Cisco Virtual Experience Infrastructure Erik Lenten Product Manager VXI 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 1
Overview The Network Is the Desktop Keyboard, Video, Mouse Thin Client Broker Network Compute Storage Personal Computer is disaggregated Keyboard, Video, and Mouse stay with user Compute and storage move to the data center Network availability is required for all application access Network performance is critical to user experience 2
Application O/S Desktop Overview Virtual Desktop Models Virtual Desktop Streaming Remote Virtual Desktop App Guest App App Guest OS Main OS Synchronized Desktop Apps Apps Apps OS Apps OS OS OS Apps Apps Apps OS OS OS Hypervisor Display Data Server Application Streaming Terminal Services App OS App App OS OS Display Data Server OS Presentation Server Client Hosted Computing Server Hosted Computing 3
Reasons for Desktop Virtualization: Real-world example of large European bank Lifecycle management cycle for desktop computing Session portability Free Seating -> save on office space Risk free migration to Windows 7 Faster application access Working from Home Lower Operational Costs Security / Data Leakage concerns Bring Your Own Device Execute on Cloud Computing strategy 4
Moving Through VDI Rather Than To VDI Presentation Desktop Distributed Client Centralized Server Distributed Client Efficient Server Centralized Client/Server Virtual Desktop Pervasive Network, Flash, Ajax, JS, HTML5 Centralized Creation Integrated Data Distributed Client/Server Pervasive Hypervisor Centralized Creation/Data WAN Acceleration Distributed Creation Centralized Data Limited Networks Distributed Creation Centralized Data Distributed Creation/Data 2005 2010 2015+ 5
Overview Virtual Desktop Components Client Devices (~25%) Network Software (~25%) Broker Virtualization (OS, application, profile) Display protocol client/server UCS Compute (~25%) Storage (~25%) Virtual Machine Storage User Data Storage Clients Network Broker UCS Storage Web Access Display Protocol Desktop Profile Data 500 Million Total Enterprise Desktops Gartner Predicts 50 Million Hosted Virtual Desktops (10%) by 2013 6
Lower Operational costs => non-persistent Non-Persistent or Pooled Generic virtual desktop assigned to users on a per session first come first server basis and then returned to the pool (possibly with profile removed) or destroyed Persistent or Assigned Permanently assigned to a user statically or by first to connect Users and Groups Entitle Group to Desktop Desktops Assign Pool Pool of Virtual Machines Entitle User to Desktop Assign Individual Template 7
Display Protocol Channels Display protocols operate at the session layer Channels provide a means to extend remote virtual desktop services Channels cannot leverage network services like QoS, security, media bridging, stream splitting, or multicast New developments: Multi-channel ICA Image rendering adjusted based on available bandwidth Display Protocol TCP USB Video Sound Print 8
VXI Network Design considerations Virtualized Collaborative Workspace Virtualization-Aware Borderless Network Virtualized Data Center Branch Office Survivability using Network redundancy Security Datacenter Bandwidth issues: Printing USB flash drives Driver issues: Point of Sale devices Scanners Display protocol over the Network Power over Ethernet Bandwidth Voice/Video # Concurrent users Multicast support Caching Protocol visibility Optimization Availability Load balancing of connection brokers Global Site Selection (GSS) for DC redundancy 9
What is Cisco VXI? Virtualized Data Center Applications /Desktop OS Cisco Collaboration Applications MS Office Desktop Virtualization Software Hypervisor Virtualization-Aware Borderless Network Cisco Identity Services Engine CDN Virtualized Collaborative Workspace Cisco Virtualization Experience Clients AnyConnect Cisco VXC 6215 Thin Client WAAS Virtual Security Gateway Nexus 1000v Quad Unified CM Storage AnyConnect UCS ASA ACE Compute PoE Si Switching WAAS Routing End-to-End, Management and Optimization Cisco VXC 4000 PC Client Cisco VXC 22xx & 21xx Zero Client Cius Business Tablet VXI 2.5 System 10
Cisco Validated Design (CVD) Benefits Cisco Validated Designs, validated through System Level Testing, enable customers to: Lower risk of deploying technology solutions Increase speed of technology solution deployment Deploy a scalable, reliable, predictable foundation Ease technology solution integration Ease deployment of business critical applications Utilize Cisco Advanced Services to customize a CVD to meet specific requirements Detailed system design and/or implementation guidance are available to provide: Customer use examples Products, Software and Configurations used in design testing Design limitations uncovered during testing http://www.cisco.com/en/us/solutions/ns340/ns414/ns742/ns1100/landing_vxi.html 11
Strategic Alliance to Drive Desktop Virtualization Adoption Enable Cisco Networks to become Citrix HDX-aware Commitment for joint technology development reaching from data center to network to endpoints Broad go-to-market partnership to deliver desktop virtualization solutions to customers Cisco WAAS optimized for Citrix XenDesktop Single solution for virtual and physical desktops over the WAN Validated, supported and certified Citrix Ready at availability New Globally Available Q4 2011 12
Seconds (s) Kbps Frame per second Before Cisco WAAS After Cisco WAAS Cisco WAAS offers WAN Performance at Scale for Citrix XenDesktop Response Time Bandwidth Consumption Video Quality 60 140 30 50 40 30 20 10 70% faster 120 100 80 60 40 20 60% Savings 2X+ Users 25 20 15 10 5 HD Quality Pixelated Choppy Out of Sync 0 80ms T1 WAN 80ms T1 WAN + WAAS Up to 70% Faster 0 80ms T1 WAN Up to 3X More Users 80ms T1 WAN + WAAS 0 LAN 80ms T1 WAN HD Quality User Experience 80ms T1 WAN + WAAS 13
Solving UC hairpinning problem with VDI CUCM Data Center VM-User 1 Signalling (SIP) Signalling (SIP) VM-User 2 Desktop Virtualization Protocol Media Flow VXI Cloud Media Flow Desktop Virtualization Protocol VXC 6215 Signalling (SIP) Signalling (SIP) Media Flow VXC 4000 Uncompromised user experience Routes voice and video pointto-point Optimized resources Bandwidth reduction from megabytes to kilobytes Reduced processing in data center Enterprise-grade voice and video based on Cisco UC 14
Zero Clients Zero Clients Software Appliance Thin Client Enterprise Tablet VXC 2100 Series VXC 2200 Series VXC 4000 VXC 6215 Cisco Cius Shipping Shipping Q4 2011 Q4 2011/ Q1 2012 Shipping New New 15
Cisco Cius for the Knowledge Worker External display with unique Android keyboard/mouse control Native desktop content creation when docked Mobile content consumption and presentation Anywhere business phone and email Disconnected access with QuickOffice Virtual Desktop HDMI Display Port USB/BT Keyboard/ Mouse 16
Cius Enterprise Application Head Quarters Cisco Applications Partner Applications Market Applications Android Mkt Place Customer Applications AppHQ CUSTOMER Developed Apps Administrator CUSTOMER #1 CUSTOMER #2 Administrator Admin Controlled Access User User https://marketplace.cisco.com/apphq/store 17
Data Center Optimizations for Virtual Desktops Desktop Density and Scalability Great virtual desktop density with linear performance scalability Rapid Provisioning of Desktops Service profile templates for rapid provisioning of desktop pools Networking Visibility and Security to the Desktops Nexus 1000V with VSG and VM-FEX provide VM level controls Prioritization of Desktop Pools UCS QoS and bandwidth controls deliver prioritization to desktop pools Flexibility and Bandwidth for Converged Multiple Networks Unified ports and 80G burst b/w allow for convergence with performance Validated Designs and Reference Architectures End-to-end reference architectures reduce risk for optimized stack 18
Scaling considerations for UCS It depends.but a general guideline Per Windows XP/ Windows 7 Virtual Machine: 300 Mhz per VM (absolute minimum) 2GB of RAM per VM -> 1.5GB physical memory Example: A UCS B200 blade with 96 GB of RAM with 2 Intel 5640: Memory: 96 / 1.5 = 64 Virtual Machines CPU: 2 x 4 cores x 2.53Ghz = 20.24Ghz x 1000 = 20240Mhz / 300 = 67 Virtual Machines Conclusion: 64 VM per blade More cores is always better 19
Cisco UCS with Extended Memory Classic Optimizing Memory for Desktop Virtualization Xeon 5600 Xeon 5600 12 DIMMs, Max 96GB Higher Performance OR 18 DIMMs, Max 144GB Lower Performance Xeon 5600 Xeon 5600 48 DIMMs Max 384GB Higher Performance 20
Rack Mount Blade UCS Compute Options B200 M2 2-Socket Intel 5600, 2 SFF Disk, 12 DIMM B250 M2 2-Socket Intel 5600, 2 SFF Disk, 48 DIMM B230 M2 2-Socket Intel E7-2800, 2 SSD, 32 DIMM B440 M2 4-Socket Intel E7-4800, 4 SFF Disk, 32 DIMM *UPDATED* *UPDATED* C200 M2 2-Socket Intel 5600, 4 Disks, 12 DIMM, 2 PCIe 1U C210 M2 2-Socket Intel 5600, 16 Disks, 12 DIMM, 5 PCIe 2U C250 M2 2-Socket Intel 5600, 8 Disks, 48 DIMM, 5 PCIe 2U C260 M2 2-Socket Intel E7-2800, 16 Disks, 64 DIMM, 6 PCIe 2U C460 M2 4-Socket Intel E7-4800, 12 Disks, 64 DIMM, 10 PCIe 4U *UPDATED* *UPDATED* 21
View 4.5 Validation Results Single Server Performance of View 4.5 (with scale tested) Server Profile Summary Workload Profile CPU Util # of Desktops Cisco UCS B250-M2 Proc: 5680 @3.33 GHz Mem: 192 GB View 4.5 on ESXi 4.1 W7 32b (1.5G memory/20g disk) NOTE; No HIMP, No memory balloning Knowledge Worker Profile 83.7% 110 Cisco UCS B250-M2 Proc: 5680 @3.33 GHz Mem: 192 GB View 4.5 on ESXi 4.1 W7 32b (1.5G memory/20g disk) NOTE; HIMP with no memory balloning Knowledge Worker Profile 90+% 130 Cisco UCS B250-M2 Proc: 5680 @3.33 GHz Mem: 192 GB View 4.5 on ESXi 4.1 W7 32b (1.5G memory/20g disk) NOTE; HIMP, with ~5%memory balloning Knowledge Worker Profile 90+% 160 22
Innovating with Embedded Unified Mgmt Reduced Points of Management Tightly Coupled Partner Mgmt. Tools XML API Existing Customer Mgmt. Tools Traditional APIs Unified Management Domain Automatic discovery Dynamic Provisioning Building Blocks of Resources for rapid provisioning Simplify infrastructure management for datacenters Service Profile: HR-App1 Network: HR-VLAN Network QoS: High MAC: 08:00:69:02:01:FC WWN: 20:65:32:25:B5:00:A4:28 BIOS: Version 1.03 Boot Order: SAN, LAN Single-click configuration of LAN, SAN and firmware parameters 23
Dynamic Platform Provisioning with Service Profiles LAN SAN Cisco UCS Manager Desktop Profile 1 120 Knowledge HVD Win 7 B-250 192GB LAN Connectivity SAN Connectivty Boot Order Desktop Profile 2 140 Task ThinAppOLTP B-200 48GB LAN Connectivity SAN Connectivity Boot Order Desktop Profile 3 100 Power HVD Win 7 B-230 384GB LAN Connectivity SAN Connectivity Boot Order Chassis-1/Blade-2 Profile 1 UUID: 56 4d cd 3f 59 5b MAC: 08:00:69:02:01:FC WWN: 5080020000075740 Boot Order: SAN, PXE Chassis-8/Blade-4 Profile 2 UUID: 56 4d cd 3f 59 5d MAC: 08:00:69:02:01:FF WWN: 5080020000075742 Boot Order: SAN Profile 3 UUID: 56 4d cd 3f 59 5f MAC: 08:00:69:02:01:FB WWN: 5080020000075744 Boot Order: PXE, SAN Separate firmware, addresses, and parameter settings Physical servers become interchangeable hardware components Service profile templates allow rapid provisioning of new virtual desktops 24
VSG Deployment for VDI Server Zones Portal Records Database Application Virtual Security Gateway (VSG) HVD Zones IT Admin Assistant Doctor Guest Network it Admin Guest Doctor 25
Cisco Integrated Security Features Feature Capability Prevents Port Security Nexus 1000v Restricting MAC addresses on a port Rogue VM spoofing MAC address IP Source Guard Maps IP address to MAC address IP/MAC spoofing DHCP Snooping Monitors DHCP transactions Rogue DHCP Server Dynamic ARP Inspection ARP: Maps IP address to MAC Monitors ARP transactions, used in VMotion ARP attacks Feature Capability Benefits In-hypervisor inter-vm security Secure Segmentation Context aware security policies On-demand Trust zones & security templates Virtual Security Gateway Firewalling inter-vm communication based on policy Create secure segmentation of VMs Defined security policies based on context Enforcement of trust zones and security templates Handling of East-West Security policy enforcement Policy enforcement independent of Network segmentation Simplified security policy Dynamic provisioning 26
Automation Employee Onboarding NewScale IT Service Catalog, Lifecycle Management Portal, Request Management Tidal Tidal Enterprise Orchestrator SOAP AXL PS & Tidal Adapter PS & VMware Adapter PowerShell CUCM CUPS vsphere XenDesktop 5 AD Golden Images 27
Automation Delivering VXI Service Faster Multiple requests from user for: ID, Desktop, Phone, Email, Applications etc. InfoSec Creates ID Server Admin Clone VM Manual Process take several days Citrix Admin Configure PVS & DDC Desktop Admin Install Applications Communication Group provision s Phone Secure it With Automation Ready for use Single request from user, using service catalogue Approved by Manager Automated Self-service On-demand within minutes Newscale order goes to TEO TEO creates User ID Configure Citrix PVS, DDC, CUCM, VMware, CUPS Install Applications Secure it Ready for use Before: Conventional VDI Manual provisioning Hard to control utilization High provisioning & ops cost Extended provisioning time Configuration risk After: Automated VXI Solution Self-service; automated provisioning Elasticity (capacity-on-demand) Optimized provisioning & ops cost Rapid provisioning Increased Resiliency and Availability 28
New Services Solution-level Technical Support and Optimization New Globally Available Q4 2011 New Globally Available Now Cisco Allied Services for VXI Single number for issue resolution Multi-vendor support Complements point product support Covers all technology partners in Cisco Validated Designs Cisco Optimization for VXI Service Architecture review Operations audit Performance and validation testing Ongoing knowledge transfer Change, design, and project management support 29
Questions? 30
31