CAAE

2009 VMware Inc. All rights reserved

Cloud Architecture

October 2013

Copyright 2012 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and

intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.

2

Introduction

Donal Burke Snr. Technical Support Engineer SDK Developer Support VMware

What is the Virtualisation?

What is the Cloud?

3

vCloud Archictecture

VMware vCenter Server

VMware ESX/ VMware vSphere ESXi hosts

vCloud

Agent vCloud

Agent

vCloud

Agent vCloud

Agent vCloud

Agent vCloud

Agent

datastores

VMware vSphere

VMware vCenter database

LDAP

VMware vSphere Client

vCenter Chargeback database

VMware vCenter

Chargeback

vCenter Chargeback server

VMware vCloud Director

vCloud Director cell

vCloud Director database

vCloud Director Web Console

end users and administrators

vCloud API

vShield vShield Manager and vShield Edge Virtual Appliances Data Collectors

NFS server

vCloud Director cell

Load Balancer

vCloud

Agent

vCloud Connector Virtual Appliance

vCC plug-in

VMware

vCloud

Connector

(vCC)

4

VMware vSphere

vSphere Client is used for vSphere configuration and preparation:

vCenter Server and vCenter objects:

Datacenters, host clusters, resource pools, vNetwork distributed switches

ESX/ESXi host configuration:

Virtual switches and networks

Datastores

vSphere resources, once attached, are managed by vCloud Director

vCenter Server

ESX/ESXi Hosts*

datastores

VMware vSphere*

vCenter database

LDAP

vSphere Client

*minimum vSphere 4.0 U2 or 4.1

5

What Is VMware vSphere?

An infrastructure

virtualization suite that

does the following:

Provides virtualization,

management, resource

optimization, application

availability, and operational

automation capabilities

Aggregates physical hardware

resources and provides virtual

resources to the datacenter

VMware vSphere

VMware vCenter Suite

App App App App App App App App

Existing Applications Future Applications

Application

Services

Infrastructure

Services

VMware vSphere

vMotion

vSphere Storage

vMotion

vSphere HA

Fault Tolerance

Data Recovery

VMware vShield

Zones

VMware VMsafe

DRS

Hot Add

VMware ESXi DRS and

VMware DPM

Memory Overcommit

VMFS

Thin Provisioning

Storage I/O

Control

Distributed

Switch

Network I/O

Control

Private Cloud Resource Pools Public Cloud

Availability Scalability

Storage Network

Security

Compute

6

Physical Infrastructure

Fibre Channel

storage

Fibre

Channel Ethernet

NFS

storage

iSCSI

storage Network

applications

operating system

physical host

7

Virtual Infrastructure

Fibre

Channel

Fibre Channel

storage

Ethernet

NFS

storage

iSCSI

storage

Network

virtual

machines

8

VMware vCloud Director High Level Architecture

Cloud Provider

VMware vCloud Director Substrate (ESX Hosts, Physical Networking, Storage)

VMware vCloud Director Platform

Substrate Management

Cloud Customer

Cloud client

Public

Internet

9

vCloud Director Components

vCloud Director Web Console Web browser-based interface for consumers and administrators

Pop-out RFB-based consoles for virtual machine guest operating system

vCloud API User API

Administrative API

Extensions

cloud layer

virtualization layer

physical layer

cloud layer

vCloud API

VIM API

10

vCloud Director Components

vCenter Chargeback server Generates cost and usage reports

Abstracts vCenter and vCloud Director objects into Chargeback hierarchy

Allows resource cost assignment aligned to vCloud Director resource allocation models

vCenter Chargeback database

Data Collectors: Gathers usage data

Populates vCenter Chargeback database

Interface access: Web interface

vSphere Client plug-in

vCenter Chargeback web interface

vCenter Chargeback database

vCenter Chargeback

vCenter Chargeback server

Data Collectors

vCenter Server

vCenter database

LDAP

vSphere Client plug-In

SMTP Server

vCloud Director database

vCloud Director cell

vShield Manager

11

vCloud Components: vCloud Director

12

vCloud Components: vShield

VMware vShield Manager

Deploys and manages VMware vShield Edge devices as requested by vCloud Director

Connects to vCenter via VIM API for vShield Edge deployment

Manages configurations via VIX API

Linux-based virtual appliance

Runs management interface

Aggregates usage data for vCenter Chargeback

One per attached vCenter Server

vShield Edge

Firewall and router device that provides network and security services

Deployed automatically by vCloud Director via vShield Manager

Deployed to vSphere hosts as virtual appliances

vShield

vShield Manager

vShield Edge

vShield Edge

vShield Manager UI

vShield Edge

13

vCloud Components: vCloud Connector

vCloud Connector Virtual Appliance

attached storage /opt/vmware/vccp/staging (initial configuration = 40GB)

vSphere Client with vCloud Connector

plug-in

vCenter Server

vSphere

vCloud Director

private vCloud public vCloud

local vCloud or vSphere

vApp

vCloud Director

remote vCloud

14

vCloud Director Networks

vCloud Director uses three types of networks: External networks

Organization networks

vApp networks

Organization networks and vApp networks can be configured in one of three different configurations:

Direct-connected to higher network level

NAT-connected to higher network level

Internal only (no connections to higher networks)

vApps can be deployed by using network fencing.

15

Network Layers of Responsibility and Capability

The

Internet

Physical Network Layer

Managed by corporate IT network engineers Physical switch and firewall configuration, design, and

management of IP address ranges, WANs, LANs,

VLANs, and so on

Static and stable environment

VMware vSphere Network Layer

Managed by vSphere administrators. Much more flexible than physical networking, but must

remain stable and change slowly.

VMware vSphere ESXi ESXi

VMware vSphere Distributed Resource

Scheduler / VMware vSphere High Availability cluster

Cloud Customer / Organization Network Layer

Managed by cloud organization and vApp administrators Very dynamic, responds rapidly to customer needs without

causing problems for physical network administrators

VMware vCloud Network Layer

Managed by VMware vCloud (provider) administrators Built on options available in the vSphere Network Layer

VMware vCloud Director

16

Three Types of Resources

17

Virtual Datacenters

resource

pools datastores

memory CPU storage

vDC vDC vDC vDC vDC

Silver provider vDC Gold provider vDC

organization C organization B organization A

Bronze provider vDC

18

VMware vCloud Resources

vSphere datastores are attached to provider vDCs.

Storage capacity is allocated to organization vDCs.

VLAN physical

network

physical

host

FC-SCSI

storage

DRS cluster

resource

pool

datastore distributed

virtual switch distributed

virtual port

group

vSphere

physical

VCD

external network

organization network

vApp network

network pool

provider vDC

organization vDC

datastore

NFS/iSCSI

storage

Gold vDC

Silver vDC

Physical

vCloud Director

groups

resources into

Offerings with specific costs

Resource Groupings:

Provider Virtual Data

Center

Org Resource

Allocation

Org: Sales

Access Control

vDCs

Catalogs

Provisioning Policies

Org: Marketing

Access Control

vDCs

Catalogs

Provisioning Policies

Host

Network

SAN

vSphere

Resource Pool

Datastore

Port Group

VMware Cloud Director

Provider vDC

Provider vDC

New Resource Abstractions (1 of 2)

19

Org #2 Org #3 Org #1

New Resource Abstractions (2 of 2)

20

Physical

Resources

Virtual

Infrastructure

Resource

Pool Resource

Pool

Provider

vDC

Org

vDC

Org

vDC

Org

vDC

Provider

vDC

Org

vDC

Hosts & Storage

Cluster of Resources

Managed by vCenter

Server

A resource pool with

storage in the Virtual

Infrastructure could be whole cluster.

Subsets of resources

given to organizations

Cloud customers

(organizations)

Cloud representation

of the resource pool,

but includes storage

and networking.

vApp vApp vApp vApp vApp vApp

cell

webapp

servlet

Rest API

Dispatcher

Console

Proxy

Transfer

Service

Presentation Layer

Core

VC Proxy Inventory Task Mgr

UI API VMRC Image

Transfer

cell

Firewall

VMware vCloud Director Architecture Overview (1 of 2)

HTTPS HTTPS HTTPS HTTPS

21

Web Browser

on some client

server out on

the internet.

vCloud API

Frontend Transfer

Service

Other OSGi Services

Reaction

System

Console

Proxy

VC

Inventory

VC

Control

Inventory

Collector

Task

Updates

VC Proxy

VMware vCloud Director Architecture Overview (2 of 2)

DMZ

Cloud

Server

Cloud

Database Replication for backup &

availability

Message Bus

resource pools,

storage, network

Cloud

Server

Redwood

Database Cloud

Database

Secure

Clients

Secure

Clients

Secure

Clients

Public Internet

Cloud

Server

resource pools,

storage, network

VMware vCloud Director Client

Remote

Console Image

Transfer

vCenter

ESX

Datastore

VM files

Media

Share vCenter Agent

vCenter

Server

Cloud Agent

vmkernel

22

Load Balancer

23

Questions?

Questions?