VMworld 2014 Page 1 HBC1533 - How to build your cloud - Steps to Extend your Datacenter Tuesday, 14 October 2014 14:00 Dave Hill, VMware 5 key steps to Hybrid DC A thing made by combining two different elements; a mixture Challenges Users don t know or care where your workloads are running Developers want a quick release cycle, time to market is reducing by the day Treat it like any other physical location Security Deployment techniques Management and monitoring 5 starting points to hybrid cloud Dev/Test Extend Existing Applications E.g. Pre-prod testing for upgrades Disaster Recovery Modernise Enterprise Applications Build Next Gen Applications Things to consider What steps? Networking Infra Apps Focus on apps, not infra Get our of break fix business Get into the application business Don t focus on being "Cloudy" Just because its in the cloud means very little Forget about the hypervisor or the kit! What performance? What SLA? Almost any use cases apply if you treat like any other data centre vcloud Air Structure Tennant Portal Dedicated Clouds Virtual Private Clouds Edge Networking
VMworld 2014 Page 2 Both main options are subscription based, on a fixed term Important Things: SSO to all your clouds View the type of cloud View by Region Same login for any access vcloud API API Manage all additional users First user is always uber admin Manage Data Protection options Dedicated clouds These are your own dedicated hosts, not shared. You have own vcenter, own vcd etc Can over-commit Good for test/dev Prod workloads which need reservations Subdivide pools of resources Multiple Edge Gateway capability More than 9 interfaces License per host if you need to Virtual Private Cloud Multi-tenant Lower entry point so cost effective Fully reserved resources, with no over commitment No noisy neighbour issues Single Edge Gateway per vdc Used for vcloud Air Disaster Recovery This is a licensing challenge!
VMworld 2014 Page 3 This is a licensing challenge! Consider your edge gateway like an advanced core switch Offerings today: IaaS DaaS RaaS (Recovery as a Service) Can all be blended together
VMworld 2014 Page 4 "If its supported on vsphere, it's supported on vcloud Air" RaaS Warm standby capacity Failover and failback workflows per VM 15min-24 hr RPO Initial seed by disk DPaaS Up to 365 days retention Reservations and Limits Over commitment ratio Don t forget to include the overheads if you do set reservations Most people use 5:1 on CPUs typically in production! (Erg) On vcloud Air, vdc (shared) you cannot overcommit RAM, though there is burstable resource on CPU of up to double your commit level. This is done by reserving 50% CPU on the back end. Interesting idea for our products? 100% RAM reservation 50% vcpu reservation Simples! Network Design How many routed networks? VPN Config? Firewall Rules Impact on current environment Other, eg Backup Networks
VMworld 2014 Page 5 Mostly the same considerations as when you are building out a second DC, even privately 9 Router networks per Edge Gateway max Connectivity between platforms can be: Over the internet (open) SSL VPN with your edge device Constrained by bandwidth "Direct Connect" Just a cross connect Make sure you have high BW services available locally, also auth services etc Expand your footprint further to other vcloud Air locations & other vcloud Air services Tech Marketing Use Case All external DNS is managed via DYN.com for all external DNS zones They also provide GSLB as part of this They use Cloud-Cloud VPNs between each environment
VMworld 2014 Page 6 Other sessions HBC2066 - Architecting Hybrid Cloud for Exchange & Lync HBC1534 - RaaS Q&A SLA is 99.9% IOPS is 500 IOPS (of what?) Low tier storage is 250 IOPS (of what)? vcloud Connector lets you move VMs to and from the cloud environment The vcloud Connector "Server" sits on premises The vcloud Connector "Node" is at the target (vdc) and is included by default There is a management pack for vcops which lets you monitor all the vcloud Air machines remotely Demo available at the main stand Everything is logically isolated per customer, even on shared devices like storage They have security specialists for compliance requests Documented by Alex Galbraith (@alexgalbraith) - www.tekhead.org - VMworld Europe 2014 All slide images are Copyright their respective owners