Huawei FusionCloud Desktop Solution 3.0 Efficient Operation and Maintenance White Paper

Transcription

1 Huawei FusionCloud Desktop Solution 3.0 Efficient Operation and Issue 1.1 Date HUAWEI TECHNOLOGIES CO., LTD.

2 . 2009~2012. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks and Permissions and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied. Huawei Technologies Co., Ltd. Address: Website: Huawei Industrial Base Bantian, Longgang Shenzhen People's Republic of China support@huawei.com i

3 Contents Contents Overview of Efficient O&M Scenarios Comparison of Cloud O&M Among Different Players O&M of Cloud Platform Cloud Desktop Software O&M O&M of Cloud Terminals Cloud Service O&M O&M of Cloud Platform Remote Hardware O&M Scenario and Case Study Proactive Monitoring Solution O&M of Cloud Desktop Software Automatic Distribution and Upgrade of Desktop VDA Windows OS Automatic Distribution Automatic PVDriver Upgrade O&M of Cloud Terminals O&M of TCs O&M of Cloud Service Remote Efficient Management of the WEB Mode Authority and Domain Based Management Automatic Service Provisioning e-flow Resource Sharing of Meeting Rooms or Personnel on Business Trips ii

4 1 Efficient Operation and Maintenance (O&M) Scenarios of 1.1 Overview of Efficient O&M Scenarios Comparison of Cloud O&M Among Different Players Item Huawei Citrix VMWare Large cluster A maximum of 512 servers A maximum of 16 servers A maximum of 8 servers Management console Unified management interface XenCenter multiple consoles vcenter multiple consoles Platform deployment mode Management Node (MN) Unified installation and deployment automatic loading and Manual installation and configuration by using Preboot execute Environment (PXE) Manual installation and configuration by using PXE automatic configuration by using of Management Nodes (MNs) Virtual machine driver upgrade Automatic pop-up prompt and upgrade by using PVDriver Manual upgrade by using xen tools Batch upgrade by using Update manager Service provisioning Process-based and automatic Manual Manual O&M of Cloud Platform O&M Scenario Hardware platform management Description The hardware platform is installed and deployed in a unified manner, and is automatically loaded and configured by using MNs. 1

5 O&M Scenario Automatic monitoring Description The O&M function is required to implement all-round monitoring and connect the cloud platform to network management systems (NMSs) of enterprises or carriers Cloud Desktop Software O&M O&M Scenario Operating system (OS) OS patch Desktop security software Cloud related software: VDA Cloud driver: PVDriver Universal service software Description The OS is quickly copied by using unified image files. On traditional PCs, the OS installation takes least 30 minutes. The OS patches are managed by Windows Server Update Services (WSUS) in a centralized manner. The security software is uniformly and automatically upgraded on servers The terminal security management (TSM) push mode is supported and silent installation is performed after a restart The software supports automatic pop-up management and silent installation The software is distributed using TSM software. Its upgrade is similar to VDA upgrade, but supports online upgrade management O&M of Cloud Terminals O&M Scenario Centralized patch management Remote fault location Description The O&M function is required to support TCM remote scan and push patches in batches The O&M function is required to remotely control screens of thin clients (TCs) for troubleshooting 2

6 1.1.5 Cloud Service O&M O&M Scenario Service provisioning automation Web-based self-service for users Meeting rooms/personnel on business trips Description Service provisioning is verified and approved with one click, and the background automatically distributes resources. A user interface is provided, shielding bottom-layer functions VM resource pool is shared, and service provisioning is withdrawn without administrator. 1.2 O&M of Cloud Platform Remote Hardware O&M Scenario and Case Study Scenario Analysis Scenario Description Storage hard disk replacement Remote server installation MN loading configuration: A board is automatically loaded and configured after being inserted. BMC out-of-band management: This function allows you to control the equipment room without stepping into it. Solution Description Figure 1-1 shows the storage hard disk replacement procedure that greatly shortens fault recovery time. 3

7 Figure 1-1 Storage hard disk replacement procedure Automatically report monitor alarms. Sign on ISM portal. Remote O&M personnel Locate the faulty disk sot. The faulty disk identifies faults. A red LED of the hard disk is on. Frontline personnel/equipment room security guard Remove and replace the hard disk. The hardware replacement is finished. Figure 1-2 shows the remote server installation procedure, which allows you to remotely locate faults and re-distribute resources. Figure 1-2 Remote server installation procedure A red LED is on, when a board is faulty. Administrator Remotely sign on BMC. Collect hardware log location. Remove and replace the faulty board. Frontline personnel/security guard Sign on MN portal. The MN delivers policies. The loading configuration is finished. 4

8 Implementation Desktop clouds of Huawei Shanghai office are all maintained remotely supported by a proactive monitoring solution and remote hardware O&M Proactive Monitoring Solution Scenario Analysis Solution Description The monitoring capability reflects the fault identification, handling and recovery capability of a system. It is an important part of the O&M. The monitoring solution for Huawei Shanghai office is as follows: 35pt Uses proactive monitoring modes based on availability monitoring and performance monitoring. This is independent from the system, thereby helping identify faults in time. Application service: interface and connectivity Ping and telnet Proactive monitor The duration is 5 minutes. Voice 32pt ) :18pt OS: Hypervisior and Windows2003 Hardware device: network, server and storage Equipment room device monitoring: temperature, power and air-condition OS: CPU, memory and hard disk usage Network device: network traffic, delay and packet loss rate Storage device: network traffic, delay and input/output operation per second (IOPS) Monitoring agent SNMP and IPMI Sensor Monitoring agent SNMP SNMP Availability monitoring server Performance monitoring server Visualization monitoring server Whatsup software, connectivity and SNMP O&M personnel Monitoring personnel Event Text message Fault location Phone The monitoring solution for Shanghai branch of China Unicom is as follows: VMs, storage devices, and TCs are monitored by the NMS. Storage devices and VMs provide HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential SNMP interfaces for monitoring purpose. TCs connect to the database Page 1of the TCM server, which provides real-time monitoring results and visualized monitoring interface. 5

9 Integrated network manager of informatization department Database interface SNMP interface SNMP interface TC management VM management Storage management TC TC TC TC VM VM VM VM Storage server Storage server Storage server 6

10 Implementation The solution provides universal network management interfaces, such as SNMP and IPMI, to interconnect with the NMS of enterprises and carriers for unified monitoring and troubleshooting. 1.3 O&M of Cloud Desktop Software Automatic Distribution and Upgrade of Desktop VDA Scenario Analysis Scenario Automatic VDA upgrade Description The VDA is an important component of desktop virtualization, and a must of desktop connection. The desktop remote connection, desktop display, and audio and video quality depend on this component. The VDA supports desktop remote real-time connections; thereby, it does not support hot patches and cannot be upgraded in a connected state. 7

11 Solution Description VDA, VM Driver Push TSM/SPES Server Set scheduled tasks by IP address segment. P2P download and automatic distribution Agent Agent VM VM VMs Implementation Supports TSM push: uses P2P distribution mechanisms to deliver upgrade packages Automatically runs scripts: generates scheduled tasks (such as automatically performing upgrades upon startup) Notifies users of shutting down VMs after work Enables the VM shutdown function at midnight Automatically runs scheduled tasks and the VDA silent upgrade installation script Automatically restarts VMs after the upgrade is finished ECHNOLOGIES CO., LTD. The upgrade packages can be pushed by network segment or account. Huawei Confidential The VDA upgrade cannot be performed in an ICA connected state and any click cannot be performed on connected desktops during the upgrade. Therefore, the VDA upgrade must be performed at night by starting an automatic upgrade policy to increase the success upgrade rate. Citrix does not provide any upgrade solution for VDA. Pag 8

12 1.3.2 Windows OS Automatic Distribution Scenario Analysis Solution Description The Huawei Shanghai office has seven service blocks. (A service block is a logical unit which each service block supporting a maximum of 2,000 concurrent user VMs.) In the standard configuration mode, a service block requires 11 VMs, which serve as the fundamental architecture servers of the service block (1 license server, 6 DDCs, 2 WIs, 1 WLB server, and 1 database). There are about 80 servers running windows Because these servers are interdependent, a lot of time and effort are required to install patches on them. The servers are interdependent to each other; thereby their restart time must be correctly configured. OS Patch Automatic Distribution Mechanism WSUS Server China.huawei.com Lg-upd srv-upd ServerFarm Server User-side VM Automatic Download Manual Installation Saturday Automatic Installation Policy Group autopatch_sat_servers Sunday Automatic Installation Policy Group autopatch_sun_servers 0:00 Saturday 2:00 Saturday 22:00 Saturday 2:00 Sunday 22:00 Sunday SqlServer LicenceServer DDC-Slaver DDC-VDA2 DDC-XML2 WI2 DSC01 DDC-Master DDC-VDA1 DDC-XML1 WI1 DSC02 OS patch installation policy: install and restart standby machines first, then the main server Implementation Before the OS patch automatic installation mechanism is provided, it takes about five minutes to install patches to a Windows server. GIES CO., LTD. Therefore, Huaweiit Confidential takes 400 minutes to install patches to 80 servers in Huawei Shanghai office. Page 1 In addition, it is difficult to ensure that the patches are successfully installed within the specified period of time. 9

13 After the OS patch automatic installation mechanism is provided, the WSUS server automatically installs patches to all Windows servers without any assistance from the user Automatic PVDriver Upgrade Scenario Analysis Solution Description The PVDriver is a mandatory driver of a VM. It is used to optimize the performance of VMs, including the CPU usage, I/O speed, and network-related performance. In the desktop cloud scenario, many user VMs are used. It is necessary to upgrade the PVDriver automatically. With the automatic PVDriver upgrade mechanism, the PVDriver on the user VMs are automatically upgraded after an administrator issues an upgrade command. OS process: The HwUVPUpgrade.exe software automatically identifies the ISO and displays tool tips. Silent installation VM VM VM VM VM CNA CNA CNA Automatic mounting MN ISO distribution Implementation Administrators can perform one-click PVDriver upgrade without any assistance from the user. Citrix's xen tools cannot be automatically upgraded. VMWare's Update Manager can be automatically upgraded. 10

14 1.4 O&M of Cloud Terminals O&M of TCs Scenario Analysis Scenario Centralized patch management Remote fault location Remote control and monitoring Description TCM servers are deployed in a centralized manner. Remote TCs can be upgraded and managed using web interfaces. Problems on the remote TCs hat are distributed in different places can be located from the local computer, improving the O&M efficiency. Remote scanning, power-on, power-off, and monitoring are supported. Solution Description Internet explorer client Remote web operation Policy and scanning Data center Cluster: TCM01 Cluster: TCM02 Scan Push Remotely start/shut down Office area Network segment 1 Network segment 2 Network segment Office area 3 The patch upgrade process is as follows: 11

15 Administrator Uniformly upload patch files. Make patch policies. Scan TCs by network segment. Performs scheduled poweron and power-off. Remotely power on TCs. Deliver patch policies. Automatically restart and perform concurrent upgrade. Remote fault location Generally, the data center equipment room of carriers is located in a remote spot. Their customer service centers spread around the city. For example, China Unicom has approximately 100 customer service centers in Shanghai. The TCM remote assistance function is adopted in the O&M process of China Unicom. Scan TCs of customer service centers. Administrator Search the IP address of user TCs. Submit monitoring applications. TC user Approve the monitoring on TCs. User desktop problem location Remotely control TC out-of-board problem location 12

16 Implementation Database Features: Store and manage data in a centralized manner. Manage and migrate TCs on the management servers. Perform cold backup of management servers and ensure the system stability. Switch on different management servers and implement management of different fragments. Fragment 1 Management server Network Fragment 2 Management server Administrator DNS server (optional) Domain name resolution and management Fragment 1 Fragment 2 Data server Windows (XP, 2000, XPe Vista, Win 7) terminal Centerm CE terminal Centerm Linux terminal Data server Windows (XP, 2000, Vista, Win 7) XPe terminal Centerm CE terminal Centerm Linux terminal Application Scenario Enterprises require management of TCs in a centralized manner and put certain servers in a management zone. (Usually, the headquarters only care about data statistics.) Take Agricultural Bank of China, Fujian branch as an example, the TC management is carried by local administrators, while the provincial branch only cares about the data statistics. Application Scenario Shanghai branch of China Unicom monitors VMs in customer service centers using a TC management platform and OMS portal interface. All the customer service centers are registered on the TC management platform, and each VM is mapped to an account. Each counter is configured with a TC. Each TC can be used to log in to a specific VM. On the TC management platform, you can find the customer service center first, specify the IP addresses of the TC, and then log in to the specified VM. 13

17 TCM cluster Firewall Office area 1 Building network Office area N Application Scenario One person can upgrade 10,000 TCs in Huawei Shanghai office within one day. 1.5 O&M of Cloud Service Remote Efficient Management of the WEB Mode Scenario Analysis Solution Description The O&M of desktop cloud includes the O&M of hardware, system, desktop, and so on. The O&M is moved to the data center and remote management function is required. With the web interface, you can access the system anywhere from any device. This improves the maintainability of the desktop cloud. The O&M of desktop cloud management interface is as follows: 14

18 TC administrator Desktop administrator Desktop VM administrator Operation support system User self-help interface System administrator Fundamental device administrator Server administrator TCM Portal TSM Portal ITA Portal BMS Portal USER Portal OMS Portal MN Portal BMC Portal Remotely monitor, manage, and control TC terminals. Perform security control of desktop OS, monitor, and distribute software. Shield the complicated operation of Citrix VDesktop components. Verify user applications and shield the complicated operation of the virtual platform. Submit self-help applications, start, stop, and choose charging packages. Monitor virtual resource, adjust policies, and perform power on/off. Deliver policies of the main machine system and perform automatic installation. ISM Portal Storage administrator Implementation Hierarchical end-to-end management is implemented: From bottom up, there is server hardware, storage, system installation, system monitoring, service provision and operation, TC management, and desktop software management. For each layer, a WEB remote management mode is adopted. Process-based service management is implemented: Device administrator resource preparation system administrator policy control user self-service application administrator one-key approval resource automatic dispatching. Every role focuses on its own service to reduce communication costs. Irrelevant service processes are shielded. As a result, the efficiency of service provisioning is improved. Services can be provisioned for each user within 10 minutes. One to two personnel can provision services to 2000 Huawei employees per month. Citrix adopts the client management mode. Components, such as xencenter, are working in an independent manner and the operation is complex. VMWare also adopts the client mode, for example, vcenter. Its latest version 4.5 provides web management interface. 15

19 1.5.2 Authority and Domain Based Management Scenario Analysis Solution Description If customer wants limit the access right of data (VMs) to the maintainer, the administrator should configure the data partition that this maintainer can access, and divide the data to different data partition. The administrator can divide the data to different partition by organization or area, the maintainer of different organization or area can only access the data belong to this organization or area, the maintainer can t access the data belong to other organization or area. This function improves the availability and security of the cloud system. The management web interface of Authority and Domain Based Management is shown below. The administrator configures different data partition by organization or area. The administrator configures the maintainers belong to the data partition. This means the maintainers of this data partition can only access the VMs belongs to this data partition. 16

20 The maintainers of this data partition can only access the VMs belongs to this data partition. Implementation Desktop clouds of Huawei, the maintainers of a certain branch login to the management system and manage the VMs belong to the branch Automatic Service Provisioning e-flow Scenario Analysis Operation Scenario Service provisioning and reclaiming workflow Description An e-flow is used to provision the VMs, improving the provisioning efficiency. 17

21 Solution Description This section focuses on the service provisioning and reclaiming e-flow. Service provisioning is an important step to provide VMs for users. It successfully supports service provisioning of 2000 VMs per month. 35pt The following figure shows the architecture and process of the service provisioning e-flow: 4. Process control 2. Specification management 1. Image management unified service provisioning Portal v.huawei.com 3. Scheduled VMs creation 32pt User application Choose specification Orange area/isolation intranet Asset administrator review Automatic distribution Local image servers of SRI ) :18pt Shenzhen orange area SOAP agent Beijing orange area SOAP agent Shanghai orange area SOAP agent Shanghai isolation intranet SOAP agent Service resource pool Service resource pool Service resource pool Service resource pool Implementation This solution uses safe and open SOAP interfaces, and can be adapted to the desktop cloud management HUAWEI TECHNOLOGIES of various CO., scenarios. LTD. Huawei Confidential Page 1 The difference of underlying services is shielded. One O&M mechanism is used, improving the O&M efficiency. The automatic service provisioning workflow features in the following three aspects: specification differentiated management, scheduled VM creation, and registration and deregistration workflows. 18

22 35pt Solution Efficient Operation and Specification differentiated management Scheduled VM creation Registration and deregistration workflow 32pt Distribution on-demand Scheduled task starting Flexible rights configuration Research staff Outsourced staff 2V2G80GB 2V2G60GB Automatic backup Bonding administrators by department ) :18pt Long-term business trip Temporary business trip Foreign staff 2V2G40GB 2V2G25GB Chinese and English version Online patch distribution Resource pool random distribution Three-level review Asset automatic consignment Advantage: save storage space 35520/450 = 78 Person Advantage: Configure creation at night, configure backup data based on user specification usage, without intervention, save O&M workload, and speed up the service provisioning. Advantage: Workflow-based operation and specification-based management. The review goes through users, supervisors and asset administrators. It stores the information authenticity, solves asset consignment problems, and enhance operation efficiency Resource Sharing of Meeting Rooms or Personnel on Business Trips Scenario Analysis Detailed Description Shanghai office entitative meeting room Personnel on temporary business trips Scenario features There are 284 meeting rooms spread around various office areas of the institute, which causes difficulties in management and a heavy workload. The PCs of meeting rooms have always been the blind zone of management. Approximately 500 people are moving around on temporary business trips. The large mobility makes the traditional asset return application process complicated. Log in to desktops by mstsc or ICA.Remotely share data in the imeeting system. Display and share office files. Store no user data on local device. Large personnel mobility. 19

23 Solution 35pt Description Include/belong to China\Domain users 32pt ) :18pt VM VM VM Domain user 5. Use exclusive VM after sign on. Release resources after deregistration. 4. When sign on, the DDC randomly distributes a VM DDC desktop group-related Pool VM resource list 2. Domain bonding desktop group DDC desktop group Pool mode First come first serve VM VM VM VM resource pool Allocation mechanism: uses a resource pool mode, in a first come first serve manner, automatically allocates resources, and controls it using desktop group attributes. Reclaiming mechanism: configures the time-out time of an ICA session as two hours. When the time is out, automatically releases the resources and updates the data in the VDA registry. Template mechanism: allows users to write in the personal directory (of desktop). Automatically deletes personal profiles and history recording using a script during user deregistration. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 1 Implementation Maintenance workload of 800 machines Traditional Method Three persons (according to the industry practice: 100 PCs/person) Virtual Desktop 0.5 person Application time of personnel on business trips Application times of personnel on business trips 60 minutes/person 1 minutes/person 1000 times/year 0 Recycling and returning 60 minutes/person 0 Reuse rate 20% 90% 20

24 35pt Virtual desktop pool 32pt :18pt China\ Domain users Associated partition groups Meeting room sign on Personnel on business trips sign on Emergency channel for all staffs Any tim An where Any one Before work Working time Sign on Post use After work Automatic start Resource distribution Automatic adjustment Idle resource Automatic distribution VM bonding Automatic recycling VM release Automatic shutdown Resource release Set the virtual desktop policy as follows: Twenty VMs are in the idle state at night. They can be used by the personnel working overtime. At 05:00, automatically start all the 200 VMs. There is a peak workload period at HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential around 10:00. After the peak workload period, if VMs in the idle state are Page less 1 than 50, the system starts another 30 VMs. If VMs in the idle state are more than 50, the system shuts down those unnecessary VMs. At 21:00, the system automatically shuts down VMs except 20 VMs. 21

25 22