Wednesday, December 14, 2011

Dell World 2011, VDI, VMware View, VCAP v.2.0 and virtualization comparision updates

So I must apologize first as I have not updated this blog as regularly as I would have liked. Not that it's an excuse but I've been finalizing a masters program and now that I'm done. I should have some more time to dedicate myself to training and updating this blog more regularly...

First let me start off with Dell World 2011. In October, we traveled to Austin, TX for the first ever Dell World 2011 conference. The conference was great and we had some great exchanges with some product specialists on some really neat innovations that are going to be coming from dell in the next couple of years. Our organization has an NDA on file so I cannot disclose details but let me just say that I'm impressed at what's coming. The conference in general was good but tailored more towards the executive staff or CIO level member of a given organization. There weren't any real lab environments to play with but the area where we could meet with vendors was neat. I would have to say the highlights were the Dell booth which showed the mobile (and environmentally green) deployable datacenter as well as the new Lync product shown by Microsoft. Intel had a great booth that showed some neat facial recognition software set and played it to something very similar from the Minority Report (facial recognition that tied to a metabase that would try to advertise masculine or feminine based products based on the gender of the individual recognized). Additionally, our team had a quick five minute exchange with Michael Dell. Though it was mainly regarding college sports, it was still nice to talk to the CEO of a multi-billion dollar organization...

Another reason that I have been unable to update this blog is that I've been selected on a special project at work that deals with the virtualization of enterprise resources. I can't get into details but one of those avenues has been regarding VDI. Therefore, I've been spending a lot of my time researching VDI solutions and what VMware offers from their VMware View product line. Depending on your organization, you can set varying pools of desktops with granular levels of entitlements. Furthermore, you can improve and optimize performance based on the protocol used, the type of session selected (i.e. persistent vs. non-persistent) and what storage and compute back end the entire infrastructure resides on. I won't get into too much detail in this post but look for future posts regarding more technical details on VDI in general.

Since we're on the subject of VDI, I've attended a VMware View course in early November and I had a great time and learned a lot of details about some of the best practices that are leveraged using the Teradici developed PCoIP protocol. Furthermore, I'm looking to upgrade my VCP to a VCP5 as well as get the desktop certification (VCP-DT). The only unfortunate thing is that the course was on View 4.5 and there wasn't anything available on 5.0 yet. I'm looking to take a training course on 5.0 after the courses are available after the new year. Regardless, the course offered some great information that allowed for us to design a decent VDI architecture using trending technologies and features offered by View 5.0.

Some information pertaining to some of the improvements can be found on this article...

http://www.emc.com/about/news/press/2011/20110830-01.htm

This came out of VMworld (which I attended in August) but outlines the use of optimized storage on VMware View 5.0 and its capability of booting 500 desktops in less than five minutes. Which sounds very promising...

Lastly, I'm looking at retaking my VCAP. While I am on the fence about getting the VCAP4 or the VCAP5 (which means I'll have to update my VCP4 to a VCP5), I have a voucher from a course I took back in October regarding Advanced VMware vSphere training. Since I've already taken the VCAP4 once, I'm thinking that any VCAP is a prestigious certification. However, if it will allow me to take the VCAP5 (and I can upgrade my VCP in time), I may just do that to stay current with the latest version.

Well folks, that's about it. I'll leave you with an updated comparisons document from VMware. This compares VMware vSphere 5 Enterprise Plus to Xen Server 5.6 SP2, Hyper-V 2008 R2 SP1, and Red Hat Enterprise Virtualization 2.2. The total document is 23 pages long and instead of uploading each page like I did with the vSphere 4 comparisons, I'll just provide the link... As with the vSphere 4 comparisons, the article is showing enhanced feature support for vSphere over the competition. Therefore, if you can shell out the money for vSphere licensing (which vSphere 5 has some vRAM entitlement restrictions - see my previous blogs), you'll be able to leverage some advanced features not currently offered by some of the competition.

http://www.vmware.com/files/pdf/vmware-vsphere-features-comparison-ch-en.pdf

Thursday, September 22, 2011

VMworld 2011 Las Vegas and VMware vSphere and View 5

VMworld 2011 Review

So for those that didn't get the opportunity to go to VMworld 2011 this year in Las Vegas, you missed a very informative and entertaining conference. The week long event at the Venitian was one of the largest in the events history hosting somwhere in the range of 15000-20000 registered individuals.

The event housed a large lab environment spanning four data centers and nearly 1000 thin clients connecting to a lab session via VMware View, numerous general sessions covering every corner of the virutal infrastructure, cloud computing concepts, virtual desktops, and best practices to execute in these environments.

During my time at the event I looked at infrastructure best practices when utilizing HA and DRS as well as some of the public sector issues we are encountering trying to keep up with trending virutalization and cloud computing technolgies. Additionally, I completed a few labs using the new VMware vSphere infrastructure on networking and performance configurations and optimization.

Like many of these IT conferences, there was a very large vendor area where companies from all over the country (and world) had setup shop that included simulated demos, games, and new technologies and features within products. Some of the vendors I really enjoyed meeting with were Dell, VMware, NetApp, EMC, LG (yeah that LG - they had a really neat phone app that tied into a View environment to allow corporate phone use on a personally owned smart phone), World Wide Technology, and WYSE.

Next years event will be in San Francisco and like previous events will be hosted the very last week of August going into early September. I highly recommend going if you have never been before. There is a lot to learn here.

VMware vSphere and View 5

VMware announced at VMworld the newest version of the vSphere and View product line. Version 5 introduces new features and optimized capabilities over its previous versions.

With vSphere 5 there were new features introduced (most notably) Storage DRS and vMotion over the WAN. Additionally, there are new maximums to allow for scalability within VM provisioning and a stateless firewall engine within the ESXi server. Of course with this release introduces a new VM version (8) and this allows for 3D graphics processing (better for Aero in Windows 7) and USB 3.0 support.

A full list of details can be found here...

http://www.vmware.com/files/pdf/products/vsphere/vmware-what-is-new-vsphere5.pdf

On the View side of the house I've spent a lot of my time looking at these features and benefits because I'm currently engineering a VDI concept design for my customer. This has been my first look at the desktop side of virtualization but it has been very interesting nonetheless.

Looking at how the PCoIP protocol has evolved since View 4 was released is really making VDI hosting over a WAN link more possible and with robust storage architecture with linked clones hosted on SSD makes these environments boot quickly during log-in storms as well as perform optimally during peak hours.

EMC's VNX solution did a case study running View 5 on vSphere 5 and booted 500 virtual desktops that were stored on an EMC VNX NFS mount and they booted up into a ready state in five minutes. These are promisiing statistics as one would look at hosting clones on a SAN (of faster storage platform).

A full list of benefits of View 5 are listed below. Most notably are the new optimized PCoIP controls, 3D graphics procesing capabilities, and View mobile clients (like my LG booth example at VMworld).

http://blogs.vmware.com/euc/2011/09/view-5-in-the-house.html

The EMC study details and other benefits of running VMware View 5 and vSphere 5 on an EMC VNX tiered storage architecture. The article can be viewed below...

http://www.emc.com/about/news/press/2011/20110830-01.htm

All in all there are some very promising features released with the VMware 5 platform of products. Next time I post something, I may discuss some findings from my possible trip to Dell World in Austin, TX in October and my experience from my upcoming VMware Advanced Fast Track training course in DC. Stay Tuned and thanks for reading!

Friday, August 12, 2011

Update to VMware vSphere 5 Licensing Fiasco...

After a barrage of comments and negative feedback surrounding the new vRAM entitlement restriction (among other things) to vSphere 5 licenses, VMware came back and changed the model.

In a nutshell...

For Enterprise and Enterprise Plus, your entitlement has doubled. All other models are capped at 32GB.

There's also a cap on consumed vRAM counted per VM at 96GB.

Additionally, they reduced the high watermark and did a calculation on a 12 month average of consumed vRAM. This eliminates any penalties incurred due to short lived vRAM usage spikes in test and development environments.

Lastly, they've commented regarding concerns on VDI deployments and stated that this model does not apply to VDI environments. vSphere Desktop Addition covers VDI and there currently is no vRAM entitlement associated with that product.

Full details from VMware below...

http://blogs.vmware.com/rethinkit/2011/08/changes-to-the-vram-licensing-model-introduced-on-july-12-2011.html

Friday, July 15, 2011

vSphere 5 Licensing - Talk about a step in the wrong direction...

Recently, I've been involved in different discussions internally and with VMware and I've had the recent privilege to see the new roadmap for vSphere 5. Though I can't get into details on the technical front, one area that I've recently learned about is the licensing changes that will occur with vSphere 5.

Like v4 the licenses will be by per physical processor. The difference is where v4 had a physical limitation on memory and processor cores. v5 does not. However, v5 has adopted what may very well cause people from upgrading from v4 to v5 and that's the vRAM entitlement setting on each processor that is licensed. This entitlement (24GB vRAM/proc for Standard, 32GB vRAM/proc for Enterprise, and 48GB/proc vRAM for Enterprise Plus) causes concerns for large businesses like my customer that I support at my job; and here's why...


Say I have a robustly built hardware environment that consists of rack and blade servers (10 for example) that each has 512GB of physical RAM and 4 processors each. Say all 10 of those servers are centrally managed via vCenter and my licensing model is Enterprise Plus (because I like vDS and Host Profile use)... Under v4 I had few limitations with a physical memory maximum of 1TB per host and a VM vRAM limitation of 255GB. With v5 that goes away but I’m now restricted even more because of the vRAM entitlement.


10 hosts x 4 procs = 40 procs that need to be licensed at Enterprise Plus


40 licenses x 48GB vRAM entitlement = 1920GB vRAM entitlement.


However, I have purchased 5120GB of physical RAM for my environment. Therefore, I’m only able to allocate approximately 27% of my memory (5120/1920=.2667) before I’ve reached this entitlement capacity. Once reached, I have to purchase additional licenses (or upgrade my licenses if I have that option). This drives up front costs significantly in order to allow us to utilize RAM that we purchased. In my example my costs for licensing alone (not factoring in support or vCenter) would be approximately 140K to license all 40 procs (MSRP). If I were running vSphere 4, I would be able to utilize all 5120GB of RAM on my hosts. With v5 I have to purchase approximately 30 lienses

5120 * .75 / 48GB (vRAM entitlement for ENT +) = 30 licenses

That drives my costs up by over 100K.

Thus my concern… While VMware has partnerships with literally everyone (Dell, HP, Cisco, EMC, etc.) one would think that if I’m a hardware vendor I would express my dislike at this limitation that my customers now face and thus reducing revenues on my organization (I know an ugly marketing angle). We’ve come so far from servers back in the early 2000s that had 1-4 GB capacity to servers that can house 1TB of RAM per server. VMware has proclaimed for years about consolidation onto robust hardware and though the vRAM capacity is supposed to be agnostic from the hardware and be presented as a shared pool of vRAM resources (think cloud computing here but on the local infrastructure). The limitations should have been increased or eliminated for those with Enterprise Plus licensing. It’s because of this limitation that concepts like over commitment of memory is no longer needed but with robustly built hardware (like my example) goes to waste (thus organizations that have already purchased this equipment now have wasted money on something they will doubtedly ever use.


Though I’m not the only one with this concern or expressed dislike in this new design feature, I know it’s too late to pull it back as vSphere 5 is being announced at VMworld in Las Vegas in about six weeks. However, I hope the feedback VMware is getting forces this idea to virtually disappear as revision patches are released for the product. This can’t be a good step in the right direction. I like the concept of a collection of resources in a pool but there has to be a better way of tying this in without having to involve licensing models. Here’s the White Paper from VMware on the product as well as a comparable maximum White Paper on vSphere 4.x. Enjoy and let me know what you think...


VMware vSphere 5 Licensing

VMware vSphere 4.x Configuration Maximums




Friday, July 8, 2011

Design Workshop Review, VMWorld 2011, and Understanding HA and DRS

It's been a while since I've updated the blog but things have been really busy at home and at work so I apologize for not getting this out sooner.

Design Workshop

I recently attended VMware's Design Workshop for vSphere 4.1 and I have to say I was surprised at how open the course was. I really expected more structured learning but it was very interactive and I really enjoyed the course. I was also surprised at how many different engineers had so many different interpretations on the design of their environments (we did scenario based designs with mock requirements).

Most everyone did a UCS (Cisco) architecture while I (more knowledgeable of Dell) went with Dell blades due to their density and back plane capabilities with the M1000e chassis. However, as I read more about UCS and it's capabilities with the fabric connect switching (to include future capabilities like FCoE) I am thinking that UCS is really being designed with virtualization in mind (from the start).

All in all, the class was great and I have some great reference materials now on the design aspect of vSphere and I can leverage that and my data center administration exam studying and experience to develop a good platform (from start to finish) on future deliveries.

VMworld 2011

So I am lucky enough to have my employer fund my trip to VMworld 2011 in Las Vegas, NV this year and I am really excited to be able to attend. I've had the privilege to meet with VMware to discuss road maps on future virtualization/cloud computing deliveries and let's just say that there will be a lot of announcements on a lot of product lines at VMworld this year. If you haven't made plans, I would high recommend that you try to attend this year. It's not cheap but well worth the investment. More information can be found here...

http://www.vmworld.com

Understanding HA and DRS

Now onto some technical discussion about HA and DRS. When you define this setting in your cluster, you assume some default settings that can be modified that pertain to certain things like restart priority, aggressiveness of your automation settings (priority levels determine level of automation), and recommendation settings.

DRS is relatively easy as you set how conservative or aggressive you want the resource utilization to be and what priority settings you want to set on VMs. Higher priority VMs may have a higher migration threshold setting so in the event of resource utilization increasing on a certain host, you don't run into performance issues on the individual VMs. Distributed Power Management can be incorporated here as well if you wish to save power on underutilized hosts. This coupled with resource pool utilization, you should have well balanced hosts throughout your cluster(s).

HA is tricky and I have a funny example that shows how some people really need to read on how HA works before assuming it's a truly automated solution. As with anything you have to assume that there are points of failure that will force certain redundancies to fail. In this example, I'm talking power... Never assume that if your data center loses power that your VMs will automatically restart just because your hosts restart... With restart priorities defined in your HA cluster, you have to have a host online to facilitate those requests. Additionally, that host has to detect host failures and respond by restarting VM's on available hosts. HA elects up to 5 primary nodes per cluster (in the order they were added) and if all hosts fail due to a power event, no primary node is available to facilitate VM restart priorities. Therefore, when power is restored and hosts restarted, they are simply restarted and the VMs will have to manually be powered on. This is assumed that vCenter is virtualized as well since HA events are facilitated and coordinated via vCenter. There is a great read on this on YellowBricks and I highly recommend you read this and check out Duncan Epping and Frank Denneman's book on the HA and DRS  Technical Deepdive

Book - http://www.amazon.com/gp/product/1456301446?ie=UTF8&tag=yellowbricks-20&linkCode=as2&camp=1789&creative=9325&creativeASIN=1456301446

HA Deep Dive - http://www.yellow-bricks.com/vmware-high-availability-deepdiv/

DRS Deep Dive - http://www.yellow-bricks.com/2009/10/21/drs-deepdive/

Tuesday, April 26, 2011

VCAP-DCA Examination Feedback

So I'll start by saying that I've been a little busy, I've had some work from my masters degree program get published, work has been a little busier than normal, and I was studying for the VCAP-DCA.

Like David Davis, Sean Crookston, and Damian Karlson with their posts regarding the exam experience or the notes associated with VMware's blueprint guide, my experience was similar.

1. You get 3.5 hours to do anwhere between 30-40 interactive (hands on labs) there are no MC questions.

2. About halfway through my exam I realized how much time had really flown by. In the end I had to skip a few of the harder questions and move on to save time.

3. The exam collectively was very difficult and by far the hardest I've taken in a very long time.

It took VMware 12 business days to process my scores and I got my results today and unfortunately I didn't pass but I didn't do as bad as I thought. If I studied another month I think I would have passed. Some things I can strongly suggest is that you take the VMware course on Performance and Scripting with PowerCLI. There are interactive labs in these courses that I am sure would have helped me with prepping for this exam (I've only taken Troubleshooting and the Fast Track (which is what helped me get my VCP4).

Regardless, I felt like I had really learned alot in studying for this exam (for example MSCS clusters, iSCSI and FC storage, vSwitching vs vDSwitching architectures, vCenter Hearbeat, Update Manager, Orchestrator, and others. I plan on taking the exam once my schedule frees up at the end of this year  and I graduate with my masters degree. Additionally, I'll be going to VMworld and hope to learn additional things that may help me prep for the exam in addition to trying to get into those before-mentioned courses as well.  For now I've included some information from Crookston/Karlson's VCAP-DCA study guide material and the blueprint.

VDCA 410
For a PDF version of Crookston's study notes can be downloaded from http://www.seancrookston.com/vcap-dca-studyguide-ver3.pdf
Additionally there are a series of mock labs which can be found on his site here http://www.seancrookston.com/?s=mock+lab

The below is the web version of the guide.
Section 1 – Implement and Manage Storage
Section 2 – Implement and Manage Networking
Section 3 – Deploy DRS Clusters and manage Performance
Section 4 – Manage Business Continuity and Protect Data
Section 5 – Perform Operational Maintenance
Section 6 – Perform Advanced Troubleshooting
Section 7 – Secure a vSphere Environment
Section 8 – Perform Scripting and Automation
Section 9 – Perform Advanced vSphere Installations and Configurations

Other Great Resources for studying for the VCAP-DCA exam

Download the latest blueprint from http://communities.vmware.com/docs/DOC-12751

Saturday, January 29, 2011

VMware Troubleshooting v4 Course Plug and knowing the difference between ESX and ESXi (let's put this one to bed shall we?)

Recently, I had the privilege to travel to San Francisco to take the v4 troubleshooting course (4 days). It’s about time that they have a training program that is less lecture and more labs (about 65% lab to 35% lecture). What was even more appealing was the fact that about 10 of the labs in this course were strict troubleshooting labs (I know this may not sound surprising being it’s a troubleshooting course). The issue I have with some labs in a training lab is that they are very well structured and don’t necessarily hit major issues encountered in many production environments. However, the troubleshooting labs were outlining issues that are commonly occurring in many production environments. It was developed by VMware experts that polled their own FAQ page as well as forums and support calls. From there they developed scripts that broke the training environment in multiple ways and we had free reign (and a little instructor help if needed) to fi x the issues.
Reading into what the requirements are on the VMware Certified Advanced Professional-Data Center Administration (VCAP-DCA), this course is a must take for those wanting to upgrade their VCP to the next level. Considering that the VCAP-DCA exam is 100% lab based, I highly recommend that you take this course before looking to build a lab in your house or workplace. This will also give you design ideas as well as you start to think down the advanced certification road… Okay enough plugging the VMware education, now to discuss something more technical.
Another issue I encountered recently (and it seems I have to bang my head against the wall with my security people every few months) is the utilization of ESXi over ESX. For those that know VMware’s market, the ESX hypervisor is going to be discontinued and ESXi will be the only hypervisor delivered by VMware. This isn’t a huge ordeal considering the development and evolution of the virtual management assistant (vMA) or the vCLI toolset. However, I seem to continue to have discussions with our security people because they don’t seem to understand the differences between the two hypervisors (no matter how many times I can explain it or illustrate it). However, I’ll try my best to explain it here and show you what exactly the key differences are and why your virtual environment needs to be designed (or upgraded) with ESXi.
"Improve Reliability and Security. The older architecture of VMware ESX relies on a Linux-based console operating system (OS) for serviceability and agent-based partner integration. In the new, operating-system independent ESXi architecture, the approximately 2 GB console OS has been removed and the necessary management functionality has been implemented directly in the core kernel. Eliminating the console OS drastically reduces the codebase size of ESXi to approximately 100 MB improving security and reliability by removing the security vulnerabilities associated with a general purpose operating system." (VMware, 2011).

Look at the image below regarding patch levels between ESX and ESXi (you would think that this alone would illustrate to the security professionals why use of ESXi is a better choice.

                                                        (VMware, 2011).

When looking at this diagram again, I still shake my head in disbelief. However, for those that work in small businesses where selling new products to security is easier, for larger organization it sometimes doesn't necessarily depend on what's more secure, but what has routinely been done in the past. Similar to the "if it ain't broke, don't fix it" mentality.

The other item I found very interesting and I think this is what finally got through to the security engineering team was the following.


                                                                                               (VMware, 2011).

Additionally, this layout on the key compatibility differences between ESX and ESXi (both 4.0 and 4.1). If you notice at 4.1 (which was a major patch level release for ESX/ESXi) you'll notice that the only major difference between ESX 4.1 and ESXi 4.1 is serial cable connectivity to hosts through a serial port. I find this negligible because of the increased support of IP KVM and the use of fastpass or session based authentication against a host using the vMA in ESXi 4.1. For those that want direct cable connection to the host, get a nice KVM or invest in some sort of web  console connectivity via the server (iLO, DRAC, etc...).

Capability ESX 4.0ESX 4.1ESXi 4.0ESXi 4.1
Service ConsolePresentPresentRemovedRemoved
Admin/config CLIsCOS + vCLICOS + vCLIPowerCLI + vCLIPowerCLI + vCLI
Advanced TroubleshootingCOSCOSTech Support ModeTech Support Mode
Scripted InstallationSupportedSupportedNot SupportedSupported
Boot from SANSupportedSupportedNot SupportedSupported
SNMPSupportedSupportedSupported (limited)Supported (limited)
Active Directory3rd party in COSIntegratedNot SupportedIntegrated
HW Monitoring3rd party agents in COS3rd party agents in COSCIM providersCIM providers
Web AccessSupportedNot SupportedNot SupportedNot Supported
Serial Port ConnectivitySupportedSupportedNot SupportedNot Supported
Jumbo FramesSupportedSupportedSupportedSupported


Hopefully, this puts the core difference issue between ESX and ESXi to bed but for those that need additional information. The links to VMware's site are below.

References: