2. No-Compromise Virtualization: Making Your Data Center Cloud Efficient, Scalable, and Flexible Michael Ramchand Platform Technical Director Oracle EMEA Duncan Hardie Principal Product Manager Oracle Solaris Product Management October 2nd, 2014 Oracle Confidential – Internal/Restricted/Highly RestrictedCopyright © 2014, Oracle and/or its affiliates. All rights reserved. |

3. Agenda Designing a Consolidated Infrastructure Characteristics of Virtualization Technologies Evaluation of Oracle’s Virtualization Technologies Advantages of a layered approach Conclusion 1 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted3

4. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Agenda Designing a Consolidated Infrastructure Characteristics of Virtualization Technologies Evaluation of Oracle’s Virtualization Technologies Advantages of a layered approach Conclusion 1 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted4

5. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Where are you spending your IT Budget? Simply virtualizing reduces the H/W costs. (and it may increase or decrease the S/W costs depending on who you buy it from.) How can we use Datacenter Consolidation to materially reduce the Implementation and Running Costs? Hardware 10% Software 12% Facilities 7% Implementation 31% Running costs 40% 5

6. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Operational / Management Shrink your running costs by – Reducing the number of managed objects – Simplified Management – Reduced Maintenance – Standardization of the stack – Single stack support Hardware 10% Software 12% Facilities 7% Implementation 31% Running costs 40% 6

7. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Virtualization Increases Datacenter Efficiency Consolidate workloads on a flexible and scalable platform Current Servers are too big for many existing workloads. Combining applications allows us to fully utilize these servers. Requires application isolation for performance and security. Ultimately, this is about reducing the cost of running those applications. 7

8. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle’s Virtualization Tools Application Multi-tenancy – Oracle DB, multiple instances, pluggable databases – Weblogic, multiple apps Oracle Solaris Zones – O/S level virtualization – Zero overhead Oracle VM Server for SPARC (formerly known as LDoms) – Industry's best consolidation ratios – Secure & flexible virtualization Physical Domains 8

9. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle’s Virtualization Tools (for SPARC) Application Multi-tenancy Oracle Solaris Zones Oracle VM Server for SPARC Physical Domains Which one should I use? ALL OF THEM! 9

10. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle’s Virtualization Tools (for SPARC) Application Multi-tenancy Oracle Solaris Zones Oracle VM Server for SPARC Physical Domains Which one should I use first? START AT THE TOP 10

11. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | A Consolidation Philosophy Maximize Operational Efficiency – Reduce the number of objects to be managed – Consolidate as high up the stack as possible Maximize Workload Efficiency – Avoid Virtualization overhead where possible – Increase your workload to payload ratio 11

12. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Agenda Designing a Consolidated Infrastructure Characteristics of Virtualization Technologies Evaluation of Oracle’s Virtualization Technologies Advantages of a layered approach Conclusion 1 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted12

13. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Security Isolation Resource Isolation Efficiency Availability Serviceability Flexibility Agility Oracle Confidential – Internal/Restricted/Highly Restricted13 A method for comparing the qualities of different virtualization technologies

14. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Siloed environments relied on physical separation to enforce security Shared environments require new mechanisms to ensure security Access control mechanisms and encryption play a key part. Existing Security policies may need to be re-written Oracle Confidential – Internal/Restricted/Highly Restricted14 1: Security Isolation

15. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Siloed environments used dedicated hardware to guarantee access to resource Shared environments allow better use of spare capacity Workloads should still be guaranteed minimum resource levels Workloads should be constrained from exceeding their maximum resource levels Oracle Confidential – Internal/Restricted/Highly Restricted15 2: Resource Isolation

16. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Virtualization usually introduces overhead Hypervisor Overhead Virtualized Resource Overhead O/S Overhead Virtualization is sometimes used to address scalability issues either at the Hardware, Operating System or Application level SPARC, Solaris and most Oracle applications demonstrate linear scalability Oracle Confidential – Internal/Restricted/Highly Restricted16 3: Workload Efficiency

17. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Virtualization usually introduces overhead – Hypervisor Overhead: The CPU/Memory that the hypervisor consumes – Virtualized Resource Overhead: The hypervisor usually provides access to Virtual CPU, Memory and I/O. This is often not the same level of performance as the bare metal resources – O/S Overhead: Each virtual machine needs to run its own Operating System, which is in itself a workload. In some cases a larger draw on resources than the actual workload Oracle Confidential – Internal/Restricted/Highly Restricted17 3: Workload Efficiency

18. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Consolidated workloads suffer a higher impact due to infrastructure failure An individual workload within the pool may not require High Availability (HA), but the combination of several workloads does HA solutions usually provide tools that aid manageability Clustering of some type is required. Live Migration is not a substitute for clustering. Oracle Confidential – Internal/Restricted/Highly Restricted18 4: Availability

19. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Consolidated workloads suffer a higher impact due to infrastructure maintenance Negotiating a joint outage window across multiple business owners can be extremely difficult The number of service events that require an outage should be as low as possible In cases where an outage is unavoidable, workloads should be able to be moved with the minimum of disruption Oracle Confidential – Internal/Restricted/Highly Restricted19 5: Serviceability

20. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization Workloads typically have resource utilization patterns that vary over time. They may also grow or shrink over longer periods of time It is therefore important to be able to alter the resource allocation of these workloads Ideally, these should be automatic, dynamic and immediate, so that idle workloads do not reserve resources, and busy workloads can get them Oracle Confidential – Internal/Restricted/Highly Restricted20 6: Flexibility

21. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | The Seven Characteristics of Virtualization In a consolidated infrastructure is is often useful to move workloads between servers within a resource pool Agility is a measure of workload migration between physical servers and takes into account: – Ease/Simplicity of migration – Impact of migration – Speed of migration Oracle Confidential – Internal/Restricted/Highly Restricted21 7: Agility

22. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Agenda Designing a Consolidated Infrastructure Characteristics of Virtualization Technologies Evaluation of Oracle’s Virtualization Technologies Advantages of a layered approach Conclusion 1 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted22

23. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies Physical Domains – Electrically isolated domains Oracle VM Server for SPARC – Logically isolated domains, with several deployment models Solaris Zones – O/S based virtualization, with several zone types All recognized as hard partitions for Oracle licensing purposes Oracle Confidential – Internal/Restricted/Highly Restricted23 SPARC/Solaris Based Technologies Native functionality at no additional cost

24. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies PDoms enable electrically isolated server hardware, which means administrators can isolate hardware or security faults and constrain their exposure to each domain. The result is a superior level of system availability and security. This technology is available in the SPARC M5- 32 and SPARC M6-32 servers Physical Domains Oracle Confidential – Internal/Restricted/Highly Restricted24 Physical Domains (PDoms)

25. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies Oracle Confidential – Internal/Restricted/Highly Restricted25 Oracle VM Server for SPARC Isolated OS and applications in each logical (or virtual) domain Firmware-based hypervisor Each logical domain runs in dedicated CPU threads and RAM for bare-metal CPU performance SPARC Hypervisor Optimized for SPARC & Oracle Solaris

26. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies This is the simplest deployment model, with a single control domain providing virtual I/O services to a number of guest domains. This allows for a large number of small but isolated domains. The guest domains rely on the control domain for all I/O. Oracle Confidential – Internal/Restricted/Highly Restricted26 Oracle VM Server for SPARC – Guest Domain Model

27. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies This builds on the guest domain model, by adding a service domain to provide redundant I/O services to the guest domains. This allows for a large number of small but isolated domains, with better availability at the cost of a little bit more “hypervisor overhead” and some complexity. Oracle Confidential – Internal/Restricted/Highly Restricted27 Oracle VM Server for SPARC – Redundant Guest Domain Model

28. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies We move back to a single control domain model, but remove the Virtualization I/O overhead by using techniques which allow the guest to talk directly to the I/O devices. The guest is, however, still dependent on the control domain which actually owns the I/O device, and Live Migration is not possible when non-virtualized I/O is used Oracle Confidential – Internal/Restricted/Highly Restricted28 Oracle VM Server for SPARC – SR-IOV or Direct I/O Domains Model

29. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies Domains of this type are given direct ownership of their I/O. These guests run at a bare-metal performance level and are fully independent of each other. The number of root complexes and PCIe slots available limits the number of domains of this type that can be created. Live Migration is not possible using this model. Oracle Confidential – Internal/Restricted/Highly Restricted29 Oracle VM Server for SPARC – Guest Root Domains Model

30. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Solaris Zones Used by almost every Solaris customer Direction: the “cloud space” is moving towards OS virtualization Highly efficient and scalable Zero overhead virtualization Extreme consolidation Tightly integrated into every Solaris component 30

31. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Next Generation Virtualization – Simple administration – Leverages Oracle Solaris resource management and network virtualization – Seamless P2V and V2P – Locked-down root file system for both guest and host – Forward compatibility – Recognized as a License Boundary 31 Solaris Kernel Zones OS and Virtualization – Engineered Together Infiniband Fabric 10GbE Network

32. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies Native Branded Zones makes direct use of the kernel running in the global zone and provides the lowest overhead. The performance of an application within a zone is no different from its performance running directly in the global zone, with the advantage of a private execution environment. Oracle Confidential – Internal/Restricted/Highly Restricted32 Oracle Solaris Zones – Native Branded Zones

33. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies Kernel zones run their own unique kernel. This provides the capability to run different updates of Oracle Solaris 11.2 on the system, and it allows the kernel zones to be updated independently, as well as provide greater isolation between workloads. The additional running kernel provides slightly more overhead than the traditional zones model Oracle Confidential – Internal/Restricted/Highly Restricted33 Oracle Solaris Zones – Kernel Zones

34. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies The term non-native branded zone is used to define zones that run an older Oracle Solaris version than the global zone. Oracle Solaris 10 supports Oracle Solaris 8 and Oracle Solaris 9 branded zones and Oracle Solaris 11 supports Oracle Solaris10 branded zones. These types of zones share the same characteristics as traditional zones Oracle Confidential – Internal/Restricted/Highly Restricted34 Oracle Solaris Zones – Non-Native Branded Zones

35. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Virtualization Technologies Oracle Confidential – Internal/Restricted/Highly Restricted35 Each virtualization technology has different characteristics There is a natural mutual exclusivity between flexibility and isolation Only by understanding the requirements of the workload can you make a choice of the most appropriate virtualization technology

36. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Agenda Designing a Consolidated Infrastructure Characteristics of Virtualization Technologies Evaluation of Oracle’s Virtualization Technologies Advantages of a layered approach Conclusion 1 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted36

37. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach What if you could have both flexibility AND isolation at the same time? By combining different Oracle virtualization technologies, it is possible to build an architectural model that delivers a no compromise consolidated infrastructure. The following outlines just a few of the possible models Oracle Confidential – Internal/Restricted/Highly Restricted37 Why pick ONE?

38. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach Many Oracle applications, particularly Oracle Database, have new optimizations for In-Memory computing Creating a large numbers of Virtual Machines fragments the memory into a number of smaller pools To make best use of In-Memory options, it makes sense to keep memory large and contiguous Oracle Confidential – Internal/Restricted/Highly Restricted38 Optimizing for In-Memory

39. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach We combine the availability and flexibility of the Redundant Guest Domains with the efficiency of Solaris Zones to provide an operationally simpler and more efficient architecture to manage. Smaller number of Domains allows good In-Memory usage. Oracle Confidential – Internal/Restricted/Highly Restricted39 Redundant Guest Domains and Oracle Solaris Zones

40. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach The model combines the zero virtualization overhead and high isolation of guest root domains with the flexibility and agility of Oracle Solaris Zones to provide the highest possible efficiency with the lowest level of overhead. Smaller number of Domains allows good In-Memory usage. Oracle Confidential – Internal/Restricted/Highly Restricted40 Guest Root Domains and Oracle Solaris Zones

41. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach We use the root domain model to create multiple independent I/O domains, but rather than run Zones as in the previous model, the root domains are used to host multiple SR-IOV Guest domains. Oracle Confidential – Internal/Restricted/Highly Restricted41 Root Domains and SR-IOV Domains

42. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach Oracle Confidential – Internal/Restricted/Highly Restricted42 Summary of Characteristics The combinations of Oracle virtualization technologies deliver higher scores across all the characteristics

43. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Advantages of a layered approach None of these models are mutually exclusive. Depending on our workload requirements, there’s no reason why you couldn’t use all 3 within a single server: A: Redundant Guest Domains and Zones B: Guest Root Domains and Oracle Solaris Zones C: Root Domains and SR-IOV Domains Oracle Confidential – Internal/Restricted/Highly Restricted43 Hybrid Combination of all 3 models

44. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Agenda Designing a Consolidated Infrastructure Characteristics of Virtualization Technologies Evaluation of Oracle’s Virtualization Technologies Advantages of a layered approach Conclusion 1 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted44

45. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Conclusion Successful consolidation requires an understanding of the workload characteristics Oracle virtualization technologies can be combined to perfectly match a wide range of workload requirements These technologies are flexible enough to accommodate changes in workload requirements over time Consolidation is about reducing cost. Your biggest costs are operations and implementation. Focus on reducing those. There is no additional cost to deploying these options, so you don’t need to pick just one. Oracle Confidential – Internal/Restricted/Highly Restricted45 One size does not fit all

46. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Conclusion Take the opportunity while re-platforming to do things differently – What can In-memory do to deliver real time enterprise features? – How would enabling your end-users with self service features change your business? – How can you re-architect your Disaster Recovery and HA environments to be simpler and more efficient? Consolidation Savings can usually build the business case for these changes, but significant additional business benefits can always be achieved as well Oracle Confidential – Internal/Restricted/Highly Restricted46 Don’t limit yourself to cost savings from consolidation alone

47. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Conclusion Oracle’s Engineered Systems are designed and optimized to make use of these technologies Oracle’s Optimized Solutions also make use of these technologies to build best practice Use these to get a head start Oracle Confidential – Internal/Restricted/Highly Restricted47 We’ve already done it for you

48. Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Conclusion http://www.oracle.com/technetwor k/server- storage/solaris11/technologies/virtu alization-306056.html Oracle Confidential – Internal/Restricted/Highly Restricted48 And, there’s a whitepaper: