managing private CA Technologies solutions

Transcription

1 TECHNOLOGY BRIEF Managing Private Cloud Services with Cisco UCS and CA Solutions Technologies May Solutions 2010 May 2010 managing private cloud private services cloud with services Cisco with UCS and Cisco CA UCS solutions and CA Technologies solutions Peter Waterhouse STRATEGIC ALLIANCES we can

2 table of contents executive summary 01 SECTION 1 Challenge 04 Managing the Private Cloud Section 2: Opportunity: Unified Computing and Unified Management 05 Cisco Unified Computing System Extended Management: CA Tecnologies and Cisco UCS Manager Integration Discovery, Service Modeling, and Root-Cause Analysis Performance Management and Analytics Advanced Automation Section 3: Benefits 10 Comprehensive UCS Management Capabilities SECTION 4 Conclusions 11 SECTION 5 About the Author 12 02

3 executive summary Challenge Increased agility and massive cost efficiencies from scalable, elastic IT delivered as services across the Internet are fast becoming the new normal and the basis of business computing. Traditional architectures, platforms, and IT management methods have yet to thrive in the new age of cloud computing and will fall short. Furthermore, as organizations begin to deploy massively virtualized private cloud platforms, managing technology from a silo-based perspective, with manual processes and reactive monitoring, will limit financial gains and business potential. Opportunity In private cloud computing, everyone is a service provider and everything is delivered as a service. When cloud providers separate services from the underlying infrastructure, opportunities for IT organizations to track and measure their own effectiveness abound. This, however, requires a base set of components: first, a platform to unify disparate elements (system, networks and storage); and second, software solutions that manage the services delivered from the private cloud. Software solutions to manage cloud service performance combined with virtualization management and automation is key to increasing business agility and lowering operational costs. Benefits By combining CA Service Assurance, CA Business-Driven Assurance, and Cisco Unified Computing System (UCS) Manager, organizations can realize the following benefits: Increase staff effectiveness by quickly identifying the root-cause problems of system and network performance Help prevent business disruption by analyzing KPIs in real time and alerting IT operations before services are adversely affected Increase business responsiveness by automating the provisioning process across both physical and virtual infrastructures Lower operational costs and reduce risk by detecting configuration changes and drifts against business-state baselines 03

4 Section 1: Challenge Managing the Private Cloud The allure of self-service, elastic IT resources with pay-as-you-go pricing is causing many organizations to embrace cloud computing architectures in a big way. And while public clouds are still maturing and evolving, the notion of building and deploying private clouds where the infrastructure is wholly owned by a single organization and housed within the enterprise firewall is quickly gaining traction. According to Tom Bittman of Gartner Research, Cloud computing has a promising future, but many large enterprises will invest in the near-term on private cloud-computing services, especially in the area of infrastructure as a service. 1 While private cloud computing undoubtedly holds great promise, its inherent characteristics will require far more flexibility from both the hardware platforms and the IT management tools that support them. Example characteristics and management requirements include: Service-based and self-service: In cloud computing, everything IT delivers should be regarded as a service. Since users and customers need to subscribe to these services, the cloud model dictates that services should be presented and accessed in a simple way. This requires IT management solutions that enable organizations to operate as true service providers, providing a catalog of service options and prices, together with presenting charges and bills. Virtualized and automated: In the cloud, delivery of services and ongoing usage tracking and measurement should be completely automated. IT management and processes should be completely hidden from the user and require no manual intervention whatsoever. Additionally, since private clouds operate on pools of virtualized resources, the ability to build elasticity requires the ability to scale resources up and down according to fluctuating conditions. Assurance and service quality: At an operational level, processes need to be in place to ensure service delivery is in accordance with business-based contracts and service level agreements. Since private cloud services can be accessed by customers and business partners (e.g. SaaS), capabilities need to address operational performance and the quality of service perceived by business users and customers. Comprehensive security: As cloud computing deployment gains traction, so will the requirement to ensure data privacy, support complex trust models, and access controls. Since cloud security is till the primary concern for organizations, incorporating robust yet flexible policy-based controls across an extended and dynamic service-supply chain will be critical to success. While each of these requirements is equally important, the building blocks to successful cloud computing is a flexible unified platform, backed by business-driven automation and service assurance. CA Business-Driven Automation and Service Assurance for Cisco Unified Computing System builds on the Cisco Unified Computing System Manager to manage cloud services deployed across both Cisco and legacy infrastructure. By working collaboratively, Cisco and CA have developed a solution that combines physical and virtual computing with service assurance and automation. The result is a highly-scalable and dynamic system one in which virtualized hardware is provisioned according to business demands and workloads, and cloud services are monitored in real time to ensure optimum performance. 1 Gartner Research - Predicts 2010: Cloud Computing Emerges From the Hype, Scope and Issues Demand Clarification 04

5 Section 2: Opportunity Unified Computing and Unified Management Cisco Unified Computing System The Cisco Unified Computing System (UCS) represents a radical simplification of traditional architectures, dramatically reducing the number of devices that must be purchased, cabled, configured, powered, cooled, and secured. The solution delivers end-to-end optimization for virtualized environments while retaining the ability to support traditional OS and application stacks in physical environments. Unlike traditional architectures, Cisco UCS is a next generation data center platform that unites computing, networking, storage access, and virtualization into one cohesive system. Components include: Fabric interconnect and fabric extenders for 10 Gigabit Ethernet and Fiber Channels over Ethernet with extension capabilities Blade servers and chassis for energy efficiency and memory expansion Virtual adapters for virtual host bus adapters and network interface controller (NIC) adapters Cisco UCS also contains a management component Cisco UCS Manager which is embedded within the fabric interconnect for integrated system-level physical device management. From a management perspective, Cisco UCS Manager acts as a domain level manager for the Cisco UCS platform and devices, using service profiles and templates to provide role- and policy-based management. In addition to participating in the server provisioning, Cisco UCS Manager provides device level discovery, inventory, monitoring, fault detection, and auditing for Cisco UCS devices. Extended Management: CA and Cisco UCS Manager Integration While Cisco UCS Manager provides comprehensive device management across the UCS domain, including blade chassis and servers, its power is amplified when integrated at a cross-domain enterprise level. Cisco and CA have collaborated to deliver a solution that does just that, combining Service Assurance and Business-Driven Automation capabilities. Now organizations have a single solution to handle faults, performance, and configuration management within the UCS virtualized environment and across physical infrastructure. Our solution also addresses the increasing need for automated policy-based provisioning of the physical, virtual, and cloud resources needed to keep IT operations costs down as complexity of delivering cloud services increases. Three important solutions integrate with Cisco UCS Manager to deliver the capabilities discussed above: 1. CA Spectrum Infrastructure Manager (Spectrum IM) provides users with performance-driven root-cause and impact analysis to help ensure the health and reliability of their UCS environment and the applications and cloud services that will be delivered over the UCS-based infrastructure. 2. CA ehealth Performance Manager (ehealth PM) proactively manages the performance of the UCS infrastructure by collecting key performance indicators specific to the infrastructure technology under management. CA ehealth PM then analyzes that data, proactively identifies systemic performance issues, and alerts infrastructure managers before users and services are negatively impacted. 05

6 3. CA Spectrum Automation Manager (Spectrum AM) enables the automation of a broad range of datacenter operational processes running on the Cisco Unified Computing System platform. Extended capabilities include: configuration management, automated provisioning, policy-based automation, and self-service. To further extend capabilities across the entire datacenter, the CA Virtual Performance Management solution provides all three products with a common management layer for multi-platform, multi-vendor virtual server technology control. The integration point between Cisco UCS Manager and CA solutions is provided by CA s SystemEDGE agent. SystemEDGE is a lightweight data gatherer used across multiple CA products. Furthermore, its lightweight architecture allows custom written modules that plug into the agent itself in order to gather customized data. These modules, one of which has been provided for the Cisco UCS Manager, are called Application Insight Modules (AIMs). When deployed, the Cisco UCS AIM gathers information via the Cisco UCS Manager XML API and allows this information to be queried via standard SNMP. Because of its generic nature, the SNMP queries can come from just about anywhere: CA Spectrum IM, CA Spectrum AM, CA ehealth, or even a third-party tool and utility. The architecture supporting Cisco UCS is shown in Figure 1. Figure 1 CA and Cisco UCS managemement architecture. The integration between CA and Cisco UCS is provided by a lightweight extensible agent. This agent gathers management information via the Cisco UCS Manager XML API and is made available to cross-enterprise management solutions. Discovery, Service Modeling, and Root-Cause Analysis With the integration to the UCS Manager configured and enabled via the SystemEDGE agent, CA Spectrum Infrastructure Management (IM) is able to provide broader and more advanced management of the UCS system. CA Spectrum IM will perform a discovery of the UCS infrastructure and create a software model for components, including the UCS Manager, blade-chassis, blades, and the fabric interconnect switches. 06

7 In addition, CA Spectrum IM determines the connectivity and relationships between the UCS components using service models. These models can also be uploaded as configuration items to an external Configuration Management Database (CMDB). At an infrastructure management level, the UCS service models are represented in CA Spectrum IM s topology map as a graphical presentation of the UCS infrastructure (see Figure 2 below). The UCS chassis model in CA Spectrum IM s object database is designed to display the overall health of the UCS chassis and blade servers within it. Each fabric interconnect is also topologically significant: they mark the boundary between a Fiber Channel over Ethernet (FCoE) data center network and the conventional IP network and switches between the chassis-based blades. Each blade is not topologically significant but is modeled to represent the BIOS level information available through the UCS. Alternatively, a topologically significant model of the OS or hypervisor software running on a blade can be manually associated with or promoted to the chassis to take on the role of the blade. The topology maps provide system administrators with a single tool to display information on each UCS system and the services they support. At a chassis level, details such as system, environment, and power are displayed together with detailed information views for each blade. In addition to the topology view, CA Spectrum IM s OneClick Operations Console includes a hierarchical view of the UCS environment located in the left navigation panel. This expandable view of each UCS Manager, UCS chassis, and associated components with alarm counts enables operators to rapidly pinpoint UCS components under management with locator searches available to rapidly find all UCS Managers, all chassis, or all fabric interconnects. Figure 2 CA Spectrum IM topology map with Cisco UCS container. CA Spectrum IM integrated with Cisco UCS Manager enables the discovery and service modeling of Cisco UCS components. OneClick technology and locator searches enable the operator to rapidly pinpoint and manage UCS components under control. 07

8 One of the advantages of using CA Spectrum IM for managing the UCS is the enhanced root-cause analysis and alarm correlation, which can quickly pinpoint root cause and eliminate unnecessary alarms that are symptoms of the root cause. CA developed CA Spectrum IM s root-cause support of the UCS infrastructure to understand the UCS chassis as a correlation domain that includes all components within each chassis. The enhanced root cause analysis is especially powerful, since it identifies when UCS fabric interconnects and chassis issues are caused by the UCS and when they are not (i.e. outside the UCS platform). When faults occur within the UCS correlation domain, symptomatic alarms are suppressed and a single root-cause alarm is issued, eliminating extraneous noise. For example, if a UCS chassis power subsystem fails, affecting the blades (and services running on them), then individual alarms on all the blades will be suppressed in order to point the fault to the chassis (the root cause). Suppressed alarms are preserved and listed in the alarm details tab as symptoms of the root cause. Performance Management and Analytics When integrated with Cisco UCS Manager, CA ehealth Performance Manager (PM) manages UCS system performance by collecting key performance indicators across the Cisco UCS system including blade servers, fabric interconnect switches, fiber channels, and Ethernet interfaces. It also collects key performance indicators of environmental components including power, current, voltage, and temperature. CA ehealth PM then analyzes this data, proactively identifies systemic performance issues, and alerts infrastructure managers before users and services are negatively impacted. The solution also provides insight into historical data via interactive Web-based interfaces and, in conjunction with out-of-the-box at-a-glance reports, better enables the prioritization of resources based upon the health of infrastructure components. The ability to detect when performance metrics deviate from a desired state is a key attribute of the solution. For example, if application code is deployed in a UCS environment and introduces a memory leak, CA ehealth PM will detect the memory usage of the blade deviating from normal and will generate an alert to indicate the potential service-impacting issue. The issue can then be rectified before users are negatively impacted. There are even more benefits when CA Spectrum IM and CA ehealth PM are implemented together. Proactive performance alerts generated in CA ehealth PM are automatically sent to CA Spectrum IM, from which the operator uses an integrated workflow to navigate between the CA Spectrum IM UCS service model (and affected component) and the associated CA ehealth PM UCS performance reports. This integration increases operator productivity and reduces the potential for costly service outages. Advanced Automation With the integration of CA Spectrum Automation Manager (AM) and Cisco s Unified Computing System, users can automate a broad range of important datacenter operations running on Cisco UCS platforms. To optimize the availability and performance of applications or services, it is important to ensure that a system s configuration remains consistent over time and does not drift from its intended state. The Application Configuration Management component within CA Spectrum AM enables a user to perform 08

9 continuous, automated discovery and mapping of applications and system infrastructure elements, resulting in improved accuracy of configurations under management control. Any changes to a Cisco UCS platform and the software stack running on the platform, as compared with a user specified reference configuration, will be detected. It can then be reported for further action via an automated ITIL process or automatically remediated based on a predetermined policy action. This reference configuration can be either of the following: A baseline snapshot used as a gold standard snapshot to detect servers that are out of compliance with specific corporate standards A periodic on-demand snapshot of a server s configuration settings that are compared with prior snapshots from the same server to detect changes that may impact an application s performance over time With CA Spectrum AM, users can create templates which are associated with a UCS service profile with an application stack. In this way, multiple instances of applications can be more easily created and deployed without the need for the user to replicate common configuration specifications. CA Spectrum Automation Manager is also designed to support the automated provisioning of software stacks (OS and applications) and Cisco UCS platforms, as defined by service profiles, to provide complete cloud services. CA Spectrum Automation Manager supports automated provisioning on both physical and virtual server platforms. Multiple levels of provisioning are supported to meet a range of technical and business requirements. Operator-initiated: Manual provisioning executed by an authorized administrator Alert-driven: Provisioning and configuration change requests are routed through change management systems and executed upon approval Scheduled: Resources and services are provisioned at a set date and time Dynamic: Resources are provisioned in real time in response to changing business needs and performance and configuration issues Further advanced policy-based automation makes it possible for administrators to define policy rule sets for the Cisco UCS platform after which automated actions will be initiated when the rules are triggered. The rules are developed using the metrics available to CA Spectrum Automation Manager itself, and/or through integration with Cisco UCS Manager and its own metrics. Once a rule triggers, the user-specified action takes place. This action can take many forms, including: Enabling application services to dynamically scale up and down based on usage/performance criteria Initiating an application configuration management discovery task and checking the current configuration against a desired state for compliance Running an IT Process Automation Management workflow that executes a predefined coordinated set of cross-domain IT processes (integration and data exchange, end-to-end nested processes, and coordinated on-demand process control) Directs a VMware action, such as VMotion live migration of virtual machines (See Figure 3) 09

10 Figure 3 Policy-based automation. With CA and Cisco management, administrators can define complex policy rule sets for the Cisco UCS platform. When triggered, actions such as a VM migration across blade servers can be performed. Finally, with the Spectrum AM solution, Cisco UCS platforms can be made available as a part of an end-user self-service reservation system. This allows users to quickly and securely reserve resources for application testing, development, training, production and cloud environments without the need to directly involve IT support staff. Section 3: Benefits Comprehensive UCS Management Capabilities In summary, benefits from Service Assurance solutions (CA Spectrum Infrastructure Manager and ehealth Performance Manager integrated with Cisco UCS Manager) include: Immediate insight into the health of the UCS platform by automatically discovering UCS models and populating a topology map and graphical management interface Increased staff productivity, generated by providing a single OneClick management interface that instantly highlights problem components Lower IT management costs for root-cause analysis and alarm correlation that can quickly pinpoint problems and eliminate unnecessary alarms 10

11 Better support for a dynamic cloud environment by continuously analyzing key performance indicators, alerting IT operations before business users are adversely affected In addition, Business-Driven Automation capabilities (CA Spectrum Automation Manager integrated with Cisco UCS Manager) include: Helping prevent unplanned business disruption and ensuring compliance by detecting configuration changes and drifts against business-state baselines Reducing costs by delivering a single integrated solution that manages, configures, and provisions services across both physical and virtual infrastructure Providing better control and agility by allowing users to self-select only the services they need Streamlining and automating the process of provisioning an end-to-end service across the entire technology stack Integrating policy-based control and Cisco UCS Manager Profiles to dynamically allocate resources based on changing business conditions Section 4: Conclusions Increased business agility and massive cost efficiencies gained from scalable, elastic-it delivered as services across the Internet is fast becoming the new normal and the basis of business computing. Yet to thrive in the era of cloud computing, traditional architectures, platforms and IT management methods will fall short. Private cloud service delivery requires advanced hardware and IT management capabilities: first, a platform to unify disparate elements (system, networks, and storage); and second, software solutions that support the building and management of cloud services themselves. In this context, a critical foundation that supports the principles of cloud computing providing self-service, virtualization management, and automation is especially important. CA and Cisco have collaborated to deliver such a solution, by integrating Cisco UCS device management with CA s Advanced Service Assurance and Business-Driven Automation. Together this combination supports and accelerates the benefits of cloud computing: increased business agility and lower total cost of ownership. 11

12 Section 5: About the Author Peter Waterhouse is based in the world s most livable city (Melbourne, Australia), Pete currently works as a marketing advisor and leading Asia Pacific spokesperson on CA s business and technology strategy. In this capacity, Pete has authored and delivered numerous papers and presentations. He has also appeared regularly in print and online media, discussing key business and technology issues. With a passion for business computing and IT management, Pete specializes in all the things that have the potential to make a positive difference for any organization, including: cloud computing, service management, IT financial management, and, of course, best practices. CA Technologies is an IT management software and solutions company with expertise across all IT environments from mainframe and physical, to virtual and cloud. CA Technologies manages and secures IT environments and enables customers to deliver more flexible IT services. CA Technologies innovative products and services provide the insight and control essential for IT organizations to power business agility. The majority of the Global Fortune 500 rely on CA Technologies to manage their evolving IT ecosystems. For additional information, visit CA Technologies at ca.com. Copyright 2010 CA. All rights reserved. All trademarks, trade names, service marks and logos referenced herein belong to their respective companies. This document is for your informational purposes only. CA assumes no responsibility for the accuracy or completeness of the information. To the extent permitted by applicable law, CA provides this document as is without warranty of any kind, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, business interruption, goodwill or lost data, even if CA is expressly advised in advance of the possibility of such damages. 2110_0510