Dan Wofford Staff Systems Engineer - VMware What’s New in vSphere 5.0? Dan Wofford Staff Systems Engineer - VMware

Agenda Cloud Infrastructure Launch and Product Set What’s New vSphere 5.0 Platform What’s New vSphere 5.0 Storage What’s New vSphere 5.0 Networking.

vCenter Operations 1.0 vCenter SRM 5.0 In 2011 VMware is Introducing a Major Upgrade of the Entire Cloud Infrastructure Stack New Cloud Infrastructure Launch (vSphere, vCenter, vShield, vCloud Director) vCloud Director 1.5 vCloud Director vShield Security vShield 5.0 vCenter Operations 1.0 vCenter SRM 5.0 vCenter Management vSphere vSphere vSphere vSphere 5.0

VMware vSphere : The Industry’s Leading Virtualization Platform Application Services VMware vSphere : The Industry’s Leading Virtualization Platform Infrastructure Services Host Profiles Linked Mode Orchestrator Update Mgr vCenter Server VMsafe APIs vShield Zones Hot Add # of Hosts, VMs HA FT vMotion/S vMotion Data Recovery Availability Security Scalability VMware vSphere 4.1 Compute Storage Network Distributed Switch Network I/O Control VMFS Thin Provisioning Storage I/O Control Storage APIs ESX/ESXi DRS/DPM Memory Overcommit

The Best Platform for Cloud Infrastructures Introducing… VMware vSphere™ 5.0 The Best Platform for Cloud Infrastructures

VMware vSphere 5.0: What’s New? Application Services VMware vSphere 5.0: What’s New? Infrastructure Services Virtual Appliance Web Client vCenter Server vCenter Server ESXi Firewall 32 way SMP 1 TB VMs New HA Architecture vMotion over higher latency links Availability Security Scalability VMware vSphere 5 Compute Storage Network Network I/O Control (per VM controls) Distributed Switch (Netflow, SPAN, LLDP) Storage DRS Profile-Driven Storage VMFS 5 Storage I/O Control (NFS) ESXi Convergence Auto Deploy HW version 8

Infrastructure Services – Compute, Storage, Network

Agenda: vSphere 5.0 Platform ESXi ESXi CLI ESXi Firewall Image Builder Auto Deploy vSphere Update Manager Platform Enhancements

ESXi Convergence Overview Benefits Most Trusted Overview vSphere 5.0 will utilize the ESXi hypervisor exclusively ESXi is the gold standard for hypervisors vSphere ESXi Benefits Thin architecture Smaller security footprint Streamlined deployment and configuration Simplified patching and updating model

The Gartner Group says… “The major benefit of ESXi is the fact that it is more lightweight — under 100MB versus 2GB for VMware ESX with the service console.” “Smaller means fewer patches” “It also eliminates the need to manage a separate Linux console (and the Linux skills needed to manage it)…” “VMware users should put a plan in place to migrate to ESXi during the next 12 to 18 months.” Source: Gartner, August 2010

Agenda: vSphere 5.0 Platform ESXi ESXi CLI ESXi Firewall Image Builder Auto Deploy vSphere Update Manager Platform Enhancements

ESXCLI establishes a standard with an extensible framework. ESXi Command Line Why a new ESXi CLI tool? Console CLI and remote vCLI are different Need to learn multiple CLIs Local commands don’t work remote, remote commands don’t work locally Commands evolved from multiple sources using different standards No formal process for adding or updating commands Inconsistent output and syntax Output format changes from command to command Different commands have different input parameters Remote CLI limited compared to local CLI ESXCLI establishes a standard with an extensible framework. Going forward ESXCLI commands will be backward compatible

vSphere 5.0 CLI Compatibility Commands Run Local Run Remote ESX/ESXi 4.x ESXi 5.x esxcfg1 Yes No esxcli2 vicfg3 vmware-cmd vmkfstools PowerCLI 1. ‘esxcfg’ commands deprecated in 5.0 (replaced with esxcli) 2. ‘esxcli’ in 4.x is *not* backward compatible with 5.0 3. ‘vicfg’ used for remote CLI only

Agenda: vSphere 5.0 Platform ESXi ESXi CLI ESXi Firewall Image Builder Auto Deploy vSphere Update Manager Platform Enhancements

ESXi 5.0 Firewall Features Capabilities ESXi 5.0 has a new firewall engine which is not based on iptables. The firewall is service oriented, and is a stateless firewall. Users have the ability to restrict access to specific services based on IP address/Subnet Mask. Management The GUI for configuring the firewall on ESXi 5.0 is similar to that used with the classic ESX firewall — customers familiar with the classic ESX firewall should not have any difficulty with using the ESXi 5.0 version. There is a new esxcli interface (esxcfg-firewall is deprecated in ESXi 5.0). There is Host Profile support for the ESXi 5.0 firewall. Customers who upgrade from Classic ESX to ESXi 5.0 will have their firewall settings preserved.

UI: Security Profile The ESXi Firewall can be managed via the vSphere client. Through the Configuration > Security Profile, one can observe the Enabled Incoming/Outgoing Services, the Opened Port List for each service & the Allowed IP List for each service.

UI: Security Profile > Services > Properties Through the Services Properties, one can configure if a service should be automatically started. Services can also be stopped & started on-the-fly.

UI: Security Profile > Firewall > Properties In the Firewall properties, one can check or uncheck the checkbox associated with a service to enable/disable access. Service name, open ports and status are also displayed. Ruleset Enabled Configuration -> Security Profile -> Properties… Allowed IP

Agenda: vSphere 5.0 Platform ESXi ESXi CLI ESXi Firewall Image Builder Auto Deploy vSphere Update Manager Platform Enhancements

Composition of an ESXi Image Core Hypervisor CIM Providers Plug-in Components Drivers

? ESXi Image Deployment Challenges Standard ESXi image from VMware download site is sometimes limited Doesn’t have all drivers or CIM providers for specific hardware Doesn’t contain vendor specific plug-in components ? Missing CIM provider Missing driver Standard ESXi ISO Base providers Base drivers

Describing ESXi Components VIB “VMware Infrastructure Bundle” (VIB) Software packaging format used for ESXi Often referred to as a “Software Package” Used for all components ESXi Base Image Drivers CIM providers Other components Can specify relationship with other VIBs VIBs that it depends on VIBs that it conflicts with

Managing Customized ESXi Images Image Builder: a set of command line utilities for… Creating and managing image profiles Building ESXi customized boot images, e.g. Installable ISO Bundle suitable for PXE installation or Flash Initial version is based on PowerCLI Snap-in component bundled as part of VMware’s PowerCLI tools Depot A repository containing Image profiles VIBs Can have multiple depots, with two types On a web server Encapsulated in a .ZIP file

Agenda: vSphere 5.0 Platform ESXi ESXi CLI ESXi Firewall Image Builder Auto Deploy vSphere Update Manager Platform Enhancements

vCenter Server with Auto Deploy Overview vCenter Server with Auto Deploy Deploy and patch vSphere hosts in minutes using a new “on the fly” model Coordination with vSphere Host Profiles Image Profiles Host Profiles Benefits Rapid provisioning: initial deployment and patching of hosts Centralized host and image management Reduce manual deployment and patch processes vSphere vSphere vSphere vSphere

Auto Deploy Components Sub-Components Notes PXE Boot Infrastructure DHCP Server TFTP Server Setup independently gPXE file from vCenter Can use Auto Deploy Appliance Auto Deploy Server Rules Engine PowerCLI Snap-in Web Server Build/Manage Rules Match server to Image and Host Profile Deploy server Image Builder Image Profiles, Combine ESXi image with 3rd party VIBs to create custom Image Profiles vCenter Server Stores Rules Host Profiles Answer Files Provides store for rules Host configs saved in Host Profiles Custom Host settings saved in Answer Files

Agenda: vSphere 5.0 Platform ESXi ESXi CLI ESXi Firewall Image Builder Auto Deploy vSphere Update Manager Platform Enhancements

How Does A User Plan an ESX to ESXi migration? Visit the ESX and ESXi Info Center Start testing ESXi If you’ve not already deployed, there’s no better time than the present Ensure 3rd party solutions used by your customers are ESXi Ready Monitoring, backup, management, etc. Most already are. Bid farewell to agents! Familiarize with ESXi remote management options Transition any scripts or automation that depended on the COS Powerful off-host scripting and automation using vCLI, PowerCLI, … Plan an ESXi migration as part of vSphere upgrade Testing of ESXi architecture can be incorporated into overall vSphere testing

ESXi and ESX Info Center All Resources in One Centralized Location

ESX to ESXi Migration with VMware Update Manager Supported Paths Migration from ESX (“Classic”) 4.x to ESXi 5.0 For VUM-driven migration, pre-4.x hosts will have to be upgraded to 4.x first Might be better just to do fresh install of ESXi 5.0 Preservation of Configuration Information Most standard configurations will be preserved, but not all: Information that’s not applicable to ESXi will not be preserved, e.g. /etc/yp.conf (no NIS in ESXi) /etc/sudoers (no sudo in ESXi) Any additional custom configuration files will not be preserved, e.g. Any scripts added to /etc/rc.d Confidential

ESXi Migration and Third-Party Software Supported components Upgrade of third-party components limited to Cisco Nexus 1000v EMC PowerPath During upgrade, if either of these is detected on starting host Target ESXi image is checked for presence of these modules If found, upgrade proceeds If not found, option provided to override and proceed Otherwise, halt All other components Starting host not checked for other third-party software Upgrade process will not preserve anything Up to Admins to take care of replacing Confidential

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage vMotion Storage I/O Control Storage DRS VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

Introduction to VMFS-5 Enhanced Scalability Better Performance Increase the size limits of the filesystem & support much larger single extent VMFS-5 volumes. Support for single extent 64TB Datastores. Better Performance Uses VAAI locking mechanism with more tasks. Easier to manage and less overhead Space reclamation on thin provisioned LUNs. Smaller sub blocks. Unified Block size.

VMFS-5 Versus VMFS-3 Feature Comparison 2TB+ VMFS Volumes Yes (using extents) Yes Support for 2TB+ Physical RDMs No Unified Block size (1MB) Atomic Test & Set Enhancements (part of VAAI, locking mechanism) Sub-blocks for space efficiency 64KB (max ~3k) 8KB (max ~30k) Small file support 1KB

VMFS-3 to VMFS-5 Upgrade The Upgrade to VMFS-5 is clearly displayed in the vSphere Client under Configuration → Storage view. It is also displayed in the Datastores → Configuration view. The upgrade is non-disruptive.

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage DRS Storage I/O Control VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

VAAI – Introduction vStorage API for Array Integration = VAAI VAAI’s main purpose is to leverage array capabilities. Offloading tasks to reduce overhead Benefit from enhanced mechanisms arrays mechanisms The “traditional” VAAI primitives have been improved. We have introduced multiple new primitives. Support for NAS! Application VI-3 Hypervisor Non-VAAI Fabric Array VAAI LUN 01 LUN 02

Introducing VAAI Thin Provisioning What are the driving factors behind VAAI Thin Provisioning? Provisioning new LUNs to a vSphere environment (cluster) is complicated. Often requires involvement from multiple people, creating delays in the provisioning process Strategic Goal: We want to make the act of physical storage provisioning in a vSphere environment extremely rare. LUNs should be extended across a large address space and able to handle any VM workload. VAAI TP features include: Dead space reclamation. Monitoring of the space. vSphere 5.0 introduces multiple VAAI enhancements for environments using Array based Thin Provisioning capabilities. Historically the two major challenges of thin provisioned LUNs have been the reclamation of dead space and the challenges around monitoring space usage. Dead space reclamation offers the ability to reclaim blocks of a thin provisioned LUN on the array when a virtual disk is deleted or migrated to a different datastore by for example Storage DRS.

VAAI Thin Provisioning – Dead Space Reclamation Dead space is previously written blocks that are no longer used by the VM. For instance after a Storage vMotion. vSphere conveys block information to storage system via VAAI & storage system reclaims the dead blocks. Storage vMotion, VM deletion and swap file deletion can trigger the thin LUN to free some physical space. ESXi 5.0 uses a standard SCSI command for dead space reclamation. vSphere VMFS volume A VMFS volume B

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage DRS Storage I/O Control VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

Storage DRS Overview Benefits Group “like” datastores in a datastore cluster. Initial placement of VMs/VMDKs Datastore maintenance mode Space and I/O load balancing Affinity and anti-affinity rules Affinity Storage vMotion overloaded Benefits Datastore Cluster Scalable storage management Reduce time for VM provisioning Eliminate VM downtime for storage maintenance Automated Out of space avoidance Automated I/O bottleneck avoidance Accelerate VM storage placement decision to a storage pod by: Capturing VM storage SLA requirements Mapping to the storage with the right characteristics and spare space

SDRS allows you to create a schedule to change its settings. SDRS Scheduling SDRS allows you to create a schedule to change its settings. This can be useful for scenarios where you don’t want VMs to migrate between datastore or when I/O latency might rise, giving false negatives, e.g. during VM backups.

So What Does It Look Like? Provisioning…

So What Does It Look Like? Load Balancing. The Storage DRS tab will show “utilization before” and “after”. There’s always the option to override the recommendations.

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage DRS Storage I/O Control VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

Performance Guarantees – Network and Storage I/O Control Overview 3. w/ I/O controls, can give VIP VMs preferential access 2. Other VMs are starved for resources 1. VM requests more resources Set up SLAs for use of storage and network resources Added per virtual machine settings for Network I/O Control Added NFS support for Storage I/O Control Benefits Eliminate the “noisy neighbor” problem More granular SLA settings for network traffic Extend Storage SLAs to more VMs

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage DRS Storage I/O Control VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

What Is vStorage APIs Storage Awareness (VASA)? VASA is an Extension of the vSphere Storage APIs, vCenter-based extensions. It allows storage arrays to integrate with vCenter for management functionality via server-side plug-ins or Vendor Providers. This in turn allows a vCenter administrator to be aware of the topology, capabilities, and state of the physical storage devices available to the cluster. VASA enables several features. For example it delivers System-defined (array-defined) Capabilities that enables Profile-driven Storage. Another example is that it provides array internal information that helps several Storage DRS use cases to work optimally with various arrays.

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage DRS Storage I/O Control VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

Profile-Driven Storage Overview Tier storage based on performance or SLA characteristics View a list of all compliant storage resources High IO Throughput Benefits Tier 1 Tier 2 Tier 3 Utilize the correct storage resources every time (no mistakes) Help IT personnel that may not be as familiar with storage characteristics align with business and application goals Improve storage utilization and efficiencies

Selecting a Storage Profile During Provisioning By selecting a VM Storage Profile, datastores are now split into Compatible & Incompatible. The Celerra_NFS datastore is the only datastore which meets the GOLD Profile requirements – i.e. it is the only datastore that has our user-defined storage capability associated with it.

VM Storage Profile Compliance Policy Compliance is visible from the Virtual Machine Summary tab.

Agenda: vStorage – What’s New Introduction VMFS-5 vStorage API for Array Integration Storage DRS Storage I/O Control VMware API for Storage Awareness Profile Driven Storage FCoE – Fibre Channel over Ethernet

Software FCoE Adapters (1 of 2) A software FCoE adapter is a software code that performs some of the FCoE processing. This adapter can be used with a number of NICs that support partial FCoE offload. Unlike the hardware FCoE adapter, the software adapter needs to be activated, similar to Software iSCSI.

Software FCoE Adapters (2 of 2) Once the Software FCoE is enabled, a new adapter is created, and discovery of devices can now take place.

New Virtual Machine Features vSphere 5.0 supports the industry’s most capable virtual machines 32 virtual CPUs per VM 1TB RAM per VM 4x previous capabilities! VM Scalability 3D graphics Richer Desktop Experience Broader Device Coverage Client-connected USB devices USB 3.0 devices Smart Card Readers for VM Console Access VM BIOS boot order config API and PowerCLI interface EFI BIOS Other new features UI for multi-core virtual CPUs Extended VMware Tools compatibility Support for Mac OS X servers Items which require HW version 8 in orange 56

Upgrade Compatibility Provides for flexibility for Administrators to upgrade environment in phased manner Feature ESX/ESXi 4.x ESXi 5.x VMware Tools 4.x Yes VMware Tools 5.x VMFS-3 VMFS-5 No Virtual Hardware1 3, 4, 7 4, 7, 8 ESXi 5.0 supports upgrading Virtual Hardware version 3 and later

Application Services – Availability, Security, and Scalability

Scaling Virtual Machines Overview Create virtual machines with up to: 32 vCPU 1 TB of vRAM Benefits 4x 4x size of previous vSphere versions Run even the largest applications in vSphere, including very large databases Virtualize even more applications than ever before (Tier 1 and 2)

New HA Architecture Overview Benefits New architecture for High Availability feature of vSphere Storage vMotion VMware Fault Tolerance High Availability DRS Maintenance Mode vMotion VMFS VMFS VMware NIC Teaming Multipathing Benefits Storage Simplified clustering setup and configuration Enhanced reliability through better resource guarantees and monitoring Enhanced scalability Server Component

Additional Features and Enhancements

vCenter Server Appliance (Linux) Overview Run vCenter Server as a Linux-based appliance Benefits Simplified setup and configuration Enables deployment choices according to business needs or requirements Leverages vSphere availability features for protection of the management layer

Component Overview vCenter Server Appliance (VCSA) consists of: A pre-packaged 64 bit application running on SLES 11 Distributed with sparse disks Disk Footprint Memory Footprint A built in enterprise level database with optional support for a remote Oracle databases. Limits are the same for VC and VCSA Embedded DB 5 hosts/50 VMs External DB <1000 hosts/<10,000 VMs (64 bit) A web-based configuration interface Distribution Min Deployed Max Deployed 3.6GB ~5GB ~80GB

Feature Overview vCenter Server Appliance supports: The vSphere Web Client Authentication through AD and NIS Feature parity with vCenter Server on Windows Except – Linked Mode support Requires ADAM (AD LDS) IPv6 support External DB Support Oracle is the only supported external DB for the first release No vCenter Heartbeat support HA is provided through vSphere HA

Web Client Overview Benefits Run and manage vSphere from any web browser anywhere in the world Benefits Platform independence Replaces Web Access GUI Building block for cloud based administration

Why Flex? Flex provides us with the richest and fullest featured development platform available. Extensive amount of Libraries to use Technologies such as HTML5 and others are still in development Provides the best performance Scales to the web Web Client Windows Client Scalability 50 VCs 100,000 VMs 10 VCs 10,000 VMs Platform Independence Windows Linux Extensibility Linux Native Rich Extension Points One HTML plug-in

Features of the vSphere Web Client Customize the GUI Create custom views to reflect the information you need to see, the way you like to see it

Features of the vSphere Web Client Ready Access to Common Actions Quick access to common tasks provided out of the box

Features of the vSphere Web Client Support interrupt driven workflows Allow jumping in and out of workflows easily – continuing exactly from where you left off without having to repeat a process

Features of the vSphere Web Client Extendable Functionality Possible for partners and end users to add features and functionality Easily create new tabs for information Create portlets for instant access to information

The Best of the Rest Platform Network Storage Availability Management Hardware Version 8 – EFI virtual BIOS Memory Fault Isolation Network Distributed Switch (Netflow, SPAN support, LLDP) Network I/O Controls (per VM), ESXi firewall Storage VMFS 5 iSCSI UI Storage I/O Control (NFS) Array Integration for Thin Provisioning, Swap to SSD, 2TB+ VMFS datastores Storage vMotion Snapshot Support Availability vMotion with higher latency links Data Recovery Enhancements Management Inventory Extensibility iPad client Data Recovery Enhancements - reports, performance, support of datastore maintenance windows

The End (Due to Time)