Red Hat Virtualization Overview
A presentation at U.S. Intelligence Community Cloud Users Group in in Chantilly, VA, USA by Shawn Wells
IC Cloud Users Group Meeting #1 Thurs 3-NOV-2011
AGENDA ● 1030-1045: Introductions ● 1045-1145: Virtualization Technology Update ● 1145-1230: Lunch & Panel ● 1230-1345: RHEV & KVM Update ● 1345-1415: Red Hat IC Activities ● 1415-1430: Q&A and Closing
GROUP INTRODUCTIONS ● ● Reminder: Lowest clearance in the room is Top Secret. What’s your name, what do you want to get out of today?
1045-1130: TECHNOLOGY UPDATE ● Technology Evolution (Xen—>KVM) ● sVirt & MLS Cloud ● libvirt, VDSM, REST APIs ● Performance
Col. John Boyd, USAF ● His energy-maneuverability theory says that agility is more important than how fast or how big a plane is. His OODA Loop (Observe-Orient-Decide-Act) transformed the DoD.
Virtualization Decision: Xen vs KVM ● ● Xen ● Rapidly was losing community traction ● Complicated security model ● Slow(er) KVM (Kernel Virtual Machine) ● Adopted by Linux community as standard ● Can play with SELinux natively ● Fast(er) ● Become foundation of Red Hat Enterprise Virtualization
KVM Timeline
Virtualization in a Shared Environment: sVirt ● Applies security label to all “files” on the system ● In actuality, applies it to the inode metadata through a field called “secmark” httpd apache_t DENY /etc/shadow shadow_t AL LO W ~/public_html httpd_sys_content_t
Virtualization in a Shared Environment: sVirt ● sVirt applies SELinux framework to Virtual Machines DENIED DENIED alpha_vm bravo_vm charlie_vm virt_machine_t:01 virt_machine_t:02 virt_machine_t:03 ALLOWED /dev/eth0 IE N DE D /dev/eth1
RHN Satellite redhat.com AIR AIRGAP GAP NIPR JWICS ENCLAVE
XM L- R PC Integrate User Access and Controls XM L- XM LR System Management PC R PC RHN Satellite Software and Configuration Management XM LR PC Reporting
Updates Automatically update systems with the latest security fixes Easily obtain security updates, patches, and new OS versions Remove undesired packages through the simple RHN web interface
Management Easily obtain security updates, patches, and new OS versions Manage groups of systems as easily as a single system Assign permissions to administrators for managing different groups or roles Remove undesired packages Schedule updates to occur during maintenance windows
Provisioning Provision existing or bare metal systems using profiles or system cloning Undo problematic changes with snapshots and rollback Improve consistency by using RHN to manage and deploy configuration files
Physical Layer (PL) CSDS_PL GDSS CSDS DMDC CFDB JOPES Classic FLIS NGA IDE/AV GSORTS GTN JOPES 4.0
Virtual Base Layer (VBL) CSDS_VBL Physical Layer (PL) CSDS_PL GDSS CSDS DMDC CFDB JOPES Classic FLIS NGA IDE/AV GSORTS GTN JOPES 4.0
Private Data and Metadata Virtual Mid Layer (VML) Plans_VML Facilities_VML Material_VML Virtual Base Layer (VBL) CSDS_VBL Physical Layer (PL) CSDS_PL GDSS CSDS DMDC CFDB JOPES Classic FLIS NGA IDE/AV GSORTS GTN JOPES 4.0
Public Data Virtual Query Layer (VQL) (Exposed Views) Material_VQL Plans_VQL Facilities_VQL Private Data and Metadata Virtual Mid Layer (VML) Plans_VML Facilities_VML Material_VML Virtual Base Layer (VBL) CSDS_VBL Physical Layer (PL) CSDS_PL GDSS CSDS DMDC CFDB JOPES Classic FLIS NGA IDE/AV GSORTS GTN JOPES 4.0
Lunch & Panel
Technology/Community Update ● What is happening now in open source virtualization? ● What is Red Hat’s focus? ● What can RHEV do? ● RHEV3 Technology Preview ● Future/ongoing open source technologies (Aeolus, CloudForms, etc)
WHAT IS HAPPENING NOW IN VIRTUALIZATION?
CUSTOMERS APPROACHING 50% VIRTUALIZATION
IBM Mainframes Proprietary UNIX Microsoft Windows VMware
YOU HAVE A CHOICE IN VIRTUALIZATION “Don’t just find a vendor, find a solution; 42% of organizations use multiple hypervisors to maximize features & minimize cost” — InfoTech Research Group, July 2011 “VMware vSphere still leads the pack… but the gap is closing fast. If there’s one obvious result of this test, it’s that there’s never been a better time to shop for a virtualization solution.” — Virtualization Shoot-out: Citrix, Microsoft, Red Hat and VMware, InfoWorld, April 2011 “If I were VMware, I wouldn’t worry most about Microsoft, with its tendency to subsume low-end, small business markets by including everything in the Windows operating system. That’s so 1990s. Rather, I’d worry that Red Hat and KVM already have a foot in the cloud.” — VMware Should Worry More About Red Hat, InformationWeek, September 2011
WHAT IS RED HAT ENTERPRISE VIRTUALIZATION?
RED HAT ENTERPRISE VIRTUALIZATION ● ● ● ● Enterprise grade, centralized management and hypervisor for server and desktop virtualization Industry leading performance, scalability and security infrastructure Ecosystem of thousands of hardware and software vendors 50–70% lower cost compared to other solutions
RHEV HYPERVISOR/KVM OVERVIEW SMALL FORM FACTOR, SCALABLE, HIGH PERFORMANCE ● ● ● ● ● Host: 160 logical CPU (4,096 theoretical max), 2TB RAM (64TB theoretical max) Guest: 64 vCPU, 2 TB RAM Supports latest silicon virtualization technology: SR-IOV, Based on the latest RHEL 6.2 kernel Microsoft SVVP
RHEV MANAGER FEATURES: ENTERPRISE VIRTUALIZATION MANAGEMENT ● High Availability ● Live Migration ● Self Service Portal ● Load Balancing (DRS) ● Power Saver (DPM) ● ● ● Templates, thin provisioning, snapshots Centralized storage and networking management Eco-system marketplace
INDEPENDENT REVIEWS SHOW RED HAT COMING ON STRONG Source: InfoWorld, Virtualization shoot-out: Citrix, Microsoft, Red Hat, and VMware, April 13, 2011 http://bit.ly/rhevshootout
TREMENDOUS MOMENTIUM AROUND RED HAT ENTERPRISE VIRTUALIZATION MORE AND MORE CUSTOMERS USE RED HAT ENTERPRISE VIRTUALIZATION … IBM Smart Business Test and Dev public cloud powered by RHEV New cloud computing service, BizHosting Basic runs on RHEV RHEV is the backbone for mission-critical service-oriented architecture World’s largest private chain of opticians runs strategic test/dev on RHEV China’s appliance leader runs business critical CRM applications on RHEV RHEV powers telecom service provider’s critical IT infrastructure Wireless leader runs RHEV as a strategic virtualization platform American financial services firm runs secure transaction cloud on RHEV RHEV supports research and clinical care for leading US cancer institute Strategic “Solution as a Service” infrastructure powered by RHEV
HOW DOES RED HAT ENTERPRISE VIRTUALIZATION HELP ORGANIZATIONS BUILD THEIR CLOUDS TODAY?
CASE: WIRELESS COMPANY BUILDS INTERNAL CLOUD BASED ON RHEV
CASE: WIRELESS COMPANY BUILDS INTERNAL CLOUD BASED ON RHEV
ADVANCED SECURITY FOR YOUR VIRTUALIZATION INFRASTRUCTURE RHEV inherits the security features of Linux and RHEL ● ● ● SELinux security policy infrastructure Provides protection and isolation for virtual machines and host Compromised virtual machine cannot access other VMs or host sVirt Project ● Sub-project of NSA’s SELinux community. Provides “hardened” hypervisor. ● Multi-level security. Isolate guests ● Contain any hypervisor breaches
OUTSTANDING PERFORMANCE ON OPEN INDUSTRY BENCHMARKS SPECvirt: RHEV claims top 4 results, delivers over 2x scale-up and nearly 2x single hypervisor performance of VMware
VIRTUALIZATION BY SUBSCRIPTION
WIRELESS COMPANY RESULTS ● ● ● ● ● Accelerated server provisioning to developer community with self-service portal while reducing demands on IT staff Significantly reduced their virtualization costs with Red Hat’s subscription model pricing and resulting lower TCO Reduced OS licensing costs for virtual servers by concentrating all RHEL workloads to RHEV and all Window workloads to VMware Improved infrastructure productivity with increased VM density of 38% more VMs/host for RHEV versus VMware Server consolidation has resulted in higher ROI from better space utilization and savings on space and power
HOW WILL RED HAT ENTERPRISE VIRTUALIZATION 3 ACCELERATE YOUR CLOUD STRATEGY?
RED HAT ENTERPRISE VIRTUALIZATION 3 ● Currently in Beta ● Cloud-ready features for private cloud include ● ● Power User Portal ● Historical Database and Reporting Engine ● REST API integration Integrated with CloudForms for multi-vendor private and hybrid clouds
RED HAT ENTERPRISE VIRTUALIZATION RHEV 3.0 - SELF SERVICE PORTAL ✔ ✔ ✔ ✔ ✔ ✔ Create, edit and remove virtual machines Manage virtual disks and network interfaces Assign user permissions to virtual machines Create and use templates to rapidly deploy virtual machines Monitor resource usage and highseverity events Create and use snapshots to restore virtual machines to a previous state
RED HAT ENTERPRISE VIRTUALIZATION RHEV 3.0 - USER PORTAL User Portal - Advanced view ✔ ✔ ✔ ✔ User Portal - Basic View ✔ ✔ Create, edit and remove virtual machines Manage virtual disks and network interfaces Assign user permissions to virtual machines Create and use templates to rapidly deploy virtual machines Monitor resource usage and highseverity events Create and use snapshots to restore virtual machines to a previous state
RED HAT ENTERPRISE VIRTUALIZATION RHEV 3.0 REPORTING ● ● ● ● Historical usage, trending, quality of service Integrated reporting engine based on Jasper reports Over 25 prebuilt reports and dashboards included Ability to create and customize reports and templates
RED HAT ENTERPRISE VIRTUALIZATION 3.0 INTEGRATION & AUTOMATION ● Integration ● ● ● New RESTful API for integration with RHEV Manager Super set of RHEV management functionality Automation ● ● Linux command line interface for scripting and automation Developed in upstream RHEV-M API project
RELY ON RED HAT TO BUILD YOUR SECURE AND COST EFFECTIVE CLOUD TODAY ● ● ● SELinux and sVirt provide cloud-ready security ● Built for multi-tenancy, multi-cloud environments ● Integrated into KVM, Linux kernel Red Hat Enterprise Virtualization subscription model ● Reduce your acquisition costs – do more today ● Accelerate ROI and break-even – do the next project sooner RHEV 3 features enhance cloud capabilities ● ● Self service, integration, and reporting features built in Integrate with CloudForms for multi-hypervisor cloud use cases
HOW WILL OPEN SOURCE ACCELERATE THE EVOLUTION OF THE CLOUD?
OPEN SOURCE VIRTUALIZATION TIMELINE
● ● Open source virtualization community project ● Deliver an open virtualization management platform ● Hypervisor, Management engine, GUI and API http://www.ovirt.org
● Fostering KVM adoption and interoperability ● http://www.openvirtualizationalliance.org
RED HAT IC & DOD ACTIVITIES
Misc IC Activities ● OpenSCAP ● Common Criteria for Virtualization ● scap-security-guide project ● USGCB ● Others?
Invited by TMA to speak at the first meeting of the U.S. Intelligence Community’s Cloud Users Group. Spoke about the latest happenings in open source virtualization (Aeolus, CloudForms, KVM) and Red Hat Enterprise Virtualization.
for free. You
can too.
