VMworld 2018 Content: Not for publication or distribution
VMworld 2018 Content: Not for publication or distribution
©
VMworld 2018 Content: Not for publication or distribution
©
Intel’s view: Edge to Cloud
tCommon
CloudCore
Cloud ManagementPlatforms
AutomationFrameworks
paas
FlexibleRepeatable
Deployment andProvisioning
Service OrientedRe-usable Service
CatalogDecrease
Complexity
Operations CentricInfrastructure
+
edge
PrivateCloud
PublicCloud
+
+VMworld 2018 Content: Not for publication or distribution
The Virtual Cloud NetworkConnect and Protect your Business
VMworld 2018 Content: Not for publication or distribution
©
Virtual Cloud Networking
Connect & Protectany workload across
any environment
VMworld 2018 Content: Not for publication or distribution
©
VMware NSX PortfolioThe Foundation of the Virtual Cloud Network
VMworld 2018 Content: Not for publication or distribution
©
VMware NSX Use Cases
Security• Micro-segmentation
• Endpoint detection and
response
• Encryption
Automation• Visibility and insight
• Lifecycle automation
• Streamline operations
Multi-Cloud• Consistent policy
• Disaster recovery
• Workload mobility
WAN and Branch• Branch transformation
• WAN management
• Optimize cloud access
Cloud Native• Container networking
• Container security
• Visibility and operations
VMworld 2018 Content: Not for publication or distribution
©
VMworld 2018 Content: Not for publication or distribution
©
The Cloud Networking Challenge
Differing security baselines
Disparate control mechanisms and policies
Operational inconsistencies
Different teams, processes, tools, and expertise
Incongruent technologies
(e.g., virtual machine formats, networking, APIs)
Complex cloud migration
Lack of consistency and workload portability
VMworld 2018 Content: Not for publication or distribution
©
What seems to matter…
10
Enterprise Service ProvidersLatency sensitive apps
Micro-segmentation
Boost branch performance and security to match corporate
Ability to host multiple tenants
Ability to host multiple tenants
Satisfy SLAs for every tenant
Scalable platforms for multiple workloads
Edge and 5G
Latency
Service insertion
VMworld 2018 Content: Not for publication or distribution
©
Consistent Networking and Security across clouds
SSDs QAT DPDK
Goal - Utilize optimized solutions from NSX / Intel partners
VMworld 2018 Content: Not for publication or distribution
©
12
Acceleration ready
Edge Physical Appliance
Virtual Network
Functions on-premise
Virtual Network
Functions in the cloud
VMworld 2018 Content: Not for publication or distribution
Intel® Xeon® Scalable Processors ‒ Overview
A dramatic leap forward inperformance, agility, and scalability
Higher Per-Core Performanceaccelerates enterprise workloads
• New core micro-architecture• Lower-latency cache hierarchy
Increased Per-Socket Performancefor greater VM Density• Up to 28 cores per socket• Increased inter-CPU bandwidth
Special-Purpose Instructions & Acceleratorsspeed up Demanding Enterprise Applications
• Intel® AVX-512 instructions double FLOPs per core• Intel® VMD allows NVMe* SSD hot-swapping and improved LED
management
Memory and PCI Express* Improvementspower up Memory and I/O-Bound Workloads• 1.5x memory bandwidth from six memory channels• Increased PCI Express* bandwidth
©
VMworld 2018 Content: Not for publication or distribution
©
VMware Intel Security Solutions
14
Ingredients for success
Intel® Xeon Processor with Intel® TXTVMware ESXi 6.5 or later
HyTrust* Boundary Control
Blue = Sensitive VMGreen = Generic VM
Policy: Sensitive VM requires trusted host
TrustedSystems
VM1
VM2
UntrustedSystems
VM3
VirtualizationManagement
Center(vCenter)
Security Management (HyTrust)
*Other names and brands may be claimed as the property of others.
VMworld 2018 Content: Not for publication or distribution
©
Rate of feature improvement increasing
Support for ContainersEdge Firewall
Distributed network encryptionIP discovery
Multi-hypervisor (ESX & KVM)Basic support for KVM
Supports multiple KVM distributionsSupport for Photon and and container
networking
VMware NSX 1.1 + Intel Xeon v3.0
February 2017
VMware NSX 2.0 + Intel Xeon v3.0September 2017
5-7X performance improvementSupports VM, Containers, AWS instances
Ecosystem of certified VNFsDistributed L3
DPDK Edges – VM Form Factor or Baremetal.N-VDS built in switch load-balancer
Performance scales linearly with cores.Multi-hypervisor (ESX & KVM, Hyperv)
Multi cloud support AWS, AzurevHost migration
VMware NSX 2.2+ Intel Xeon Scalable
June 2018
Pe
rfo
rman
ce
VMware NSX-T® & Intel® Xeon Scalable
VMworld 2018 Content: Not for publication or distribution
17
NSX managed VDS with DPDK boost
ESXi
VDS
ESXi
N- VDS
NSX-T DataCenter
Disclaimer: Performance results are based on testing as of February 19, 2018 and may not reflect all publicly available security updates. See configuration disclosure for details. No product can be absolutely secure
Reduce latency and capex while leveraging existing cloud investments.
©
VMworld 2018 Content: Not for publication or distribution
© 18
NSX-T Accelerated Performance
NSX-T 1.0
NSX-T 2.0
NSX-T 2.2
Disclaimer: Performance results are based on testing as of February 19, 2018 and may not reflect all publicly available security updates. See configuration disclosure for details. No product can be absolutely secure
Significant performance improvements via software and hardware enhancements VMworld 2018 Content: Not for publication or distribution
©
Consistent Networking and Security across clouds
SSDs QAT
DPDK
VMworld 2018 Content: Not for publication or distribution
©
VMworld 2018 Content: Not for publication or distribution
© 21
VeloCloud Edge – Extending Segmentation
VMwareVeloCloud Edge
VMworld 2018 Content: Not for publication or distribution
©
38pt Intel Clear Headline
SOHO
Network
Small Branch
Network
Medium Branch
Network
22
Deployment models and segmentation
VNFs @ POP/Data Center
Routing, VPN, FW, CGNAT, WiFi CTRL, SD-WAN CTRL
Routing, VPN, FW, IPS, SBC, CGNAT, WiFi CTRL,
SD-WAN CTRL
FW, IPS, CGNAT, SBC, WiFiCTRL, SD-WAN CTRL
WAN Accel, SD-WAN CTRL
Service Provider / Enterprise
Large Branch
VNFs @ CPE
SD-WAN, VPN Routing, SD-WAN, VPNRouting, VPN, WAN Accel, SD-
WAN, vRANRouting, VPN, WiFi CTRL, WAN Accel, FW,
IPS, SD-WAN, vRAN
1-2 VNFs 1-2 VNFs 2-4 VNFs 6+ VNFs
VNFVNF
VNFVNF
VNFVNF
VNFVNF
VNF
VNF
VNF
VNF
VNF
VNF
Intel Technologies to Drive Performance,
Scale, & Security
Intel Atom® Processors(2-core)
Intel Atom® Processors(2-core to 4-core)
Intel Atom® Processors(12-core to 16-core)
Intel® Xeon® D Processors
Intel® Xeon® D Processors
Intel® Xeon® Scalable Processors
Data Plane Developer KitIntel® QuickAssist Technology
Hyperscan
Intel® Virtualization TechnologyIntel® AES New InstructionsIntel® Run Sure Technology
Intel® Trusted Execution TechnologyIntel® Platform Trust Technology
Network
VMworld 2018 Content: Not for publication or distribution
©
VMware VeloCloud Edge AppliancesIntel Technologies and Benefits for Branch / Edge
100 Mbps 200 Mbps 1 Gbps 2 Gbps 5 Gbps Multi-Gigabit
Edge 510 Edge 520 Edge 540 Edge 840 Edge 1000 Edge 2000 5Gbps Edge Edge Cluster
4-Port GE
2-USB—LTE
WiFi
10-Port GE
2-Port SFP
4-USB—LTE
WiFi
10-Port GE
2-Port SFP
4-USB—LTE
WiFi
6-Port GE
2-Port SFP+
8-Port GE
2-Port SFP+
6-Port GE
2-Port SFP+
VMworld 2018 Content: Not for publication or distribution
© 24
More performanceHeadroom for Hardened Security (vFW, vIPS, etc…)Headroom for more functions (WiFi CTRL, Analytics, IoT, WAN Accel, Security)
Intel® QuickAssistTechnology (Intel® QAT)
DPDKPacket Processing
HW acceleration for compression/encryption
Simple & Secure VPN
Secure Cloud Access
Better CPU utilization
Headroom for more functions
Intelligent Routing
HW & SW acceleration for packet processing
Intelligent Security
Lower TCO
Common x86 Platform & SW for every need
Intel Technologies and Benefits for Branch/Edge
VMworld 2018 Content: Not for publication or distribution
©
Intel’s view: Edge to Cloud
tCommon
CloudCore
Cloud ManagementPlatforms
AutomationFrameworks paas
FlexibleRepeatable
Deployment andProvisioning
Service OrientedRe-usable Service
CatalogDecrease
Complexity
Operations CentricInfrastructure
+edge
PrivateCloud
PublicCloud
+
+VMworld 2018 Content: Not for publication or distribution
©
SOFTWARE-DEFINED COMPUTE SOFTWARE-DEFINED NETWORK SOFTWARE-DEFINED STORAGE
HYBRID CLOUD/VCF HYPER-CONVERGED
INFRASTRUCTURE 101SECURITY
on vmware.com on intel.com
CUSTOMER TESTIMONIALS
26
Resources
Server Virtualization with VMware vSphere®
Network Virtualization: VMware NSX® with Intel Technology
VMware and Intel Global Alliance
Improve Storage Agility with VMware Virtual SAN* and Intel
Intel and VMware Partnership
Advanced SecurityServices Ecosystem
Delivering an Evolutionary Path to Hybrid Cloud with
Intel and VMwareCo-Engineered Solutions
Powered by VMware and Intel
VMware and Intel Joint Customers
NOTE: View in presentation mode to make hyperlinks active
VMworld 2018 Content: Not for publication or distribution
©
Call To Action
Visit the websites for more information
Contact your VMware or Intel field teamVisit the Intel Booth #1212
Visit the Intel VMware site at
https://www.intel.com/content/www/us/en/cloud-computing/intel-and-vmware-partnership.html
Intel Confidential 27
VMworld 2018 Content: Not for publication or distribution
© INTEL CONFIDENTIAL 28
Performance Attributions
1 Compared to a four-year-old server. Up to 4.28x VMs based on server virtualization workload: Based on Intel internal estimates. Higher is Better.
OLD: one-node, 2x Intel® Xeon® E5-2690 on Romley-EP with 256 GB total memory on VMware ESXi 6.0 GA using Guest OS RHEL6.4, glassfish3.1.2.2, postgresql9.2. Data Source: Request Number: 1718, Benchmark: server virtualization consolidation, Score: 377.6 @ 21 VMs.
NEW: one-node, 2x Intel® Xeon® Platinum 8180 Processor on Wolf Pass SKX with 768 GB Total Memory on VMware ESXi6.0 U3GA using Guest OS RHEL 6 64 bit. Data Source: Request Number: 2653, Benchmark: server virtualization consolidation, Score 1580 @ 90 VMs.
2 Up to 65% lower 4-year TCO estimate example based on equivalent rack performance using VMware ESXi* virtualized consolidation workload comparing 20 installed 2-socket servers with Intel® Xeon® processor E5-2690 running VMware ESXi 6.0 GA using Guest OS RHEL6.4 compared at a total cost of $919,362 to 5 new Intel® Xeon® Platinum 8180 processors running VMware ESXi 6.0 U3 GA using Guest OS RHEL 6 64bit at a total cost of $320,879 including basic acquisition. Server pricing assumptions based on current OEM retail published pricing for 2-socket server with Intel® Xeon® processor-based systems; subject to change based on actual pricing of systems offered.
3 OLD: Source: https://www.evaluatorgroup.com/document/evaluating-server-based-storage-performance-enterprise-workloads/, Configuration “1”. Four-node cluster, based on four Intel® Server Boards S2600WTT, each with 2x Intel® Xeon® processors E5-2699 v4 (22 cores @ 2.2 GHz with Intel® Hyper-Threading Technology); tested with 256 GB DRAM, priced for comparison at 512 GB DRAM; 1x Intel® SSD DC S3700-400; 4x Seagate 1 TB HDD; IOmark-VM-HC validated configuration. Performance: 80 IOmark-VM-HC. Price/performance: $2,048/IOmark-VM-HC.
NEW: Source: https://www.intel.com/content/www/us/en/cloud-computing/powering-performance-levels-brief.html, Configuration “D”. Four-node cluster, based on four Intel® Server Systems R2208WF, each with 2x Intel® Xeon® Platinum processors 8168 (24 cores @ 2.7 GHz with Intel® Hyper-Threading Technology); tested with 256 GB DRAM, priced for comparison at 768 GB DRAM; Intel® Ethernet Converged Network Adapter X540 AT2; 2x Intel® Optane™ SSD DC P4800X Series; 4x Intel® SSD DC P4500 Series. Configuration not IOmark VM-HC validated. Performance: 1,120 IOmark-VMs (Note: Measured as a storage system, not hyper-converged). Price/performance: $237/IOmark-VM (Note: Measured as a storage system, not hyper-converged).
VMworld 2018 Content: Not for publication or distribution
© INTEL CONFIDENTIAL 29
Performance Attributions (continued)
4 VMmark 3.0 Improvement. www.vmware.com/products/vmmark/results3x.html.
OLD: Two HP Enterprise Proliant* DL380 Gen9 servers, each with 2x Intel® Xeon® E5-2699A v4 @ 2.4 GHz (44 cores), VMware ESXi 6.5. Result: 5.88 @ 6 tiles.
NEW: Two HP Enterprise Proliant DL380 Gen10 servers, each with 2x Intel® Xeon® Platinum 8180 processors @ 2.5 GHz (56 cores), VMware ESXi 6.5.0d. Result: 6.99 @ 8 tiles.
5 Up to 2.7x claim based on DPDK L3 Packet Forwarding: Intel® Xeon® E5-2650 processors 2.00GHz, 8 GT/s QPI, 20MB L3 cache, Patsburg Chipset (C0 stepping), Grizzly Pass Platform (R2216GZBPP), DDR3 1333MHz, 8 x dual rank 4GB (total 32GB), 4 memory channels per socket Configuration, 1 DIMM per channel, 6 x Intel® 82599 dual-port PCI-Express Gen2 x8 10 Gb Ethernet NIC, 1 x Intel® 82599 dual-port Gen2 x8 I/O expansion module10 Gb Ethernet NIC, BIOS version S5500.86B.01.00.0048, Operating system: Fedora Core 15, Kernel version: 2.6.38.4, IxNetwork* 6.0.400.22, DPDK version: FD5_1 Score: 102Gbits/s packet forwarding at 256B using cores vs. Gold 6152: Estimates based on Intel internal testing on Intel Xeon 6152 2.1 GHz, 2x Intel®, FM10420(RRC) Gen Dual Port 100GbE Ethernet controller (100Gbit/card) 2x Intel® XXV710 PCI Express Gen Dual Port 25GbE Ethernet controller (2x25G/card), DPDK 17.02. Score: 281 Gbits/s packet forwarding at 256B packet using cores, IO and memory on a single socket.
6 Intel® Server Board S2600WF; Intel® Xeon® Gold 6148 processor; 20 physical cores / 40 logical cores per socket; 12 x 16GB DDR4-2666 MHz 2Rx4 (six channels/socket); ESXi* 6.7.0 (Build 7797198); NSX* ENS: nsx-ens-2.1.0.1.0-7796427.6.6; NSX ESX Datapath: nsx-esx-datapath-2.1.0.1.0-7796427.6.6; 1x dual-port Intel® Ethernet Controller XL710 for 40GbE QSFP+; VM Configuration: 5 vCPUs, 4GB RAM, 16GB HD, 4vNIC; VM lcores are pinned to ESXi PCPU 15-19; VM OS: Ubuntu-16.04 (kernel 4.4.0-21-generic); I40EN-ENS 1.0.4-1OEM.670.0.0.7535516; i40EN 1.3.1-18vmw.670.0.0.7797198; VM DPDK: DPDK-17.05.1; ESXi Power Policy: High Performance.
VMworld 2018 Content: Not for publication or distribution
©
Legal Notices and Disclaimers
Software and workloads used in performance tests may have been optimized for performance only on Intel microprocessors. Performance tests, such as SYSmark and MobileMark, are measured using specific computer systems, components, software, operations and functions. Any change to any of those factors may cause the results to vary. You should consult other information and performance tests to assist you in fully evaluating your contemplated purchases, including the performance of that product when combined with other products. § For more information go to www.intel.com/benchmarks.
Intel does not control or audit third-party benchmark data or the web sites referenced in this document. You should visit the referenced web site and confirm whether referenced data are accurate.
Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration.
No computer system can be absolutely secure. Check with your system manufacturer or retailer or learn more at intel.com.
Intel, the Intel logo, and Xeon are trademarks of Intel Corporation in the U.S. and/or other countries.
VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents. VMware, the VMware logo, NSX, vSAN, and vSphere are registered trademarks or trademarks of VMware, Inc. in the United States and/or other jurisdictions.
*Other names and brands may be claimed as the property of others.
Copyright © 2018 Intel Corporation. All rights reserved.
30
VMworld 2018 Content: Not for publication or distribution
VMworld 2018 Content: Not for publication or distribution
VMworld 2018 Content: Not for publication or distribution