provider vdcs as an example: Commited_High_Performance Commited_Generic PAYG_High_Performance PAYG_Generic As a starting point, ware recommends starting with RAID 5 storage RAID profiles and only creating storage tiers as one-offs to address specific customer requirements. Obviously this creates opportunity in a service provider environment for tiered pricing as well. The ware Scalable Storage Performance Study provides additional information regarding vsphere storage design. TECHNICAL WHITE PAPER / 16
17 Datastore Sizing Estimation An estimate of the typical datastore size can be approximated by considering the following factors. VARIABLE VALUE Maximum Number of s per Datastore 15 Average Size of Virtual Disk(s) per Average Memory Size per 60 GB 2 GB Safety Margin 10% Table 13 Datastore Size Estimation Factors For example, ((15 * 60GB) + (15 * 2GB))+ 10% = (900GB + 30GB) * 1.1 = 1.023TB 6. vcloud Provider Design 6.1 Abstractions and ware vcloud Director Constructs A key tenet of the cloud architecture is resource pooling and abstraction. ware vcloud Director further abstracts the virtualized resources presented by vsphere by providing logical constructs that map to vsphere logical resources: Organization organizational unit to which resources (vdcs) are allocated. Virtual Datacenter (vdc) Deployment environments, scoped to an organization, in which virtual machines run. Provider Virtual Datacenter vsphere resource groupings that power vdcs, further segmented out into organization vdcs. Organization Virtual Datacenter (vdc) Subset of provider vdc. vcd Org Network Organization vdc External Network Network Pool Provider vdc vsphere Resource Pool (d)vs Port Group vds Compute Cluster Datastore Physical VLAN Physical Network Physical Host Storage Array Figure 6 ware vcloud Director Abstraction Layer Diagram TECHNICAL WHITE PAPER / 17
18 6.2 Provider vdcs The following diagram shows how the Provider vdcs map back to vsphere resources. vcenter01.vmware.com Basic Provider vdc Committed Provider vdc vhost03 vhost04 vhost05 vhost06 vhost07 vhost08 vhost09 vhost10 FS FS FS FS provider01 (1TB) provider02 (1TB) provider03 (1TB) provider04 (1TB) Figure 7 Provider vdcs in Resource Groups All ESXi hosts will belong to a vsphere cluster which will be associated with one and only one Provider vdc. A vsphere cluster will scale to 25 hosts, allowing for up to 14 clusters per vcenter Server (the limit is bound by the maximum number of hosts per datacenter possible) and an upper limit of 10,000 s (this is a vcenter limit) per resource group. The recommendation is to start with 8 hosts in a cluster and add resources (Hosts) to the cluster as dictated by customer consumption. However, per the public cloud service definition, each of the Provider vdcs (Basic and Committed) will start with 4 hosts. When utilization of the resources reaches 60%, it is recommended that a new Provider vdc/cluster be deployed for all new customers. This provides for growth within the Provider vdcs for the existing customers without necessitating a migration of customers as their utilization nears maxing out a cluster s resources. TECHNICAL WHITE PAPER / 18
19 As an example, a fully loaded resource group will contain 14 Provider vdcs, and up to 350 ESXi hosts, giving an average consolidation ratio of 26:1 assuming a 5:1 ratio of vcpu:pcpu. To increase this ratio, ACME Service Provider would need to increase the vcpu:pcpu ratio that they are willing to support. The risk associated with an increase in CPU over commitment is mainly in degraded overall performance that can result in higher than acceptable vcpu ready times. The vcpu:pcpu ratio is based on the amount of CPU over commitment, for the available cores, that ACME Service Provider feels comfortable with. For s that are not busy this ratio can be increased without any undesirable effect on performance. Monitoring of vcpu ready times helps identify if the ratio needs to be increased or decreased on a per cluster basis. A 5:1 ratio is a good starting point for a multicore system. A Provider vdc can map to only one vsphere cluster, but can map to multiple datastores and networks. Multiple Provider vdcs are used to map to different types/tiers of resources. Compute this is a function of the mapped vsphere clusters and the resources that back it Storage this is a function of the underlying storage types of the mapped datastores Networking this is a function of the mapped vsphere networking in terms of speed and connectivity Multiple Provider vdcs are created for the following reasons: The cloud requires more compute capacity than a single vsphere cluster (a vsphere resource pool cannot span vsphere clusters) Tiered storage is required; each Provider vdc maps to datastores on storage with different characteristics Requirement for workloads to run on physically separate infrastructure ATTRIBUTE SPECIFICATION Number of Provider vdcs 2 Number of Default External Networks 1 per Organization Table 14 Provider vdc Specifications PROVI D E R VDC CLUSTER DATASTORES VS PHERE NETWORKS FUNCTION RG01COMM01 vcd01vc01c01 vcd01vc01c01l001 vcd01vc01c01l002 vcd01vc01c01l003 RG01PAYG01 vcd01vc01c02 vcd01vc01c02l004 vcd01vc01c02l005 vcd01vc01c02l006 Internet01 PvDC for 400 s Internet01 PvDC for 400 s Table 15 Provider vdc to vsphere Mapping ware recommends assessing workloads to assist in sizing. Following is a standard sizing table that can be used as a reference for future design activities. TECHNICAL WHITE PAPER / 19
20 SIZE DISTRIBUTION 1 vcpu / 1 GB RAM 45% 2 vcpu / 2 GB RAM 35% 4 vcpu / 4 GB RAM 15% 8 vcpu / 8 GB RAM 5% Total 100% Table 16 Virtual Machine Sizing and Distribution 6.3 Organizations ORGANIZATION NAME DESCRIPTION Total World Cable Emca Corporation Totally High School Cable company with Test Dev Environment Corporate Internet Presence E-Learning Infrastructure Table 17 Organizations 6.4 Networks ATTRIBUTE SPECIFICATION Number of Default External Networks Number of Default vapp Networks Number of default Organization Networks Network Pool Types Used 1 per Organization End-user controlled 2 (Internet, Organization Isolated) vcloud Director Network Isolation (vcd-ni) Is a Pool of Public Routable IP Addresses Available? Yes, for Internet access assigned as a /27 Table 18 Network Specifications External Networks ACME Service Provider will provide the following sets of External Networks based on need: Internet Port group-backed Network VPN/MPLS Port group-backed network (optional) Part of the provisioning for an organization will involve creating an External network for each Organization, and a VPN network if desired, and associating them with the required Org Networks. The public cloud service definition requires that the Internet connection be a Nat/Routed Org network with at least a /27 networks associated with it Network Pools ACME Service Provider will provide the following sets of Network Pools based on need: vcd-ni-backed VLAN-Backed (Optional) TECHNICAL WHITE PAPER / 20
21 For the vcd-ni-backed pool it is recommended that the transport VLAN be a VLAN that is not in use within the ACME Service Provider infrastructure for increased security and isolation Networking Use Cases ACME Service Provider will provide the following four use cases (one optional VPN use case) for their customers based on the use cases that are currently being deployed in their physical environment: 1. Customers should be able to completely isolate vapps for their Development and/or Test Users vapp01 DB 1.12 Web 1.11 vapp01net App 1.10 Isolated vapp Figure 8 vapp Isolated Network 2. Customers should be able to connect to the Organization Networks either directly or via fencing and the Organization Networks will not have access to any public Internet. vapp01 vapp02 DB 1.12 Web 1.11 App 1.10 DB 1.15 Web 1.14 App 1.13 vapp01net vapp02net DevTest_Net(OrgNet) vapp Bridged to Org Figure 9 vapp Network Direct Attached to Org Network TECHNICAL WHITE PAPER / 21
22 This is an example for a Dev Test environment where developers will use the different IPs in their vapps. vapp1a vapp1b DB 1.12 Web 1.11 App 1.10 DB 1.12 Web 1.11 App 1.10 vapp01net vapp02net DevTest_Net(OrgNet) vapp fenced from Org Figure 10 vapp Network Fenced to Org Network This is an example for Dev Test where developers will have duplicate IPs in their vapps. 3. Customers should be able to connect the Organization Networks either directly or via fencing to the External Networks. vapp1a vapp1b DB 1.12 Web 1.11 App 1.10 DB 1.12 Web 1.11 App 1.10 vapp01net vapp02net DevTest_Net(OrgNet) VPN_Net(ExternalNet) Org Bridged to External Figure 11 vapp Network Fenced to Direct attached Org Network TECHNICAL WHITE PAPER / 22
23 This would be a good option when the External network is a private Network such as a VPN or MPLS terminated network. vapp1a vapp1b DB 1.12 Web 1.11 App 1.10 DB 1.12 Web 1.11 App 1.10 vapp01net vapp02net DevTest_Net(OrgNet) Org Firewalled from External Internet_Net(ExternalNet) Figure 12 vapp Network Fenced to Fenced Org Network This is one way to connect the External network and preserve VLANs by sharing the same VLAN for the Internet_Net among multiple Organizations The vshield Edge is needed to provide NAT and firewall services for the different Organizations. Once the External Networks have been created, a ware vcloud Director Administrator can create the Organization Networks as shown above. The vshield Edge (VSE) device is needed to perform Address translation between the different networks. The VSE can be configured to provide for port address translation to jump hosts located inside the networks or to gain direct access to individual hosts. ware recommends separating External and Organization networks by using two separate dvswitches. The External networks will be provisioned on dvswitch1 also known as a ProviderDVS. This is where all the static port groups will also be defined such as VPN and MPLS connections as the VLANs for these networks will be known ahead of time. The Organization networks on the other hand will be provisioned off of dvswitch2. This is where all the Organization networks will be created as well as the different types of vcd-ni-backed and VLAN-backed pools. The connectivity for this dvswitch will also be changed to allow for the higher MTU of 1524 needed to accommodate vcd-ni networks. 6.5 Catalogs The catalog will contain ACME Service Provider-specific templates that are to be made available to all organizations. ACME Service Provider will make available a set of catalog entries to cover the classes of virtual machines, templates, and media as specified in the corresponding Service Definition. TECHNICAL WHITE PAPER / 23
ware vcloud Implementation Example Private Enterprise vcloud TECHNICAL WHITE PAPER Table of Contents 1. Purpose and Overview... 4 1.1 Executive Summary... 4 1.2 Business Requirements... 4 1.3 Use Cases.................................................................4
VMware vcloud Architecture Toolkit Version 2.0.1 October 2011 This product is protected by U.S. and international copyright and intellectual property laws. This product is covered by one or more patents
ware vshield App Design Guide TECHNICAL WHITE PAPER ware vshield App Design Guide Overview ware vshield App is one of the security products in the ware vshield family that provides protection to applications
Public Version 1.5 TECHNICAL WHITE PAPER Table Of Contents Introduction... 3 Enterprise Hybrid Cloud... 3 Public Cloud.... 4 VMware vcloud Datacenter Services.... 4 Target Markets and Use Cases.... 4 Challenges
VMware vcloud Architecture Toolkit Version 2.0.1 October 2011 This product is protected by U.S. and international copyright and intellectual property laws. This product is covered by one or more patents
Service Definition for a Public Cloud Version 1.6 Technical WHITE PAPER 2011 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws.
Architecture Overview TECHNICAL WHITE PAPER Table of Contents Scope of Document....3 About VMware vcloud Director....3 Platform for Infrastructure Cloud...3 Architecture Overview....3 Constructs of vcloud
VMware vsphere 5.0 Evaluation Guide Auto Deploy TECHNICAL WHITE PAPER Table of Contents About This Guide.... 4 System Requirements... 4 Hardware Requirements.... 4 Servers.... 4 Storage.... 4 Networking....
VMware vsphere 4.1 with ESXi and vcenter This powerful 5-day class is an intense introduction to virtualization using VMware s vsphere 4.1 including VMware ESX 4.1 and vcenter. Assuming no prior virtualization
Service Definition for a Private Cloud Version 1.6 TECHNICAL WHITE PAPER Service Definition for a Private Cloud 2011 VMware, Inc. All rights reserved. This product is protected by U.S. and international
VMware vcloud Architecture Toolkit Version 2.0.1 October 2011 This product is protected by U.S. and international copyright and intellectual property laws. This product is covered by one or more patents
Technical Note Configuration s VMware Infrastructure 3 When you are selecting and configuring your virtual and physical equipment, you must stay at or below the maximums supported by VMware Infrastructure
Design and Sizing Examples: Microsoft Exchange Solutions on VMware Page 1 of 19 Contents 1. Introduction... 3 1.1. Overview... 3 1.2. Benefits of Running Exchange Server 2007 on VMware Infrastructure 3...
VMware vcenter Log Insight Getting Started Guide vcenter Log Insight 1.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
Expert Reference Series of White Papers vcloud Director 5.1 Networking Concepts 1-800-COURSES www.globalknowledge.com vcloud Director 5.1 Networking Concepts Rebecca Fitzhugh, VMware Certified Instructor
Installing and Configuring vcloud Connector vcloud Connector 2.7.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
Class Schedule E-SPIN's Virtualization Management, System Administration Technical Training with VMware vsphere Enterprise (7 Day) Date: Specific Pre-Agreed Upon Date Time: 9.00am - 5.00pm Venue: Pre-Agreed
VMware vsphere 5.0 Evaluation Guide Advanced Networking Features TECHNICAL WHITE PAPER Table of Contents About This Guide.... 4 System Requirements... 4 Hardware Requirements.... 4 Servers.... 4 Storage....
Course ID VMW200 VMware vsphere 5.1 Advanced Administration Course Description This powerful 5-day 10hr/day class is an intensive introduction to VMware vsphere 5.0 including VMware ESX 5.0 and vcenter.
VMware vsphere 5.0 Boot Camp This powerful 5-day 10hr/day class is an intensive introduction to VMware vsphere 5.0 including VMware ESX 5.0 and vcenter. Assuming no prior virtualization experience, this
VMware SAN Backup Using VMware vsphere Data Protection Advanced SEPTEMBER 2014 VMware SAN Backup Using VMware vsphere Table of Contents Introduction.... 3 vsphere Architectural Overview... 4 SAN Backup
Offline Data Transfer to VMWare vcloud Hybrid Service vcloud Connector 2.5.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
Management of VMware ESXi on W H I T E P A P E R Table of Contents Introduction................................................................ 3 HP Systems Insight Manager.................................................
Best Practices for Monitoring Databases on VMware Dean Richards Senior DBA, Confio Software 1 Who Am I? 20+ Years in Oracle & SQL Server DBA and Developer Worked for Oracle Consulting Specialize in Performance
VMware vsphere: Fast Track [V5.0] Experience the ultimate in vsphere 5 skills-building and VCP exam-preparation training. In this intensive, extended-hours course, you will focus on installing, configuring,
vshield Manager 4.1 vshield Edge 1.0 vshield App 1.0 vshield Endpoint 1.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
Introduction to VMware EVO: RAIL White Paper Table of Contents Introducing VMware EVO: RAIL.... 3 Hardware.................................................................... 4 Appliance...............................................................
ESXi 4.1 Embedded vcenter Server 4.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent
VMware vcloud Networking and Security Overview Networks and Security for Virtualized Compute Environments WHITE PAPER Overview Organizations worldwide have gained significant efficiency and flexibility
VMware vrealize Automation Reference Architecture Version 6.0 and Higher T E C H N I C A L W H I T E P A P E R Table of Contents Overview... 4 What s New... 4 Initial Deployment Recommendations... 4 General
vsphere 6.0 ESXi 6.0 vcenter Server 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more
vcloud Air This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document,
TGL VMware Presentation Guangzhou Macau Hong Kong Shanghai Beijing The Path To IT As A Service Existing Apps Future Apps Private Cloud Lots of Hardware and Plumbing Today IT TODAY Internal Cloud Federation
vshield Manager 5.0 vshield App 5.0 vshield Edge 5.0 vshield Endpoint 5.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
vcenter Operations Manager 5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions
Exam : VCP5-DCV Title : VMware Certified Professional 5 Data Center Virtualization (VCP5-DCV) Exam Version : DEMO 1 / 9 1.Click the Exhibit button. An administrator has deployed a new virtual machine on
Cloud Infrastructure Licensing, Packaging and Pricing ware, August 2011 2009 ware Inc. All rights reserved On July 12 2011 ware is Introducing a Major Upgrade of the Entire Cloud Infrastructure Stack vcloud
1. Mục tiêu khóa học. Khóa học sẽ tập trung vào việc cài đặt, cấu hình và quản trị VMware vsphere 5.1. Khóa học xây dựng trên nền VMware ESXi 5.1 và VMware vcenter Server 5.1. 2. Đối tượng. Khóa học dành
TECHNICAL NOTE VMware Infrastructure 3 SAN Conceptual and Design Basics VMware ESX Server can be used in conjunction with a SAN (storage area network), a specialized high speed network that connects computer
vsphere 5.5 ESXi 5.5 vcenter Server 5.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more
Why Choose VMware vsphere for Desktop Virtualization? WHITE PAPER Table of Contents Thin, Legacy-Free, Purpose-Built Hypervisor.... 3 More Secure with Smaller Footprint.... 4 Less Downtime Caused by Patches...
W H I T E P A P E R ware Infrastructure Architecture Overview ware white paper Table of Contents Physical Topology of the ware Infrastructure Data Center............................... 4 Virtual Data Center
VMware vcloud Automation Center 6.1 Reference Architecture T E C H N I C A L W H I T E P A P E R Table of Contents Overview... 4 What s New... 4 Initial Deployment Recommendations... 4 General Recommendations...
To register or for more information call our office (208) 898-9036 or email firstname.lastname@example.org Vmware VSphere 6.0 Private Cloud Administration Class Duration 5 Days Introduction This fast paced,
JOB ORIENTED VMWARE TRAINING INSTITUTE IN CHENNAI Job oriented VMWARE training is offered by Peridot Systems in Chennai. Training in our institute gives you strong foundation on cloud computing by incrementing
Technical Note The vfabric Data Director worksheets contained in this technical note are intended to help you plan your Data Director deployment. The worksheets include the following: vsphere Deployment
VMware vcloud Air - Disaster Recovery User's Guide vcloud Air This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition.
VMware vsphere 4.1 Pricing, Packaging and Licensing Overview E f f e c t i v e A u g u s t 1, 2 0 1 0 W H I T E P A P E R Table of Contents Executive Summary...................................................
VMware vrealize Automation Reference Architecture Version 6.0 or Later T E C H N I C A L W H I T E P A P E R J U N E 2 0 1 5 V E R S I O N 1. 5 Table of Contents Overview... 4 What s New... 4 Initial Deployment
VMware vcenter Log Insight Getting Started Guide vcenter Log Insight 2.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
Monitoring Databases on VMware Ensure Optimum Performance with the Correct Metrics By Dean Richards, Manager, Sales Engineering Confio Software 4772 Walnut Street, Suite 100 Boulder, CO 80301 www.confio.com
vcloud Director 1.5 Technical WHITE PAPER Table of Contents Introduction.... 3 Improving Agility in the Cloud.... 4 Fast Provisioning Using Linked Clones... 4 Behind the Scenes.... 5 Cross Datastore Linked
Table of Contents UCS E-Series Availability and Fault Tolerance... 3 Solid hardware... 3 Consistent management... 3 VMware vsphere HA and FT... 3 Storage High Availability and Fault Tolerance... 4 Quick-start
vshield Manager 5.0.1 vshield App 5.0.1 vshield Edge 5.0.1 vshield Endpoint 5.0.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
VMware vsphere Data Protection REVISED APRIL 2015 Table of Contents Introduction.... 3 Features and Benefits of vsphere Data Protection... 3 Requirements.... 4 Evaluation Workflow... 5 Overview.... 5 Evaluation
How to Create a Simple Content Management Solution with Joomla! in a vcloud Environment A VMware Cloud Evaluation Reference Document Contents About Cloud Computing Cloud computing is an approach to computing
Configuration s vsphere 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions
VMWARE VSPHERE 5.0 WITH ESXI AND VCENTER CORPORATE COLLEGE SEMINAR SERIES Date: April 15-19 Presented by: Lone Star Corporate College Format: Location: Classroom instruction 8 a.m.-5 p.m. (five-day session)
Nutanix Tech Note Configuration Best Practices for Nutanix Storage with VMware vsphere Nutanix Virtual Computing Platform is engineered from the ground up to provide enterprise-grade availability for critical
Administrator's Guide EN-000193-00 You can find the most up-to-date technical documentation on the VMware Web site at: http://www.vmware.com/support/ The VMware Web site also provides the latest product
VMware Virtual SAN Design and Sizing Guide TECHNICAL MARKETING DOCUMENTATION V 1.0/MARCH 2014 Table of Contents Introduction... 3 1.1 VMware Virtual SAN...3 1.2 Virtual SAN Datastore Characteristics and
VMware for Bosch VMS en Software Manual VMware for Bosch VMS Table of Contents en 3 Table of contents 1 Introduction 4 1.1 Restrictions 4 2 Overview 5 3 Installing and configuring ESXi server 6 3.1 Installing
DMZ Virtualization Using VMware vsphere 4 and the Cisco Nexus 1000V Virtual Switch What You Will Learn A demilitarized zone (DMZ) is a separate network located in the neutral zone between a private (inside)
Network Segmentation in Virtualized Environments B E S T P R A C T I C E S ware BEST PRAC TICES Table of Contents Introduction... 3 Three Typical Virtualized Trust Zone Configurations... 4 Partially Collapsed
Installing and Administering VMware vsphere Update Manager Update 1 vsphere Update Manager 5.1 This document supports the version of each product listed and supports all subsequent versions until the document
VMware vcloud Networking and Security Efficient, Agile and Extensible Software-Defined Networks and Security BROCHURE Overview Organizations worldwide have gained significant efficiency and flexibility