whats new in vsphere 5.0? dan wofford staff systems engineer - vmware

What’s New in vSphere 5.0?

Dan Wofford

Staff Systems Engineer - VMware

Agenda

Cloud Infrastructure Launch and Product Set What’s New vSphere 5.0 Platform What’s New vSphere 5.0 Storage What’s New vSphere 5.0 Networking.

vSphere vSphere vSphere

vCloud Director

vShield Security

vCenter Management

vCloud Director 1.5

vShield 5.0

vCenter Operations 1.0vCenter SRM 5.0

vSphere 5.0

Cloud Infrastructure Launch(vSphere, vCenter, vShield, vCloud Director)

In 2011 VMware is Introducing a Major Upgrade of the Entire Cloud Infrastructure Stack

New

VMware vSphere : The Industry’s Leading Virtualization Platform

Application Services

Infrastructure Services

Scalability

VMware vSphere 4.1

Security

• VMsafe APIs• vShield Zones

• Hot Add• # of Hosts, VMs

• HA • FT

• vMotion/S vMotion• Data Recovery

Availability

NetworkStorage

• Distributed Switch• Network I/O Control

• VMFS• Thin Provisioning

• Storage I/O Control• Storage APIs

• ESX/ESXi• DRS/DPM• Memory Overcommit

Compute

vCenter Server• Host Profiles

• Linked Mode

• Orchestrator

• Update Mgr

Introducing…

The Best Platform for Cloud Infrastructures

VMware vSphere 5.0: What’s New?

Application Services

Infrastructure Services

Scalability

VMware vSphere 5

Security

• ESXi Firewall• 32 way SMP

• 1 TB VMs

• New HA

Architecture

• vMotion over

higher latency links

Availability

NetworkStorage

• Network I/O Control

(per VM controls)

• Distributed Switch

(Netflow, SPAN, LLDP)

• Storage DRS

• Profile-Driven Storage

• VMFS 5

• Storage I/O Control (NFS)

• ESXi Convergence

• Auto Deploy

• HW version 8

Compute

vCenter Server• Virtual Appliance

• Web ClientvCenter Server

Infrastructure Services – Compute, Storage, Network

Agenda: vSphere 5.0 Platform

ESXi

ESXi CLI

ESXi Firewall

Image Builder

Auto Deploy

vSphere Update Manager

Platform Enhancements

ESXi Convergence Most Trusted

vSphere ESXi

vSphere 5.0 will utilize the ESXi hypervisor exclusively

ESXi is the gold standard for hypervisors

Thin architecture

Smaller security footprint

Streamlined deployment and configuration

Simplified patching and updating model

The Gartner Group says…

“The major benefit of ESXi is the fact that it is more lightweight — under 100MB versus 2GB for VMware ESX with the service console.”

“Smaller means fewer patches”

“It also eliminates the need to manage a separate Linux console (and the Linux skills needed to manage it)…”

“VMware users should put a plan in place to migrate to ESXi during the next 12 to 18 months.”

Source: Gartner, August 2010


ESXi

ESXi CLI

ESXi Firewall

Image Builder

Auto Deploy



ESXi Command Line

Why a new ESXi CLI tool?

• Console CLI and remote vCLI are different

• Need to learn multiple CLIs

• Local commands don’t work remote, remote commands don’t work locally

• Commands evolved from multiple sources using different standards

• No formal process for adding or updating commands

• Inconsistent output and syntax

• Output format changes from command to command

• Different commands have different input parameters

• Remote CLI limited compared to local CLI

ESXCLI establishes a standard with an extensible framework.

Going forward ESXCLI commands will be backward compatible

vSphere 5.0 CLI Compatibility

1. ‘esxcfg’ commands deprecated in 5.0 (replaced with esxcli)

2. ‘esxcli’ in 4.x is *not* backward compatible with 5.0

3. ‘vicfg’ used for remote CLI only


ESXi

ESXi CLI

ESXi Firewall

Image Builder

Auto Deploy



ESXi 5.0 Firewall Features

Capabilities

• ESXi 5.0 has a new firewall engine which is not based on iptables.

• The firewall is service oriented, and is a stateless firewall.

• Users have the ability to restrict access to specific services based on IP address/Subnet Mask.

Management

• The GUI for configuring the firewall on ESXi 5.0 is similar to that used with the classic ESX firewall — customers familiar with the classic ESX firewall should not have any difficulty with using the ESXi 5.0 version.

• There is a new esxcli interface (esxcfg-firewall is deprecated in ESXi 5.0).

• There is Host Profile support for the ESXi 5.0 firewall.

• Customers who upgrade from Classic ESX to ESXi 5.0 will have their firewall settings preserved.

UI: Security Profile

The ESXi Firewall can be managed via the vSphere client.

Through the Configuration > Security Profile, one can observe the Enabled Incoming/Outgoing Services, the Opened Port List for each service & the Allowed IP List for each service.

UI: Security Profile > Services > Properties

Through the Services Properties, one can configure if a service should be automatically started.

Services can also be stopped & started on-the-fly.

UI: Security Profile > Firewall > Properties

In the Firewall properties, one can check or uncheck the checkbox associated with a service to enable/disable access.

Service name, open ports and status are also displayed.

Ruleset Enabled

AllowedIP


ESXi

ESXi CLI

ESXi Firewall

Image Builder

Auto Deploy



Composition of an ESXi Image

CoreHypervisor

CIMProviders

Plug-inComponents

Drivers

ESXi Image Deployment

Challenges

• Standard ESXi image from VMware download site is sometimes limited

• Doesn’t have all drivers or CIM providers for specific hardware

• Doesn’t contain vendor specific plug-in components

?

StandardESXi ISO

•Base providers

•Base drivers

Missing CIM

provider

Missing driver

Describing ESXi Components

VIB

• “VMware Infrastructure Bundle” (VIB)

• Software packaging format used for ESXi

• Often referred to as a “Software Package”

• Used for all components

• ESXi Base Image

• Drivers

• CIM providers

• Other components

• Can specify relationship with other VIBs

• VIBs that it depends on

• VIBs that it conflicts with

Managing Customized ESXi Images

Image Builder: a set of command line utilities for…

• Creating and managing image profiles

• Building ESXi customized boot images, e.g.

• Installable ISO

• Bundle suitable for PXE installation or Flash

• Initial version is based on PowerCLI

• Snap-in component bundled as part of VMware’s PowerCLI tools

Depot

• A repository containing

• Image profiles

• VIBs

• Can have multiple depots, with two types

• On a web server

• Encapsulated in a .ZIP file


ESXi

ESXi CLI

ESXi Firewall

Image Builder

Auto Deploy



vSphere vSpherevSphere

Auto Deploy

vCenter Server with Auto Deploy

Host ProfilesImage Profiles

Deploy and patch vSphere hosts in minutes using a new “on the fly” model

Coordination with vSphere Host Profiles

Rapid provisioning: initial deployment and patching of hosts

Centralized host and image management

Reduce manual deployment and patch processes

vSphere

Auto Deploy Components


ESXi

ESXi CLI

ESXi Firewall

Image Builder

Auto Deploy



How Does A User Plan an ESX to ESXi migration?

1. Visit the ESX and ESXi Info Center

2. Start testing ESXi

• If you’ve not already deployed, there’s no better time than the present

3. Ensure 3rd party solutions used by your customers are ESXi Ready

• Monitoring, backup, management, etc. Most already are.

• Bid farewell to agents!

4. Familiarize with ESXi remote management options

• Transition any scripts or automation that depended on the COS

• Powerful off-host scripting and automation using vCLI, PowerCLI, …

5. Plan an ESXi migration as part of vSphere upgrade

• Testing of ESXi architecture can be incorporated into overall vSphere testing

ESXi and ESX Info Center

All Resources in One Centralized Location

ESX to ESXi Migration with VMware Update Manager

Supported Paths

• Migration from ESX (“Classic”) 4.x to ESXi 5.0

• For VUM-driven migration, pre-4.x hosts will have to be upgraded to 4.x first

• Might be better just to do fresh install of ESXi 5.0

Preservation of Configuration Information

• Most standard configurations will be preserved, but not all:

• Information that’s not applicable to ESXi will not be preserved, e.g.

• /etc/yp.conf (no NIS in ESXi)

• /etc/sudoers (no sudo in ESXi)

• Any additional custom configuration files will not be preserved, e.g.

• Any scripts added to /etc/rc.d

Confidential

ESXi Migration and Third-Party Software

Supported components

• Upgrade of third-party components limited to

• Cisco Nexus 1000v

• EMC PowerPath

• During upgrade, if either of these is detected on starting host

• Target ESXi image is checked for presence of these modules

• If found, upgrade proceeds

• If not found, option provided to override and proceed

• Otherwise, halt

All other components

• Starting host not checked for other third-party software

• Upgrade process will not preserve anything

• Up to Admins to take care of replacing

Confidential

Agenda: vStorage – What’s New

Introduction

VMFS-5

vStorage API for Array Integration

Storage vMotion

Storage I/O Control

Storage DRS

VMware API for Storage Awareness

Profile Driven Storage

FCoE – Fibre Channel over Ethernet

Introduction to VMFS-5

Enhanced Scalability

• Increase the size limits of the filesystem & support much larger single extent VMFS-5 volumes.

• Support for single extent 64TB Datastores.

Better Performance

• Uses VAAI locking mechanism with more tasks.

Easier to manage and less overhead

• Space reclamation on thin provisioned LUNs.

• Smaller sub blocks.

• Unified Block size.

VMFS-5 Versus VMFS-3 Feature Comparison

VMFS-3 to VMFS-5 Upgrade

The Upgrade to VMFS-5 is clearly displayed in the vSphere Client under Configuration → Storage view.

It is also displayed in the Datastores → Configuration view.

The upgrade is non-disruptive.