Becloud vContainer
Christophe GAUSSIN
Product Manager Cloud Solutions
Christophe.gaussin@belgacom.be
Selfmanagament
Managed
Becloud IaaS Portfolio Positioning
Managed vHosting
Dedicated hosting
Dns
Dedicated Webhosting
vContainer
Becloud vDatacenter
Standardized offer / Fast time to market
Small server environment
Flexible & customised design
Multiple server environments
vContainer, a service
traditional datacenter layered approach
(business) applications
middleware
operating system
backup & restore
virtual environment
server & storage
network
facilities
vContainer, a service
vContainer approach
(business) applications
middleware
operating system
security
virtual environment
server & storage
vContainer
network
facilities
service indicators & levels
backup & restore
vContainer, a service
customer proprietary environment
(business) applications
middleware
operating system
vContainer
Definition vContainer
Environment that provides the ability to build secure, multi-tenant clouds by
POOLING Belgacom RESOURCES (cpu – memory – storage – network security)
into VIRTUAL DATACENTERS
and exposing them to users through WEB-BASED PORTALS and
CATALOG –based services
vContainer conceptual architecture
Organization 1
Organization m
Users
VMware vCloud Director
User Portals
Catalogs
Virtual Datacenter 1 (Gold)
VMware
vShield
VMware
vCenter Server
VMware
vCenter Server
VMware vSphere
VMware vSphere
Secure Public Cloud
Security
Virtual Datacenter n (Silver)
vCloud API
Programmatic Control and
Integrations
Private Clouds
vContainer architecture details
vContainer customer implementation
use case
Organization ABC
Virtual datacenter
Resources
Vapp 1
Vapp 2
3,5 GHz
8 GB
158 GB
3 Vlans
12 Vms
Vapp network – subnet (/24)
vshield firewall rules
Nat internal/external address
Vapp network – subnet (/24)
vshield firewall rules
Nat internal/external address
Direct connect network – subnet (/26)
External network – subnet (/26)
Shared vsys
External firewall rules
Nat external address/public address (internet only)
Internet – public ip
address
Vapp network – subnet (/24)
vshield firewall rules
Nat internal/external address
vContainer redundancy
• HA/vMotion from hypervisor layer
• Storage virtualization from storage layer (optional)
vContainer user interface
Web based
Authentication screen
vContainer user interface
Create a vApp
A vApp consists of one or more virtual
machines that communicate over a network
vContainer user interface
Parameterize the vApp
vContainer user interface
Create virtual machine from :
• Public catalog
• Private catalog
• From scratch
vContainer user interface
Deploy the vApp
vContainer user interface
vContainer user interface
Create vApp network
vContainer user interface
Connect vApp network to
outside world
vContainer user interface
Configure VM and connect it
to network
vContainer user interface
Configure edge gateway NAT
vContainer user interface
Configure edge gateway
Firewall rules
vContainer user interface
Start the vApp
vContainer user interface
Access VM console
Define your vContainer
Do not think about products, operational complexity, technology
and so on.
Think about the service you need, think about your functional
requirements
Define it : Compute & storage
• vCPU (Virtual Processing power) :
– Quantity of vCPU required, the underlying type of CPU’s (nr of cores etc) is no longer relevant
• vRAM (Random access memory):
– Amount of memory expressed in GB
• vStorage (Storage):
– Amount of net storage required (GB or TB)
– Located in 2 physically separated Belgian datacenter
– Several tiering :
• Capacity disks (sata disks): Disk used to store large amount of data with limited (I/O) performance.
• Performance disks (FC Disks): Disk used to store data with high (I/O) performance.
• Virtual Storage : storage replication and synchronization between physical separated datacenters presented to customer as a virtual storage
Define it : Back-up & restore
• Back-up is offered as a service and not one of the functionalities within the vContainer
• Block-based backup
•
•
•
•
Virtual machine level granularity
Daily incremental back-ups
Weekly full back-ups (one month retention time)
Restores are considered as a change and are performed respecting the SLA timers
• File based backup
• Organized by the customer inside his vContainer
• Can be provided as an additional service from STAAS portfolio (server backup advanced)
• Snapshot function available inside vContainer
Define it : Security
• Network security
• Network topology built by customer
• 2 layered firewalls :
• External firewall under Belgacom control
• Edge gateway inside vContainer under control of the customer
• Access to the vContainer:
•
•
•
•
HTTPS
SSL VPN
Belgacom Explore
Password protection
• Application security
• Inside the vContainer ... responsibility of the customer
Define it : vContainer flavors
Shared vContainer
•
•
•
•
•
Shared physical platform
Shared management infrastructure
Standardized
Redundant on 2 DC
Delivery time reduced
Dedicated vContainer
•
•
•
Dedicated physical platform
Dedicated management platform
Tailored made
Mixed
vContainer
•
•
•
Dedicated compute/security
platform
Shared management platform
Tailored made
Shared infrastructure
vContainer shared architecture
Dedicated infrastructure
vContainer dedicated architecture
Shared infrastructure
vContainer mix architecture
Shared infrastructure
Dedicated infrastructure
Shared infrastructure
Define it : SLA
Objectives
Silver
Gold
Service days
working days + saturdays
7/7
Service hours
7h00 - 22h00
24/24
Service desk availability
24/7
24/7
Service availability*
99,5%
99,9%
P1²
1
30min
P2²
2
1
P3²
4
2
P4²
8
6
P1²
8
4
P2²
12
6
P3²
18
8
P4²
24
16
Normal
24
24
Urgent²
12
12
Incident response times (hours³)
Incident resolution times (hours³)
Change implementation times (hours³)
Service availability*: Availability of servers expressed as a monthly percentage and calculated as follows (excluding planned interventions): ((total service hours per month – total service hours downtime per
month)/total service hours time per month)*100%.
Define it: Pricing Models
• Shared infrastructure (order form)
– Reserved model
• (multi) year(s) basis with no refund principle.
– Pay as you use
• Monthly contracts stopped whenever customer wants to :
– Used GHz
– Used vRAM GB
– Used disk capacity
– Mix of both
• Dedicated infrastructure (tailor made)
Possibilities to get additional services like consulting, project management,…
How to define my vContainer?
Do not think about products, operational complexity, technology and so on.
Think about the service you need, think about your functional requirements
•
•
•
•
What are your infrastructure requirements for your applications/vApp ?
 vCPU - memory - storage capacity – networking - security requirements
Does my business require a standard or a customized ICT environment?
 shared or dedicated vContainer
How critical is your ICT environment for your business?
 degree of redundancy
 Type of SLA : Silver - Gold
Which pricing model?
 Reserved – PPU – Mixed on both
Additional key features
• Support multiple operating systems from windows NT 4 up to windows 2012 – Linux –
Solaris - MacOS
– Windows OS licences included*
– Possibility for customer to use his own Microsoft application licences*
• Belgacom predefined virtual machines and vApp
• Upload/download virtual machines/vApp from/to vContainer
– Upload room available
never underestimate the bandwidth of a truck full of tapes
• Demo environment available for customer free of charge
* Some restrictions may applied
Hybrid cloud - vConnector
Cloud Ready Infrastructure
with a vision on the future
vContainer = vCloud™ Powered
•
•
•
•
•
•
•
A technology badge
Belgacom is among the first in BeLux to obtain it
Easy to locate through: http://vcloud.vmware.com/vcloud-ecosystem#view=vcp
Guarantee that the solution is based on VMware vSphere™ and VMware vCloud Director.
Give confidence in secure VMware-based clouds.
Expose the VMware vCloud API.
Support the Open Virtualization Format for image upload and download.
vContainer cases
some examples
vContainer
- Test & development environments
- IT solution provider (SAAS,…)
- Project based application
- Training environment
but basically, anything is possible
the business
defines the requirements,
the service fills in the requirements
- Split up application
tiers (traffic/security
...)
- Spin up workloads for traffic spike (temporary capacity)
- DRS purposes
-….
vContainer conclusion
vContainer is a BeCloud IaaS solution that offers :
•
•
•
•
•
Solution based on market proven and leading technology: A-Brand infrastructure components.
Intended for clients looking for a solution which provides a high level of flexibility, autonomy
Advanced technical features allowing strict SLA
Hybrid cloud ready
Financial flexibility (Reserved / pay as you use model)