WIXLIB

HBC1533How to Build a Hybrid Cloud Steps to Extend YourDatacenterChris Colotti, VMware, IncDavid Hill, VMware, Inc

Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver thesefeatures in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, orsales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have notbeen determined.2

VMware vCloudHybrid ServiceVMware vCloud AirCONFIDENTIAL3

2014 VMware Inc. All rights reserved.

2014 VMware Inc. All rights reserved.

Agenda1What Makes it a Hybrid Datacenter?2Use Cases and Starting Points3Understanding the vCloud Air Structure4vCloud Air Core Offerings5The Five Steps to Extending Your Data Center into vCloud Air6Putting it all Together7QuestionsCONFIDENTIAL6

About the Speaker(s) Chris Colotti– Principal Technical Marketing Architect, vCloud Air– VCDX #37, vExpert, VCAP-DCD, VCP– Blog: ChrisColotti.us– Twitter: @CColotti David Hill– Senior Technical Marketing Architect – vCloud Air– VCAP-DCD, VCP, vExpert– Blog: DavidHill.co– Twitter @davehill99CONFIDENTIAL7

What Makes it a HybridDatacenter?8

What Defines a Hybrid ? hy·brid noun– The offspring of two plants or animals ofdifferent species or varieties, such as a mule(a hybrid of a donkey and a horse).– A thing made by combining two differentelements; a mixture. Adjective– of mixed character; composed of mixed parts.9

What Makes It a Hybrid Data Center? Blur the lines between – Users and applications– Applications and infrastructure– Hardware and resources– Operations and management– Support and operations Simplify access to resources Faster time to market More geographic options faster Create a global architecture Treat it like any other physical location10

Use Cases for the HybridData Center11

5 Starting Points to Hybrid CloudDev/TestTake a low-risk firststep and free upvaluable on-premisesdata center capacityby hosting dev/testworkloads in hybridcloudExtend productiontesting for upgradesand host new apps,e.g., MicrosoftExchange in hybridcloudDeliver disasterrecovery and extendthe data center fordev/test, seasonalworkloads, andadditional geolocationsModernizeEnterpriseApplicationsBuild nextGenerationApplicationsBuild and hostbusiness-criticalapplications and virtualdesktops in hybridcloud, including newapplications intraditional 3-tierarchitectures (Java)Evolve from traditionalapplications to nextgeneration applications(Spring, Ruby on Rails)to deliver on anyplatform, anywhere12

Think Outside the Box - Free Your Mind If you built a new Physical Data Center what steps are there?– Networking– Infrastructure– Applications Always remember the definition of Hybrid Focus on applications not infrastructure– Get out of the break fix business– Get into the application business Don’t focus on it being “Cloudy”– Just because it’s “In the cloud” means little Forget everything you know about ESXi (to a point)– Wait, What?! Current administrators need to elevate role Most any use case applies if you treat as any other Data Center13

Understanding the vCloudAir Structure14

How vCloud Air is StructuredTenant PortalDedicated Cloud – Las VegasVPC – VirginiavCloud Director APIvCloud Director APIEdgeNetworkingEdgeNetworkingEdgeNetworking15

The vCloud Air Tenant Portal Single Sign-on to all your clouds– View the type of cloud– View by Region Same login for any access– vCloud API– Disaster Recovery Manage additional users– First user is always the uber-admin Manage Data Protection Options Access MyVMware– Order additional resources– Open support tickets16

vCloud Air IaaS Offering ComparisonDedicated CloudVirtual Private Cloud Dedicated Hosts Shared Hosts– More ISV Licensing options Over Commit Built-In Ideal for both– Test and Development– Production workloads needing reservations User controlled per machine settings Sub-divide pool of resources– Create multiple vDC’s Multiple Edge Gateway capability– Limited ISV Mobility– Cost Effective– Shared API endpoint Fully reserved resources– No over commitment of resources– Eliminates the “Noisy Neighbor” Ideal for initial POC and testing Single Edge Gateway per vDC Used for vCloud Air Disaster Recovery– Get more than 9 Interfaces17

Treat the Edge Gateway as an Advanced Core Switch Familiar networking designINTERNET 10 total Interfaces per Edge– 1 Edge per VPCEDGEGATEWAY– Multiple Edges in Dedicated Static routes between interfacesautomaticallyTest/Dev NetworkPrivate (Corp) Network 5-tupple firewall rules– Deny all by default Advanced features– DHCPIsolated Network(Logging)DMZ Network– Load Balancing– Static routing18

vCloud Air StructureCore Offerings19

The vCloud Air Primary Services to Mix and MatchIaaSDaaSRaaS20

Infrastructure as a Service (IaaS) New applications built onIPSec VPNstandard Operating Systemsview.vmtm.org Migration of existing66.45.200.34PCoIP and BlastEDGEGATEWAY(192.168.2.0/24Public-NET)– From P2V to V2Ccloud and on premises(192.168.20.0/24Public-NET)– View Security Servers– SharePointDT02(192.168.1.0/24 Corp-NET)ViewCS.5applications Build infrastructure in 4.137.139AD01.41ViewSS.5– ExchangeViewSS.5– Web ServersAD02.42WDC (On Premises)vCloud Air Las Vegas(IaaS)21

Desktop as a Service on vCloud Air (DaaS)Windows desktops and apps as a cloud service. Backed by VMware.Simple cloud desktops at a predictable cost, without sacrificing security and controlRemote OfficeMobileWorkersCorporate OfficeCorporateWi‐FiVMware Horizon DaaSVirtual desktop infrastructure, built onvCloud Air22

Recovery as a Service(RaaS)Replication to vCloud Air: Warm standby capacity on vCloud Air Self-service protection, failover and failbackworkflows per VM 15 min – 24 hr. recovery point objective (RPO) Initial data seeding by shipping a disk– Can be done without Downtime! Remote management and monitoring, withProduction-level support Flexible subscription optionsvSphereReplicationData Protection Option for IaaS Machines Self Service or full vDC backup 365 day retention23

Recovery as a Service(RaaS)Replication to vCloud Air: Warm standby capacity on vCloud Air Self-service protection, failover and failbackworkflows per VM 15 min – 24 hr. recovery point objective (RPO) Initial data seeding by shipping a disk– Can be done without Downtime! Remote management and monitoring, withProduction-level support Flexible subscription optionsvSphereReplicationData Protection Option for IaaS Machines Self Service or full vDC backup 365 day retention24

The Five Steps toExtending Your Data CenterBuilding Your Hybrid Data Center25

Step 1 – Size Your Resources (vDC)CPU: 30 GHZRAM: 120GBStorage: 6TBVirtual Private CloudDedicated Cloud26

Step 1 – Size Your Resources (vDC)CPU: 5GHZ (burst 10GHZ)RAM: 20GBStorage: 2TBVirtual Private CloudCPU: 30 GHZRAM: 120GBStorage: 6TBDedicated Cloud26

Step 1 – Size Your Resources (vDC)Define Reservations and LimitsOver Commitment RatioWhat’s your comfort level today?5:1?10:1? Maybe 20:1?26

Step 1 – Size Your Resources (vDC)Define Reservations and LimitsOver Commitment RatioWhat’s your comfort level today?5:1?10:1? Maybe 20:1?26

Step 1 – Size Your Resources (vDC)Define Reservations and LimitsOver Commitment RatioWhat’s your comfort level today?5:1?10:1? Maybe 20:1?26

Step 1 – Size Your Resources (vDC)CPU: 5GHZ (burst 10GHZ)RAM: 20GBStorage: 2TB26

Step 1 – Size Your Resources (vDC)CPU: 5GHZ (burst 10GHZ)RAM: 20GBStorage: 2TB26

Step 1 – Size Your Resources (vDC)CPU: 5GHZ (burst 10GHZ)RAM: 20GBStorage: 2TB100% Memory Reservations50% vCPU ReservationLets think about the math26

Step 1 – Size Your Resources (vDC)26

Step 1 – Size Your Resources (vDC)We haven’t forgotten about On Premises its coming26

Step 2 – Design Your NetworksPrivate Network(10.0.0.0/24)DC01DC02EMAILvCCNode36

Step 2 – Design Your NetworksExternal IPExternal IPONPREMISESROUTINGDEVICEEDGEGATEWAYPrivate Network(10.0.0.0/24)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud36

Step 2 – Design Your NetworksEDGEGATEWAYExternal IPExternal IPONPREMISESROUTINGDEVICEEDGEGATEWAYPrivate Network(10.0.0.0/24)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud36

Step 2 – Design Your NetworksEDGEGATEWAYExternal IP Howmany routed networks?ONPREMISES Create multiple networks for different services EDGEGATEWAYROUTING 9 Interfaces to utilizeDEVICEExternal IP VPN Configuration Network Settings considerations Firewall Rules Firewall rules are always reciprocalNetwork ImpactPrivateonmycurrent environment(10.0.0.0/24) Move my templates to the cloudDC01 Other considerationsDC02 BackupEMAIL NetworksvCCNodeDedicated or Virtual Private Cloud36

Step 2 – Design Your NetworksEDGEGATEWAYExternal IPExternal IPONPREMISESROUTINGDEVICEEDGEGATEWAYPrivate Network(10.0.0.0/24)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud36

Step 2 – Design Your TEWAYExternal IPExternal IPONPREMISESROUTING(192.168.20.0/24 Public-NET)DEVICEEDGEGATEWAYPrivate Network(10.0.0.0/24)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud36

Step 2 – Design Your TEWAYExternal IPExternal IPONPREMISESROUTING(192.168.20.0/24 Public-NET)DEVICEEDGEGATEWAY(192.168.10.0/24 Corp-NET)Private Network(10.0.0.0/24)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud36

Step 2 – Design Your NetworksExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud36

Step 3 – Establish Network ConnectivityExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud37

Step 3 – Establish Network ConnectivityINTERNETExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud37

Step 3 – Establish Network ConnectivityINTERNETVPNExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud37

Step 3 – Establish Network ConnectivityPrivate LineExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud37

Step 3 – Establish Network ConnectivityINTERNETExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud37

Step 4 – Deploy Supporting InfrastructureINTERNETVPNExternal IPExternal 24 Public-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud38

Step 4 – Deploy Supporting InfrastructureINTERNETEDGEGATEWAYVPNExternal IPExternal IPONPREMISESROUTING(192.168.20.0/24 Public-NET)DEVICEEDGEGATEWAY(192.168.20.0/24 Public-NET)(192.168.10.0/24 Corp-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud38

Step 4 – Deploy Supporting InfrastructureINTERNETEDGEGATEWAYVPNExternal IPExternal IPONPREMISESROUTING(192.168.20.0/24 Public-NET)DEVICEEDGEGATEWAY(192.168.20.0/24 Public-NET)DNSSMTP(192.168.10.0/24 Corp-NET)Private Network(10.0.0.0/24)(192.168.10.0/24 Corp-NET)DC01DC02EMAILvCCNodeDedicated or Virtual Private Cloud38

Step 4 – Deploy Supporting InfrastructureINTERNETEDGEGATEWAYVPNExternal IPExternal IPONPREMISESROUTING(192.168.20.0/24 Public-NET)DEVICEEDGEGATEWAY(192.168.20.0/24 Public-NET)DNSSMTP(192.168.10.0/24 Corp-NET)Private Network(10.0.0.0/24)DC03DC01DC02EMAILDC04APP01 APP02(192.168.10.0/24 Corp-NET)vCCNodeDedicated or Virtual Private Cloud38