How far is too far? The Hybrid Cloud Distance Factor
•Download as PPTX, PDF•
0 likes•147 views
Trey Tyler, Sr. Solution Strategist for OVH US, presented "How far is too far? The Hybrid Cloud Distance Factor" at VMworld 2017 in Las Vegas and Barcelona.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to How far is too far? The Hybrid Cloud Distance Factor
Similar to How far is too far? The Hybrid Cloud Distance Factor (20)
Recently uploaded
Recently uploaded (20)
How far is too far? The Hybrid Cloud Distance Factor
- 1. OVH: How Far Is Too Far? The Hybrid Cloud Distance Factor. ––– Trey Tyler | Sr. Solution Strategist
- 2. ©2017 OVH US | Proprietary & Confidential ––– VMworld disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware or OVH to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. 2
- 3. ©2017 OVH US | Proprietary & Confidential ––– AGENDA 1. Introduction - 5 Minutes 2. Challenges of Owning a Hybrid Cloud – 15 Minutes 3. How OVH Can Help – 30 minutes 4. Q&A 3
- 4. 2017 Proprietary and Confidential WHO IS OVH? 4
- 5. ©2017 OVH US | Proprietary & Confidential ––– OVH is a global, hyper-scale cloud provider that offers our customers maximum performance and value • Vertical integration (constructing own servers, data centers) and proprietary green water cooling technology allows OVH to save costs and pass savings to customers • Named largest hosting & cloud provider in Europe and third largest global hosting provider by Netcraft https://www.netcraft.com/internet-data-mining/hosting-analysis/ 5 OVH GROUP HIGHLIGHTS
- 6. ©2017 OVH US | Proprietary & Confidential ––– 6 Over 1.2 Million Business Clients in 138 Countries Own 11+ Tbps Network with 32 PoPs 2016 20 data centers in 5 countries and 4 continents 2017 27 data centers in 11 countries 2020 50 data centers Hosting capacity: 1.3 million physical servers 270,000 already deployed OVH IS A GLOBAL CLOUD LEADER
- 7. 2017 Proprietary and Confidential©2017 OVH US | Proprietary & Confidential ––– + Dedicated Cloud + Virtual Private Cloud + Disaster Recovery + VMware SDDC + Open API + Automation Compatibility + Scalability + Bring you own License + Non-Virtual Workloads + Proprietary Software Dedicated Servers Bare Metal Customer Support & Services Global Hyper-Scale Reach OVH’s Fiber Optic Network (11+ Tbps) + Anti-DDoS + Private LAN Public Cloud SOLUTIONS TO SUIT YOUR NEEDS Hosted Private Cloud 7
- 8. 2017 Proprietary and Confidential2017 Proprietary and Confidential CHALLENGES OF HYBRID CLOUD 8
- 10. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential Cloud and Hybrid Cloud Considerations Latency Initial Setup Technical Experience Bandwidth Hardware Maintenance Troubleshooting Security Replacement Hardware Project Timelines Network Availability Time to Respond to Failure People Design Production & Shipping Times Travel & Telecommuting Connectivity Loss of Control Flexibility Visibility HYBRID CLOUD CHALLENGES 10
- 11. 2017 Proprietary and Confidential HOW OVH CAN HELP 1 1
- 12. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential HYBRID CLOUD CHALLENGES Cloud and Hybrid Cloud Considerations Latency Initial Setup Technical Experience Bandwidth Hardware Maintenance Troubleshooting Security Replacement Hardware Project Timelines Network Availability Time to Respond to Failure People Design Production & Shipping Times Travel & Telecommuting Connectivity Loss of Control Flexibility Visibility 12
- 13. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential OWN THE BACKBONE 13
- 14. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential OWN THE BACKBONE 14
- 15. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential OWN THE BACKBONE 15
- 16. 2017 Proprietary and Confidential©2017 OVH US | Proprietary & Confidential ––– Improved VM Migration Security & Performance with WAN Optimization ESXi WAN Optimization Appliance IPsec VPN or Direct Connect ESXi vSphere vSphere WAN Optimization Appliance vCloud AirOn-premises Hybrid Cloud Gateway Hybrid Cloud Gateway Source VMDK passed thru military-grade encryption Data de-duped, compressed, transport streamlined for >40% improvement Source VMDK decompressed, decrypted in vCloud Air 1 2 3
- 17. 2017 Proprietary and Confidential©2017 OVH US | Proprietary & Confidential ––– Cloud Gateway Efficiencies & Benefits IPsec Tunnels FOU Tunnel • Implementing multiple IPsec Tunnels increases throughput • Tunnels can take different paths over the WAN or split between multiple connections • Traffic failover upon tunnel interruption • Suite-B Encryption Hybrid Cloud Gateway Hybrid Cloud Gateway
- 18. ©2017 OVH US | Proprietary & Confidential ––– IPsec Tunnels FOU Tunnel vCPUsvCPUs HT-L2C: ELEPHANTS AND MICE
- 19. 2017 Proprietary and Confidential©2017 OVH US | Proprietary & Confidential ––– IPsec Tunnels FOU Tunnel vCPUsvCPUs HT-L2C: ELEPHANTS AND MICE
- 20. 2017 Proprietary and Confidential©2017 OVH US | Proprietary & Confidential ––– HT-L2C: ELEPHANTS AND MICE IPsec Tunnels FOU Tunnel vCPUsvCPUs
- 21. ©2017 OVH US | Proprietary & Confidential ––– HCX – ANY-TO-ANY CLOUD 21 21 HCX – Any-to-Any • Tether legacy vSphere 5.1 to next-gen vSphere 6.5 and above • Seamless application mobility between different VMW stacks • Secure L2 Extension w/o need for NSX on site • Automatic VPN connectivity across sites • vMotion and replication across disparate VMW stacks Features Benefits • Move to cloud w/o need to upgrade vSphere on-prem • No need to upgrade networking architecture to extend L2 to cloud • Transform from legacy stack to next-gen SDDC+NSX without downtime • Transform with no change in networking, IP or IT policies • Automatic secure, high performance connection between sites vSphere 5.1+ VCF or VC + NSX HCX Hybridity
- 22. ©2017 OVH US | Proprietary & Confidential ––– BE INFORMED 22
- 23. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential HYBRID CLOUD CHALLENGES Cloud and Hybrid Cloud Considerations Latency Initial Setup Technical Experience Bandwidth Hardware Maintenance Troubleshooting Security Replacement Hardware Project Timelines Network Availability Time to Respond to Failure People Design Production & Shipping Times Travel & Telecommuting Connectivity Loss of Control Flexibility Visibility 23
- 24. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential 24 • Pre-Firewall • OVH Managed Firewall • Firewall Network • Customer Configurable per IP address • Shield • UDP reflexion/amplification attacks filtering • Armor • Profiles based mitigation • Does the grunt of the work : SYN Authentication, Zombie detection, payload patterns, … • Only enabled when we detect an attack VAC Pre-Firewall Firewall Shield Armor VAC Architecture DDoS MITIGATION
- 25. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential VAC VAC VAC VAC SBG RBX GRA BHS Reference Article: https://www.ovh.com/us/news/articles/a2367.the-ddos-that-didnt-break-the-camels-vac LEVERAGING A GLOBAL NETWORK 25
- 26. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential Cloud and Hybrid Cloud Considerations Latency Initial Setup Technical Experience Bandwidth Hardware Maintenance Troubleshooting Security Replacement Hardware Project Timelines Network Availability Time to Respond to Failure People Design Production & Shipping Times Travel & Telecommuting Connectivity Loss of Control Flexibility Visibility HYBRID CLOUD CHALLENGES 26
- 27. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential Customer Managed Networks & vRACK OVH POP Open Stack vSphere-as- a-Service Dedicated Server Roubaix Hillsboro Vint Hill Customer DC vSphere-as- a-Service CONNECTIVITY SIMPLIFIED 27
- 28. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential Top of Rack Host Switches Hosts / Storage Q-in-Q VLAN Super Spine Exchanger Q-in-Q Backbone VXLAN DC 1 DC 2 VXLANSpine VRACK ARCHITECTURE 28
- 29. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential VRACK SIMPLIFIES CONNECTIVITY 29
- 30. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential VRACK SIMPLIFIES CONNECTIVITY 30
- 31. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential Cloud and Hybrid Cloud Considerations Latency Initial Setup Technical Experience Bandwidth Hardware Maintenance Troubleshooting Security Replacement Hardware Project Timelines Network Availability Time to Respond to Failure People Design Production & Shipping Times Travel & Telecommuting Connectivity Loss of Control Flexibility Visibility HYBRID CLOUD CHALLENGES 31
- 32. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential • Physical host provisioning within minutes • New vSphere as-a-service provisioning within hours • Just a moments time for PCI provisioning • Automated host replacement AUTOMATION AT THE CORE 32
- 33. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential 33
- 34. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential HYBRID CLOUD CHALLENGES Cloud and Hybrid Cloud Considerations Latency Initial Setup Technical Experience Bandwidth Hardware Maintenance Troubleshooting Security Replacement Hardware Project Timelines Network Availability Time to Respond to Failure People Design Production & Shipping Times Travel & Telecommuting Connectivity Loss of Control Flexibility Visibility 34
- 35. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential vCenter • vMotion • svMotion • Fault Tolerance • DRS • HA • vDS NSX • Logical Switches (VXLAN) • Distributed Logical Router (DLR) • Edge Services Gateways (ESG) • Distributed Firewall (DFW) • SpoofGuard • Guest Introspection vROPS • Operations Platform • Policy Management • Performance Monitoring & Analytics • Capacity Management • Change, Config, & Compliance Management vCenter NSX vROPS SAME TOOLS, SAME INTERFACE 35
- 36. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential ESXi Hosts 10GB NICs vCenter NSX vROPS NSX Control Cluster Internet OVH Managed Networks Management Resources Customer Resource Pool Customer Managed Networks Virtual SAN SAME TOOLS, SAME INTERFACE 36
- 37. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential Cloud and Hybrid Cloud Considerations Latency Technical Experience Bandwidth Initial Setup Troubleshooting Security Hardware Maintenance Project Timelines Network Availability Replacement Hardware People Design Time to Respond to Failure Travel & Telecommuting Connectivity Production & Shipping Times Loss of Control Flexibility Visibility HYBRID CLOUD CHALLENGES 37
- 38. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential FULL ACCESS & REMOTE MANAGEMENT 38
- 39. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential vScope – Monitoring for Private Cloud, designed by OVH. All useful information on a single page covering physical or virtual resource CPU, RAM or Network metrics. Daily, weekly, monthly, or even annual use metrics available. VISIBILITY 39
- 40. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential RTM (Real Time Monitoring) – All maintenance events or incidents are documented and available publicly for all services. Weather map Weather Map - Real time network traffic load of the OVH private network is available through an easy to read graphical interface on the OVH Weather map. Real Time Monitoring TRANSPARENCY 40
- 41. ©2017 OVH US | Proprietary & Confidential ©2017 OVH US | Proprietary & Confidential CPU With things like: • High performance • Security • Transparency • Scalability • Industry Tenure • Self Service • Automation • Green Data Centers and Servers • Cross product connectivity • Affordability Why wait to come to cloud? CLOUD DOESN’T MEAN COMPROMISE 41
- 42. ––– Q&A
- 43. ©2017 OVH US | Proprietary & Confidential ––– HOW TO CONTACT US 43 VMworld Booth Location – D313 @ovh and @vcloudair_ovh @ovh and @vcloudair.ovh OVH and vCloud Air powered by OVH ovh.com
- 44. ©2017 OVH US | Proprietary & Confidential ––– OVH AT VMWORLD 44 Session ID Session Title Time LHC3295BES OVH: Why Optimizing Layer 0 matters Wednesday Sept 13th 2:00 p.m. – 3:00 p.m. LHC2401BE How far is too far? The Hybrid Cloud Distance Factor. Tuesday Sept 12 3:30 p.m. – 4:30 p.m. LHC3296BES Shields Up! Building a True Security Barrier in the Cloud Tuesday Sept 12th 2:00p.m. – 3:00 p.m LHC1951BE Automate Cloud Recovery For When You Are Nuked From Orbit: It’s the Only Way to Be Sure Thursday Sept 14th 9:00 a.m. – 10:00 a.m. LHC1010BES Open your mind: mix Private Cloud, Hybridity and Elasticity all Together Tuesday, Sept 12th 5:00 p.m. – 6:00 p.m. GRC2676BE Building a Paper Trail: How to Secure and Audit a Public CloudWednesday Sept 13th 3:30 p.m. – 4:30 p.m.
- 45. ––– THANK YOU
Editor's Notes
- OVH – we host you “On Vous Héberge” Sounds like “Ahn ne vouz he-bear-zhe”
- With OVH you get access to almost any type of infrastructure you will need. If you are like most businesses you have a large number of Vmware based VMs running on-prem. OVH’s private cloud is based on Vmware’s SDDC stack and with the acquisition of vCloud Air, connecting your on-prem to a private cloud has never been easier. If you are looking for public cloud burstability OVH has you covered with Public Cloud provided and run on Openstack. But let’s say you have a workload that has specific requirements and you want access to all parts of the software stack. OVH has Bare Metal servers for you. OVH not only provides differing product platforms to address specific project needs of customers, we also allow the integration of these resources to allow for easy setup and communication between these platforms with our vRack product. A customer may have a piece of each of these all combined into a single solution that suites their needs. Private cloud – vSphere SDDC allowing ease of management by leveraging the same tools you’re used to from VMware. Public Cloud – Get virtualized machines at a per hour/minute cost by leveraging OVH’s public cloud built with Openstack. Dedicated Servers – Have full control of every aspect of your environment by starting from bare metal. Have root and BIOs level access to your hardware, and install what you want.
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.
- We’ll start with the network. Helping with latency, throughput, Owning its own Fiber, OVH has built a network backbone connecting each of their DC’s together. Allowing for high throughput between DC’s and reduced latency due to a direct path between DC’s.
- This is a global network that spans continents as well. The summation of internet connections equaling 11TBps worth of throughput. These benefits can be passed on to your on-premise environment as well with the expansive list of POPs available. You can bring your own private connection to access your cloud environments through this backbone.
- This is a global network that spans continents as well. The summation of internet connections equaling 11TBps worth of throughput. These benefits can be passed on to your on-premise environment as well with the expansive list of POPs available. You can bring your own private connection to access your cloud environments through this backbone.
- Take a moment here and talk about how this path between on-prem in the cloud is being optimized. WAN optimization: De-duplication Compression Line Conditioning FEC – we send additional packets in anticipation of drops, helping avoid potential round trip packet resends. Enabling us to easily recover from any packet loss. Packet Order Correction – requiecscing packets at the far end of the flow to further avoid traffic retransmissions In 2.0.3 we will be actively testing and monitoring these multiple tunnels to help choose the fastest path with lowest latency. This is referred to as intelligent routing. These same techniques are also being used in the HT-L2C, which is how we’re accomplishing such a high throughput vs the standard L2C Appliance. With all these things said, this is a major benefit for HCM users. The routing techniques, WAN Opt, and security implemented here are great talking points for your customers.
- What we’re accomplishing from the HCGW standpoint. Not just implementing an IPSEC tunnel for security. Actually implementing 5 separate ipsec tunnels, utilizing different source ports which is allowing us to use these tunnels over different paths (when using HCM over the internet) These tunnels are encapsulated in a FOU tunnel to create a single connection, saving the customer public IP Space on the cloud side. This provides added resiliency in the line, as well as added throughput from the CGW appliance. The Cloud Gateway will regularly check to insure that each ipsec tunnel remains up and in the event of a failure, will divert traffic to use a different tunnel. This is very helpful if these tunnels are created over multiple connections, such as any combination of direct connects and internet connections, HCM will use these in an active/active scenario and will failover flows should one of these connections fail.
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.
- Riding on our own private backbone we have a network implementation we refer to as vRack. Using VXLAN aware physical networking components, we’re able to interconnect your environments together and allow communication between your workloads within the same VLAN segments. This is regardless of type of solution as well. Open stack public cloud, connected to Vmware SDDC Private cloud, connected to your own custom bare metal solutions. This type of configuration is completely accessible and configurable from the customer side. No need to open a support case to request to configure connectivity between your OVH DC’s and solutions. With vRack connect, you can also take advantage of these same benefits and bring your local VLAN’s to the cloud. Sharing network space simplifies configurations from a networking perspective at the customer level. Let us deal with the complicated configuration between sites, expensive hardware, and maintenance.
- Riding on our own private backbone we have a network implementation we refer to as vRack. Using VXLAN aware physical networking components, we’re able to interconnect your environments together and allow communication between your workloads within the same VLAN segments. This is regardless of type of solution as well. Open stack public cloud, connected to Vmware SDDC Private cloud, connected to your own custom bare metal solutions. This type of configuration is completely accessible and configurable from the customer side. No need to open a support case to request to configure connectivity between your OVH DC’s and solutions. With vRack connect, you can also take advantage of these same benefits and bring your local VLAN’s to the cloud. Sharing network space simplifies configurations from a networking perspective at the customer level. Let us deal with the complicated configuration between sites, expensive hardware, and maintenance.
- Riding on our own private backbone we have a network implementation we refer to as vRack. Using VXLAN aware physical networking components, we’re able to interconnect your environments together and allow communication between your workloads within the same VLAN segments. This is regardless of type of solution as well. Open stack public cloud, connected to Vmware SDDC Private cloud, connected to your own custom bare metal solutions. This type of configuration is completely accessible and configurable from the customer side. No need to open a support case to request to configure connectivity between your OVH DC’s and solutions. With vRack connect, you can also take advantage of these same benefits and bring your local VLAN’s to the cloud. Sharing network space simplifies configurations from a networking perspective at the customer level. Let us deal with the complicated configuration between sites, expensive hardware, and maintenance.
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.
- Equipment ready when you are
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.
- Elaborate in detail on each of these: Initial setup, order process, provisioning process, initial testing HW Maintenance, (mainly a co-lo related) Replacement HW (Mainly co-lo related) People – needing additional resources near the cloud environment if hardware is something you have access to in a Co-lo. Needing people to learn new and different UI’s, systems, API’s, CLI’s. Or hiring someone to fit the need which can be costly. Employees hired near co-lo space will need to coordinate with local team for any project planning which may be difficult to manage. Travel, if you don’t hire new resources near the co-lo space, you’ll need employees capable of travel.