UNIFIED COMPUTING TECHNICAL DATA SHEET Interoute Virtual Data Centre 2.0

Transcription

1 Contents Contents... 1 Scope of this document... 2 Product Overview... 2 VDC: IaaS - Compute... 6 VDC Dedicated Infrastructure... 8 VDC: IaaS - Storage VDC: IaaS - Network VDC Appliance & Template Management VDC Control VDC Commercial & Billing VDC Platform VDC Service Assistance and Support VDC Professional Services Further Information Version: 1.3 Published: 13 March 2015

2 Scope of this document The purpose of this document is to detail the technical functions, parameters and limits of version 2.0 of the Interoute VDC service. VDC 2.0 was first made available to customers in February This document starts with the core IaaS elements and goes on to include service-level details including the commercial aspect of the service; from billing through to support. For instructions on how to access or use the features described in this document please visit our online Knowledge Centre: Product Overview Virtual Data Centre (VDC) is Interoute s scalable, automated Infrastructure as a Service (IaaS) solution. The service enables you to design, provision and manage cloud resources from our VDC Zones (physical data centres) in London, Slough, Amsterdam, Berlin, Frankfurt, Geneva, Paris, Milan, Madrid, Hong Kong, New York and Los Angeles. (New zones in Singapore and Chicago will open in 2015.) Compute, Storage, Network and Appliances can all be deployed in line with your specific requirements. The VDC service is managed through the VDC Control Centre, a GUI that is accessed through myservices.interoute.com, Interoute s customer self service portal. My Services has a monitor tile that gives a snapshot overview of the resources currently in use by your VDC (see screenshot below). The VDC service is organised as three Regions: Europe, North America and Asia. There is a separate Control Centre GUI for each Region. VDC Control Centre: Dashboard When you access the Control Centre you are initially presented with a dashboard (see below), this reports the amount of resources in use and the latest events from the server logs. Management of each type of cloud resource is then performed through the appropriate menu item. 2 2

3 VDC Control Centre: Virtual Machines The Virtual Machines menu displays the current virtual machines deployed, their name, location, and state. You can select a VM from the list to bring up detailed information about the VM (e.g. amount of CPU allocated, Template used etc.), and to reveal a control panel to perform operations on the VM (start/stop, change CPU/RAM, network and storage configurations, etc.). From here an Add Virtual Machine wizard can be accessed. This guides you through the process of choosing the VDC zone (physical location) where geographically you want the VM to be deployed, what template or ISO you want it to be deployed from, the amount of CPU and RAM resources you want allocated, the network(s) you want it connected to, and the VM's identification name. The Control Centre GUI is just one way to launch a VM. Alternatively you can use the VDC API interface or you can deploy from product pages in the Interoute CloudStore. VDC Control Centre: Affinity Groups Affinity groups enable you to automatically deploy virtual machines on independent compute hardware, within one zone. For example, for a web server VM cluster you could use an affinity group to ensure that each web server in a one zone is deployed on a different physical blade. VDC Control Centre: Storage The storage menu displays the storage volumes that currently exist, their type and the virtual machine that they are attached to. ROOT volumes are the volume upon which a virtual machine s operating system resides; therefore all virtual machines have a ROOT volume. DATADISK volumes are for additional attached storage volumes. When you want to add a new volume you specify the VDC zone to create it in, the size and the Storage Offering (storage type), of which currently there are three: 'EBS': External Block Storage persistent storage 'EBS Protected': External Block Storage that has scheduled storage-level snapshots. 'EBS Mirrored': External Block Storage with scheduled snapshots, and the snapshots are also replicated to another zone. 3 3

4 Additional SAN and NAS storage configurations are available as an add-on, based on NetApp vfiler technology. VDC Control Centre: Network The network menu displays the networks that currently exist. New networks can be created (with the option to create more types using the API). Networks can be configured for public IP addresses, firewall rules, egress and port forwarding rules, and load balancer configuration. Using the network services native to VDC (firewall, NAT, IPSEC VPN and load balancer; or "isolated" network with no services), combined with network services provided by Interoute's MPLS-based fibre network (IPVPN MPLS WAN and IPAC), you can build any cloud based topology. For more details, see the section VDC: IaaS Network below. VDC Control Centre: Templates When you deploy a virtual machine through the VDC Control Centre you can chose to create it from a template. The VDC service includes a number of common Windows and Linux operating system variants. You can just as easily use templates based on virtual machine images that you have imported into VDC. 4 4

5 CloudStore templates As well as using VDC s native templates and your own imported templates we have an extensive range of appliance templates available through the Interoute CloudStore. The CloudStore allows you to search by application, vendor or product family to find a suitable appliance. When you chose to buy an appliance a wizard not only allows you to purchase the appliance template but also deploys it to the zone you want and integrates it with the networks that you specify. The screenshot above shows selecting the zone for a new VM via a clickable map, and using slider controls to select the required amounts of CPU and RAM. Note that CPU and RAM are independently choosable, you are not restricted to a few machine sizes. 5 5

6 VDC: IaaS - Compute The Virtual Data Centre service offers Infrastructure as a Service resources (Compute, Storage & Network) to the customer. Compute resources are delivered on top of hypervisors (VMware ESXi), which virtualize the underlying physical infrastructure. The following are the capabilities of the compute infrastructure: Compute General What is the maximum size for a VM s root (OS) disk? 1024 GB Using the GUI or API the standard offering allows root disks up to 100 GB in size to be created. If a larger size is needed please contact a technical specialist through VDC LiveChat. Can I specify the number of vcpu that each VM has? We don t dictate VM sizes. You can select the number of CPU independently from the amount of RAM. The maximum values are listed below. Can root disks be resized? No Root disks created for a VM deployed from a template cannot be resized. If the root disk size available for a template is not appropriate to your needs you can build a new template (using an operating system ISO file) and at the point of creation specify the root disk size that you want, up to a maximum of 100 GB. Can a VM be created from an ISO file? The ISO file must first be uploaded using the VDC Control Centre s template management feature. Instructions can be found in the Knowledge Centre here. Can an ISO be mounted to a VM? The ISO file must first be uploaded. Instructions can be found in the Knowledge Centre here. Can compute resources be dynamically scaled vertically without needing to reboot a VM (a.k.a. 'hot' vertical scaling)? CPU and RAM values can be increased on a VM without needing a reboot. There are certain operating system limitations and requirements. These are detailed in the Knowledge Centre here. Can compute resources be scaled vertically for a VM? For OS variants or scenarios that don t support hot scaling, CPU and RAM values can be increased on a stopped VM and then rebooted. Using the API this process can be scripted. Can VMs scale horizontally? VMs can be scaled horizontally (i.e. by replication) up or down using the GUI or API. Further to this, the API enables automatic scaling in response to traffic requirements. What is the minimum vcpu processing speed? 2 GHz Can I request dedicated physical host infrastructure? See below for details about VDC Dedicated Infrastructure. 6 6

7 Is RAM a contended resource? No Is CPU a contended resource? CPU is a contended resource. The ratio of vcpu to physical CPU threads can theoretically be up to 4:1 but through active capacity management we aim to contend at no more than 2:1 Are the compute hardware elements HA (Highly Available)? Only virtual machines with maximum 64 GB RAM and maximum 8 vcpu will be supported during HA events. What is the max number of vnics per VM? 8 What is the max number of volumes per VM? 5 More are possible but not recommended for performance reasons. ESXi hypervisor What is the maximum number of vcpu per VM? 16 The standard maximum configuration is 16 vcpu and 64 GB of RAM. Additional offerings of up to 32 vcpu and 256 GB of RAM are available subject to discussion with a technical specialist. What is the maximum amount of RAM per VM? 64 The standard maximum configuration is 16 vcpu and 64 GB of RAM. Additional offerings of up to 32 vcpu and 256 GB of RAM are available subject to discussion with a technical specialist. 7 7

8 VDC Dedicated Infrastructure Interoute offers dedicated compute clusters, consisting of single tenant compute blades within a VDC zone. Dedicated clusters provide a process execution environment for a customer s virtual machines that is physically separated from other tenants of the VDC zone. VM provisioning When a dedicated cluster is deployed, the customer can provision VMs in the normal manner, but will select an specially assigned affinity group to access the dedicated hardware. For larger dedicated clusters, Interoute will provision a dedicated zone for the customer. Cluster provisioning Dedicated clusters are provisioned by Interoute for a customer on request and are subject to additional terms. Interoute s technology supports high availability for VMs deployed in clusters where the required capacity is available (the number of blades must be at least one greater than the number of blades required for capacity). Dedicated blade specifications & features The standard specification for a dedicated blade is as follows: Dedicated Blade Processor execution cores Processor Threads Processor GHz Processor Burst GHz RAM GB Connectivity Redundant 10 Gb Processor threads allow an execution core to function as two logical processors. While some execution resources such as caches, execution units, and buses are shared, each logical processor has its own architectural state with its own set of general purpose registers and control registers. Processor bursting occurs in the background and allows the processor to opportunistically and automatically run faster than its rated operating frequency if it is operating below its standard limits of power, temperature, and current. The result is increased performance for both single threaded and multithreaded workloads. 8 8

9 Benchmark Suite Test Variant Units Average Standard Deviation Coefficient Max Min UNIFIED COMPUTING TECHNICAL DATA SHEET Compute Performance Interoute use the cloud analyst group Cloud Spectator to measure the performance of the Interoute VDC service. A number of benchmark tests are used to assess compute performance: System: performance factors including but not limited to the CPU, Memory and compilers of the service. CPU: processor focussed tasks to measure CPU performance factors. RAM: memory bandwidth tests The following table details the performance you can expect on a per benchmark basis for our compute service: Test System Geekbench SingleCPU Score % Geekbench MultiCPU Score % UnixBench SingleCPU Score % UnixBench MultiCPU Score % CPU Audio Encoding Single Core Seconds % Video Encoding Multi Core Seconds % Geekbench 3 Integer Geekbench 3 Integer Geekbench 3 Floating Point Geekbench 3 Floating Point RAM RAMSpeed/SMP Multi Core MiByte/ Sec Geekbench 3 MemScore Geekbench 3 MemScore SingleCPU Score % MultiCPU Score % SingleCPU Score % MultiCPU Score % % SingleCPU Score % MultiCPU Score %

10 VDC: IaaS - Storage The storage available with the VDC service includes: Root Disk Storage Data Disk Storage (EBS, Protected & Mirrored) ISS Dedicated NetApp A virtual machine s system or root disk, to be used by the VM operating system. Additional storage to attach to a virtual machine: [1] 'EBS' is persistent block level storage, [2] 'EBS Protected' is EBS with SAN level snapshots, and [3] 'EBS Mirrored' is an enhancement of Protected where the snapshots are also replicated to another zone. Shared file or block based storage using NAS (NFS, SMB/CIFS) and SAN (iscsi) protocols. Delivered using ISS Dedicated NetApp. Data protection available with the service includes snapshot and backup capabilities: Snapshot Option: Interoute managed SAN level snapshots Customer managed VM Hypervisor snapshots Customer managed Storage volume snapshots Customer managed NetApp snapshots Managed by Applies to Storage: Interoute Customer Customer Customer Datadisk - Protected Datadisk - Mirrored Root volume Root volume Datadisk - EBS Datadisk - Protected Datadisk - Mirrored vfiler Managed through: By Interoute VDC Control Centre or API VDC Control Centre or API vfiler CLI On demand Snapshots: Snapshot frequency: Snapshot retention: Not available Available Available Available Every 4 hours Can t be scheduled Customer defined Customer defined 4 hourly snapshots are kept for 2 days. Daily snapshot kept for a week. Weekly snapshot kept for 28 days. Customer defined Customer defined Customer defined Snapshot restoration: Roll back: Raise ticket with Interoute Support Not available Customer controlled Customer controlled Customer controlled Available (with memory capture option) Not available Not available 10 10

11 Snapshot replication: Available Not available Not available Not available Application aware snapshots: Charge for snapshot storage: Not available Available Not available Not licensed Included in price of storage. Additional cost for storage used for snapshot. Additional cost for storage used for snapshot. Inclusive in price of storage. The device offers storage for both data and snapshots. VDC storage key features: Storage General Datadisk EBS EBS Protected EBS - Mirrored EBS Mirrored NetApp vfiler How can I import data? What is the maximum size of a datadisk volume? What is the maximum number of datadisk volumes that can be attached to a VM? Can EBS Datadisks be used to directly create shared disk/storage i.e. storage that multiple Virtual Machines can access? Is the storage persistent or ephemeral? Can I choose the mirror location for the snapshot? Can I enable SAN block based iscsi Storage Protocol? Can I enable NAS file based NFS, SMB and CIFS Storage Protocols? Physical shipment or electronic transfer 1024 GB 5 No Persistent No Data can be imported via internet connection. Also disks can be physically shipped to Interoute. Shared Storage, NAS or SAN is possible through the Dedicated NetApp vfiler product which can be purchased as an add-on to VDC. Mirror zone locations are paired, for example: London to Amsterdam Amsterdam to Geneva Hong Kong to Geneva Paris to/from Berlin New York to London Please enquire for further details. SAN block based iscsi or NAS file based NFS or CIFS/SMB

12 Can these be used to create shared disk/storage? Can I manage the vfiler aggregate (edit, delete, add)? Can I manage vfiler volumes (edit, delete, add)? What is the maximum size of a vfiler volume? Can I manage iscsi LUNs (edit, delete, add)? Can I manage Snapshots? Can I manage SnapMirror? No No 50TB To modify the aggregate available from the vfiler you need to raise a support Request Ticket. To modify the volumes created from the vfiler you need to raise a support Request Ticket. Multiple 50TB vfilers can be delivered. You can manage iscsi LUNs, iscsi initiator groups and mappings through the vfiler CLI. List, edit, delete, schedule or restore snapshots. List, edit or delete SnapMirror relationships. Storage Performance Using the iozone utility, Interoute has measured the operations per second for 4KB block size against file sizes ranging from 64KB to 16 MB. The test is repeated for 6 operations: write, read, re-write, re-read, random read and random write. The following graph shows the operations per second that you can expect to achieve for a root disk: 12 12

13 The following graph shows the operations per second that you can expect to achieve for vfiler storage: 13 13

14 VDC: IaaS - Network Interoute VDC offers Infrastructure as a Service resources to the customer. Key to this is network control. For example, using the networking features native to VDC it is easy to deploy a basic load balanced and fire walled web server farm, as in the following diagram: More advanced cloud-based topologies are possible by making use of the advanced network controls that are native to VDC, combined with network services delivered by Interoute's MPLS fibre network: Private With Gateway Service: Utilise the service s native Firewall, NAT, Load Balancer and Internet connectivity capabilities. IPSEC VPN is also provided. IPVPN MPLS WAN: Use a global MPLS WAN IPVPN network to integrate all your cloud environments together. Network all VDC zones together, and also include your existing MPLS IPVPN sites. IPAC: Dedicated Internet access network to be used for example when hosting a Firewall Virtual Appliance on the edge of your cloud environment. Isolated LAN: isolated local area network to be used for instance to create Demilitarized Zones as part of a multi-tier topology. The example scenario below illustrates a three tier topology. Resilient firewall appliances are allocated IP addresses directly on the Internet (IPAC network). A separate isolated network is used to deliver a heartbeat network between the two firewall servers. Behind the firewall pair is a load balancer pair, balancing traffic to web servers that are dual hosted. Each web server has one NIC on a storage network accessing storage presenting shared iscsi LUNs. An Interoute MPLS VPN network then connects the VDC solution in the London zone with a backup system in the Slough zone. This enables asynchronous replication of data to the backup site, which acts as a standby site in case of failure in London

15 The following table details the capabilities of the VDC network service: General Can I create multiple networks with VLAN segregation? LAN, WAN and Internet Access networks are all segregated from each other using VLAN tags. How is IP address assignment managed? Static or DHCP Virtual Machine: vnic(s) Can I control which networks each vnic resides on? What is the maximum number of vnics per VM? 8 What network throughput can be achieved per vnic? 3 Gbps Local Area Network Can I create my own isolated LAN networks? Can I specify the IP addressing scheme? Internet Access Can I use networks that have pure Internet access? Additional IPAC networks can be requested. These are internet accessible networks either /29 or /28 in size

16 How many public IPV4 addresses are included? Is the Internet breakout local to each region? 3 per region Each region gets 3 public IP addresses included with the Private With Gateway Services network offering. More addresses can be supplied on request. Virtual Private Network Bandwidth Traffic & Security Is IPV6 supported? Can I integrate VDC with my Interoute MPLS VPN service? Can I use an MPLS VPN (RFC 2547) to network my VDC zones? Can I integrate VDC with other networks using IPSEC? Can I integrate my managed hosting service with VDC? Can I integrate physical infrastructure with VDC? What Internet bandwidth is included with the service? What inter-zone bandwidth is included with the VDC service? Does the service include a native firewall? Does the service include a load balancer? On request Fair usage policy based on 0.05Mbps per of VDC spend Between regions (Europe, North America and Asia) there is a fair usage policy based on 0.05Mbps per of VDC spend Interoute supports IPV6 natively in the network and at a MPLS level. A separate V4 to V6 gateway can be requested. Your existing MPLS network can be extended to include the VDC zones that you use. A new MPLS can be created or an existing one extended to network VDC with other managed hosting networks. A new MPLS can be created or an existing one extended to network your VDC resources with one of our data centres where your physical infrastructure can be colocated. Please see Schedule 2n for further information regarding the fair usage policy. Please see Schedule 2n for further information regarding the fair usage policy. The VDC service includes a native firewall, which allows the configuration of IP address-based firewall rules, egress rules and port forwarding. The VDC service includes a native load balancer, which allows the configuration of ports, algorithms and stickiness

17 Los Angeles New York Amsterdam Berlin Frankfurt Geneva London Madrid Milan Paris Slough Hong Kong UNIFIED COMPUTING TECHNICAL DATA SHEET Interconnect What throughput can be expected for the native Firewall and Load Balancers? Can I use vendor supplied appliances? Does the service include an IPSEC VPN concentrator? Is DDoS mitigation included with the service? Is IPS included with the service? Is DNS included with the service? Can I directly connect with the VDC Network? Can I extend, using Layer 2, my existing infrastructure to VDC? Up to 3Gbps No - Add on service No - Add on service No - Add on service No 3Gbps throughput can be achieved. The more firewall or load balancing rules added the less will be the achievable throughput. Includes Check Point & Riverbed. Please see CloudStore for a complete list The VDC service has a network function for native IPSEC termination. Available at more than 300 locations in Europe. Not at the moment. Please contact us to discuss appropriate Layer 3 hybrid solutions. Network Performance The VDC internal network uses Interoute's own MPLS fibre network. The following table details the Round Trip Time latency in milliseconds between the VDC zones: NORTH AMERICA Los Angeles New York EUROPE Amsterdam Berlin Frankfurt Geneva London Madrid Milan Paris Slough ASIA Hong Kong Median values for RTT were measured with the SmokePing tool on 23/02/2015, and rounded to the nearest millisecond

18 VDC Appliance & Template Management Virtual appliance templates can be downloaded direct from Interoute CloudStore, created from VM snapshots, or imported from vendor websites or existing cloud infrastructure. Templates Can virtual machine templates be created from snapshots? Can customers import their own virtual machine templates? Can templates with multiple disks be imported? Can templates be exported? What is the maximum template or ISO file size for uploading? What template formats can be imported? What hypervisor types are supported? What virtual appliance templates are supplied by Interoute? Can templates be deployed from CloudStore direct into VDC and immediately accessed? How often are templates refreshed? 200 GB OVA ESXi Please visit for an extensive list Every 6 months, or as specified by vendor. Storage level snapshots can be used to create new templates. A specific manual process needs to be followed. This is detailed in the Knowledge Centre. A support Request Ticket needs to be raised to export a machine image or template. If the ISO exceeds 200GB then it is recommended that the template is manually uploaded by Interoute. Other formats can be converted via a professional services request

19 VDC Control Control of your VDC environment can be achieved through the VDC Control Centre GUI or API: Control Can the service be managed through an online portal? All provisioning and in-life management can be done through the Control Centre. Can the service be managed through use of an open API? Can I open a console window to the VM? Can I SSH/RDP to the VM? Will I get root/administrator access to the VM? All standard templates have a random password set at deployment, and this can be reset at any time. What API commands are available? For a full list of commands see the API command reference VDC Commercial & Billing The Virtual Data Centre offers two commercial models, Utility Service and Committed Service. For details see Commercial Billing Is there a try before you buy option? Is there a benefit to making a longerterm commitment to using VDC? Is a real time billing report available? Are templates, ISO and snapshots charged for? Are there charges for a powered off VM? What is the minimum billing period for the service? Hourly See the Free Trial. Customers who commit to an agreed monthly spend get a percentage discount on their total spend; the discount percentage increases with length of commitment (minimum 6 months) and amount of committed spend. See Pricing. There is a charge for storage of resources. CPU, RAM and Storage resources are charged for at all times

20 VDC Platform The platform that enables the VDC service is highly resilient with redundancy at every level built from enterprise grade hardware in our data centres. What physical data centres (VDC zones) is the service offered from? London Slough Amsterdam Berlin Frankfurt Geneva Paris Milan Madrid Hong Kong New York Los Angeles Please check for updates about new zones. Platform What resiliency do the data centres offer? What PCI-DSS accreditation do your Data Centres have? What hardware has been deployed? What Service Level Availability is offered for the VDC platform? The resilient architecture utilises industry proven best practices from TIA-942 and The Uptime Institute. Sections 9 & 11 of the PCI-DSS standard Service Provider grade hardware based on Intel Ivy Bridge processors 99.99% Each zone is a redundant high availability build. In the event of a hypervisor failure, virtual machines will under normal operation be replicated to an operational part of the zone. It is recommended that customers improve availability by building out in as many zones as practical, given that no charges are applied for movement of data between zones (subject to fair use limits). Interoute can provide advice on how to build systems across multiple zones. The certification exists for the Data Centre but not currently for the VDC service. Please contact your Account Manager if you have specific requirements. As detailed in Schedule 2N, the VDC Service Terms. VDC Service Assistance and Support Assistance from Interoute's engineers is available Monday to Friday, 09:00 to 19:00 CET, via Live Chat ( If there is an incident with the service whereby service 20 20

21 degradation is observed or SLA breached then Interoute s Customer Support Centre (CSC) should be contacted to raise an Incident Ticket to track resolution of the incident. The CSC is available continuously, 24x7x365. Assistance - Trial Can I obtain assistance during a trial of the VDC service?, via LiveChat During trials the ONLY support available is through the LiveChat service. Contact the Customer Support Centre to raise an Incident Ticket: Support Full Service What support is available if the SLA is breached or service degradation is observed? Customer Support Centre via phone, web and (International Toll Free) (Prague DDI) support@interoute.com hosting@interoute.com The CSC is available 24x7x365. Assistance Full Service What assistance is available in trying to understand how to use or implement a specific aspect of the VDC service? LiveChat LiveChat gives you access to engineers to seek assistance in using the service. It is available 09:00 to 19:00 CET, Monday to Friday. VDC Professional Services Interoute VDC is configurable and customisable to a great extent using the VDC GUI (VDC Control Centre), VDC API, My Services portal, and CloudStore website. For example, virtual machine templates can be downloaded from Interoute CloudStore, created from snapshots or imported from external sources. In addition to this, Interoute's technical experts are available to provide advice, and to build custom solutions in response to customers' requirements. Please make your initial enquiry through LiveChat, or speak to your Account Manager. Professional Services Can I purchase professional services to aid with design of cloud service? Can I purchase professional services to aid with import of data? Can I purchase professional services to aid with migration into VDC? Can I purchase professional services to aid with import of VM images? Further Information For product queries please consult your Account Manager. For further features and description of products, refer to the CloudStore website: